Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Odd login IPs, think I might be infected?

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 12th, 2014, 6:54 pm

I have installed Microsoft Security Essentials.
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm
Advertisement
Register to Remove

Re: Odd login IPs, think I might be infected?

Unread postby pgmigg » December 13th, 2014, 2:45 am

Hello lucaslee8498,

I have installed Microsoft Security Essentials.
Very well! :D Let continue our treatment...

Step 1.
OTL - Run Fix Script
You should still have OTL.exe on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Underneath Output at the top, make sure Standard Output is selected.
  3. Highlight and copy the following entries: into the Image text box.
    (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)
    Code: Select all
    :Commands
    [createrestorepoint]
    
    :OTL
    O4 - HKLM..\Run: [] File not found
    O15 - HKLM\..Trusted Domains: muzzylane.com ([]http in Trusted sites)
    O15 - HKLM\..Trusted Domains: muzzylane.com ([]https in Trusted sites)
    [2014/10/12 19:25:29 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\.minecraft
    [2014/04/18 20:11:48 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\.purple
    [2013/08/05 18:32:06 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\6179725
    [2013/08/06 15:00:29 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\6401613
    [2013/08/06 08:29:44 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\8948697
    [2014/10/31 18:34:11 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Audacity
    [2013/04/20 09:06:48 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Autodesk
    [2013/04/19 11:14:47 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\BANDISOFT
    [2013/11/30 20:06:19 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Battle.net
    [2013/04/13 06:53:32 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
    [2013/07/09 20:27:56 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\DiskSpaceFan
    [2013/06/13 14:10:51 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Epson
    [2013/07/10 07:40:10 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\ESET
    [2014/04/14 13:51:32 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Fatshark
    [2014/03/07 19:15:45 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\FileZilla
    [2014/07/31 21:57:20 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\GroovesharkDesktop.7F9BF17D6D9CB2159C78A6A6AB076EA0B1E0497C.1
    [2013/04/20 09:13:59 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Gyazo
    [2013/06/21 17:12:04 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\GZConnector
    [2013/06/06 19:09:27 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Leadertech
    [2014/02/17 17:09:38 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\library_dir
    [2013/04/13 01:42:56 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\LolClient
    [2013/05/05 10:47:16 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\MAXON
    [2014/09/23 17:40:05 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\MMFApplications
    [2013/05/03 19:38:27 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\MW3 FoV Changer
    [2014/10/27 18:24:05 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Nidhogg
    [2014/04/18 17:28:17 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Notepad++
    [2014/11/30 21:17:51 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\NuGet
    [2014/08/02 15:38:33 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\OBS
    [2014/06/26 12:10:27 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\OmniCoin
    [2014/02/17 21:00:00 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Origin
    [2013/07/21 09:47:34 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\PDAppFlex
    [2014/04/11 18:44:47 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Psi
    [2013/05/03 18:13:44 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Publish Providers
    [2013/12/22 12:13:06 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\QFX Software
    [2013/04/23 17:33:34 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\raidcall
    [2013/10/03 14:44:49 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Rainmeter
    [2014/03/01 11:25:50 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Raptr
    [2014/08/02 12:24:23 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\redsn0w
    [2013/11/13 17:56:29 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Riot Games
    [2013/05/23 15:59:11 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Sony
    [2014/11/26 21:49:15 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Spotify
    [2013/05/09 17:11:20 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
    [2014/07/26 13:36:13 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\StepMania 5
    [2013/04/14 13:11:15 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\TechSmith
    [2014/02/24 21:44:29 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Ubisoft
    [2013/12/10 19:14:07 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Unity
    [2014/12/06 19:01:03 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\uTorrent
    [2013/06/06 13:57:30 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\Wacom
    [2013/06/06 13:57:47 | 000,000,000 | ---D | M] -- C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
    
    :Files
    C:\Windows\SysWow64\*.tmp
    ipconfig /flushdns /c
    
    :Commands
    [emptyflash]
    [emptyjava]
    [emptytemp]
    
  4. Click under the Custom Scan/Fixes box and paste the copied text.
  5. Click the Run Fix button. If prompted... click OK.
  6. OTL may ask to reboot the machine. Please do so if asked.
  7. Let the program run unhindered and reboot the PC when it is done.
    When the computer reboots, and you start your usual account, a Notepad text file will appear.
  8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

Step 2.
ZOEK Scan
You should still have zoek.exe on your desktop.
  1. Please temporarily disable your AntiVirus program as shown in This topic now to avoid potential conflicts during both download and run.
  2. Close any open browsers.
  3. Right click on zoek.exe and select "Run as administrator..." to run it. If prompted by UAC, please allow it.
  4. Please wait while the tool starts. It will appear to be doing nothing and may take a few seconds to come up.
  5. Click the More Options button below the large panel and check the box:
    • Do a Deep Scan
    • Silent Runners
    • Chrome Lookup
    • System Specs
    • Startup Information
    • Installed Programs
    • Uninstall List
    • Recently Created
  6. Click on Run script button
  7. Please wait patiently (it may take a while) until a log report will open (this may be after reboot, if required)
  8. Copy and paste the contents of the opened entire report into your next reply.
    Note: It will also create a log in the C:\ directory named "zoek-results.log"

Step 3.
SystemLook
Please download SystemLook_x64.exe by jpshortstuff and save it to your Desktop.
  1. Right click on SystemLook_x64.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
    If you receive an "Open file - security warning"... asking "Do you want to run this file?", press the Run button.
  2. Highlight and copy the following entries: into SystemLook's main text entry window.
    (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)
    Code: Select all
    :filefind
    *Anti-phishing*
    *AskToolbar*
    *Ask.com*
    *Babylon*
    *blekko*
    *HyperCam*
    *Ilivid*
    *PackageAware*
    *Toolbar4*
    *Dogpile*
    *CrashRpt*
    *Bandoo*
    *dealshark*
    *filescout*
    *Fun4IM*
    *Funmoods*
    *ooVoo*
    *IObit*
    *Iminent*
    *Intuit*
    *istart123*
    *MyWay*
    *SafeGuard*
    *Searchnu*
    *smartbar*
    *searchab*
    *sprotector*
    *superfish*
    *Tarma*
    *trolltech*
    *Vafmusic2*
    *vshare*
    *wajam*
    *whitesmoke*
    *Yontoo*
    
    :folderfind
    *Anti-phishing*
    *AskToolbar*
    *Ask.com*
    *Babylon*
    *blekko*
    *Ilivid*
    *PackageAware*
    *Dogpile*
    *CrashRpt*
    *Bandoo*
    *dealshark*
    *filescout*
    *Fun4IM*
    *Funmoods*
    *ooVoo*
    *IObit*
    *Iminent*
    *Intuit*
    *istart123*
    *MyWay*
    *SafeGuard*
    *Searchnu*
    *smartbar*
    *searchab*
    *sprotector*
    *superfish*
    *Tarma*
    *trolltech*
    *Vafmusic2*
    *vshare*
    *wajam*
    *whitesmoke*
    *Yontoo*
    
    :Regfind
    Anti-phishing
    AskToolbar
    Ask.com
    Babylon
    blekko
    HyperCam
    Ilivid
    PackageAware
    Dogpile
    Searchqu
    Zynga
    Bandoo
    dealshark
    filescout
    Fun4IM
    Funmoods
    ooVoo
    IObit
    Intuit
    Iminent
    istart123
    MyWay
    SafeGuard
    Searchnu
    smartbar
    searchab
    sprotector
    superfish
    Tarma
    trolltech
    Vafmusic2
    vshare
    wajam
    whitesmoke
    Yontoo
    
  3. Press the Look button to start the scan. Please be patient - it may take a while...
    When finished, a Notepad window will open with the results of the scan.
    A file will be created (on your Desktop) with the results of the scan, named SystemLook.txt
  4. Please post the contents of the SystemLook.txt file in your next reply.

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
  3. Contents of the zoek-results.log file
  4. Contents of the SystemLook.txt log file
  5. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3177
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 13th, 2014, 11:35 am

A. Nope
B. All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\muzzylane.com\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\muzzylane.com\ not found.
C:\Users\Lucas\AppData\Roaming\.minecraft\versions\1.8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\versions folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\texturepacks-mp-cache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\texturepacks folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\stats folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\screenshots folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality\stats folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality\region folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality\players folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality\DIM1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality\DIM-1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality\data folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Immortality folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\stats folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\region folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\players folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\playerdata folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\DIM1\region folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\DIM1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\DIM-1\region folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\DIM-1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular\data folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves\Exodus Season I V1.5.2 Regular folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\saves folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\streaming folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\tile\piston folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\tile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\step folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\random folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\portal folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\note folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\zombiepig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\zombie folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\wolf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\wither folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\spider folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\slime folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\skeleton folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\silverfish folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\sheep folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\pig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\magmacube folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\irongolem folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\ghast folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\endermen folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\enderdragon folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\creeper folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\cow folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\chicken folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\cat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\blaze folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob\bat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\mob folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\minecart folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\liquid folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\fireworks folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\fire folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\dig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\damage folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\ambient\weather folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\ambient\cave folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3\ambient folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound\step folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\sound folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\pe folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\tile\piston folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\tile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\step folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\random folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\portal folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\note folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\zombiepig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\zombie folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\wolf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\silverfish folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\magmacube folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\irongolem folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\ghast folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\endermen folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\cat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob\blaze folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\mob folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\liquid folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\fire folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\damage folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\ambient\weather folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\ambient\cave folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound\ambient folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newsound folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\newmusic folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources\music folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resources folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\resourcepacks folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\nodus\spamfiles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\nodus folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\mods folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\logs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-platform\6.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-platform\5.12 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-platform folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-external-platform\4.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch-external-platform folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\6.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch\5.12 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch\twitch folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv\twitch folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\tv folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\scala-lang\scala-library\2.10.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\scala-lang\scala-library folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\scala-lang\scala-compiler\2.10.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\scala-lang\scala-compiler folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\scala-lang folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-all\4.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\ow2\asm\asm-all folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\ow2\asm folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\ow2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1-nightly-20131120 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util\2.9.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl_util folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.1-nightly-20131120 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform\2.9.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl-platform folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1-nightly-20131120 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl\2.9.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl\lwjgl folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl\lwjgl folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\lwjgl folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\bouncycastle\bcprov-jdk15on\1.47 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\bouncycastle\bcprov-jdk15on folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\bouncycastle folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core\2.0-beta9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-core folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api\2.0-beta9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j\log4j-api folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\logging\log4j folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\logging folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore\4.3.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpcore folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient\4.3.3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents\httpclient folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\httpcomponents folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.3.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3\3.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-lang3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress\1.8.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\commons\commons-compress folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache\commons folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org\apache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\org folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j\3.0.3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\trove4j\trove4j folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\trove4j folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple\4.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple\jopt-simple folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf\jopt-simple folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\sf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraftforge\minecraftforge\9.11.1.935 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraftforge\minecraftforge folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraftforge folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper\1.8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper\1.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper\1.4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraft\launchwrapper folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\minecraft folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils\1.0.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jutils\jutils folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jutils folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput-platform\2.0.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput-platform folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput\2.0.5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jinput\jinput folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java\jinput folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net\java folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\net folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\lzma\lzma\0.0.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\lzma\lzma folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\lzma folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.5.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\java3d\vecmath\1.3.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\java3d\vecmath folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\java3d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.15.Final folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\io\netty\netty-all\4.0.10.Final folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\io\netty\netty-all folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\io\netty folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\io folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging\1.1.3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-logging\commons-logging folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-logging folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-io\commons-io\2.4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-io\commons-io folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-io folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec\1.9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-codec\commons-codec folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\commons-codec folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem\20120107 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\soundsystem folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal\20100824 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\librarylwjglopenal folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound\20101123 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\libraryjavasound folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav\20101023 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\codecwav folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis\20101023 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode\codecjorbis folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\paulscode folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang\realms\1.5.7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang\realms folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.5.17 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang\authlib\1.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang\authlib folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\mojang folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang\51.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\ibm\icu\icu4j-core-mojang folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\ibm\icu folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\ibm folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\17.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\15.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\guava\guava\14.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\guava\guava folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\guava folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson\2.2.2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\code\gson\gson folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\code\gson folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google\code folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com\google folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\com folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\argo\argo\2.25_fixed folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\argo\argo folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries\argo folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\libraries folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\database folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\crash-reports folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\config folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\bin\natives folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\bin folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\tile\piston folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\tile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\step folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\records folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\random folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\portal folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\note folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\music\menu folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\music\game\nether folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\music\game\end folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\music\game\creative folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\music\game folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\music folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\zombiepig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\zombie folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\wolf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\wither folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\villager folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\spider folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\slime folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\skeleton folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\silverfish folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\sheep folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\pig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\magmacube folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\irongolem folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\horse\zombie folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\horse\skeleton folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\horse\donkey folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\horse folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\ghast folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\endermen folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\enderdragon folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\creeper folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\cow folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\chicken folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\cat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\blaze folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob\bat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\mob folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\minecart folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\liquid folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\fireworks folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\fire folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\dig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\damage folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\ambient\weather folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\ambient\cave folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds\ambient folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sounds folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\tile\piston folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\tile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\step folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\random folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\portal folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\note folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\zombiepig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\zombie folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\wolf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\wither folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\villager folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\spider folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\slime folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\skeleton folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\silverfish folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\sheep folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\pig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\magmacube folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\irongolem folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\horse\zombie folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\horse\skeleton folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\horse\donkey folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\horse folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\ghast folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\endermen folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\enderdragon folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\creeper folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\cow folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\chicken folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\cat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\blaze folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob\bat folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\mob folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\minecart folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\liquid folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\fireworks folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\fire folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\dig folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\damage folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\ambient\weather folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\ambient\cave folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound\ambient folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\sound folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\records folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\music folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\lang folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy\icons folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual\legacy folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\virtual folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\fe folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\fa folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\f4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\ef folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\ea folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\e8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\e2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\e0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\de folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\dd folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\d9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\d6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\cf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\ce folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\c9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\bf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\bd folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\bc folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\b9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\b8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\b6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\b5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\b4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\b2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\ae folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\ac folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\ab folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\a7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\a3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\a0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\9f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\9d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\93 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\90 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\8f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\8d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\8a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\88 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\84 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\83 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\82 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\81 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\7f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\7d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\7c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\79 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\74 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\73 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\6a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\68 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\66 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\61 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\60 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\5e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\5c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\5b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\59 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\56 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\54 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\51 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\50 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\4e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\4c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\49 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\46 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\39 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\31 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\2e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\2c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\2b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\27 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\26 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\1b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\19 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\16 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\15 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins\10 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\skins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\fe folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\fd folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\fc folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\fb folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\fa folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\f1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ef folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ee folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ed folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ec folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\eb folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ea folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\e0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\df folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\de folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\dd folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\dc folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\db folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\da folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\d0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\cf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ce folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\cd folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\cc folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\cb folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ca folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\c0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\bf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\be folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\bd folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\bc folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\bb folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ba folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\b0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\af folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ae folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ad folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ac folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\ab folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\aa folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a9 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a8 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a7 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a6 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\a0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\9f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\9e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\9d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\9c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\9b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\9a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\99 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\98 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\97 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\96 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\95 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\94 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\93 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\92 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\91 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\90 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\8f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\8e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\8b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\8a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\89 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\88 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\87 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\86 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\85 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\84 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\83 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\82 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\81 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\80 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\7f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\7e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\7d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\7c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\7b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\7a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\79 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\78 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\77 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\76 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\75 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\74 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\73 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\72 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\71 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\70 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\6f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\6e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\6d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\6c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\6b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\6a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\69 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\68 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\67 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\66 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\65 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\64 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\63 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\62 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\61 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\60 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\5f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\5e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\5d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\5c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\5b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\5a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\59 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\58 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\57 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\56 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\55 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\53 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\52 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\51 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\50 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\4f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\4e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\4d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\4c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\4b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\4a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\49 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\48 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\47 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\46 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\45 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\44 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\43 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\42 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\41 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\40 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\3f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\3e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\3d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\3c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\3b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\39 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\38 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\37 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\36 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\35 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\34 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\33 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\32 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\31 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\30 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\2f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\2e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\2c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\2b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\2a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\29 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\28 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\27 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\25 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\24 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\23 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\22 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\20 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\1f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\1e folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\1d folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\1c folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\1a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\19 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\18 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\17 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\16 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\15 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\14 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\13 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\12 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\11 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\10 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\0f folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\0b folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\0a folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\09 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\08 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\07 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\06 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\05 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\04 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\03 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\02 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\01 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects\00 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\objects folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets\indexes folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft\assets folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.minecraft folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\smileys folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im\syrah@exploit.im folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im\soranito@exploit.im folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im\lemayojo@jabber.ru folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im\kavalix@exploit.im folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im\exploit.im folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im\exilehf@exploit.im folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber\kreature@exploit.im folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs\jabber folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\logs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\icons folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\certificates\x509\tls_peers folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\certificates\x509 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple\certificates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\.purple folder moved successfully.
Folder C:\Users\Lucas\AppData\Roaming\6179725\ not found.
Folder C:\Users\Lucas\AppData\Roaming\6401613\ not found.
Folder C:\Users\Lucas\AppData\Roaming\8948697\ not found.
C:\Users\Lucas\AppData\Roaming\Audacity\AutoSave folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Audacity folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\WebServices folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Structural\Common Data\2012Q4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Structural\Common Data folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Structural folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\MC3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INVPROSA\2013\English_Locked_x64\17.0.13800.0000\MC3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INVPROSA\2013\English_Locked_x64\17.0.13800.0000 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INVPROSA\2013\English_Locked_x64 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INVPROSA\2013 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INVPROSA folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Inventor 2013\AssetLibrary\Cache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Inventor 2013\AssetLibrary folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Inventor 2013\Addins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Inventor 2013 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INSTALLER\1.0\1.0\1.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INSTALLER\1.0\1.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INSTALLER\1.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\INSTALLER folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Support\Profiles\Unnamed Profile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Support\Profiles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Support\AuthorPalette folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Support folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Plotters\PMP Files folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Plotters\Plot Styles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu\Plotters folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10\enu folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013\R10 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\DWG TrueView 2013 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Autodesk Robot Structural Analysis Engine 2012Q4\Tmp folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Autodesk Robot Structural Analysis Engine 2012Q4\Template folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Autodesk Robot Structural Analysis Engine 2012Q4\CfgUsr folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\Autodesk Robot Structural Analysis Engine 2012Q4 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk\ADUT folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Autodesk folder moved successfully.
C:\Users\Lucas\AppData\Roaming\BANDISOFT\BANDICAM folder moved successfully.
C:\Users\Lucas\AppData\Roaming\BANDISOFT folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Battle.net folder moved successfully.
C:\Users\Lucas\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant\Local Store\#SharedObjects folder moved successfully.
C:\Users\Lucas\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant\Local Store folder moved successfully.
C:\Users\Lucas\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant folder moved successfully.
C:\Users\Lucas\AppData\Roaming\DiskSpaceFan folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\FAX Utility\INFO folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\FAX Utility\FAXLOG folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\FAX Utility folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00DC\AppInfo1\Scan to PDF folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00DC\AppInfo1\Scan to PC folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00DC\AppInfo1\Scan to Email folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00DC\AppInfo1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00DC folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C3\AppInfo1\Color PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C3\AppInfo1\Color Jpeg to E-mail folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C3\AppInfo1\B&W PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C3\AppInfo1\B&W PDF-Duplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C3\AppInfo1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C3 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C2\AppInfo1\Color PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C2\AppInfo1\Color Jpeg to E-mail folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C2\AppInfo1\B&W PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C2\AppInfo1\B&W PDF-Duplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C2\AppInfo1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model00C2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0095\AppInfo1\Color PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0095\AppInfo1\Color Jpeg to E-mail folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0095\AppInfo1\B&W PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0095\AppInfo1\B&W PDF-Duplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0095\AppInfo1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0095 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0094\AppInfo1\Color PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0094\AppInfo1\Color Jpeg to E-mail folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0094\AppInfo1\B&W PDF-Simplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0094\AppInfo1\B&W PDF-Duplex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0094\AppInfo1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager\Model0094 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson\Event Manager folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Epson folder moved successfully.
C:\Users\Lucas\AppData\Roaming\ESET\ESET Smart Security folder moved successfully.
C:\Users\Lucas\AppData\Roaming\ESET folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Fatshark\WotV\crash_dumps folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Fatshark\WotV\console_logs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Fatshark\WotV folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Fatshark folder moved successfully.
C:\Users\Lucas\AppData\Roaming\FileZilla folder moved successfully.
C:\Users\Lucas\AppData\Roaming\GroovesharkDesktop.7F9BF17D6D9CB2159C78A6A6AB076EA0B1E0497C.1\Local Store folder moved successfully.
C:\Users\Lucas\AppData\Roaming\GroovesharkDesktop.7F9BF17D6D9CB2159C78A6A6AB076EA0B1E0497C.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Gyazo folder moved successfully.
C:\Users\Lucas\AppData\Roaming\GZConnector folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Leadertech\PowerRegister folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Leadertech folder moved successfully.
C:\Users\Lucas\AppData\Roaming\library_dir\win32com\gen_py folder moved successfully.
C:\Users\Lucas\AppData\Roaming\library_dir\win32com folder moved successfully.
C:\Users\Lucas\AppData\Roaming\library_dir folder moved successfully.
C:\Users\Lucas\AppData\Roaming\LolClient\Local Store\#SharedObjects\assets\swfs\login.swf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\LolClient\Local Store\#SharedObjects\assets\swfs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\LolClient\Local Store\#SharedObjects\assets folder moved successfully.
C:\Users\Lucas\AppData\Roaming\LolClient\Local Store\#SharedObjects folder moved successfully.
C:\Users\Lucas\AppData\Roaming\LolClient\Local Store folder moved successfully.
C:\Users\Lucas\AppData\Roaming\LolClient folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\updates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs\rm folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs\python folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs\help\strings_us folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs\help folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs\cache\image folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs\cache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\prefs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\plugins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\NitroBlastStyles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\xnode folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\xgroup folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\sketch\previews folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\sketch\presets folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\sketch folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\scripts folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\schemes folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\python\packages\win64 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\python\packages folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\python folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\materialpreview folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\hair\previews folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\hair folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library\browser folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0\library folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R13 by Intel_8D29E9C0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\updates\content\20110616111327_d4b574f2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\updates\content folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\updates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\tex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs\rm folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs\python folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs\help\strings_us folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs\help folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs\cache\image folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs\cache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\prefs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\plugins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\NitroBlastStyles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\xnode folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\xgroup folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\sketch\previews folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\sketch\presets folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\sketch folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\scripts folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\schemes folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\python\packages\win64 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\python\packages folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\python folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\materialpreview folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\hair\previews folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\hair folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library\browser folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\library folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\Kuroyume\Greebler\Presets folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\Kuroyume\Greebler\CustomShapes folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\Kuroyume\Greebler\CustomNurnies folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\Kuroyume\Greebler folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\Kuroyume folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF\illum folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON\Cinema 4D R12_8274B8AF folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MAXON folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MMFApplications folder moved successfully.
C:\Users\Lucas\AppData\Roaming\MW3 FoV Changer folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Nidhogg folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Notepad++\plugins\config\NppFTP folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Notepad++\plugins\config folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Notepad++\plugins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Notepad++ folder moved successfully.
C:\Users\Lucas\AppData\Roaming\NuGet folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS\updates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS\shaderCache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS\profiles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS\pluginData folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS\logs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS\crashDumps folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OBS folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OmniCoin\chainstate folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OmniCoin\blocks\index folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OmniCoin\blocks folder moved successfully.
C:\Users\Lucas\AppData\Roaming\OmniCoin folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Origin\CommonTitles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Origin\Cloud Saves folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Origin folder moved successfully.
C:\Users\Lucas\AppData\Roaming\PDAppFlex\Local Store\#SharedObjects folder moved successfully.
C:\Users\Lucas\AppData\Roaming\PDAppFlex\Local Store folder moved successfully.
C:\Users\Lucas\AppData\Roaming\PDAppFlex folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Psi\profiles\default\pictures folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Psi\profiles\default\history folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Psi\profiles\default folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Psi\profiles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Psi folder moved successfully.
Folder C:\Users\Lucas\AppData\Roaming\Publish Providers\ not found.
C:\Users\Lucas\AppData\Roaming\QFX Software\KeyScrambler folder moved successfully.
C:\Users\Lucas\AppData\Roaming\QFX Software folder moved successfully.
C:\Users\Lucas\AppData\Roaming\raidcall\plugins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\raidcall folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Rainmeter\Layouts folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Rainmeter folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\win32com\gen_py folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\win32com folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\Unknown\config\certificates\x509\tls_peers folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\Unknown\config\certificates\x509 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\Unknown\config\certificates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\Unknown\config folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\Unknown folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\ltc folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\icons folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\downloads folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\data\raptrguest16693873\config\certificates\x509\tls_peers folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\data\raptrguest16693873\config\certificates\x509 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\data\raptrguest16693873\config\certificates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\data\raptrguest16693873\config folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\data\raptrguest16693873 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\data folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\boxarts folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr\avatars folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Raptr folder moved successfully.
C:\Users\Lucas\AppData\Roaming\redsn0w\shsh folder moved successfully.
C:\Users\Lucas\AppData\Roaming\redsn0w\resources folder moved successfully.
C:\Users\Lucas\AppData\Roaming\redsn0w folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Riot Games\League of Legends 3.0.0\install folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Riot Games\League of Legends 3.0.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Riot Games\League of Legends\prerequisites folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Riot Games\League of Legends folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Riot Games folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\Vegas Pro\12.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\Vegas Pro\11.0 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\Vegas Pro folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\Sony Vegas Video Plug-In Pack folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\Sony Vegas OFX GPU Video Plug-In Pack folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\SfTrans1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony\Render Templates folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Sony folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Cookies folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\wow folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\suggest folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\social-feed folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\share folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\search-single folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\search-dropdown folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\search folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\radio folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\profile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\playlist-header folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\onboarding-popup folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\notification-popup folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\notification-center folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\messages folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\install folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\genre folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\follow folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\finder folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\feed folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\discover folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\collection folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\browse folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\artist folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps\album folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user\Apps folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users\lucaslee8498-user folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Users folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Data\locales folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify\Data folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Spotify folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1\Local Store folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Themes folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Songs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Screenshots folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\UserPrefs\_fallback folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\UserPrefs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\MachineProfile\Screenshots folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\MachineProfile\Rivals folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\MachineProfile\Edits folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\MachineProfile\EditCourses folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\MachineProfile folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save\GamePrefs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Save folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\RandomMovies folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Packages folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\NoteSkins folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Logs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Courses folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Characters folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\CDTitles folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Cache\Songs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Cache\Courses folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Cache\Banners folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Cache folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\BGAnimations folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\BackgroundTransitions folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\BackgroundEffects folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5\Announcers folder moved successfully.
C:\Users\Lucas\AppData\Roaming\StepMania 5 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\TechSmith\CamtasiaStudio\Logs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\TechSmith\CamtasiaStudio folder moved successfully.
C:\Users\Lucas\AppData\Roaming\TechSmith folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Ubisoft\Assassin's Creed 2 folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Ubisoft folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Unity\WebPlayerPrefs\ht_2ecdn_2eturner_2ecom folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Unity\WebPlayerPrefs\chat_2ekongregate_2ecom folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Unity\WebPlayerPrefs folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Unity folder moved successfully.
Folder C:\Users\Lucas\AppData\Roaming\uTorrent\ not found.
C:\Users\Lucas\AppData\Roaming\Wacom\Bamboo Dock folder moved successfully.
C:\Users\Lucas\AppData\Roaming\Wacom folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1\Local Store\default\xml folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1\Local Store\default folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1\Local Store\#SharedObjects\bin\main.swf folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1\Local Store\#SharedObjects\bin folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1\Local Store\#SharedObjects folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1\Local Store folder moved successfully.
C:\Users\Lucas\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1 folder moved successfully.
========== FILES ==========
File\Folder C:\Windows\SysWow64\*.tmp not found.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Lucas\Desktop\cmd.bat deleted successfully.
C:\Users\Lucas\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 57472 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: hedev

User: Lucas
->Flash cache emptied: 58527 bytes

User: Public

Total Flash Files Cleaned = 0.00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: hedev

User: Lucas
->Java cache emptied: 8196 bytes

User: Public

Total Java Files Cleaned = 0.00 mb


[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: hedev
->Temp folder emptied: 0 bytes

User: Lucas
->Temp folder emptied: 338038141 bytes
->Temporary Internet Files folder emptied: 13782479 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 266204541 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 11660315 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 6089 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 627 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 601.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12132014_095729

Files\Folders moved on Reboot...
C:\Users\Lucas\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\Low\SkypeClickToCall\Logs\AutoUpdateSvc.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 13th, 2014, 11:36 am

Zoek.exe v5.0.0.0 Updated 12-December-2014
Tool run by Lucas on Sat 12/13/2014 at 10:01:53.53.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Lucas\Desktop\zoek.exe [Scan all users] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2014-12-09-001510.log 9257 bytes

==== Installed Programs ======================

4K Video Downloader 3.4
7-Zip 9.20 (x64 edition)
Adobe AIR
Adobe Creative Cloud
Adobe Flash Player 12 ActiveX
Adobe Flash Player 12 Plugin
Adobe Help Manager
Adobe Photoshop CC
Adobe Reader XI (11.0.05)
Adobe Shockwave Player 12.1
Akamai NetSession Interface
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Control Center
AMD Catalyst Install Manager
AMD Drag and Drop Transcoding
AMD Media Foundation Decoders
AMD Wireless Display v3.0
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Application Profiles
Arma 2
Arma 2: Operation Arrowhead
ASRock 3TB+ Unlocker v1.1
ASRock eXtreme Tuner v0.1.250
ASRock InstantBoot v1.29
ASRock RapidStart v1.0.6
ASRock SmartConnect v1.0.6
ASRock XFast RAM v2.0.9
Assassin's Creed II
Autodesk Inventor 2013 Quick Uninstaller
Autodesk Inventor Professional 2013
Autodesk Inventor Professional 2013 English Language Pack
Autodesk Material Library 2013
Autodesk Material Library Base Resolution Image Library 2013
Autodesk Material Library Low Resolution Image Library 2013
Autodesk Sync
Bamboo Dock
Bamboo Tablets Tutorial
Bandicam
Bandisoft MPEG-1 Decoder
Batman: Arkham Asylum GOTY Edition
Battle.net
BattlEye for OA Uninstall
Behaviors SDK (Windows Phone) for Visual Studio 2013
Behaviors SDK (Windows) for Visual Studio 2013
Blade Symphony
Blend for Visual Studio Add-in for Adobe FXG Import
Blend for Visual Studio SDK for .NET 4.5
Blend for Visual Studio SDK for Silverlight 5
Bonjour
BUFFALO AirStation Bandwidth Selection Tool
Build Tools - amd64
Build Tools - x86
Build Tools Language Resources - amd64
Build Tools Language Resources - x86
Call of Duty 4: Modern Warfare
Call of Duty: Black Ops II - Multiplayer
Call of Duty: Black Ops II - Zombies
Call of Duty: Modern Warfare 2 - Multiplayer
Call of Duty: Modern Warfare 2
Call of Duty: Modern Warfare 3 - Multiplayer
Camtasia Studio 7
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
CCleaner
Cockatrice
Comodo Dragon
Counter-Strike: Global Offensive
Counter-Strike: Source
CyberGhost VPN
DayZ Commander
Definition Update for Microsoft Office 2010 (KB2910899) 32-Bit Edition
Disk Space Fan 4 4.5.4.152
Dropbox
DWG TrueView 2013
Eco Materials Adviser for Autodesk Inventor 2013
Entity Framework 6.1.1 Tools for Visual Studio 2013
Entity Framework Designer for Visual Studio 2012 - enu
EPSON Connect version 1.0
Epson Customer Participation
Epson Event Manager
Epson FAX Utility
EPSON Scan
EPSON WF-2540 Series Printer Uninstall
EpsonNet Print
Facebook Video Calling 3.1.0.521
FileZilla Client 3.7.4.1
Five Nights at Freddy's
Fraps (remove only)
Garry's Mod
GeekBuddy
Google Chrome
Google Drive
Google Talk Plugin
Google Update Helper
Grand Theft Auto IV
Grooveshark
Gyazo 1.0
Hearthstone
Hotfix for Microsoft Visual Basic 2010 Express - ENU (KB2635973)
Hotfix for Microsoft Visual C# 2010 Express - ENU (KB2635973)
HydraVision
Intel(R) Processor Graphics
Intel(R) USB 3.0 eXtensible Host Controller Driver
iTunes
Java 7 Update 67
Java Auto Updater
join.me
Just Cause 2
Just Cause 2: Multiplayer Mod
KeyScrambler
League of Legends
LocalESPC
LogMeIn
LogMeIn Hamachi
LOLReplay
Malwarebytes Anti-Malware version 2.0.4.1028
Microsoft .NET Framework 4 Multi-Targeting Pack
Microsoft .NET Framework 4.5 Multi-Targeting Pack
Microsoft .NET Framework 4.5 SDK
Microsoft .NET Framework 4.5.1
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU)
Microsoft .NET Framework 4.5.1 SDK
Microsoft Application Error Reporting
Microsoft Azure Shared Components for Visual Studio 2013 - v1.3
Microsoft C++ REST SDK for Visual Studio 2013
Microsoft Expression Blend SDK for .NET 4
Microsoft Expression Blend SDK for Silverlight 4
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Help Viewer 1.1
Microsoft Help Viewer 2.0
Microsoft Help Viewer 2.1
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop
Microsoft NuGet - Visual Studio Express 2013 for Windows Desktop
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Word MUI (English) 2010
Microsoft Portable Library Multi-Targeting Pack
Microsoft Report Viewer Add-On for Visual Studio 2013
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2008 R2 Management Objects
Microsoft SQL Server 2012 Command Line Utilities
Microsoft SQL Server 2012 Data-Tier App Framework
Microsoft SQL Server 2012 Data-Tier App Framework (x64)
Microsoft SQL Server 2012 Express LocalDB
Microsoft SQL Server 2012 Management Objects
Microsoft SQL Server 2012 Management Objects (x64)
Microsoft SQL Server 2012 Native Client
Microsoft SQL Server 2012 T-SQL Language Service
Microsoft SQL Server 2012 Transact-SQL Compiler Service
Microsoft SQL Server 2012 Transact-SQL ScriptDom
Microsoft SQL Server 2014 Express LocalDB
Microsoft SQL Server 2014 Management Objects
Microsoft SQL Server 2014 Management Objects (x64)
Microsoft SQL Server 2014 T-SQL Language Service
Microsoft SQL Server 2014 Transact-SQL ScriptDom
Microsoft SQL Server Compact 3.5 SP2 ENU
Microsoft SQL Server Compact 3.5 SP2 x64 ENU
Microsoft SQL Server Compact 4.0 SP1 x64 ENU
Microsoft SQL Server Data Tools - enu (11.1.20828.01)
Microsoft SQL Server Data Tools - enu (12.0.41012.0)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1)
Microsoft SQL Server System CLR Types
Microsoft System CLR Types for SQL Server 2012
Microsoft System CLR Types for SQL Server 2012 (x64)
Microsoft System CLR Types for SQL Server 2014
Microsoft Team Foundation Server 2013 Update 4 Object Model (x64)
Microsoft Team Foundation Server 2013 Update 4 Object Model Language Pack (x64) - ENU
Microsoft Visual Basic 2010 Express - ENU
Microsoft Visual C# 2010 Express - ENU
Microsoft Visual C++ x64 Libraries
Microsoft Visual C++ x86 Libraries
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219
Microsoft Visual C++ 2012 32bit Compilers - ENU Resources
Microsoft Visual C++ 2012 Core Libraries
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
Microsoft Visual C++ 2012 x86-x64 Compilers
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
Microsoft Visual C++ 2013 32bit Compilers - ENU Resources
Microsoft Visual C++ 2013 Core Libraries
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86-x64 Compilers
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU
Microsoft Visual Studio 2010 Service Pack 1
Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
Microsoft Visual Studio 2012 Express Prerequisites x64 - ENU
Microsoft Visual Studio 2012 Preparation
Microsoft Visual Studio 2012 Shell (Minimum)
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies
Microsoft Visual Studio 2012 Shell (Minimum) Resources
Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU
Microsoft Visual Studio 2013 Diagnostic Tools - amd64
Microsoft Visual Studio 2013 Diagnostic Tools - x86
Microsoft Visual Studio 2013 Express Prerequisites x64 - ENU
Microsoft Visual Studio 2013 Preparation
Microsoft Visual Studio 2013 Shell (Minimum)
Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies
Microsoft Visual Studio 2013 Shell (Minimum) Resources
Microsoft Visual Studio 2013 Team Explorer Language Pack - ENU
Microsoft Visual Studio 2013 XAML UI Designer - ENU
Microsoft Visual Studio 2013 XAML UI Designer
Microsoft Visual Studio Express 2012 for Windows Desktop - ENU
Microsoft Visual Studio Express 2012 for Windows Desktop
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU with Update 4
Microsoft Visual Studio Express 2013 for Windows Desktop
Microsoft Visual Studio Team Foundation Server 2012 Object Model
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - ENU
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core
Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources
Microsoft WSE 3.0 Runtime
Microsoft_VC80_CRT_x86
Microsoft_VC90_CRT_x86
MouseFIGHTER
MSVCRT Redists
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nidhogg
No-IP DUC
Notepad++
NVIDIA PhysX
Open Broadcaster Software
OpenVPN 2.2.2
Origin
osu
Paint.NET v3.5.11
PDF Settings CC
pidgin-otr 4.0.0-1
Pidgin
PowreShellIntegration.Notifications
Prerequisites for SSDT
Psi (remove only)
Python 2.7.1
Python Tools Redirection Template
QuickTime 7
RaidCall
Rainmeter
Raptr
Razer Game Booster
Razer Synapse 2.0
Realtek High Definition Audio Driver
RocketDock 1.3.5
Rust
Sandstone Player
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)
Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)
Skype Click to Call
SkypeT 6.21
Spotify
Star Wars: The Old Republic
StarCraft II
Steam
StepMania v5.0 beta 3 (remove only)
swMSM
T.E.C. 3001
Team Explorer for Microsoft Visual Studio 2013
TeamSpeak 3 Client
TeamViewer 8
Theme Manager
Trials Evolution Gold Edition
TypeScript Power Tool
TypeScript Tools for Microsoft Visual Studio 2013
U2bviews Software
Unity Web Player
Update for (KB2504637)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition
Update for Microsoft Visual Studio 2012 (KB2781514)
Update for Microsoft Visual Studio 2013 (KB2932965)
Uplay
VBA (2627.01)
Virtual Audio Cable 4.14
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
Visual Studio 2012 Update 4 (KB2707250)
Visual Studio 2013 Update 4 (KB2829760)
Visual Studio Extensions for Windows Library for JavaScript
VLC media player
VMware View Client
VS Update core components
Wacom
War of the Vikings Early Access
WebTablet FB Plugin 32 bit
WebTablet FB Plugin 64 bit
Winamp
WinDirStat 1.1.2
Windows Live ID Sign-in Assistant
Windows Software Development Kit
Windows Software Development Kit DirectX x64 Remote
Windows Software Development Kit DirectX x86 Remote
Windows Software Development Kit for Windows Store Apps
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote
Windows XP Targeting with C++
XFastUSB

==== Running Processes ======================

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Users\Lucas\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
C:\Users\Lucas\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\RzCefRenderProcess.exe
C:\Users\Lucas\Desktop\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)
Memory (RAM): 8074 MB
CPU Info: Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz
CPU Speed: 3394.5 MHz
Sound Card: Speakers (Logitech G35 Headset) |
Line 2 (Virtual Audio Cable) |
Speakers (Realtek High Definiti |
Realtek Digital Output (Realtek |
Line 1 (Virtual Audio Cable) |
Display Adapters: AMD Radeon HD 7900 Series | AMD Radeon HD 7900 Series | AMD Radeon HD 7900 Series | AMD Radeon HD 7900 Series | AMD Radeon HD 7900 Series | AMD Radeon HD 7900 Series | Intel(R) HD Graphics | Intel(R) HD Graphics | Intel(R) HD Graphics | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver | LogMeIn Mirror Driver
Monitors: 2x; S200HL(Analog) | S200HL(Analog) |
Screen Resolution: 1600 X 900 - 32 bit
Network: Network Present
Network Adapters: TAP-Win32 Adapter V9 #2 | TAP-Win32 Adapter V9 | Microsoft Virtual WiFi Miniport Adapter | BUFFALO WLI-UC-GNHP Wireless LAN Adapter
CD / DVD Drives: 1x (F: | ) F: ATAPI iHAS324 C
Ports: COM1 LPT Port NOT Present.
Mouse: 8 Button Wheel Mouse Present
Hard Disks: C: 111.7GB | E: 931.5GB
Hard Disks - Free: C: 16.4GB | E: 661.9GB
Manufacturer *: American Megatrends Inc.
BIOS Info: AT/AT COMPATIBLE | 01/16/13 | ALASKA - 1072009
Time Zone: Eastern Standard Time
Motherboard *: ASRock Z77 Extreme6
Country: United States
Language: ENU

==== System Specs (Software) ======================

Anti-Virus: Microsoft Security Essentials On-access scanning disabled (Outdated)
Anti-Virus: ESET Smart Security 6.0 On-access scanning disabled (Outdated)
Anti-Spyware: Microsoft Security Essentials disabled (Outdated)
Anti-Spyware: ESET Smart Security 6.0 disabled (Outdated)
Anti-Spyware: Windows Defender disabled (Outdated)
Firewall: ESET Personal firewall disabled
Default Browser: Google Chrome 39.0.2171.95
Internet Explorer Version: 11.0.9600.17501
Google Chrome version: 39.0.2171.95
Adobe Reader version: 11.0.04.63
Sun Java version: 1.7.0_67 (32-bit)
Flash Player version: 12.0.0.77
Shockwave Player version: 12.1.3r153

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\Lucas\AppData\Local\Temp ====
2014-12-13 14:59:37 EB4686F6F4BE2B00AA40978D551F66C4 43008 ----a-w- C:\Users\Lucas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpy80oun.dll
====== Java Cache =====
====== C:\Windows\SysWOW64 =====
2014-12-10 03:28:35 52096F5F476733F2E2725CF346FF373B 2048 ----a-w- C:\Windows\SysWOW64\mferror.dll
2014-12-10 03:28:34 FF0A6E76FAE624AC74780AB008752F98 3209728 ----a-w- C:\Windows\SysWOW64\mf.dll
2014-12-10 03:28:34 D17954CA6343F43B62637F51996B4E95 23040 ----a-w- C:\Windows\SysWOW64\mfpmp.exe
2014-12-10 03:28:34 60FBCF033FF42A40C916C01A962A8802 50176 ----a-w- C:\Windows\SysWOW64\rrinstaller.exe
2014-12-10 03:28:34 20257A0BFB824B49055A6EEC29C72C03 103424 ----a-w- C:\Windows\SysWOW64\mfps.dll
2014-12-10 01:44:42 E1456E7396022EBE4E5434188D1AC8B0 1230336 ----a-w- C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 01:44:40 F25284C763E728E4DAC248C211D1FC5B 76288 ----a-w- C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 01:44:40 BB25F69463AD8E7E51B5D9D158B5F8DF 30720 ----a-w- C:\Windows\SysWOW64\iernonce.dll
2014-12-10 01:44:40 2EADED07BDA52C1FC5A6D4E1CC5858F0 47616 ----a-w- C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 01:44:39 F98B3860BB47089EA8C1504F043E90E9 342200 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 01:44:39 F34F6DC38A21FCDBB50CDD1EE97B1EA3 1307136 ----a-w- C:\Windows\SysWOW64\urlmon.dll
2014-12-10 01:44:39 D7A98A4CEA2E89F544065A00BF37FC10 688640 ----a-w- C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 01:44:39 69AC6FD5B0B4DC963723E1EBDEE10A2C 285696 ----a-w- C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 01:44:39 2ABC5587D582ACCEA30B4CF968C2A4A5 60416 ----a-w- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 01:44:39 220505B0B3E96C857DD01729AF0CD369 19749376 ----a-w- C:\Windows\SysWOW64\mshtml.dll
2014-12-10 01:44:38 F0BCBD8FCDA145EED53ED66C45CC378B 62464 ----a-w- C:\Windows\SysWOW64\iesetup.dll
2014-12-10 01:44:38 DEB9476A3CD1A5819DD4504BB7C6BA66 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 01:44:38 543ADCEA31CF9C2B4EEB900D4AAFD0F9 2052096 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 01:44:38 41AFA61E061E98E97272AC02184C8C2C 710144 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 01:44:38 01777AB557997E98691E322225314E57 2277888 ----a-w- C:\Windows\SysWOW64\iertutil.dll
2014-12-10 01:44:37 EC5A3E4E21079B9D423AA0760828D678 620032 ----a-w- C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 01:44:37 D90585C3BE942DAAFBDC868FDC061844 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 01:44:37 CF9D05678B02B44FBC8D8AD8C9F30D58 478208 ----a-w- C:\Windows\SysWOW64\ieui.dll
2014-12-10 01:44:37 B59E370277EDB6643083B62297175628 12836864 ----a-w- C:\Windows\SysWOW64\ieframe.dll
2014-12-10 01:44:37 759E2FAD5371512C6679FA346719493E 47104 ----a-w- C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 01:44:37 35BD045804B67E78F4CAB72CB820AF7F 418304 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 01:44:35 F728E7E9937117E0F32F39840EB6D737 4299264 ----a-w- C:\Windows\SysWOW64\jscript9.dll
2014-12-10 01:44:35 930F63D6BC43D4BCD937DFCECDA95F82 168960 ----a-w- C:\Windows\SysWOW64\msrating.dll
2014-12-10 01:44:35 5E4E0E43E0A5BF9F089696DFA7A3D677 1888256 ----a-w- C:\Windows\SysWOW64\wininet.dll
2014-12-10 01:44:35 37F078B5B435AFC6BF316F2AD14B469A 501248 ----a-w- C:\Windows\SysWOW64\vbscript.dll
2014-12-10 01:44:35 2E9E105037AC1274656C3D1125323352 1155072 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 01:44:35 29CED1A4777A43526A4ED8A7B6936883 64000 ----a-w- C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 01:43:41 B975C202F590BBC5AA63225FBD148791 198656 ----a-w- C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 01:43:41 B6AC69FFBAA159DD5CEED814245A286D 214016 ----a-w- C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 01:43:41 9EA3783672D21817B9DF1061B54C3B3C 155136 ----a-w- C:\Windows\SysWOW64\charmap.exe
2014-12-10 01:43:41 5D9A1A3E5824CECE65871C60E5A08A1A 145920 ----a-w- C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 01:43:41 2C28FEC61C4AC68480A99CB7AA197FA9 248832 ----a-w- C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 01:43:41 1DE9BD23AFA36150586C732D876D9B74 1177088 ----a-w- C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 01:43:40 50C73E54062BA252350F3F29580E28DA 2048 ----a-w- C:\Windows\SysWOW64\tzres.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-12-10 03:28:35 AB2EB93A982A2C26BA3E4D2D65328804 24576 ----a-w- C:\Windows\Sysnative\mfpmp.exe
2014-12-10 03:28:35 68E09E7CD4DC52F132A4B492ACE8C243 55808 ----a-w- C:\Windows\Sysnative\rrinstaller.exe
2014-12-10 03:28:35 63578DB847FCC40883CB8F303E785D46 2048 ----a-w- C:\Windows\Sysnative\mferror.dll
2014-12-10 03:28:34 9797A23F773C0782A0D91BEC44054166 206848 ----a-w- C:\Windows\Sysnative\mfps.dll
2014-12-10 03:28:34 6E1DDE0E72FB8268F42F6777CE4C5036 4121600 ----a-w- C:\Windows\Sysnative\mf.dll
2014-12-10 01:44:57 8E64BB62AB3810D3C29ED50C405AD3BD 1232040 ----a-w- C:\Windows\Sysnative\aitstatic.exe
2014-12-10 01:44:56 F0356290BA3940F31AFF5566501495F7 192000 ----a-w- C:\Windows\Sysnative\aepic.dll
2014-12-10 01:44:56 E00981CF227CEEBE7B5A8D99C76D1116 741376 ----a-w- C:\Windows\Sysnative\invagent.dll
2014-12-10 01:44:56 DAF13A81A5FC895D68B1D9A72F65F4CB 413184 ----a-w- C:\Windows\Sysnative\generaltel.dll
2014-12-10 01:44:56 D257AF48934D2167BE15AA4008176381 1083392 ----a-w- C:\Windows\Sysnative\aeinv.dll
2014-12-10 01:44:56 985558125FEEC89AB4AD142158B066D7 830976 ----a-w- C:\Windows\Sysnative\appraiser.dll
2014-12-10 01:44:56 5CD6E919CE938A98AB25A2EA2C8C4EDA 227328 ----a-w- C:\Windows\Sysnative\aepdu.dll
2014-12-10 01:44:56 4253086737D81D7C9C160FDE6C037F44 396800 ----a-w- C:\Windows\Sysnative\devinv.dll
2014-12-10 01:44:42 A9A0BFD706B3A24C403EEFEB0790D011 1424384 ----a-w- C:\Windows\Sysnative\WindowsCodecs.dll
2014-12-10 01:44:40 D471F7A428C21DB04D810445D12D68E0 48640 ----a-w- C:\Windows\Sysnative\ieetwproxystub.dll
2014-12-10 01:44:40 39B512C643812FC2D4843C0D4206C759 718848 ----a-w- C:\Windows\Sysnative\ie4uinit.exe
2014-12-10 01:44:40 0FABE2AB8CA2D5CC7C95798533B4D057 114688 ----a-w- C:\Windows\Sysnative\ieetwcollector.exe
2014-12-10 01:44:40 077AEB068A51B396F25BBCAB0944FC3A 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb
2014-12-10 01:44:39 F987718A5CA053DC23E94A531F1754A4 34304 ----a-w- C:\Windows\Sysnative\iernonce.dll
2014-12-10 01:44:39 9F07E8FC75C5F98A783ABFD3005EFC22 77824 ----a-w- C:\Windows\Sysnative\JavaScriptCollectionAgent.dll
2014-12-10 01:44:38 E7A2061ADF0F4D430FECDA1E8D6B7BA6 1548288 ----a-w- C:\Windows\Sysnative\urlmon.dll
2014-12-10 01:44:38 5BF0BAA1E5EF724287565E97C9219254 389296 ----a-w- C:\Windows\Sysnative\iedkcs32.dll
2014-12-10 01:44:37 EBC8C9F61F4C148B8C6A28EDE80C51E4 968704 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe
2014-12-10 01:44:37 B4E481E9498CE22113628C4E9EA24427 4096 ----a-w- C:\Windows\Sysnative\ieetwcollectorres.dll
2014-12-10 01:44:37 14BA910E7731FC84EB85328BD0F1EE81 800768 ----a-w- C:\Windows\Sysnative\msfeeds.dll
2014-12-10 01:44:37 0AF0AEF0BA9EF6169E61C78504DCAE55 316928 ----a-w- C:\Windows\Sysnative\dxtrans.dll
2014-12-10 01:44:36 EFBA893429814EA3244C87C2D1256618 800768 ----a-w- C:\Windows\Sysnative\ieapfltr.dll
2014-12-10 01:44:36 982B871A25B5078093FAD82D0AB0E3FC 2885120 ----a-w- C:\Windows\Sysnative\iertutil.dll
2014-12-10 01:44:36 3FE71E2A5BD3EC652E64FC8BCEFEDD2C 2125312 ----a-w- C:\Windows\Sysnative\inetcpl.cpl
2014-12-10 01:44:36 23AE7A3B44D5C550B81347288CE3230E 66560 ----a-w- C:\Windows\Sysnative\iesetup.dll
2014-12-10 01:44:35 F7CCA58B973FB5EAED8D1F12DD3E51F6 490496 ----a-w- C:\Windows\Sysnative\dxtmsft.dll
2014-12-10 01:44:35 DFECAE6D925FBC9078870E16F98C471F 54784 ----a-w- C:\Windows\Sysnative\jsproxy.dll
2014-12-10 01:44:35 8EF01E2EF21D41A23FF70B28179F9ABE 633856 ----a-w- C:\Windows\Sysnative\ieui.dll
2014-12-10 01:44:35 5F24313333AB409251152CAFADA40015 144384 ----a-w- C:\Windows\Sysnative\ieUnatt.exe
2014-12-10 01:44:34 DB10D681314714E0D4623E4C0CF6654A 92160 ----a-w- C:\Windows\Sysnative\mshtmled.dll
2014-12-10 01:44:34 8D64466AD12CA5677CD0099C43C58569 6039552 ----a-w- C:\Windows\Sysnative\jscript9.dll
2014-12-10 01:44:34 7AC115968B8856004920057B2271224C 1359360 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll
2014-12-10 01:44:34 556D271F4243B273EDA353512BF3608A 14412800 ----a-w- C:\Windows\Sysnative\ieframe.dll
2014-12-10 01:44:34 4AF089160FE082E5EA5C4AA72782DCA2 2358272 ----a-w- C:\Windows\Sysnative\wininet.dll
2014-12-10 01:44:34 1D294810D3A8A8F722E86AA001F54DCC 580096 ----a-w- C:\Windows\Sysnative\vbscript.dll
2014-12-10 01:44:34 021DFF3CB0ADCD19B3AAA00A650FDEE2 814080 ----a-w- C:\Windows\Sysnative\jscript9diag.dll
2014-12-10 01:44:33 D478A4CF07FB8ADF72FB16B88E8030B8 25059840 ----a-w- C:\Windows\Sysnative\mshtml.dll
2014-12-10 01:44:33 89296EF4A3729A049DA25B7D67A04078 199680 ----a-w- C:\Windows\Sysnative\msrating.dll
2014-12-10 01:44:33 17A157A4225CF562202AC71DB8103177 88064 ----a-w- C:\Windows\Sysnative\MshtmlDac.dll
2014-12-10 01:43:41 FDEB5EE2E4DB9DE9251DDAF6A5BCA070 346624 ----a-w- C:\Windows\Sysnative\WSManMigrationPlugin.dll
2014-12-10 01:43:41 D929ABD465A2DED963DA8B30946A8D5C 2020352 ----a-w- C:\Windows\Sysnative\WsmSvc.dll
2014-12-10 01:43:41 9B44CABE3536D0E3BF627176318AAFC9 181248 ----a-w- C:\Windows\Sysnative\WsmAuto.dll
2014-12-10 01:43:41 5C642B7B0365305451D579F3EFAD57D4 310272 ----a-w- C:\Windows\Sysnative\WsmWmiPl.dll
2014-12-10 01:43:41 41457C1909F6D1100C0F9B9CFF7960FC 266240 ----a-w- C:\Windows\Sysnative\WSManHTTPConfig.exe
2014-12-10 01:43:41 36E5E9D0400475230A7F57F274B88321 165888 ----a-w- C:\Windows\Sysnative\charmap.exe
2014-12-10 01:43:40 A026998E927FD2095505154CBD72F35B 2048 ----a-w- C:\Windows\Sysnative\tzres.dll
====== C:\Windows\Sysnative\drivers =====
2014-12-10 01:44:42 70988118145F5F10EF24720B97F35F65 119296 ----a-w- C:\Windows\Sysnative\drivers\tdx.sys
2014-11-30 17:02:01 FEF60A37301E1F5A3020FA3487FB2CD7 129600 ----a-w- C:\Windows\Sysnative\drivers\rzpnk.sys
2014-11-30 17:01:39 F17F84511E7DFDEEAB646F0699A006D7 37184 ----a-w- C:\Windows\Sysnative\drivers\rzpmgrk.sys
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-12-01 00:12:31 -------- d-----w- C:\Program Files\Microsoft SQL Server
======= C:\PROGRA~2 =====
2014-12-01 00:08:33 -------- d-----w- C:\PROGRA~2\Microsoft Visual Studio 12.0
2014-11-30 17:18:48 -------- d-----w- C:\PROGRA~2\NuGet
2014-11-30 17:04:25 -------- d-----w- C:\PROGRA~2\COMMON~1\Merge Modules
2014-11-30 17:01:46 -------- d-----w- C:\PROGRA~2\COMMON~1\Microsoft
2014-11-20 01:41:11 -------- d-----w- C:\PROGRA~2\Cockatrice
======= C: =====
2014-12-07 20:26:41 8D987BE841B404B83E6CE18C33C44C88 55 ----a-w- C:\AdwCleanerDebug.txt
====== C:\Users\Lucas\AppData\Roaming ======
2014-12-09 00:14:10 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp
2014-12-09 00:14:10 -------- d-----w- C:\Users\Lucas\AppData\Local\Temp
2014-12-09 00:14:10 -------- d-----w- C:\Users\hedev\AppData\Local\Temp
2014-12-09 00:14:10 -------- d-----w- C:\Users\Default\AppData\Local\Temp
2014-12-09 00:14:10 -------- d-----w- C:\Users\Default User\AppData\Local\Temp
2014-11-30 17:01:40 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Razer
2014-11-20 01:41:55 -------- d-----w- C:\Users\Lucas\AppData\Local\Cockatrice
====== C:\Users\Lucas ======
2014-12-11 22:43:58 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Searches
2014-12-09 00:16:19 2AD9820E4B17E78110A6AA06BF5C1CE2 4184008 ----a-w- C:\Users\Lucas\Desktop\tdsskiller.exe
2014-12-07 22:21:22 C254F3ECEB9B1AC795BA6B25DE008EBA 1707646 ----a-w- C:\Users\Lucas\Desktop\JRT.exe
2014-12-07 20:26:04 AF506E0B71016682293AC3814A7D62BA 2153472 ----a-w- C:\Users\Lucas\Desktop\adwcleaner_4.104.exe
2014-12-07 00:09:59 54D18B9469E344DB783F579EF01E6F87 3514358 ----a-w- C:\Users\Lucas\Desktop\WVCheck.exe
2014-12-07 00:09:15 -------- d-----w- C:\ProgramData\Office Genuine Advantage
2014-12-07 00:08:51 722812A9EF151C0D77CFBCF6D12B7BCF 2031992 ----a-w- C:\Users\Lucas\Desktop\MGADiag.exe
2014-12-07 00:07:31 D40F4180401519B08D5BE1511B1AF7E7 25088 ----a-w- C:\Users\Lucas\Desktop\codecheck.exe
2014-12-07 00:04:58 64036987FDD56ACBE09AEB6570B8F128 468480 ----a-w- C:\Users\Lucas\Desktop\CKScanner.exe
2014-12-07 00:03:32 A94E2F637B9D3755B8FE3BA5ADBD7B8B 509440 ----a-w- C:\Users\Lucas\Desktop\SysInfo.exe
2014-12-04 01:19:51 8B968045D75783A09592C3105F2865DA 688992 ------r- C:\Users\Lucas\Desktop\dds.com
2014-12-01 00:11:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013
2014-11-30 17:18:48 -------- d-----w- C:\ProgramData\NuGet
2014-11-30 17:07:37 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2014-11-30 17:01:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2014-11-30 17:01:40 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012 Express
2014-11-30 17:01:16 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2014-11-30 16:59:36 -------- d-----w- C:\ProgramData\regid.1991-06.com.microsoft
2014-11-20 01:41:13 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cockatrice

====== C: exe-files ==
2014-12-13 01:40:17 061D327A14FEF3A58829FE53B689B8F1 10066992 ----a-w- C:\Program Files (x86)\Battle.net\Battle.net.5383\Battle.net.exe
2014-12-12 23:27:48 450BDEE760894CE151404E41819E964F 1097808 ----a-w- C:\Program Files (x86)\Google\Update\Install\{780B0DFB-8C03-4ED1-834A-0FE480DA87FE}\39.0.2171.95_39.0.2171.71_chrome_updater.exe
2014-12-12 23:27:48 450BDEE760894CE151404E41819E964F 1097808 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\39.0.2171.95\39.0.2171.95_39.0.2171.71_chrome_updater.exe
2014-12-11 22:42:05 D9FBFAF448BB9F8D3C1B4C3A37D76BA9 80896 ----a-w- C:\Users\Lucas\AppData\Local\Microsoft\WDExpress\12.0\ProjectAssemblies\qenwwkil01\Hackforums Name Exploiter.exe
2014-12-11 22:40:10 3F7EEE3BC1C1E93B4B5A8E141680D17A 70656 ----a-w- C:\Users\Lucas\AppData\Local\Microsoft\WDExpress\12.0\ProjectAssemblies\mpdngkhl01\Hackforums Name Exploiter.exe
2014-12-11 22:40:07 00C54466CFC232E2BA1DFC4F3A679F05 23168 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\bin\Release\Hackforums Name Exploiter.vshost.exe
2014-12-11 22:38:59 D9FBFAF448BB9F8D3C1B4C3A37D76BA9 80896 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\obj\x86\Release\Hackforums Name Exploiter.exe
2014-12-11 22:38:59 D9FBFAF448BB9F8D3C1B4C3A37D76BA9 80896 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\bin\Release\Hackforums Name Exploiter.exe
2014-12-11 22:38:59 B7C868069525B7187B19EC622538E8C0 87040 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\obj\x86\Debug\Hackforums Name Exploiter.exe
2014-12-11 22:38:59 B7C868069525B7187B19EC622538E8C0 87040 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\bin\Debug\Hackforums Name Exploiter.exe
2014-12-11 22:38:59 14737F4E7443681582F9D654F3C645F6 66048 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\obj\x86\Release\WindowsApplication1.exe
2014-12-11 22:38:59 14737F4E7443681582F9D654F3C645F6 66048 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\bin\Release\WindowsApplication1.exe
2014-12-11 22:38:59 02BE6D33B1EDBC61C79882D3F556BD8A 11600 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\bin\Debug\WindowsApplication1.vshost.exe
2014-12-11 22:38:59 02BE6D33B1EDBC61C79882D3F556BD8A 11600 ----a-w- C:\Users\Lucas\Desktop\Hackforums Name Exploiter\Hackforums Name Exploiter\bin\Debug\Hackforums Name Exploiter.vshost.exe
2014-12-11 01:16:23 0E14F9DE220F3A39F1BD8EAAAAEB4CA5 23150072 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_game_client\releases\0.0.1.9\deploy\League of Legends.exe
2014-12-11 01:12:39 E8B2E303AD42BE353A5D07C4A4A8C8E5 3234296 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcherUx.exe
2014-12-11 01:12:37 43ADC0991A7FC12666113143110D041D 1739256 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\rPipe.exe
2014-12-11 01:12:36 AAB8EDFFD0821925945987DB098FF2CD 114680 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\jpatch.exe
2014-12-11 01:12:36 2ED9B5A39047FCF5D8E77A4A07C55ADD 4216312 ----a-w- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.14\deploy\LoLPatcher.exe
2014-12-10 03:28:35 AB2EB93A982A2C26BA3E4D2D65328804 24576 ----a-w- C:\Windows\System32\mfpmp.exe
2014-12-10 03:28:35 68E09E7CD4DC52F132A4B492ACE8C243 55808 ----a-w- C:\Windows\System32\rrinstaller.exe
2014-12-10 03:28:34 D17954CA6343F43B62637F51996B4E95 23040 ----a-w- C:\Windows\SysWOW64\mfpmp.exe
2014-12-10 03:28:34 60FBCF033FF42A40C916C01A962A8802 50176 ----a-w- C:\Windows\SysWOW64\rrinstaller.exe
2014-12-10 01:44:57 8E64BB62AB3810D3C29ED50C405AD3BD 1232040 ----a-w- C:\Windows\System32\aitstatic.exe
2014-12-10 01:44:57 65536EB5F53B76562BBE0DE332A8BA3C 66216 ----a-w- C:\Windows\System32\CompatTel\diagtrackrunner.exe
2014-12-10 01:44:56 CCEE34CF7D700825AD839FAB298A0129 46760 ----a-w- C:\Windows\System32\CompatTel\wicainventory.exe
2014-12-10 01:44:56 A192555B09BD2A45940D7E449F311AF6 161960 ----a-w- C:\Windows\System32\CompatTel\QueryAppBlock.exe
2014-12-10 01:44:40 A8A8FD02E3A9264A603892DE1F522166 221184 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe
2014-12-10 01:44:40 39B512C643812FC2D4843C0D4206C759 718848 ----a-w- C:\Windows\System32\ie4uinit.exe
2014-12-10 01:44:40 0FABE2AB8CA2D5CC7C95798533B4D057 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-12-10 01:44:38 B7BCC767AC0E76384BCDC292184DD8C8 222720 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe
2014-12-10 01:44:38 43CE0C99DBC0F96DB2B7259B0BE0930E 468992 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe
2014-12-10 01:44:37 EBC8C9F61F4C148B8C6A28EDE80C51E4 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-12-10 01:44:37 D90585C3BE942DAAFBDC868FDC061844 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 01:44:37 A24BFBAE8B50A6780B68FF3673FAB52F 815280 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe
2014-12-10 01:44:36 C3D17F3199D39A2AB85956A63731F188 484352 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe
2014-12-10 01:44:36 2A9DA9E7462EBA3F6D2036E8D18FF773 813744 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe
2014-12-10 01:44:35 5F24313333AB409251152CAFADA40015 144384 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-12-10 01:43:41 B975C202F590BBC5AA63225FBD148791 198656 ----a-w- C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 01:43:41 9EA3783672D21817B9DF1061B54C3B3C 155136 ----a-w- C:\Windows\SysWOW64\charmap.exe
2014-12-10 01:43:41 41457C1909F6D1100C0F9B9CFF7960FC 266240 ----a-w- C:\Windows\System32\WSManHTTPConfig.exe
2014-12-10 01:43:41 36E5E9D0400475230A7F57F274B88321 165888 ----a-w- C:\Windows\System32\charmap.exe
2014-12-10 01:43:40 BE8F985609BE0809B7E29960AC997511 49664 ----a-w- C:\Windows\servicing\GC64\tzupd.exe
2014-12-09 00:16:19 2AD9820E4B17E78110A6AA06BF5C1CE2 4184008 ----a-w- C:\Users\Lucas\Desktop\tdsskiller.exe
2014-12-07 22:21:22 C254F3ECEB9B1AC795BA6B25DE008EBA 1707646 ----a-w- C:\Users\Lucas\Desktop\JRT.exe
2014-12-07 20:26:04 AF506E0B71016682293AC3814A7D62BA 2153472 ----a-w- C:\Users\Lucas\Desktop\adwcleaner_4.104.exe
2014-12-07 04:40:28 ABCE2E20DA5CF94C5EEBF436DBF28681 10001968 ----a-w- C:\Program Files (x86)\Battle.net\Battle.net.5325\Battle.net.exe
2014-12-07 00:09:59 54D18B9469E344DB783F579EF01E6F87 3514358 ----a-w- C:\Users\Lucas\Desktop\WVCheck.exe
2014-12-07 00:08:51 722812A9EF151C0D77CFBCF6D12B7BCF 2031992 ----a-w- C:\Users\Lucas\Desktop\MGADiag.exe
2014-12-07 00:07:31 D40F4180401519B08D5BE1511B1AF7E7 25088 ----a-w- C:\Users\Lucas\Desktop\codecheck.exe
2014-12-07 00:04:58 64036987FDD56ACBE09AEB6570B8F128 468480 ----a-w- C:\Users\Lucas\Desktop\CKScanner.exe
2014-12-07 00:03:32 A94E2F637B9D3755B8FE3BA5ADBD7B8B 509440 ----a-w- C:\Users\Lucas\Desktop\SysInfo.exe
=== C: other files ==
2014-12-10 01:44:42 70988118145F5F10EF24720B97F35F65 119296 ----a-w- C:\Windows\System32\drivers\tdx.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="C:\Users\Lucas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"Google Update"="C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"HydraVisionDesktopManager"="C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"LightShot"="C:\Users\Lucas\AppData\Local\Skillbrains\lightshot\Lightshot.exe"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"
"Razer Synapse"="C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
"iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="C:\Users\Lucas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"Google Update"="C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"HydraVisionDesktopManager"="C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
"LightShot"="C:\Users\Lucas\AppData\Local\Skillbrains\lightshot\Lightshot.exe"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Adobe ARM"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Creative Cloud]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Adobe Creative Cloud"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Adobe\\Adobe Creative Cloud\\ACC\\Creative Cloud.exe\" --showwindow=false --onOSstartup=true"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AdobeAAMUpdater-1.0"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\UpdaterStartupUtility.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Akamai NetSession Interface]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Akamai NetSession Interface"
"hkey"="HKCU"
"command"="\"C:\\Users\\Lucas\\AppData\\Local\\Akamai\\netsession_win.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="APSDaemon"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Autodesk Sync]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Autodesk Sync"
"hkey"="HKLM"
"command"="C:\\Program Files\\Autodesk\\Autodesk Sync\\AdSync.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BambooCore]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BambooCore"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\Bamboo Dock\\BambooCore.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BCSSync"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Microsoft Office\\Office14\\BCSSync.exe\" /DelayServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\EEventManager]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="EEventManager"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Epson Software\\Event Manager\\EEventManager.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\egui]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="egui"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\ESET\\ESET Smart Security\\egui.exe\" /hide /waitservice"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Facebook Update]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Facebook Update"
"hkey"="HKCU"
"command"="\"C:\\Users\\Lucas\\AppData\\Local\\Facebook\\Update\\FacebookUpdate.exe\" /c /nocrashserver"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\FUFAXRCV]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="FUFAXRCV"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Epson Software\\FAX Utility\\FUFAXRCV.exe\""
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 13th, 2014, 11:38 am

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\FUFAXSTM]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="FUFAXSTM"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Epson Software\\FAX Utility\\FUFAXSTM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Google Update"
"hkey"="HKCU"
"command"="\"C:\\Users\\Lucas\\AppData\\Local\\Google\\Update\\GoogleUpdate.exe\" /c"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HydraVisionDesktopManager]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="HydraVisionDesktopManager"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\ATI Technologies\\HydraVision\\HydraDM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KeyScrambler]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KeyScrambler"
"hkey"="HKLM"
"command"="C:\\Program Files (x86)\\KeyScrambler\\keyscrambler.exe /a"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LogMeIn GUI]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="LogMeIn GUI"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\LogMeIn\\x64\\LogMeInSystray.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LogMeIn Hamachi Ui]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="LogMeIn Hamachi Ui"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\LogMeIn Hamachi\\hamachi-2-ui.exe\" --auto-start"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSC]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MSC"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Microsoft Security Client\\msseces.exe\" -hide -runkey"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RaidCall]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="RaidCall"
"hkey"="HKLM"
"command"="E:\\Program Files\\RaidCall\\raidcall.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Razer Synapse]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Razer Synapse"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Razer\\Synapse\\RzSynapse.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RTHDVCPL]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="RTHDVCPL"
"hkey"="HKLM"
"command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"C:\\Program Files (x86)\\Skype\\Phone\\Skype.exe\" /minimized /regrun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Spotify"
"hkey"="HKCU"
"command"="\"C:\\Users\\Lucas\\AppData\\Roaming\\Spotify\\Spotify.exe\" /uri spotify:autostart"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Spotify Web Helper"
"hkey"="HKCU"
"command"="\"C:\\Users\\Lucas\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\StartCCC]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="StartCCC"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\amd64\\CLIStart.exe\" MSRun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Steam]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Steam"
"hkey"="HKCU"
"command"="\"E:\\Steam\\steam.exe\" -silent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SunJavaUpdateSched"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\tvncontrol]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="tvncontrol"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Common Files\\COMODO\\GeekBuddyRSP.exe\" -controlservice -slave"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\USB3MON]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="USB3MON"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\Intel\\Intel(R) USB 3.0 eXtensible Host Controller Driver\\Application\\iusb3mon.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\XFastUSB]
"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="XFastUSB"
"hkey"="HKLM"
"command"="\"C:\\Program Files (x86)\\XFastUSB\\XFastUsb.exe\""


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LOLRecorder.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\LOLRecorder.lnk"
"backup"="C:\\Windows\\pss\\LOLRecorder.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~2\\LOLREP~1\\LOLREC~1.EXE -minimize"
"item"="LOLRecorder"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Start GeekBuddy.lnk]
"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Start GeekBuddy.lnk"
"backup"="C:\\Windows\\pss\\Start GeekBuddy.lnk.CommonStartup"
"backupExtension"=".CommonStartup"
"command"="C:\\PROGRA~2\\Comodo\\GEEKBU~1\\launcher.exe \"unit_manager.exe\""
"item"="Start GeekBuddy"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Lucas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
"path"="C:\\Users\\Lucas\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk"
"backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup"
"backupExtension"=".Startup"
"command"="C:\\Users\\Lucas\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe /systemstartup"
"item"="Dropbox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Lucas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainmeter.lnk]
"path"="C:\\Users\\Lucas\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Rainmeter.lnk"
"backup"="C:\\Windows\\pss\\Rainmeter.lnk.Startup"
"backupExtension"=".Startup"
"command"="C:\\PROGRA~1\\RAINME~1\\RAINME~1.EXE "
"item"="Rainmeter"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\AdobeARMservice]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\AdobeFlashPlayerUpdateSvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\AMD External Events Utility]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Apple Mobile Device]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\avast! Antivirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\BEService]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Bonjour Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\CGVPNCliSrvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\CLPSLauncher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\cphs]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\DragonUpdater]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\ekrn]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\EpsonCustomerParticipation]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\EpsonScanSvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\FLEXnet Licensing Service 64]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\GeekBuddyRSP]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\gupdate]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\gupdatem]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\iPod Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\LMIGuardianSvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\LMIMaint]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\LogMeIn]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MBAMScheduler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MBAMService]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MozillaMaintenance]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\OpenVPNService]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\SkypeUpdate]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Steam Client Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\TeamViewer8]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\wsnm]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\wsnm_usbctrl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\WTabletServiceCon]


==== Startup Folders ======================

2014-03-17 23:37:33 1049 ----a-w- C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [03/11/2014 02:07 PM]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000Core.job --a------ [Undetermined Task]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000UA.job --a------ C:\Users\Lucas\AppData\Local\Facebook\Update\FacebookUpdate.exe [09/18/2013 07:12 PM]
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf29ad47bf989c.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [10/24/2014 04:15 PM]
C:\Windows\tasks\GoogleUpdateTaskMachineUA1ce7fc52c4d0d55.job --a------ [Undetermined Task]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000Core1cf272315e0e483.job --a------ C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe [09/01/2013 01:59 PM]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000UA1cecabbb27ddf70.job --a------ C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe [09/01/2013 01:59 PM]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\AdobeAAMUpdater-1.0-Lucas-PC-Lucas" [C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe]
"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000Core" [C:\Users\Lucas\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000UA" [C:\Users\Lucas\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore1cf29ad47bf989c" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA1ce7fc52c4d0d55" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000Core1cf272315e0e483" [C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000UA1cecabbb27ddf70" [C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe]
"C:\Windows\SysNative\tasks\Razer_Game_Booster_AutoUpdate" [C:\Program Files (x86)\Razer\AutoUpdate.exe]
"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]
"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Chromium Look ======================

Google Chrome Version: 27.0.1453.94 (Up to date, latest Stable version: 39.0.2171.95)
Google Chrome Version: 39.0.2171.95 (Up to date, latest Stable version: 39.0.2171.95)


Google Docs - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
Google Voice Search Hotword (Beta) - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn
YouTube - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
selector is not a valid CSS selector - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
Google Search - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Tampermonkey - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo
Material For Chrome - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gokahbgdhhcjfnjlfeiojfmgnoikpcco
Imgur to Gfy - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\idnninnhcleaikepmmomfnknbldalnjj
Reddit Enhancement Suite - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb
Google Wallet - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== IE Start and Search Settings ======================

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Uninstall List x64 ======================

4K Video Downloader 3.4 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\4K Video Downloader_is1]
7-Zip 9.20 (x64 edition) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{23170F69-40C1-2702-0920-000001000000}]
Adobe AIR [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A0087DDE-69D0-11E2-AD57-43CA6188709B}]
Adobe AIR [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR]
Adobe Creative Cloud [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Creative Cloud]
Adobe Flash Player 12 ActiveX [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX]
Adobe Flash Player 12 Plugin [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin]
Adobe Help Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AF37176A-78CA-545B-34EF-8B6A21514DD1}]
Adobe Help Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1]
Adobe Photoshop CC [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}]
Adobe Reader XI (11.0.05) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1033-7B44-AB0000000001}]
Adobe Shockwave Player 12.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Shockwave Player]
Akamai NetSession Interface [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Akamai]
AMD Accelerated Video Transcoding [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FCC4426F-0296-D30D-729C-E76C8E7252C7}]
AMD APP SDK Runtime [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{503F672D-6C84-448A-8F8F-4BC35AC83441}]
AMD Catalyst Control Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{10CB5DDD-38E1-2EB2-F62C-C1948A99943E}]
AMD Catalyst Install Manager [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}]
AMD Drag and Drop Transcoding [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{04573C2A-8756-E9F0-7878-C6029F6C7F25}]
AMD Media Foundation Decoders [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BD1BCEF8-5CD6-D8ED-7D36-31C2172076EA}]
AMD Wireless Display v3.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ED273D26-E354-1A5B-A0D0-CB5258D43BD2}]
Apple Application Support [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}]
Apple Mobile Device Support [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}]
Apple Software Update [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}]
Application Profiles [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}]
Arma 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 33900]
Arma 2: Operation Arrowhead [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 33930]
ASRock 3TB+ Unlocker v1.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ASRock 3TB+ Unlocker_is1]
ASRock eXtreme Tuner v0.1.250 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ASRock eXtreme Tuner_is1]
ASRock InstantBoot v1.29 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ASRock InstantBoot_is1]
ASRock RapidStart v1.0.6 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ASRock RapidStart_is1]
ASRock SmartConnect v1.0.6 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ASRock SmartConnect_is1]
ASRock XFast RAM v2.0.9 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ASRock XFast RAM_is1]
Assassin's Creed II [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 33230]
Autodesk Inventor 2013 Quick Uninstaller [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D25FF5C1-1764-469A-9794-69309387C193}]
Autodesk Inventor Professional 2013 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7F4DD591-1764-0001-0000-7107D70F3DB4}]
Autodesk Inventor Professional 2013 English Language Pack [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7F4DD591-1764-0001-1033-7107D70F3DB4}]
Autodesk Material Library 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{117EBEEB-5DB0-43C8-9FD6-DD583DB152DD}]
Autodesk Material Library Base Resolution Image Library 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{606E12B9-641F-4644-A22A-FF38AE980AFD}]
Autodesk Material Library Low Resolution Image Library 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{27C6C0A2-2EC9-4FEA-BE2B-659EAAC2C68C}]
Autodesk Sync [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}]
Bamboo Dock [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90DFD61B-8224-00C6-3D69-A983B60A394E}]
Bamboo Dock [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Bamboo Dock]
Bamboo Dock [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1]
Bamboo Tablets Tutorial [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6E0C3C3D-CF8A-4AEC-AD6C-B4486A96BE8E}]
Bandicam [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Bandicam]
Bandisoft MPEG-1 Decoder [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BandiMPEG1]
Batman: Arkham Asylum GOTY Edition [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 35140]
Battle.net [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Battle.net]
BattlEye for OA Uninstall [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BattlEye for OA]
Behaviors SDK (Windows Phone) for Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{594DB57D-58D1-4AA3-AE6C-BF99484F52F8}]
Behaviors SDK (Windows) for Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{28C7344F-E894-4CF5-8D05-EDC7ED71796C}]
Blade Symphony [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 225600]
Blend for Visual Studio Add-in for Adobe FXG Import [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{834B6E00-F509-40F2-A677-E86261184576}]
Blend for Visual Studio SDK for .NET 4.5 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37E53780-3944-4A6A-842F-727128E8616E}]
Blend for Visual Studio SDK for Silverlight 5 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0C03A66F-1FF0-45F9-8D67-0D806EBFFBA1}]
Bonjour [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}]
BUFFALO AirStation Bandwidth Selection Tool [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\UN900120]
Build Tools - amd64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CC1F74DF-058F-406C-BC7D-F14D6E5F7CBD}]
Build Tools - x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B255880F-8C5E-4FAF-8F9C-7DBA635B2615}]
Build Tools Language Resources - amd64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E43BBAEB-4914-44C6-88C0-E7A1DBD20A91}]
Build Tools Language Resources - x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D37FDF2F-8766-4BDF-A0E3-A60BDBB630ED}]
Call of Duty 4: Modern Warfare [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 7940]
Call of Duty: Black Ops II - Multiplayer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 202990]
Call of Duty: Black Ops II - Zombies [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 212910]
Call of Duty: Modern Warfare 2 - Multiplayer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 10190]
Call of Duty: Modern Warfare 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 10180]
Call of Duty: Modern Warfare 3 - Multiplayer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 42690]
Camtasia Studio 7 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}]
Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CB79256B-C0E0-40C6-8EB7-BDD796203581}]
Catalyst Control Center Graphics Previews Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1194740D-0DB8-A508-31BA-E722597B4516}]
Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EEB34D84-92A1-7BE3-6DB7-ABD1C4912D6B}]
Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1FB16E3B-3AFB-46CB-6E83-2F5A0CF4ED16}]
ccc-utility64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AEF57B06-B494-8180-AFC7-05EFB1DB2B64}]
CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4FF1533E-FF2C-A04A-25DD-A8AEC6FA106B}]
CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{92352C97-C657-DB89-5F3A-E8C3789D9C89}]
CCC Help Czech [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2E3A81FB-7952-F8CB-9AD5-50544E2F4838}]
CCC Help Danish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8D3A11D0-D925-FA0F-43F3-242E49975CD2}]
CCC Help Dutch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E297492A-E114-CAE0-502E-5F36C386DD30}]
CCC Help English [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E6533A85-ED92-F897-2B68-58AC3BD87F94}]
CCC Help Finnish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6343B6BA-F97F-B336-9ED8-FFD43776E84D}]
CCC Help French [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9CA5F712-9CAA-B3CB-02D3-7134DFC8801E}]
CCC Help German [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F3F340A5-64EC-AEEC-4BDF-DC537D390BF5}]
CCC Help Greek [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{046B79EE-7ED3-37A4-621A-FE297EF484C2}]
CCC Help Hungarian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BED96D0C-7743-3CE3-F7DF-A0A4475FBF2F}]
CCC Help Italian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A128A816-FD3F-990E-DD80-E1735BD718AE}]
CCC Help Japanese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED65BD75-CEF3-C0C2-9E9C-FA567484FF60}]
CCC Help Korean [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EBAC163A-588E-1E5A-3CE8-826E9A449244}]
CCC Help Norwegian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B88F2045-CF9A-996C-1670-6F7D65F1D18A}]
CCC Help Polish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6071CB80-DABC-B10D-F244-7F410FB3B150}]
CCC Help Portuguese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8EF39A9F-6A57-9706-86A5-9312D9ED8016}]
CCC Help Russian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4172E797-CE12-AC47-05B7-0E48BDB33E75}]
CCC Help Spanish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4428AEE6-FA5E-2913-8D12-B410E85E11AA}]
CCC Help Swedish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F1289D68-1C48-930F-51CF-577BDB371252}]
CCC Help Thai [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AFC9ECA9-6A4E-1370-98F3-002B63B5AF8E}]
CCC Help Turkish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{95545E55-3309-1929-FF41-2908A9706742}]
CCleaner [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner]
Cockatrice [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cockatrice]
Comodo Dragon [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Comodo Dragon]
Counter-Strike: Global Offensive [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 730]
Counter-Strike: Source [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 240]
CyberGhost VPN [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CyberGhost VPN_is1]
DayZ Commander [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B3653588-3AC0-4A1D-950F-D96531E84374}]
Disk Space Fan 4 4.5.4.152 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Disk Space Fan 4_is1]
Dropbox [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dropbox]
DWG TrueView 2013 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5783F2D7-B028-0409-0100-0060B0CE6BBA}]
DWG TrueView 2013 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\DWG TrueView 2013]
Eco Materials Adviser for Autodesk Inventor 2013 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{792A9A32-718A-40D1-9867-A903F76AE2F8}]
Entity Framework 6.1.1 Tools for Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{85253F13-EE42-4850-A3A5-79B90E92D7AC}]
Entity Framework Designer for Visual Studio 2012 - enu [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3F29268A-F53A-4387-9F2B-E9368A823178}]
EPSON Connect version 1.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\EPSON Connect_is1]
Epson Customer Participation [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{814FA673-A085-403C-9545-747FC1495069}]
Epson Event Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}]
Epson FAX Utility [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}]
EPSON Scan [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\EPSON Scanner]
EPSON WF-2540 Series Printer Uninstall [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\EPSON WF-2540 Series]
EpsonNet Print [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3E31400D-274E-4647-916C-2CACC3741799}]
Facebook Video Calling 3.1.0.521 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2091F234-EB58-4B80-8C96-8EB78C808CF7}]
FileZilla Client 3.7.4.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client]
Five Nights at Freddy's [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 319510]
Fraps (remove only) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fraps]
Garry's Mod [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 4000]
GeekBuddy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{17004FB0-9CFD-43DC-BB2D-E2BA612D98D0}]
Google Chrome [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome]
Google Drive [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}]
Google Talk Plugin [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0C5C1177-94C5-3EFB-A8BE-3F6AF1AF887F}]
Google Update Helper [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}]
Grand Theft Auto IV [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 12210]
Grooveshark [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Grooveshark]
Gyazo 1.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1]
Hearthstone [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Hearthstone]
HydraVision [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B7EC0338-EAE9-ABEA-D202-95025E66CC8C}]
Intel(R) Processor Graphics [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}]
Intel(R) USB 3.0 eXtensible Host Controller Driver [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}]
iTunes [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}]
Java 7 Update 67 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83217025FF}]
join.me [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\JoinMe]
Just Cause 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 8190]
Just Cause 2: Multiplayer Mod [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 259080]
KeyScrambler [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\KeyScrambler]
League of Legends [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{79BF4901-1EC4-4726-B3C2-A7859706C6E7}]
League of Legends [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\League of Legends 3.0.0]
LocalESPC [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62910715-63E3-0AB0-0B29-99140DE1C15E}]
LogMeIn [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CB7AF84A-1B7F-4C6B-8A58-EB7CDE48C23A}]
LogMeIn Hamachi [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F5CA78D9-B5E9-421E-8DF9-0B418BCBD563}]
LogMeIn Hamachi [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LogMeIn Hamachi]
LOLReplay [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LOLReplay]
Malwarebytes Anti-Malware version 2.0.4.1028 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Malwarebytes Anti-Malware_is1]
Microsoft .NET Framework 4 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}]
Microsoft .NET Framework 4.5 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}]
Microsoft .NET Framework 4.5 SDK [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4AE57014-05C4-4864-A13D-86517A7E1BA4}]
Microsoft .NET Framework 4.5.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}]
Microsoft .NET Framework 4.5.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033]
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D3517C62-68A5-37CF-92F7-93C029A89681}]
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6A0C6700-EA93-372C-8871-DCCF13D160A4}]
Microsoft .NET Framework 4.5.1 SDK [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{19A5926D-66E1-46FC-854D-163AA10A52D3}]
Microsoft Azure Shared Components for Visual Studio 2013 - v1.3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7A05796B-4FB2-4BAE-8CDC-28F7ABBC6EF3}]
Microsoft C++ REST SDK for Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4781443E-204D-4D98-8899-18A123C13B1E}]
Microsoft Expression Blend SDK for .NET 4 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9B3A1C97-A361-463E-8817-444F9F88CDFE}]
Microsoft Expression Blend SDK for Silverlight 4 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1C997E1C-5CE9-4AF3-AAA9-DC65E6090827}]
Microsoft Games for Windows - LIVE [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}]
Microsoft Games for Windows - LIVE Redistributable [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}]
Microsoft Help Viewer 1.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E5748D30-7E6D-3A8E-BFE6-C1D02C6DDABB}]
Microsoft Help Viewer 1.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Help Viewer 1.1]
Microsoft Help Viewer 2.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FEB375AB-6EEC-3929-8FAF-188ED81DD8B5}]
Microsoft Help Viewer 2.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Help Viewer 2.0]
Microsoft Help Viewer 2.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0398BFBC-991B-3275-9463-D2BF91B3C80B}]
Microsoft Help Viewer 2.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Help Viewer 2.1]
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C4BF6461-F4E4-4A41-BBE2-350766C9420D}]
Microsoft NuGet - Visual Studio Express 2013 for Windows Desktop [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D9706C72-EB6E-37CC-8E21-FCDC0F9F93EE}]
Microsoft Office Professional Plus 2010 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS]
Microsoft Portable Library Multi-Targeting Pack [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{205A8E25-7ABE-30AB-929E-80A63A7AFBE3}]
Microsoft Report Viewer Add-On for Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{73629F80-9DFE-421A-908B-C71FBD243E5A}]
Microsoft Security Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{23F2C78C-E131-4CA0-8F84-3473FB7728BA}]
Microsoft Security Essentials [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client]
Microsoft Silverlight [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}]
Microsoft SQL Server 2008 R2 Management Objects [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}]
Microsoft SQL Server 2012 Command Line Utilities [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{58FED865-4F13-408D-A5BF-996019C4B936}]
Microsoft SQL Server 2012 Data-Tier App Framework (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A6BA243E-85A3-4635-A269-32949C98AC7F}]
Microsoft SQL Server 2012 Data-Tier App Framework [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}]
Microsoft SQL Server 2012 Express LocalDB [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6C026A91-640F-4A23-8B68-05D589CC6F18}]
Microsoft SQL Server 2012 Management Objects (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}]
Microsoft SQL Server 2012 Management Objects [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}]
Microsoft SQL Server 2012 Native Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}]
Microsoft SQL Server 2012 T-SQL Language Service [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}]
Microsoft SQL Server 2012 Transact-SQL Compiler Service [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}]
Microsoft SQL Server 2012 Transact-SQL ScriptDom [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{54C5041B-0E91-4E92-8417-AAA12493C790}]
Microsoft SQL Server 2014 Express LocalDB [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}]
Microsoft SQL Server 2014 Management Objects (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}]
Microsoft SQL Server 2014 Management Objects [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2774595F-BC2A-4B12-A25B-0C37A37049B0}]
Microsoft SQL Server 2014 T-SQL Language Service [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{47D08E7A-92A1-489B-B0BF-415516497BCE}]
Microsoft SQL Server 2014 Transact-SQL ScriptDom [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{020CDFE0-C127-4047-B571-37C82396B662}]
Microsoft SQL Server Compact 3.5 SP2 ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3A9FC03D-C685-4831-94CF-4EDFD3749497}]
Microsoft SQL Server Compact 3.5 SP2 x64 ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}]
Microsoft SQL Server Compact 4.0 SP1 x64 ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{78909610-D229-459C-A936-25D92283D3FD}]
Microsoft SQL Server Data Tools - enu (11.1.20828.01) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F2B8233-35EE-4197-8C3B-EACCBF712029}]
Microsoft SQL Server Data Tools - enu (12.0.41012.0) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}]
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20828.01) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FAE0523E-08A4-4717-8E8E-6EC6F32CBE88}]
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6781FF9B-E87D-4A03-9373-A55A288B83FA}]
Microsoft SQL Server System CLR Types [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}]
Microsoft System CLR Types for SQL Server 2012 (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{05FF8209-C4F1-4C77-BC28-791653156D20}]
Microsoft System CLR Types for SQL Server 2012 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{070C38AC-05CE-43DF-9A20-141332F6AB2B}]
Microsoft System CLR Types for SQL Server 2014 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8C06D6DB-A391-4686-B050-99CC522A7843}]
Microsoft System CLR Types for SQL Server 2014 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4AEB505C-95E1-4964-9B64-8D27F3186D30}]
Microsoft Team Foundation Server 2013 Update 4 Object Model (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C0DE47ED-AFAF-3B17-8268-D5BFDEC404A8}]
Microsoft Team Foundation Server 2013 Update 4 Object Model Language Pack (x64) - ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{33B4C199-3463-30E8-B3D2-A0793DAC3607}]
Microsoft Visual Basic 2010 Express - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED784556-66AA-3F17-9B58-7246ACB5C7E4}]
Microsoft Visual Basic 2010 Express - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual Basic 2010 Express - ENU]
Microsoft Visual C# 2010 Express - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}]
Microsoft Visual C# 2010 Express - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual C# 2010 Express - ENU]
Microsoft Visual C++ x64 Libraries [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0B698858-DAB0-4F9E-A10A-125B274EDA06}]
Microsoft Visual C++ x86 Libraries [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A3B8D9FB-CA7D-4487-8CA2-A6A2C8AD1077}]
Microsoft Visual C++ 2005 Redistributable (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}]
Microsoft Visual C++ 2005 Redistributable (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}]
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}]
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7299052b-02a4-4627-81f2-1818da5d550d}]
Microsoft Visual C++ 2005 Redistributable [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A49F249F-0C91-497F-86DF-B2585E8E76B7}]
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8220EEFE-38CD-377E-8595-13398D740ACE}]
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}]
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9A25302D-30C0-39D9-BD6F-21E6EC160475}]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}]
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}]
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}]
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}]
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}]
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}]
Microsoft Visual C++ 2012 32bit Compilers - ENU Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{88707808-9420-4D55-8C94-622CF25A8750}]
Microsoft Visual C++ 2012 Core Libraries [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FFC6E93A-B9AD-3F20-9B06-EE20E24AAEAF}]
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15134cb0-b767-4960-a911-f2d16ae54797}]
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{a1909659-0a08-4554-8af1-2175904903a1}]
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{22154f09-719a-4619-bb71-5b3356999fbf}]
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{95716cce-fc71-413f-8ad5-56c2892d4b3a}]
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{37B8F9C7-03FB-3253-8781-2517C99D7C00}]
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AAFF73AD-3432-3575-ABD1-14E48EF2F4CB}]
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}]
Microsoft Visual C++ 2012 x86-x64 Compilers [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0B6F9FD2-E845-4938-B6EA-F643413F5BBF}]
Microsoft Visual C++ 2012 x86-x64 Compilers [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A1785BD4-3486-4E7E-8074-E3FC61B8F315}]
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B175520C-86A2-35A7-8619-86DC379688B9}]
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{77E2D875-FD9E-3DEE-9A84-C34FDECB4ECA}]
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}]
Microsoft Visual C++ 2013 32bit Compilers - ENU Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6C06FEE9-C64E-453F-B8A5-D9E9B79ED040}]
Microsoft Visual C++ 2013 Core Libraries [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{84D88F57-4130-30FE-A0B6-1E04428FE1F6}]
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{929FBD26-9020-399B-9A7A-751D61F0B942}]
Microsoft Visual C++ 2013 x64 Debug Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C596D608-3E74-3232-8CA5-DF1DCB9F10DE}]
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}]
Microsoft Visual C++ 2013 x86-x64 Compilers [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{678800C0-D94E-4513-89CB-478F2B781A0B}]
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}]
Microsoft Visual C++ 2013 x86 Debug Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E5CAE8D2-9F9F-3BEA-AA0F-B5B40611C704}]
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}]
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{14DD7530-CCD2-3798-B37D-3839ED6A441C}]
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BCA26999-EC22-3007-BB79-638913079C9A}]
Microsoft Visual Studio 2010 Service Pack 1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5AB7D739-1735-3A9E-BE73-C43507CB4E6F}]
Microsoft Visual Studio 2010 Service Pack 1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED780CA9-0687-3C12-B439-3369F224941F}]
Microsoft Visual Studio 2010 Service Pack 1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual Studio 2010 Service Pack 1]
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}]
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)]
Microsoft Visual Studio 2012 Express Prerequisites x64 - ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{30B7A7A6-D519-3332-BEB3-D105EFC7389A}]
Microsoft Visual Studio 2012 Preparation [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{09412B73-6159-40D6-B0B9-C11B30A7531E}]
Microsoft Visual Studio 2012 Shell (Minimum) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{800F484E-9D69-492D-B656-7BAA32586142}]
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{820C677A-41B2-48C3-8136-FEE35A052E73}]
Microsoft Visual Studio 2012 Shell (Minimum) Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{38FC6E9A-F719-431A-A83D-4C86D5FD6555}]
Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E818AE7C-244B-4A50-9C86-C0E4A8B69159}]
Microsoft Visual Studio 2013 Diagnostic Tools - amd64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7818198F-3A26-442D-B34D-1664D3ABC979}]
Microsoft Visual Studio 2013 Diagnostic Tools - x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8BD11F34-C26A-4E92-B2A2-4FFF5FC3FE67}]
Microsoft Visual Studio 2013 Express Prerequisites x64 - ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{60391499-BB97-3FC7-9F17-2BF560DCE231}]
Microsoft Visual Studio 2013 Preparation [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9E7DE17D-A9E2-4762-8C10-1E80F5976F4A}]
Microsoft Visual Studio 2013 Shell (Minimum) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5411060C-8F8C-393D-8D3B-26AF2C92FABB}]
Microsoft Visual Studio 2013 Shell (Minimum) Interop Assemblies [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AE937DBA-FEFD-3BFE-9860-0591C0F91D61}]
Microsoft Visual Studio 2013 Shell (Minimum) Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{985EF141-95DD-3934-8F23-7C2C4C61E5F7}]
Microsoft Visual Studio 2013 Team Explorer Language Pack - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{492FCC0B-45E1-383A-A2CF-9E7F305AC200}]
Microsoft Visual Studio 2013 XAML UI Designer - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66FFC445-6EB0-3D02-95D7-925E3050FFB8}]
Microsoft Visual Studio 2013 XAML UI Designer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B90F9678-82C0-32A3-996B-98AA7EA5D8F4}]
Microsoft Visual Studio Express 2012 for Windows Desktop - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{222C5507-AC43-388F-808E-2266EC57E043}]
Microsoft Visual Studio Express 2012 for Windows Desktop - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}]
Microsoft Visual Studio Express 2012 for Windows Desktop [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1BE2AFE6-209E-3862-AE45-DA9D3D21BD65}]
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1F1AA110-D758-30C1-A1B4-5484C72BCACE}]
Microsoft Visual Studio Express 2013 for Windows Desktop - ENU with Update 4 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{b8a9dbc1-1fd4-4103-a83b-a2896f193ea0}]
Microsoft Visual Studio Express 2013 for Windows Desktop [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{64484316-E4BA-38B3-8954-0358522A8D40}]
Microsoft Visual Studio Team Foundation Server 2012 Object Model [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F778BE47-F12E-36E1-8D6F-BD2FEF779F22}]
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - ENU [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A5FF48A6-9056-3C1B-99C4-804BACB34F9D}]
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6DAB46E3-D017-3E2B-85D8-F57A230384C0}]
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1B9BBB23-65CB-3AEE-BFC6-633E7CA299FD}]
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C1BE4600-7D15-3D1E-8AA2-B3241DB1D063}]
Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2C0CC01A-DDBC-3AED-AF18-E741242FD727}]
Microsoft WSE 3.0 Runtime [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}]
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 13th, 2014, 11:38 am

Microsoft_VC80_CRT_x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}]
Microsoft_VC90_CRT_x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{08D2E121-7F6A-43EB-97FD-629B44903403}]
MouseFIGHTER [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AE51BF89-81D8-4CCA-A1D5-D6E242F3A141}]
MSVCRT Redists [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A528BDDE-9C9F-11E2-9F0C-F04DA23A5C58}]
MSXML 4.0 SP2 (KB954430) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}]
MSXML 4.0 SP2 (KB973688) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}]
Nidhogg [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 94400]
No-IP DUC [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NoIPDUC]
Notepad++ [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++]
NVIDIA PhysX [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}]
Open Broadcaster Software [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Open Broadcaster Software]
OpenVPN 2.2.2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\OpenVPN]
Origin [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Origin]
osu [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90de9437-2739-41d3-8dda-b380fdae40a0}]
Paint.NET v3.5.11 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{72EF03F5-0507-4861-9A44-D99FD4C41418}]
PDF Settings CC [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1FBAE18D-4DE4-47AA-83EC-D1B046F262DC}]
pidgin-otr 4.0.0-1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\pidgin-otr]
Pidgin [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Pidgin]
PowreShellIntegration.Notifications [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED8DFB38-C87B-42B3-A33E-B20DF935C055}]
Prerequisites for SSDT [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{21373064-AD95-48DB-A32E-0D9E08EF7355}]
Prerequisites for SSDT [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}]
Psi (remove only) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Psi]
Python 2.7.1 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{32939827-d8e5-470a-b126-870db3c69fdf}]
Python Tools Redirection Template [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C6028E83-4C47-459F-9EDC-7D1412CBCD97}]
QuickTime 7 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}]
RaidCall [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\RaidCall]
Rainmeter [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Rainmeter]
Raptr [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
Razer Game Booster [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Razer Game Booster_is1]
Razer Synapse 2.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}]
Realtek High Definition Audio Driver [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}]
RocketDock 1.3.5 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\RocketDock_is1]
Rust [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 252490]
Sandstone Player [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SandstonePlayer]
Skype Click to Call [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}]
SkypeT 6.21 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}]
Spotify [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Spotify]
Star Wars: The Old Republic [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}]
StarCraft II [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\StarCraft II]
Steam [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{048298C9-A4D3-490B-9FF9-AB023A9238F3}]
StepMania v5.0 beta 3 (remove only) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\StepMania 5]
swMSM [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{612C34C7-5E90-47D8-9B5C-0F717DD82726}]
T.E.C. 3001 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 280910]
Team Explorer for Microsoft Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C9E7751E-88ED-36CF-B610-71A1D262E906}]
TeamSpeak 3 Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TeamSpeak 3 Client]
TeamViewer 8 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\TeamViewer 8]
Theme Manager [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C218ABCD-2C64-49D4-A891-83BD007D55D5}]
Trials Evolution Gold Edition [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 220160]
TypeScript Power Tool [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6098D454-CB7B-44C2-8615-D869FD9655C7}]
TypeScript Tools for Microsoft Visual Studio 2013 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0E4A9B1A-12D2-4827-BE61-44DBD72797FB}]
U2bviews Software [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FEAF4197-BC22-467A-994A-B72E74DF57E2}]
Unity Web Player [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer]
Update for Microsoft Visual Studio 2012 (KB2781514) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{56ef8912-352f-4fab-9c73-6f1c92a7127f}]
Update for Microsoft Visual Studio 2013 (KB2932965) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7dbba119-718a-4f68-b33e-454dc8aa5faf}]
Uplay [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Uplay]
VBA (2627.01) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}]
Virtual Audio Cable 4.14 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Virtual Audio Cable 4.14]
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{112C23F2-C036-4D40-BED4-0CB47BF5555C}]
Visual Studio 2012 Update 4 (KB2707250) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{312d9252-c71c-4c84-b171-f4ad46e22098}]
Visual Studio 2013 Update 4 (KB2829760) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{53d408db-eb91-43fb-9d8f-167681c19763}]
Visual Studio Extensions for Windows Library for JavaScript [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7AE61976-6FE2-4B65-9E1C-4DE44288772B}]
VLC media player [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player]
VMware View Client [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D5A1DA10-4A73-49A3-9C8A-C8CE9797DBBE}]
VS Update core components [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9F7DE660-6BFE-3BA2-A93D-4F13BD13E10B}]
Wacom [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pen Tablet Driver]
War of the Vikings Early Access [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Steam App 234530]
WebTablet FB Plugin 32 bit [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wacom WebTabletPlugin for Internet Explorer and Netscape]
WebTablet FB Plugin 64 bit [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wacom WebTabletPlugin for Internet Explorer and Netscape]
Winamp [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Winamp]
WinDirStat 1.1.2 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinDirStat]
Windows Live ID Sign-in Assistant [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9B48B0AC-C813-4174-9042-476A887592C7}]
Windows Software Development Kit [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5D5CFAD6-9F93-8C63-3EB0-B6A0D3D4BD12}]
Windows Software Development Kit [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{984022F2-9BCA-A41D-6A38-1AE658F01415}]
Windows Software Development Kit DirectX x64 Remote [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5247E16E-BCF8-95AB-1653-B3F8FBF8B3F1}]
Windows Software Development Kit DirectX x64 Remote [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B74B199A-EDD4-B657-E055-327D454402D2}]
Windows Software Development Kit DirectX x86 Remote [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A1CB8286-CFB3-A985-D799-721A0F2A27F3}]
Windows Software Development Kit DirectX x86 Remote [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A6030DAD-1600-F767-C8DD-C722ADFE8FBC}]
Windows Software Development Kit for Windows Store Apps [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{37464E70-B0B9-9DFF-649A-CBE169BAD657}]
Windows Software Development Kit for Windows Store Apps [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99FCCA2B-F1FD-E66E-E3B9-AA57FBBF2E66}]
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{27EF252D-800C-ED42-9904-459FE0046225}]
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{96F4525A-470D-F15C-796E-58D9988C3E5F}]
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{42F61556-29ED-8122-F39E-6F04EA5FF279}]
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{56AD3004-0B49-967F-F682-B05650B61A78}]
Windows XP Targeting with C++ [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F361FE04-789E-42F3-BBAB-E7B380AA5E06}]
XFastUSB [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\XFastUSB]

==== HijackThis Entries ======================

F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Razer Synapse] "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Lucas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
O4 - HKCU\..\Run: [LightShot] C:\Users\Lucas\AppData\Local\Skillbrains\lightshot\Lightshot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Lucas\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Open Client to monitor &1 - C:\Windows\web\AOpenClient.htm
O8 - Extra context menu item: Open Client to monitor &7 - C:\Windows\web\AOpenClient.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Razer Game Scanner (Razer Game Scanner Service) - Unknown owner - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Silent Runners ======================

"Silent Runners.vbs", revision 69.2, http://www.silentrunners.org/
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
ASRockXTU = (empty string) [file not found]
zASRockInstantBoot = (empty string) [file not found]
AdobeBridge = (empty string) [file not found]
Spotify Web Helper = "C:\Users\Lucas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [file not found]
Google Update = "C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe" /c [Google Inc.]
HydraVisionDesktopManager = "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [AMD]
LightShot = C:\Users\Lucas\AppData\Local\Skillbrains\lightshot\Lightshot.exe [file not found]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
MSC = "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [MS]

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ {++}
QuickTime Task = "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [Apple Inc.]
Razer Synapse = "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe" [null data]
iTunesHelper = "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [Apple Inc.]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\(Default) = (no title provided)
-> {HKLM...CLSID} = Groove GFS Browser Helper
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Browser Helper
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{9030D464-4C02-4ABF-8ECC-5164760863C6}\(Default) = (no title provided)
-> {HKLM...CLSID} = Windows Live ID Sign-in Helper
\InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [MS]
-> {HKLM...Wow...CLSID} = Windows Live ID Sign-in Helper
\InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [MS]

{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\(Default) = SkypeIEPluginBHO
-> {HKLM...CLSID} = Skype Click to Call for Internet Explorer
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [MS]
-> {HKLM...Wow...CLSID} = Skype Click to Call for Internet Explorer
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [MS]

{B4F3A835-0E21-4959-BA22-42B3008E02FF}\(Default) = URLRedirectionBHO
-> {HKLM...CLSID} = Office Document Cache Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [MS]
-> {HKLM...Wow...CLSID} = Office Document Cache Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [MS]

{DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided)
-> {HKLM...CLSID} = Java(tm) Plug-In 2 SSV Helper
\InProcServer32\(Default) = C:\Program Files\Java\jre7\bin\jp2ssv.dll [file not found]
-> {HKLM...Wow...CLSID} = Java(tm) Plug-In 2 SSV Helper
\InProcServer32\(Default) = C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [Oracle Corporation]

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\(Default) = (no title provided)
-> {HKLM...CLSID} = Groove GFS Browser Helper
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Browser Helper
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM...Wow...CLSID} = Java(tm) Plug-In SSV Helper
\InProcServer32\(Default) = C:\Program Files (x86)\Java\jre7\bin\ssv.dll [Oracle Corporation]

{9030D464-4C02-4ABF-8ECC-5164760863C6}\(Default) = (no title provided)
-> {HKLM...CLSID} = Windows Live ID Sign-in Helper
\InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [MS]
-> {HKLM...Wow...CLSID} = Windows Live ID Sign-in Helper
\InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [MS]

{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\(Default) = SkypeIEPluginBHO
-> {HKLM...CLSID} = Skype Click to Call for Internet Explorer
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [MS]
-> {HKLM...Wow...CLSID} = Skype Click to Call for Internet Explorer
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [MS]

{B4F3A835-0E21-4959-BA22-42B3008E02FF}\(Default) = URLRedirectionBHO
-> {HKLM...CLSID} = Office Document Cache Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [MS]
-> {HKLM...Wow...CLSID} = Office Document Cache Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [MS]

{DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided)
-> {HKLM...CLSID} = Java(tm) Plug-In 2 SSV Helper
\InProcServer32\(Default) = C:\Program Files\Java\jre7\bin\jp2ssv.dll [file not found]
-> {HKLM...Wow...CLSID} = Java(tm) Plug-In 2 SSV Helper
\InProcServer32\(Default) = C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [Oracle Corporation]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\

AccExtIco1\(Default) = {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}
-> {HKLM...CLSID} = AccExtIco1 Class
\InProcServer32\(Default) = C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll [null data]

AccExtIco2\(Default) = {853B7E05-C47D-4985-909A-D0DC5C6D7303}
-> {HKLM...CLSID} = AccExtIco2 Class
\InProcServer32\(Default) = C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll [null data]

AccExtIco3\(Default) = {42D38F2E-98E9-4382-B546-E24E4D6D04BB}
-> {HKLM...CLSID} = AccExtIco3 Class
\InProcServer32\(Default) = C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll [null data]

AutoCAD Digital Signatures Icon Overlay Handler\(Default) = {36A21736-36C2-4C11-8ACB-D4136F2B57BD}
-> {HKLM...CLSID} = AcSignIcon
\InProcServer32\(Default) = C:\Windows\system32\AcSignIcon.dll [Autodesk, Inc.]

DropboxExt1\(Default) = {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

DropboxExt2\(Default) = {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

DropboxExt3\(Default) = {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

DropboxExt4\(Default) = {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

GDriveBlacklistedOverlay\(Default) = {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}
-> {HKLM...CLSID} = Google Drive Shell extension
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [Google]

GDriveSharedEditOverlay\(Default) = {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}
-> {HKLM...CLSID} = Google Drive Shell extension
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [Google]

GDriveSharedOverlay\(Default) = {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}
-> {HKLM...CLSID} = Google Drive Shell extension
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [Google]

GDriveSharedViewOverlay\(Default) = {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}
-> {HKLM...CLSID} = Google Drive Shell extension
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [Google]

GDriveSyncedOverlay\(Default) = {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}
-> {HKLM...CLSID} = Google Drive Shell extension
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [Google]

GDriveSyncingOverlay\(Default) = {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}
-> {HKLM...CLSID} = Google Drive Shell extension
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [Google]

Groove Explorer Icon Overlay 1 (GFS Unread Stub)\(Default) = {99FD978C-D287-4F50-827F-B2C658EDA8E7}
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 2 (GFS Stub)\(Default) = {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)\(Default) = {920E6DB1-9907-4370-B3A0-BAFC03D81399}
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 3 (GFS Folder)\(Default) = {16F3DD56-1AF5-4347-846D-7C10C4192619}
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 4 (GFS Unread Mark)\(Default) = {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\

DropboxExt1\(Default) = {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...Wow...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll [Dropbox, Inc.]

DropboxExt2\(Default) = {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...Wow...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll [Dropbox, Inc.]

DropboxExt3\(Default) = {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...Wow...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll [Dropbox, Inc.]

Groove Explorer Icon Overlay 1 (GFS Unread Stub)\(Default) = {99FD978C-D287-4F50-827F-B2C658EDA8E7}
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 2 (GFS Stub)\(Default) = {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)\(Default) = {920E6DB1-9907-4370-B3A0-BAFC03D81399}
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 3 (GFS Folder)\(Default) = {16F3DD56-1AF5-4347-846D-7C10C4192619}
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

Groove Explorer Icon Overlay 4 (GFS Unread Mark)\(Default) = {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EDD-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EDE-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EDF-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

{FB314EE0-A251-47B7-93E1-CDD82E34AF8B} = DropboxExt
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

{5E2121EE-0300-11D4-8D3B-444553540000} = Catalyst Context Menu extension
-> {HKLM...CLSID} = SimpleShlExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [Advanced Micro Devices, Inc.]

{8A0BC933-7552-42E2-A228-3BE055777227} = AutoCAD DWG Column Handler
-> {HKLM...CLSID} = AcColumnHandler
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [Autodesk]

{5800AD5B-72C1-477B-9A08-CA112DF06D97} = AutoCAD DWG InfoTip Handler
-> {HKLM...CLSID} = AcInfoTipHandler
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [Autodesk]

{36A21736-36C2-4C11-8ACB-D4136F2B57BD} = AutoCAD Digital Signatures Icon Overlay Handler
-> {HKLM...CLSID} = AcSignIcon
\InProcServer32\(Default) = C:\Windows\system32\AcSignIcon.dll [Autodesk, Inc.]

{AC1DB655-4F9A-4c39-8AD2-A65324A4C446} = Autodesk Drawing Preview
-> {HKLM...CLSID} = ACTHUMBNAIL
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcThumbnail16.dll [Autodesk, Inc.]

{264B5E2D-1329-4569-9D00-8AB8F3DF9C3E} = Autodesk Dgn File Preview
-> {HKLM...CLSID} = AcDgnImageExtractor
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\AcDgnCOM19.dll [Autodesk]

{42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\MSOHEVI.DLL [MS]

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} = Microsoft Office Metadata Handler
-> {HKLM...CLSID} = Microsoft Office Metadata Handler
\InProcServer32\(Default) = E:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll [MS]

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} = Microsoft Office Thumbnail Handler
-> {HKLM...CLSID} = Microsoft Office Thumbnail Handler
\InProcServer32\(Default) = E:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll [MS]

{3D60EDA7-9AB4-4DA8-864C-D9B5F2E7281D} = Groove Namespace Extension
-> {HKLM...CLSID} = Workspaces
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{0875DCB6-C686-4243-9432-ADCCF0B9F2D7} = Microsoft OneNote Namespace Extension for Windows Desktop Search
-> {HKLM...CLSID} = Microsoft OneNote Namespace Extension for Windows Desktop Search
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\ONFILTER.DLL [MS]

{506F4668-F13E-4AA1-BB04-B43203AB3CC0} = {506F4668-F13E-4AA1-BB04-B43203AB3CC0}
-> {HKLM...CLSID} = ImageExtractorShellExt Class
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\VISSHE.DLL [MS]

{D66DC78C-4F61-447F-942B-3FB6980118CF} = {D66DC78C-4F61-447F-942B-3FB6980118CF}
-> {HKLM...CLSID} = CInfoTipShellExt Class
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\VISSHE.DLL [MS]

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} = Groove GFS Browser Helper
-> {HKLM...CLSID} = Groove GFS Browser Helper
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{6C467336-8281-4E60-8204-430CED96822D} = Groove GFS Context Menu Handler
-> {HKLM...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} = Groove GFS Explorer Bar
-> {HKLM...CLSID} = Groove Folder Synchronization
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{16F3DD56-1AF5-4347-846D-7C10C4192619} = Groove Explorer Icon Overlay 3 (GFS Folder)
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook
-> {HKLM...CLSID} = Groove GFS Stub Execution Hook
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{A449600E-1DC6-4232-B948-9BD794D62056} = Groove GFS Stub Icon Handler
-> {HKLM...CLSID} = Groove GFS Stub Icon Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} = Groove Explorer Icon Overlay 2 (GFS Stub)
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{920E6DB1-9907-4370-B3A0-BAFC03D81399} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} = Groove Explorer Icon Overlay 4 (GFS Unread Mark)
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{99FD978C-D287-4F50-827F-B2C658EDA8E7} = Groove Explorer Icon Overlay 1 (GFS Unread Stub)
-> {HKLM...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub)
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{387E725D-DC16-4D76-B310-2C93ED4752A0} = Groove XML Icon Handler
-> {HKLM...CLSID} = Groove XML Icon Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

{7CCA70DB-DE7A-4FB7-9B2B-52E2335A3B5A} = Nameext
-> {HKLM...CLSID} = Enterprise Projects
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\NAMEEXT.DLL [MS]

{0006F045-0000-0000-C000-000000000046} = Microsoft Outlook Custom Icon Handler
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\OLKFSTUB.DLL [MS]

{872A9397-E0D6-4e28-B64D-52B8D0A7EA35} = Display CPL Extension
-> {HKLM...CLSID} = DisplayCplExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiama64.dll [Advanced Micro Devices, Inc.]
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} = iTunes
-> {HKLM...CLSID} = iTunes
\InProcServer32\(Default) = C:\Program Files\iTunes\iTunesMiniPlayer.dll [Apple Inc.]

{09A47860-11B0-4DA5-AFA5-26D86198A780} = EPP
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = C:\PROGRA~1\MICROS~2\shellext.dll [MS]

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

{42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler
-> {HKLM...Wow...CLSID} = (no title provided)
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\msohevi.dll [MS]

{3D60EDA7-9AB4-4DA8-864C-D9B5F2E7281D} = Groove Namespace Extension
-> {HKLM...Wow...CLSID} = Workspaces
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{0875DCB6-C686-4243-9432-ADCCF0B9F2D7} = Microsoft OneNote Namespace Extension for Windows Desktop Search
-> {HKLM...Wow...CLSID} = Microsoft OneNote Namespace Extension for Windows Desktop Search
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\ONFILTER.DLL [MS]

{506F4668-F13E-4AA1-BB04-B43203AB3CC0} = {506F4668-F13E-4AA1-BB04-B43203AB3CC0}
-> {HKLM...Wow...CLSID} = ImageExtractorShellExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL [MS]

{D66DC78C-4F61-447F-942B-3FB6980118CF} = {D66DC78C-4F61-447F-942B-3FB6980118CF}
-> {HKLM...Wow...CLSID} = CInfoTipShellExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\VISSHE.DLL [MS]

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} = Groove GFS Browser Helper
-> {HKLM...Wow...CLSID} = Groove GFS Browser Helper
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{6C467336-8281-4E60-8204-430CED96822D} = Groove GFS Context Menu Handler
-> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} = Groove GFS Explorer Bar
-> {HKLM...Wow...CLSID} = Groove Folder Synchronization
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{16F3DD56-1AF5-4347-846D-7C10C4192619} = Groove Explorer Icon Overlay 3 (GFS Folder)
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 3 (GFS Folder)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook
-> {HKLM...Wow...CLSID} = Groove GFS Stub Execution Hook
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{A449600E-1DC6-4232-B948-9BD794D62056} = Groove GFS Stub Icon Handler
-> {HKLM...Wow...CLSID} = Groove GFS Stub Icon Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} = Groove Explorer Icon Overlay 2 (GFS Stub)
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2 (GFS Stub)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{920E6DB1-9907-4370-B3A0-BAFC03D81399} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} = Groove Explorer Icon Overlay 4 (GFS Unread Mark)
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 4 (GFS Unread Mark)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{99FD978C-D287-4F50-827F-B2C658EDA8E7} = Groove Explorer Icon Overlay 1 (GFS Unread Stub)
-> {HKLM...Wow...CLSID} = Groove Explorer Icon Overlay 1 (GFS Unread Stub)
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{387E725D-DC16-4D76-B310-2C93ED4752A0} = Groove XML Icon Handler
-> {HKLM...Wow...CLSID} = Groove XML Icon Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

{00020D75-0000-0000-C000-000000000046} = Microsoft Outlook Desktop Icon Handler
-> {HKLM...Wow...CLSID} = Microsoft Outlook
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\MLSHEXT.DLL [MS]

{0006F045-0000-0000-C000-000000000046} = Microsoft Outlook Custom Icon Handler
-> {HKLM...Wow...CLSID} = Outlook File Icon Extension
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\OLKFSTUB.DLL [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\

<<!>> {B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook
-> {HKLM...CLSID} = Groove GFS Stub Execution Hook
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\

<<!>> {B5A7F190-DDA6-4420-B3BA-52453494E6CD} = Groove GFS Stub Execution Hook
-> {HKLM...CLSID} = Groove GFS Stub Execution Hook
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

HKLM\SYSTEM\CurrentControlSet\Control\Lsa\
<<!>> (wsauth [VMware, Inc.]) Security Packages = kerberos|msv1_0|schannel|wdigest|tspkg|pku2u|wsauth|livessp

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\

{65CD7F9B-E8F3-4bb0-82EB-6F6875B745DF}\(Default) = LogMeInCredProv
-> {HKLM...CLSID} = LogMeInCredProv
\InProcServer32\(Default) = LMIinit.dll [LogMeIn, Inc.]

HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\

<<!>> text/xml\CLSID = {807573E5-5146-11D5-A672-00B0D022E945}
-> {HKLM...CLSID} = Microsoft Office InfoPath XML Mime Filter
\InProcServer32\(Default) = E:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL [MS]

HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\

<<!>> skypec2c\CLSID = {91774881-D725-4E58-B298-07617B9B86A8}
-> {HKLM...CLSID} = Skype Click to Call for IE Pluggable Protocol
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [MS]

HKCU\Software\Classes\*\shellex\ContextMenuHandlers\

DropboxExt\(Default) = {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]
-> {HKCU...Wow...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll [Dropbox, Inc.]

HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\

AccExt\(Default) = {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4}
-> {HKLM...CLSID} = AccExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll [null data]

AcShellExtension.AcContextMenuHandler\(Default) = {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202}
-> {HKLM...CLSID} = AcContextMenuHandler
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [Autodesk]

ANotepad++64\(Default) = {B298D29A-A6ED-11DE-BA8C-A68E55D89593}
-> {HKLM...CLSID} = ANotepad++64
\InProcServer32\(Default) = E:\Program Files\Notepad++\NppShell_05.dll [null data]

EPP\(Default) = {09A47860-11B0-4DA5-AFA5-26D86198A780}
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = C:\PROGRA~1\MICROS~2\shellext.dll [MS]

GDContextMenu\(Default) = {BB02B294-8425-42E5-983F-41A1FA970CD6}
-> {HKLM...CLSID} = GDContextMenu Class
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\contextmenu64.dll [Google]

XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D}
-> {HKLM...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

HKLM\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\

GB3ContextMenu\(Default) = {3A488FE8-9916-4F36-BDFF-3DED559142E5}
-> {HKLM...CLSID} = GBContextMenu Class
\InProcServer32\(Default) = C:\Program Files (x86)\Razer\GBV3ContextMenu.dll [null data]

MBAMShlExt\(Default) = {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
-> {HKLM...CLSID} = MBAMShlExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [Malwarebytes Corporation]

XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D}
-> {HKLM...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

HKCU\Software\Classes\Directory\shellex\ContextMenuHandlers\

DropboxExt\(Default) = {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]
-> {HKCU...Wow...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll [Dropbox, Inc.]

HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\

EPP\(Default) = {09A47860-11B0-4DA5-AFA5-26D86198A780}
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = C:\PROGRA~1\MICROS~2\shellext.dll [MS]

GDContextMenu\(Default) = {BB02B294-8425-42E5-983F-41A1FA970CD6}
-> {HKLM...CLSID} = GDContextMenu Class
\InProcServer32\(Default) = C:\Program Files (x86)\Google\Drive\contextmenu64.dll [Google]

XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D}
-> {HKLM...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

HKLM\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\

FileZilla3CopyHook\(Default) = {DB70412E-EEC9-479C-BBA9-BE36BFDDA41B}
-> {HKLM...CLSID} = FileZilla 3 Shell Extension
\InProcServer32\(Default) = C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll [null data]
-> {HKLM...Wow...CLSID} = FileZilla 3 Shell Extension
\InProcServer32\(Default) = C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll [null data]

HKCU\Software\Classes\Directory\Background\shellex\ContextMenuHandlers\

DropboxExt\(Default) = {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}
-> {HKCU...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll [Dropbox, Inc.]
-> {HKCU...Wow...CLSID} = DropboxExt
\InProcServer32\(Default) = C:\Users\Lucas\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll [Dropbox, Inc.]

HKLM\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\

ACE\(Default) = {5E2121EE-0300-11D4-8D3B-444553540000}
-> {HKLM...CLSID} = SimpleShlExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [Advanced Micro Devices, Inc.]

igfxcui\(Default) = {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}
-> {HKLM...CLSID} = GraphicsShellExt Class
\InProcServer32\(Default) = C:\Windows\system32\igfxpph.dll [Intel Corporation]

XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D}
-> {HKLM...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\

{8A0BC933-7552-42E2-A228-3BE055777227}\(Default) = AutoCAD DWG column info
-> {HKLM...CLSID} = AcColumnHandler
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [Autodesk]

{9F2C5BFD-3CB1-419F-9F5F-90B32ADD5BA8}\(Default) = AdpShellExt
-> {HKLM...CLSID} = AdpShellExt Class
\InProcServer32\(Default) = C:\Program Files\Common Files\Autodesk Shared\Shell\AdpWShellExt.dll [Autodesk, Inc.]

{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = PDF Column Info
-> {HKLM...Wow...CLSID} = PDF Shell Extension
\InProcServer32\(Default) = C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll [Adobe Systems, Inc.]

HKCU\Software\Classes\Folder\shellex\ContextMenuHandlers\

InventorMenu\(Default) = {6FDE7A70-351B-11d6-988B-0010B57A8BB7}
-> {HKCU...CLSID} = Autodesk Inventor Part
\InProcServer32\(Default) = E:\Program Files\Autodesk\Inventor 2013\Bin\DtBridge.dll [Autodesk, Inc.]

HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\

AccExt\(Default) = {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4}
-> {HKLM...CLSID} = AccExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll [null data]

MBAMShlExt\(Default) = {57CE581A-0CB6-4266-9CA0-19364C90A0B3}
-> {HKLM...CLSID} = MBAMShlExt Class
\InProcServer32\(Default) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [Malwarebytes Corporation]

XXX Groove GFS Context Menu Handler XXX\(Default) = {6C467336-8281-4E60-8204-430CED96822D}
-> {HKLM...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]
-> {HKLM...Wow...CLSID} = Groove GFS Context Menu Handler
\InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]


Default executables:
--------------------

.scr
HKCU\Software\Classes\.scr\(Default) = DWGTrueViewScriptFile
HKCU\Software\Classes\DWGTrueViewScriptFile\(Default) = DWG TrueView Script
HKCU\Software\Classes\DWGTrueViewScriptFile\shell\open\command\(Default) = C:\Windows\system32\notepad.exe "%1" [MS]


Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\

DisableRegistryTools = (REG_DWORD) dword:0x00000000
{User Configuration|Administrative Templates|System|
Prevent access to registry editing tools}

DisableTaskMgr = (REG_DWORD) dword:0x00000000
{unrecognized setting}


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
Wallpaper = C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg


Windows Portable Device AutoPlay Handlers
-----------------------------------------

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\

BridgeCS6ImportMediaOnArrival\
Provider = Adobe Bridge CS6
InvokeProgID = Adobe.adobebridgeCS6
InvokeVerb = launch
HKLM\SOFTWARE\Classes\Adobe.adobebridgeCS6\shell\launch\command\(Default) = E:\Adobe\Adobe Bridge CS6 (64 Bit)\bridgeproxy.exe -v %1 [file not found]

iTunesBurnCDOnArrival\
Provider = iTunes
InvokeProgID = iTunes.BurnCD
InvokeVerb = burn
HKLM\SOFTWARE\Classes\iTunes.BurnCD\shell\burn\command\(Default) = "C:\Program Files (x86)\iTunes\iTunes.exe" /AutoPlayBurn "%L" [Apple Inc.]

iTunesImportSongsOnArrival\
Provider = iTunes
InvokeProgID = iTunes.ImportSongsOnCD
InvokeVerb = import
HKLM\SOFTWARE\Classes\iTunes.ImportSongsOnCD\shell\import\command\(Default) = "C:\Program Files (x86)\iTunes\iTunes.exe" /AutoPlayImportSongs "%L" [Apple Inc.]

iTunesPlaySongsOnArrival\
Provider = iTunes
InvokeProgID = iTunes.PlaySongsOnCD
InvokeVerb = play
HKLM\SOFTWARE\Classes\iTunes.PlaySongsOnCD\shell\play\command\(Default) = "C:\Program Files (x86)\iTunes\iTunes.exe" /playCD "%L" [Apple Inc.]

iTunesShowSongsOnArrival\
Provider = iTunes
InvokeProgID = iTunes.ShowSongsOnCD
InvokeVerb = showsongs
HKLM\SOFTWARE\Classes\iTunes.ShowSongsOnCD\shell\showsongs\command\(Default) = "C:\Program Files (x86)\iTunes\iTunes.exe" /AutoPlayShowSongs "%L" [Apple Inc.]

MSPlayCDAudioOnArrival\
Provider = @wmploc.dll,-6502
InvokeProgID = WMP.AudioCD
InvokeVerb = play
HKLM\SOFTWARE\Classes\WMP.AudioCD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /device:AudioCD "%L" [MS]

MSPlayDVDMovieOnArrival\
Provider = @wmploc.dll,-6502
InvokeProgID = WMP.DVD
InvokeVerb = play
HKLM\SOFTWARE\Classes\WMP.DVD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:DVD "%L" [MS]

MSPlaySuperVideoCDMovieOnArrival\
Provider = @wmploc.dll,-6502
InvokeProgID = WMP.VCD
InvokeVerb = play
HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L" [MS]

MSPlayVideoCDMovieOnArrival\
Provider = @wmploc.dll,-6502
InvokeProgID = WMP.VCD
InvokeVerb = play
HKLM\SOFTWARE\Classes\WMP.VCD\shell\play\command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:4 /device:VCD "%L" [MS]

MSWMPBurnCDOnArrival\
Provider = @wmploc.dll,-6502
InvokeProgID = WMP.BurnCD
InvokeVerb = Burn
HKLM\SOFTWARE\Classes\WMP.BurnCD\shell\Burn\Command\(Default) = "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:3 /Task:CDWrite /Device:"%L" [MS]

VLCPlayCDAudioOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.CDAudio
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" --started-from-file cdda:///%1 [VideoLAN]

VLCPlayDVDAudioOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.OPENFolder
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.OPENFolder\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" %1 [VideoLAN]

VLCPlayDVDMovieOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.DVDMovie
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" --started-from-file dvd:///%1 [VideoLAN]

VLCPlayMusicFilesOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.OPENFolder
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.OPENFolder\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" %1 [VideoLAN]

VLCPlaySVCDMovieOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.SVCDMovie
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.SVCDMovie\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" --started-from-file vcd:///%1 [VideoLAN]

VLCPlayVCDMovieOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.VCDMovie
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.VCDMovie\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" --started-from-file vcd:///%1 [VideoLAN]

VLCPlayVideoFilesOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.OPENFolder
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.OPENFolder\shell\Open\command\(Default) = "E:\Program Files\VLC Media Player\VLC\vlc.exe" %1 [VideoLAN]

WIA_{1E779AB8-55B0-4D3F-90F8-D5856AC2C359}\
Provider = EPSON Scan
CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24}
InitCmdLine = /WiaCmd;C:\Windows\twain_32\escndv\escndv.exe /StiDevice:%1 /StiEvent:%2;
-> {HKLM...CLSID} = WPDShextAutoplay
\LocalServer32\(Default) = C:\Windows\system32\WPDShextAutoplay.exe [MS]

WIA_{F05B9061-C9CF-434D-B9D1-8B8317C6067F}\
Provider = Epson Event Manager
CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24}
InitCmdLine = /WiaCmd;C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe /StiDevice:%1 /StiEvent:%2;
-> {HKLM...CLSID} = WPDShextAutoplay
\LocalServer32\(Default) = C:\Windows\system32\WPDShextAutoplay.exe [MS]

WinampMTPHandler\
Provider = Winamp
ProgID = Shell.HWEventHandlerShellExecute
InitCmdLine = C:\Program Files (x86)\Winamp\winamp.exe
HKLM\SOFTWARE\Classes\Shell.HWEventHandlerShellExecute\CLSID\(Default) = {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}
-> {HKLM...CLSID} = Shell Execute Hardware Event Handler
\LocalServer32\(Default) = C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7} [MS]

WinampPlayMediaOnArrival\
Provider = Winamp
InvokeProgID = Winamp.File
InvokeVerb = Play
HKLM\SOFTWARE\Classes\Winamp.File\shell\Play\command\(Default) = "C:\Program Files (x86)\Winamp\winamp.exe" "%1" [Nullsoft, Inc.]


Startup items in "Lucas" & "All Users" startup folders:
-------------------------------------------------------

C:\Users\Lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup {++}
Dropbox -> shortcut to: C:\Users\Lucas\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [Dropbox, Inc.]


Windows Sidebar Gadgets: {++}
------------------------

C:\Users\Lucas\AppData\Local\Microsoft\Windows Sidebar\Settings.ini
"C:%5CProgram%20Files%5CWindows%20Sidebar%5CShared%20Gadgets%5CaswSidebar.gadget"


Non-disabled Scheduled Tasks: {++}
-----------------------------

C:\Windows\System32\Tasks
Adobe Flash Player Updater -> launches: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [Adobe Systems Incorporated]
AdobeAAMUpdater-1.0-Lucas-PC-Lucas -> launches: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled [Adobe Systems Incorporated]
CCleanerSkipUAC -> launches: "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) [Piriform Ltd]
FacebookUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000Core -> launches: C:\Users\Lucas\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver [Facebook Inc.]
FacebookUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000UA -> launches: C:\Users\Lucas\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler [Facebook Inc.]
GoogleUpdateTaskMachineCore1cf29ad47bf989c -> launches: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c [Google Inc.]
GoogleUpdateTaskMachineUA1ce7fc52c4d0d55 -> launches: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler [Google Inc.]
GoogleUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000Core1cf272315e0e483 -> launches: C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe /c [Google Inc.]
GoogleUpdateTaskUserS-1-5-21-3937064695-4174873834-2997317461-1000UA1cecabbb27ddf70 -> launches: C:\Users\Lucas\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler [Google Inc.]
Razer_Game_Booster_AutoUpdate -> launches: C:\Program Files (x86)\Razer\AutoUpdate.exe /AUTORUN [empty string]

C:\Windows\System32\Tasks\Apple
AppleSoftwareUpdate -> launches: C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe -task [Apple Inc.]

C:\Windows\System32\Tasks\Microsoft\Microsoft Antimalware
Microsoft Antimalware Scheduled Scan -> launches: C:\Program Files\Microsoft Security Client\MpCmdRun.exe Scan -ScheduleJob -RestrictPrivileges [MS]
MpIdleTask -> launches: C:\Program Files\Microsoft Security Client\MpCmdRun.exe -IdleTask -TaskName MpIdleTask [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client
AD RMS Rights Policy Template Management (Manual) -> launches: {BF5CB148-7C77-4d8a-A53E-D81C70CF743C}
-> {HKLM...CLSID} = AD RMS Rights Policy Template Management (Manual) Task Handler
\InProcServer32\(Default) = C:\Windows\system32\msdrm.dll [MS]
-> {HKLM...Wow...CLSID} = AD RMS Rights Policy Template Management (Manual) Task Handler
\InProcServer32\(Default) = C:\Windows\system32\msdrm.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience
AitAgent -> launches: aitagent [MS]
Microsoft Compatibility Appraiser -> launches: %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy [MS]
ProgramDataUpdater -> launches: %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Autochk
Proxy -> launches: %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Bluetooth
UninstallDeviceTask -> launches: BthUdTask.exe $(Arg0) [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\CertificateServicesClient
SystemTask -> launches: {58fb76b9-ac85-4e55-ac04-427593b1d060}
-> {HKLM...CLSID} = Certificate Services Client Task Handler
\InProcServer32\(Default) = C:\Windows\system32\dimsjob.dll [MS]
-> {HKLM...Wow...CLSID} = Certificate Services Client Task Handler
\InProcServer32\(Default) = C:\Windows\system32\dimsjob.dll [MS]
UserTask -> launches: {58fb76b9-ac85-4e55-ac04-427593b1d060}
-> {HKLM...CLSID} = Certificate Services Client Task Handler
\InProcServer32\(Default) = C:\Windows\system32\dimsjob.dll [MS]
-> {HKLM...Wow...CLSID} = Certificate Services Client Task Handler
\InProcServer32\(Default) = C:\Windows\system32\dimsjob.dll [MS]
C:\Windows\System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program
Consolidator -> launches: %SystemRoot%\System32\wsqmcons.exe [MS]
KernelCeipTask -> (HIDDEN!) launches: {e7ed314f-2816-4c26-aeb5-54a34d02404c}
-> {HKLM...CLSID} = KernelCeipCustomHandler
\InProcServer32\(Default) = C:\Windows\System32\kernelceip.dll [MS]
UsbCeip -> (HIDDEN!) launches: {c27f6b1d-fe0b-45e4-9257-38799fa69bc8}
-> {HKLM...CLSID} = UsbCeip
\InProcServer32\(Default) = C:\Windows\System32\usbceip.dll [MS]
-> {HKLM...Wow...CLSID} = UsbCeip
\InProcServer32\(Default) = C:\Windows\System32\usbceip.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Defrag
ScheduledDefrag -> launches: %windir%\system32\defrag.exe -c [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Diagnosis
Scheduled -> (HIDDEN!) launches: {c1f85ef8-bcc2-4606-bb39-70c523715eb3}
-> {HKLM...CLSID} = ScheduledDiagnosticCustomHandler
\InProcServer32\(Default) = C:\Windows\System32\sdiagschd.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Location
Notifications -> launches: %windir%\System32\LocationNotifications.exe [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Media Center
ActivateWindowsSearch -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch [MS]
ConfigureInternetTimeService -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService [MS]
DispatchRecoveryTasks -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) [MS]
ehDRMInit -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DRMInit [MS]
InstallPlayReady -> launches: %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) [MS]
mcupdate -> launches: %SystemRoot%\ehome\mcupdate $(Arg0) [MS]
MediaCenterRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask [MS]
ObjectStoreRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask [MS]
OCURActivate -> launches: %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate [MS]
OCURDiscovery -> launches: %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) [MS]
PBDADiscovery -> launches: %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery [MS]
PBDADiscoveryW1 -> launches: %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery [MS]
PBDADiscoveryW2 -> launches: %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery [MS]
PvrRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask [MS]
PvrScheduleTask -> launches: %SystemRoot%\ehome\mcupdate.exe -PvrSchedule [MS]
RegisterSearch -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) [MS]
ReindexSearchRoot -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot [MS]
SqlLiteRecoveryTask -> launches: %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask [MS]
StartRecording -> launches: %SystemRoot%\ehome\ehrec /StartRecording [MS]
UpdateRecordPath -> launches: %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\MemoryDiagnostic
CorruptionDetector -> (HIDDEN!) launches: {190BA3F6-0205-4f46-B589-95C6822899D2}
-> {HKLM...CLSID} = MemoryDiagnosticCustomHandler
\InProcServer32\(Default) = C:\Windows\System32\memdiag.dll [MS]
DecompressionFailureDetector -> (HIDDEN!) launches: {190BA3F6-0205-4f46-B589-95C6822899D2}
-> {HKLM...CLSID} = MemoryDiagnosticCustomHandler
\InProcServer32\(Default) = C:\Windows\System32\memdiag.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\MobilePC
HotStart -> launches: {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
-> {HKLM...CLSID} = HotStart User Agent
\InProcServer32\(Default) = C:\Windows\System32\HotStartUserAgent.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\MUI
LPRemove -> launches: %windir%\system32\lpremove.exe [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia
SystemSoundsService -> launches: {2DEA658F-54C1-4227-AF9B-260AB5FC3543}
-> {HKLM...CLSID} = Microsoft PlaySoundService Class
\InProcServer32\(Default) = C:\Windows\System32\PlaySndSrv.dll [MS]
-> {HKLM...Wow...CLSID} = Microsoft PlaySoundService Class
\InProcServer32\(Default) = C:\Windows\System32\PlaySndSrv.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\NetTrace
GatherNetworkInfo -> launches: %windir%\system32\gatherNetworkInfo.vbs [null data]

C:\Windows\System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics
AnalyzeSystem -> launches: %SystemRoot%\System32\powercfg.exe -energy -auto [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\RAC
RacTask -> (HIDDEN!) launches: {42060D27-CA53-41f5-96E4-B1E8169308A6}
-> {HKLM...CLSID} = ReliabilityAnalysisCustomHandler
\InProcServer32\(Default) = C:\Windows\system32\RacEngn.dll [MS]
-> {HKLM...Wow...CLSID} = ReliabilityAnalysisCustomHandler
\InProcServer32\(Default) = C:\Windows\system32\RacEngn.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Ras
MobilityManager -> launches: {c463a0fc-794f-4fdf-9201-01938ceacafa}
-> {HKLM...CLSID} = RasMobilityManager
\InProcServer32\(Default) = C:\Windows\system32\rasmbmgr.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Registry
RegIdleBackup -> (HIDDEN!) launches: {ca767aa8-9157-4604-b64b-40747123d5f2}
-> {HKLM...CLSID} = RegistryIdleBackupHandler
\InProcServer32\(Default) = C:\Windows\System32\regidle.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\RemoteAssistance
RemoteAssistanceTask -> (HIDDEN!) launches: %windir%\system32\RAServer.exe /offerraupdate [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\SideShow
GadgetManager -> launches: {FF87090D-4A9A-4f47-879B-29A80C355D61}
-> {HKLM...CLSID} = GadgetsManager Class
\InProcServer32\(Default) = C:\Windows\System32\AuxiliaryDisplayServices.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\SystemRestore
SR -> launches: %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Task Manager
Interactive -> (HIDDEN!) launches: {855fec53-d2e4-4999-9e87-3414e9cf0ff4}
-> {HKLM...CLSID} = RunTask
\InProcServer32\(Default) = C:\Windows\system32\wdc.dll [MS]
-> {HKLM...Wow...CLSID} = RunTask
\InProcServer32\(Default) = C:\Windows\system32\wdc.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Tcpip
IpAddressConflict1 -> launches: %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem [MS]
IpAddressConflict2 -> launches: %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\TextServicesFramework
MsCtfMonitor -> (HIDDEN!) launches: {01575cfe-9a55-4003-a5e1-f38d1ebdcbe1}
-> {HKLM...CLSID} = MsCtfMonitor task handler
\InProcServer32\(Default) = C:\Windows\system32\MsCtfMonitor.dll [MS]
-> {HKLM...Wow...CLSID} = MsCtfMonitor task handler
\InProcServer32\(Default) = C:\Windows\system32\MsCtfMonitor.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Time Synchronization
SynchronizeTime -> launches: %windir%\system32\sc.exe start w32time task_started [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\UPnP
UPnPHostConfig -> launches: sc.exe config upnphost start= auto [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\WDI
ResolutionHost -> (HIDDEN!) launches: {900be39d-6be8-461a-bc4d-b0fa71f5ecb1}
-> {HKLM...CLSID} = DiagnosticInfrastructureCustomHandler
\InProcServer32\(Default) = C:\Windows\System32\wdi.dll [MS]
-> {HKLM...Wow...CLSID} = DiagnosticInfrastructureCustomHandler
\InProcServer32\(Default) = C:\Windows\System32\wdi.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Activation Technologies
ValidationTask -> (HIDDEN!) launches: %SystemRoot%\system32\Wat\WatAdminSvc.exe /run [MS]
ValidationTaskDeadline -> (HIDDEN!) launches: %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Error Reporting
QueueReporting -> launches: %windir%\system32\wermgr.exe -queuereporting [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Filtering Platform
BfeOnServiceStartTypeChange -> (HIDDEN!) launches: %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Windows Media Sharing
UpdateLibrary -> launches: "%ProgramFiles%\Windows Media Player\wmpnscfg.exe" [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\WindowsBackup
AutomaticBackup -> launches: %systemroot%\system32\rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup [MS]
Windows Backup Monitor -> launches: %systemroot%\system32\sdclt.exe /CHECKSKIPPED [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\WindowsColorSystem
Calibration Loader -> launches: {B210D694-C8DF-490d-9576-9E20CDBC20BD}
-> {HKLM...CLSID} = Color Calibration Loader
\InProcServer32\(Default) = C:\Windows\System32\mscms.dll [MS]
-> {HKLM...Wow...CLSID} = Color Calibration Loader
\InProcServer32\(Default) = C:\Windows\System32\mscms.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows\Wininet
CacheTask -> launches: {0358b920-0ac7-461f-98f4-58e32cd89148}
-> {HKLM...CLSID} = Wininet Cache task object
\InProcServer32\(Default) = C:\Windows\system32\wininet.dll [MS]
-> {HKLM...Wow...CLSID} = Wininet Cache task object
\InProcServer32\(Default) = C:\Windows\system32\wininet.dll [MS]

C:\Windows\System32\Tasks\Microsoft\Windows Defender
MP Scheduled Scan -> (HIDDEN!) launches: c:\program files\windows defender\MpCmdRun.exe Scan -ScheduleJob -WinTask -RestrictPrivilegesScan [MS]

C:\Windows\System32\Tasks\WPD
SqmUpload_S-1-5-21-3937064695-4174873834-2997317461-1000 -> (HIDDEN!) launches: %windir%\system32\rundll32.exe portabledeviceapi.dll,#1 [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = %SystemRoot%\system32\NLAapi.dll [MS]
000000000002\LibraryPath = %SystemRoot%\system32\napinsp.dll [MS]
000000000003\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS]
000000000004\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS]
000000000005\LibraryPath = %SystemRoot%\System32\mswsock.dll [MS]
000000000006\LibraryPath = %SystemRoot%\System32\winrnr.dll [MS]
000000000007\LibraryPath = C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [MS]
000000000008\LibraryPath = C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [MS]
000000000009\LibraryPath = C:\Program Files (x86)\Bonjour\mdnsNSP.dll [Apple Inc.]

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\ {++}
000000000001\LibraryPath = %SystemRoot%\system32\NLAapi.dll [MS]
000000000002\LibraryPath = %SystemRoot%\system32\napinsp.dll [MS]
000000000003\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS]
000000000004\LibraryPath = %SystemRoot%\system32\pnrpnsp.dll [MS]
000000000005\LibraryPath = %SystemRoot%\System32\mswsock.dll [MS]
000000000006\LibraryPath = %SystemRoot%\System32\winrnr.dll [MS]
000000000007\LibraryPath = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [MS]
000000000008\LibraryPath = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [MS]
000000000009\LibraryPath = C:\Program Files\Bonjour\mdnsNSP.dll [Apple Inc.]

Transport Service Providers

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 10

HKLM\SYSTEM\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries64\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 10


Toolbars, Explorer Bars, Extensions:
------------------------------------

Explorer Bars

HKLM\SOFTWARE\Classes\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = Groove Folder Synchronization
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = E:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [MS]

HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{2A541AE1-5BF6-4665-A8A3-CFA9672E4291}\(Default) = Groove Folder Synchronization
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\
{2670000A-7350-4F3C-8081-5663EE0C6C49}\
ButtonText = Send to OneNote
MenuText = Se&nd to OneNote
CLSIDExtension = {48E73304-E1D6-4330-914C-F5F514E3486C}
-> {HKLM...CLSID} = Send to OneNote from Internet Explorer button
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\ONBttnIE.dll [MS]

{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\
ButtonText = OneNote Lin&ked Notes
MenuText = OneNote Lin&ked Notes
CLSIDExtension = {FFFDC614-B694-4AE6-AB38-5D6374584B52}
-> {HKLM...CLSID} = Linked Notes button
\InProcServer32\(Default) = E:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll [MS]

{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\
ButtonText = Skype Click to Call settings
CLSIDExtension = {898EA8C8-E7FF-479B-8935-AEC46303B9E5}
-> {HKLM...CLSID} = Skype Click to Call settings
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [MS]

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\
{2670000A-7350-4F3C-8081-5663EE0C6C49}\
ButtonText = Send to OneNote
MenuText = Se&nd to OneNote
CLSIDExtension = {48E73304-E1D6-4330-914C-F5F514E3486C}
-> {HKLM...Wow...CLSID} = Send to OneNote from Internet Explorer button
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll [MS]

{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}\
ButtonText = OneNote Lin&ked Notes
MenuText = OneNote Lin&ked Notes
CLSIDExtension = {FFFDC614-B694-4AE6-AB38-5D6374584B52}
-> {HKLM...Wow...CLSID} = Linked Notes button
\InProcServer32\(Default) = C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll [MS]

{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\
ButtonText = Skype Click to Call settings
CLSIDExtension = {898EA8C8-E7FF-479B-8935-AEC46303B9E5}
-> {HKLM...Wow...CLSID} = Skype Click to Call settings
\InProcServer32\(Default) = C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [MS]


Miscellaneous IE Hijack Points
------------------------------

HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\
<<H>> InPrivate = res://ieframe.dll/inprivate_win7.htm [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Apple Mobile Device, Apple Mobile Device, "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" [Apple Inc.]
Bonjour Service, Bonjour Service, "C:\Program Files\Bonjour\mDNSResponder.exe" [Apple Inc.]
iPod Service, iPod Service, "C:\Program Files\iPod\bin\iPodService.exe" [Apple Inc.]
MBAMScheduler, MBAMScheduler, "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe" [Malwarebytes Corporation]
MBAMService, MBAMService, "C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe" [Malwarebytes Corporation]
Microsoft Antimalware Service, MsMpSvc, "C:\Program Files\Microsoft Security Client\MsMpEng.exe" [MS]
Razer Game Scanner, Razer Game Scanner Service, C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [null data]
Skype Click to Call PNR Service, c2cpnrsvc, "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service [MS]
Skype Click to Call Updater, c2cautoupdatesvc, "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service [MS]
SQL Server VSS Writer, SQLWriter, "C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" [MS]
Windows Live ID Sign-in Assistant, wlidsvc, "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" [MS]


Safe Mode Drivers & Services (subkey name, subkey default value):
-----------------------------------------------------------------

HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\

<<!>> !SASCORE,
<<!>> MsMpSvc, Service

HKLM\System\CurrentControlSet\Control\SafeBoot\Network\

<<!>> !SASCORE,
<<!>> Hamachi2Svc, Service
<<!>> MsMpSvc, Service


Keyboard Driver Filters:
------------------------

HKLM\SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}\
<<!>> UpperFilters = <<!>> keyscrambler [QFX Software Corporation],kbdclass [MS],<<!>> [file not found]


Print Monitors:
---------------

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\
EPSON WF-2540 Series 64MonitorBE\Driver = E_YLMIUE.DLL [SEIKO EPSON CORPORATION]
EpsonNet Print Port\Driver = enppmon.dll [SEIKO EPSON CORPORATION]
LogMeIn Printer Port Monitor\Driver = LMIport.dll [LogMeIn, Inc.]


<<H>>: Suspicious data at a browser hijack point.


==== C:\zoek_backup content ======================

C:\zoek_backup (files=535 folders=635 2559071151 bytes)

==== EOF on Sat 12/13/2014 at 10:06:56.83 ======================
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 13th, 2014, 11:39 am

D. SystemLook 30.07.11 by jpshortstuff
Log created at 10:08 on 13/12/2014 by Lucas
Administrator - Elevation successful

========== filefind ==========

Searching for "*Anti-phishing*"
No files found.

Searching for "*AskToolbar*"
No files found.

Searching for "*Ask.com*"
No files found.

Searching for "*Babylon*"
C:\Program Files (x86)\Winamp\Plugins\Milkdrop2\presets\stahlregen + geiss + shifter - babylon.milk --a---- 26473 bytes [20:18 28/04/2009] [20:18 28/04/2009] FD56279AD850D3AA87454766302DACF1

Searching for "*blekko*"
No files found.

Searching for "*HyperCam*"
No files found.

Searching for "*Ilivid*"
No files found.

Searching for "*PackageAware*"
No files found.

Searching for "*Toolbar4*"
No files found.

Searching for "*Dogpile*"
No files found.

Searching for "*CrashRpt*"
C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\CrashRpt\UnsentCrashReports\JC2-MP_0.1.1 (Build 694)!694\~CrashRpt.ini.vir --a---- 37 bytes [22:04 30/12/2013] [22:04 30/12/2013] 838C51A99AE1D6A1166A5C985D6690BE
C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\CrashRpt\UnsentCrashReports\JC2-MP_0.1.1 (Build 694)!694\27be0229-c799-4c63-bd1f-b43357b90553\crashrpt.xml.vir --a---- 1198 bytes [06:07 01/01/2014] [06:07 01/01/2014] BDB8C5169055A1EC4A8111A4163340F2
C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\CrashRpt\UnsentCrashReports\JC2-MP_0.1.1 (Build 694)!694\538afa9c-8e4c-44eb-9a83-3ff66595b40f\crashrpt.xml.vir --a---- 1184 bytes [22:03 30/12/2013] [22:03 30/12/2013] 374FD89A3F8A07B72F93A4A66F015D57
C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\CrashRpt\UnsentCrashReports\JC2-MP_0.1.1 (Build 694)!694\9a21d519-d73f-440d-9b3a-48d79851387b\crashrpt.xml.vir --a---- 1184 bytes [01:22 06/01/2014] [01:22 06/01/2014] 3AAB7F78F90F7E616BFE97BEDD2D37C2
C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\CrashRpt\UnsentCrashReports\JC2-MP_0.1.4a (Build 875)!875\2e2a4b7e-cab2-4685-8978-9135fee83bac\crashrpt.xml.vir --a---- 1212 bytes [02:12 24/06/2014] [02:12 24/06/2014] E7D7ABE2B0EA56684F0C77A944C87FA9

Searching for "*Bandoo*"
No files found.

Searching for "*dealshark*"
No files found.

Searching for "*filescout*"
No files found.

Searching for "*Fun4IM*"
No files found.

Searching for "*Funmoods*"
No files found.

Searching for "*ooVoo*"
No files found.

Searching for "*IObit*"
No files found.

Searching for "*Iminent*"
No files found.

Searching for "*Intuit*"
No files found.

Searching for "*istart123*"
No files found.

Searching for "*MyWay*"
No files found.

Searching for "*SafeGuard*"
No files found.

Searching for "*Searchnu*"
No files found.

Searching for "*smartbar*"
No files found.

Searching for "*searchab*"
No files found.

Searching for "*sprotector*"
No files found.

Searching for "*superfish*"
C:\Users\Lucas\Desktop\Desktop\eBooks\PPD KILLER\Bonuses\Niches\Blog-CPA Script Niche\wp-content\themes\boldnews\images\arrow-superfish.png --a---- 170 bytes [15:19 24/06/2013] [06:48 19/07/2011] EFAD0BDE6AAB46B87EC40CFE12893A56
C:\Users\Lucas\Desktop\Desktop\eBooks\PPD KILLER\Bonuses\Niches\Blog-CPA Script Niche\wp-content\themes\boldnews\includes\js\superfish3d36.js --a---- 3963 bytes [15:19 24/06/2013] [06:48 19/07/2011] 63654AA3B0E9241E02270F7EEB0F5DB8

Searching for "*Tarma*"
No files found.

Searching for "*trolltech*"
No files found.

Searching for "*Vafmusic2*"
No files found.

Searching for "*vshare*"
No files found.

Searching for "*wajam*"
No files found.

Searching for "*whitesmoke*"
No files found.

Searching for "*Yontoo*"
No files found.

========== folderfind ==========

Searching for "*Anti-phishing*"
No folders found.

Searching for "*AskToolbar*"
No folders found.

Searching for "*Ask.com*"
No folders found.

Searching for "*Babylon*"
No folders found.

Searching for "*blekko*"
No folders found.

Searching for "*Ilivid*"
No folders found.

Searching for "*PackageAware*"
No folders found.

Searching for "*Dogpile*"
No folders found.

Searching for "*CrashRpt*"
C:\AdwCleaner\Quarantine\C\Users\Lucas\AppData\Local\CrashRpt d------ [20:30 07/12/2014]

Searching for "*Bandoo*"
No folders found.

Searching for "*dealshark*"
No folders found.

Searching for "*filescout*"
No folders found.

Searching for "*Fun4IM*"
No folders found.

Searching for "*Funmoods*"
No folders found.

Searching for "*ooVoo*"
No folders found.

Searching for "*IObit*"
No folders found.

Searching for "*Iminent*"
No folders found.

Searching for "*Intuit*"
No folders found.

Searching for "*istart123*"
No folders found.

Searching for "*MyWay*"
No folders found.

Searching for "*SafeGuard*"
No folders found.

Searching for "*Searchnu*"
No folders found.

Searching for "*smartbar*"
No folders found.

Searching for "*searchab*"
No folders found.

Searching for "*sprotector*"
No folders found.

Searching for "*superfish*"
No folders found.

Searching for "*Tarma*"
No folders found.

Searching for "*trolltech*"
No folders found.

Searching for "*Vafmusic2*"
No folders found.

Searching for "*vshare*"
No folders found.

Searching for "*wajam*"
No folders found.

Searching for "*whitesmoke*"
No folders found.

Searching for "*Yontoo*"
No folders found.

========== Regfind ==========

Searching for "Anti-phishing"
No data found.

Searching for "AskToolbar"
No data found.

Searching for "Ask.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"

Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

Searching for "blekko"
No data found.

Searching for "HyperCam"
No data found.

Searching for "Ilivid"
No data found.

Searching for "PackageAware"
No data found.

Searching for "Dogpile"
No data found.

Searching for "Searchqu"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\11.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\12.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
@="ISearchQueryHelper"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{7E6C0144-256B-46B5-B4A7-0005C86CF85F}]
@="IVsSearchQueryParser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
@="ISearchQueryHelper"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F2FFECB8D90989765A6DC7E0C0A8305]
"6DAFC5D539F936C8E30B6B0A3D4DDB21"="C:\Program Files (x86)\Windows Kits\8.0\Include\um\SearchQuery.idl"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F2FFECB8D90989765A6DC7E0C0A8305]
"2F220489ACB9D14AA683A16E850F4151"="C:\Program Files (x86)\Windows Kits\8.1\Include\um\SearchQuery.idl"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{7E6C0144-256B-46B5-B4A7-0005C86CF85F}]
@="IVsSearchQueryParser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63}]
@="ISearchQueryHelper"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\11.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\12.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\WDExpress\11.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\WDExpress\12.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\11.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\11.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\12.0_Config\CLSID\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
"Class"="Microsoft.VisualStudio.PlatformUI.VsSearchQueryParser"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{6223B428-B465-4B2B-864A-D0FFBC4741FD}]
@="IVsSearchQuery"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\12.0_Config\HandleInComingCall\{B71B3DF9-7A4A-4D70-8293-3874DB098FDD}]
@="IVsSearchQueryParser"

Searching for "Zynga"
No data found.

Searching for "Bandoo"
No data found.

Searching for "dealshark"
No data found.

Searching for "filescout"
No data found.

Searching for "Fun4IM"
No data found.

Searching for "Funmoods"
No data found.

Searching for "ooVoo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2F220489ACB9D14AA683A16E850F4151\Features]
"feb551e4ba01fb4b518fb34687e800861d"="-N^qZe,c5?d.aP0.TOGN'+)%sZY@1xERdO]t)Sp,s%fqRkbU[Fm944&NujI?xQzl*mcM.@7[s@V{S3$YmrOXGHFbf7H!(_UX'1Zj%i4F4??U)lX2sA-hC~&gJ}~3ObsZ{whQ7zy+h^_W@mEIE9o^DCML3Nd+U9*FWD'Ch6k^]N@Le-o}F^'hHe2]oq$]h+i`OvK^{pC%}=~o^e{Ttl2o]rI'J3+OWyBJn~t-}wuVRC1Dzupv=iH8MU=5zs2~m$FZ'6BwEGCse5N=~uPi,0SQkUHtM}5$oO8_)4G5%^oO]$$u52y+OPU['{U!bTjDZNcU+yHwlZ9ajn^3eoF73(gpnb)wH~p=faYR2wR}C2PGa]~eGl2EUbA]I2P23~{w6'Z4b4vw&=b9ocjg0HR1tW^MW*}LepzzDqKvH$$9(?},Hy38I!G)cAhQvhW37.FgLb.1sw-~5'MwhqTyoHlzkN1*c&s?[gcwOa!WkTs]RAye[*EhW9_u_(mqpD!7A[(_T,L]S-3i6g,Js(rhB~c-p]Q7^mm'GbJ1uN$qw6i,HL'%!Piuw=Y%uwfy5!d1R^FspzA@viBq%b@KVtM$V.yT9h3==i5W`sjteBY{,BUrQyl0EfDJ[aw)?%1!kO^va7U*m@=,K}`)z8s))tsQ9W]]Md'2D7_vq(7JE+y`wksLI0zn1f3X3FaS{9b%}iIXffZ1oWKyX'k{@$*j(q]Sl3XbTe+TIeVn=SBecWNpgG7LO^ZQCYo]x]hrsAW^!c{QdaRtDlkFBNBlMN!nYC5Ke4)wFvqfrlUdJIcl$`)FQ{17aocK6HPvE4LJ'CP!a?.jvPU&D5uy&VPl,+n%[RJ
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6DAFC5D539F936C8E30B6B0A3D4DDB21\Features]
"feb551e4ba01fb4b518fb34687e800861d"="-N^qZe,c5?d.aP0.TOGN'+)%sZY@1xERdO]t)Sp,GXiq3m.l3EZ%Ox4io*FIQjbhz+j*zDWXXjMlUqpxp76U.08$^E=~()4a*jQRrsrMS.QvXF4uY819FP4s^d9K5=JH2CbML)ukS5l7@u%qQhykqD+hxS=.~k}N@%y_t159JF&4~{x$t&nJ@mEIE9o^DCML3Nd+U9*FWD'Ch6k^]N@Le-o}F^'hHe2]oq$]h+i`OvK^{pC%}=~o^e{Ttl2o]rI'J3+OWyBJn~t-}wuVRC1Dzupv=iH8MU=5zs2~m$FZ'6BwEGCse5N=~uPi,0SQkUHtM}5$oO8_)4G5%^oO]$$u52y+OPU['{U!bTjDZNcU+yHwlZ9ajn^3eoF73(gpnb)wH~p=faYR2wR}C2PGa]~eGl2EUbA]I2P23~{w6'Z4b4vw&=b9ocjg0HR1tW^MW*}LepzzDqKvH$$9(?},Hy38I!G)cAhQvhW37.FgLb.1sw-~5'MwhqTyoHlzkN1*c&s?[gcwOa!WkTs]RAye[*EhW9_u_(mqpD!7A[(_T,L]S-3i6g,Js(rhB~c-p]Q7^mm'GbJ1uN$qw6i,HL'%!Piuw=Y%uwfy5!d1R^FspzA@viBq%b@KVtM$V.yT9h3==i5W`sjteBY{,BUrQyl0EfDJ[aw)?%1!kO^va7U*m@=,K}`)z8s))tsQ9W]]Md'2D7_vq(7JE+y`wksLI0znoWKyX'k{@$*j(q]Sl3XbTe+TIeVn=SBecWNpgG7LO^ZQCYo]x]hrsAW^!c{QdaRtDlkFBNBlMN!nYC5Ke4)wFvqfrlUdJIcl$`)FQ{17aocK6HPvE4LJ'CP!a?.

Searching for "IObit"
No data found.

Searching for "Intuit"
No data found.

Searching for "Iminent"
No data found.

Searching for "istart123"
No data found.

Searching for "MyWay"
No data found.

Searching for "SafeGuard"
No data found.

Searching for "Searchnu"
No data found.

Searching for "smartbar"
No data found.

Searching for "searchab"
No data found.

Searching for "sprotector"
No data found.

Searching for "superfish"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}]
"DllName"="SuperfishIEAddon.dll;SuperfishIEAddon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}]
"DllName"="SuperfishIEAddon.dll;SuperfishIEAddon.dll"

Searching for "Tarma"
No data found.

Searching for "trolltech"
[HKEY_CURRENT_USER\Software\Trolltech]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.4\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QAccessibleFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:]
[HKEY_USERS\.DEFAULT\Software\Trolltech]
[HKEY_USERS\.DEFAULT\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.4\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\.DEFAULT\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech]
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.4\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QAccessibleFactoryInterface:]
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:]
[HKEY_USERS\S-1-5-18\Software\Trolltech]
[HKEY_USERS\S-1-5-18\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.4\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]
[HKEY_USERS\S-1-5-18\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:]

Searching for "Vafmusic2"
No data found.

Searching for "vshare"
No data found.

Searching for "wajam"
No data found.

Searching for "whitesmoke"
No data found.

Searching for "Yontoo"
No data found.

-= EOF =-

E. Not so far
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm

Re: Odd login IPs, think I might be infected?

Unread postby pgmigg » December 13th, 2014, 6:26 pm

Hello lucaslee8498,

I have installed Microsoft Security Essentials.
Very well! :D Let continue our treatment...

Step 1.
OTL - Run Fix Script
You should still have OTL.exe on your desktop.
Important! Close all applications and windows so that you have nothing open and are at your Desktop.
  1. Right click on OTL.exe, select "Run As Administrator..." to run it. If prompted by UAC, please allow it.
  2. Underneath Output at the top, make sure Standard Output is selected.
  3. Highlight and copy the following entries: into the Image text box.
    (Do not include the words Code: Select all - instead of it please click the Select all button next to Code: to select the entire script.)
    Code: Select all
    :Commands
    [createrestorepoint]
    
    :Reg
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}]
    "DllName"=-
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}]
    "DllName"=-
    [-HKEY_CURRENT_USER\Software\Trolltech]
    [-HKEY_USERS\.DEFAULT\Software\Trolltech]
    [-HKEY_USERS\S-1-5-21-3937064695-4174873834-2997317461-1000\Software\Trolltech]
    [-HKEY_USERS\S-1-5-18\Software\Trolltech]
    
    :Commands
    [emptytemp]
    
  4. Click under the Custom Scan/Fixes box and paste the copied text.
  5. Click the Run Fix button. If prompted... click OK.
  6. OTL may ask to reboot the machine. Please do so if asked.
  7. Let the program run unhindered and reboot the PC when it is done.
    When the computer reboots, and you start your usual account, a Notepad text file will appear.
  8. Copy the contents of that file and post it in your next reply. The log can also be found, based on the date/time it was created, as C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log

Step 2.
ESET NOD32 Online Scan
  1. Firstly please Disable any Antivirus you have active, as shown in This topic. If active, it could impact the online scan.
    Do NOT use the computer while the scan is running!
    Make sure all other programs and windows are closed!
  2. You need to right-click on the Internet Explorer or Firefox icons on the Start Menu or Quick Launch Bar on the Taskbar and select "Run as Administrator" from the context menu.
  3. Go to ESET Online Scanner - © ESET All Rights Reserved, to run an online scan.
  4. Click the dark blue Run ESET Online Scanner button:
    • If you using Google Chrome or Mozilla Firefox you will need to download "esetsmartinstaller_enu.exe" when prompted. Then double click on it to install.
    • If you using Internet Explorer please read the End User License Agreement and check the box: Yes, I accept the terms of use. Then click the green Start button.
  5. Accept any security warnings from your browser and allow the download/installation of any required files.
    If your browser blocks or halts a download, please allow it to download any required files.
  6. Under scan settings:
    • Check "Scan archives"
    • UNCHECK "Remove found threats"
  7. Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  8. Click the Start button.
    ESET will install itself, download virus signature database updates and begin scanning your computer.
    The scan will take a while so please be patient. Do NOT use the computer while the scan is running!
  9. When the scan completes, please press the text: Image
  10. Press the text: Image, then save the file to your desktop as ESETScan.txt.
  11. Press the Back button, then press the Finish button.
  12. Copy and paste the contents of ESETScan.txt in your next reply.
    Note: If no threats are found, there is no option to create a log. Just report back to me there was nothing found.

Please post each log separately to prevent it being cut off by the forum post size limiter.
Check each after you've posted it to make sure it's all present, if any log is cut off you'll have to post it in sections....

Please include in your next reply:
  1. Do you have any problems executing the instructions?
  2. Contents of the C:\_OTL\MovedFiles\MMDDYYYY_HHMMSS.log log file after OTL FixScript run
  3. Contents of the ESETScan.txt log file
  4. Please tell me in details all that you feel strange and wrong in behavior of your computer, including information about strange IP logins.
  5. Do you see any changes in computer behavior?

Thanks,
pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3177
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Odd login IPs, think I might be infected?

Unread postby lucaslee8498 » December 16th, 2014, 7:19 pm

For some reason I can't alt-tab anymore? Will be posting the logs in a few minutes
lucaslee8498
Regular Member
 
Posts: 16
Joined: December 3rd, 2014, 9:22 pm

Re: Odd login IPs, think I might be infected?

Unread postby pgmigg » December 19th, 2014, 1:41 am

Hello lucaslee8498,

Will be posting the logs in a few minutes

It has been two days since your last post with promise...

  • Do you still need help?
  • Do you need more time?
  • Are you having problems following my instructions?
  • According to Malware Removal's latest policy, topics can be closed after 3 days without a response.
  • If you do not reply within the next 24 hours, this topic will be closed.

pgmigg

Failure to post replies within 72 hours will result in this thread being closed
User avatar
pgmigg
MRU Teacher
MRU Teacher
 
Posts: 3177
Joined: July 8th, 2008, 1:25 pm
Location: GMT-05:00

Re: Odd login IPs, think I might be infected?

Unread postby NonSuch » December 20th, 2014, 3:12 am

Due to a failure to respond for 72 hours or more, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 27300
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 49 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware