Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2014 01
Ran by [removed] (administrator) on HP on 08-03-2014 14:17:09
Running from C:\Users\[removed]\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\helppane.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Registry Backup\TweakingRegistryBackup.exe
(Tweaking.com) C:\Program Files (x86)\Tweaking.com\Registry Backup\files\vss_start.exe
(Microsoft Corporation) C:\Windows\system32\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [] - [X]
HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [415232 2009-07-13] (Microsoft Corporation)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-238458004-3021794996-818495646-1001\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-12-01] (Google Inc.)
HKU\S-1-5-21-238458004-3021794996-818495646-1001\...\Run: [CPN Notifier] - C:\Program Files (x86)\Lock Poker\PokerNotifier.exe
HKU\S-1-5-21-238458004-3021794996-818495646-1001\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe [531336 2014-02-13] (Adobe Systems Incorporated)
HKU\S-1-5-21-238458004-3021794996-818495646-1001\...\MountPoints2: {7016fa25-96a5-11df-9210-40618633fe15} - G:\LaunchU3.exe -a
HKU\S-1-5-21-238458004-3021794996-818495646-1012\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe -update activex

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cndt
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cndt
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {70D5954A-12E8-4C93-B7FC-851AFB79B85F} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {70D5954A-12E8-4C93-B7FC-851AFB79B85F} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd
SearchScopes: HKLM-x32 - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?&o=101881&l=dis&q={SEARCHTERMS}
SearchScopes: HKCU - {70D5954A-12E8-4C93-B7FC-851AFB79B85F} URL = 
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://www.ask.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=360&chn=s1122&geo=US&ver=5
BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook64.dll (Shareaza Development Team)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\RazaWebHook32.dll (Shareaza Development Team)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\5.2.2.3\coIEPlg.dll (Symantec Corporation)
BHO-x32: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\5.2.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll (Microsoft Corp.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\5.2.2.3\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} -  No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: HKLM {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex64-2.2.5.7.cab
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {49232000-16E4-426C-A231-62846947304B} https://wimpro2.cce.hp.com/ChatEntry/downloads/sysinfo.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{B06B293F-21F4-4DCD-B345-337049B4AE61}: [NameServer]192.168.1.1,4.2.2.2

FireFox:
========
FF ProfilePath: C:\Users\GeoffAdmin\AppData\Roaming\Mozilla\Firefox\Profiles\ruez1bl1.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @movenetworks.com/Quantum Media Player - C:\Users\geoff\AppData\Roaming\Move Networks\plugins\npqmp071706000001.dll (Move Networks)
FF Plugin-x32: @pack.google.com/Google Updater;version=14 - C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CCMSDK.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\cgpcfg.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\CgpCore.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\confmgr.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctxlogging.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ctxmui.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\icafile.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\icalogon.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npicaN.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\sslsdk_b.dll (Citrix Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\TcpPServ.dll (Citrix Systems, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\SafeSearch.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-01-03]
FF HKLM-x32\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFF
FF Extension: Symantec Intrusion Prevention - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFF [2013-10-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_13_2
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_13_2 [2014-02-22]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-08]

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll No File
CHR Plugin: (Skype Click to Call) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Updater) - C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Move Streaming Media Player) - C:\Users\geoff\AppData\Roaming\Move Networks\plugins\npqmp071706000001.dll (Move Networks)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10516.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-06-30]
CHR Extension: (Google Search) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-06-30]
CHR Extension: (Skype Click to Call) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-06-30]
CHR Extension: (Google Wallet) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-23]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-06-30]
CHR Extension: (Gmail) - C:\Users\GeoffAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-06-30]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-01-03]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

==================== Services (Whitelisted) =================

S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748640 2014-01-03] (Microsoft Corporation)
S2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [109352 2013-11-10] (SurfRight B.V.)
S2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1830768 2013-11-10] (SurfRight B.V.)
S2 HPBtnSrv; C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe [192512 2008-09-30] ()
S2 N360; C:\Program Files (x86)\Norton Security Suite\Engine\5.2.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-17] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-20] (Symantec Corporation)
S2 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [17416 2013-11-10] ()
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20140221.002\IDSvia64.sys [521944 2014-01-18] (Symantec Corporation)
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 lvsels64; C:\Windows\System32\DRIVERS\lvsels64.sys [68064 2010-07-27] (Logitech Inc.)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20140221.009\ENG64.SYS [126040 2013-12-12] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20140221.009\EX64.SYS [2099288 2013-12-12] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\0502020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\N360x64\0502020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\0502020.003\SYMDS64.SYS [450680 2011-01-27] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\0502020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-06-19] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\N360x64\0502020.003\Ironx64.SYS [171128 2010-11-15] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\N360x64\0502020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation)
S2 {55662437-DA8C-40c0-AADA-2C816A897A49}; c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [146928 2009-10-20] (CyberLink Corp.)
S4 mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [X]
S4 mbamswissarmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [X]
S3 SYMFW; \SystemRoot\System32\Drivers\N360x64\0308000.029\SYMFW.SYS [X]
S3 SYMNDISV; \SystemRoot\System32\Drivers\N360x64\0308000.029\SYMNDISV.SYS [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-08 14:17 - 2014-03-08 14:18 - 00024797 _____ () C:\Users\geoff\Downloads\FRST.txt
2014-03-08 14:13 - 2014-03-08 14:17 - 00000000 ____D () C:\FRST
2014-03-08 14:12 - 2014-03-08 14:12 - 02156544 _____ (Farbar) C:\Users\geoff\Downloads\FRST64.exe
2014-03-08 13:51 - 2014-03-08 13:53 - 00000000 ____D () C:\AdwCleaner
2014-03-08 13:50 - 2014-03-08 13:50 - 01244192 _____ () C:\Users\geoff\Downloads\adwcleaner.exe
2014-03-08 07:06 - 2014-03-08 07:06 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-HP-Microsoft-Windows-7-Professional-(64-bit).dat
2014-03-08 07:06 - 2014-03-08 07:06 - 00000000 ____D () C:\RegBackup
2014-03-08 07:05 - 2014-03-08 07:05 - 00002197 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2014-03-08 07:04 - 2014-03-08 07:04 - 03944112 _____ () C:\Users\geoff\Downloads\tweaking.com_registry_backup_setup.exe
2014-03-08 07:04 - 2014-03-08 07:04 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-03-07 19:21 - 2014-03-07 19:21 - 00275400 _____ () C:\Windows\Minidump\030714-24492-01.dmp
2014-03-01 10:42 - 2014-03-01 10:42 - 00026881 _____ () C:\Users\GeoffAdmin\Desktop\attach.txt
2014-03-01 10:42 - 2014-03-01 10:41 - 00020251 _____ () C:\Users\GeoffAdmin\Desktop\dds.txt
2014-03-01 10:30 - 2014-03-01 10:30 - 00275400 _____ () C:\Windows\Minidump\030114-23852-01.dmp
2014-03-01 10:18 - 2014-03-01 10:18 - 00275400 _____ () C:\Windows\Minidump\030114-23197-01.dmp
2014-03-01 09:05 - 2014-03-01 09:05 - 00910000 _____ () C:\Users\GeoffAdmin\Downloads\MicrosoftSystemScan_b43b6a43-4f49-4af0-8d0d-841be4e91998.exe
2014-03-01 08:54 - 2014-03-01 08:54 - 00012932 _____ () C:\Users\geoff\Downloads\hijackthis.log
2014-03-01 08:53 - 2014-03-01 08:53 - 09289756 _____ () C:\Users\GeoffAdmin\Downloads\Results_HP_2014-03-01_08.52.53.cab
2014-03-01 08:41 - 2014-03-01 08:41 - 00350432 _____ (Microsoft Corporation) C:\Users\geoff\Downloads\ASH.0B198B7657555431334376787639B9.Run.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\winlogon.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\smss.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\services.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\lsm.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\lsass.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\csrss.exe
2014-02-28 22:01 - 2014-02-28 22:01 - 00388608 _____ (Trend Micro Inc.) C:\Users\geoff\Downloads\HijackThis.exe
2014-02-28 22:00 - 2014-02-28 22:00 - 14839344 _____ (Trend Micro Inc.) C:\Users\geoff\Downloads\RootkitBusterV5.0-1171x64.exe
2014-02-28 21:31 - 2014-02-28 20:24 - 00315984 _____ () C:\Users\geoff\Documents\022814-24117-01.dmp
2014-02-28 21:31 - 2014-02-27 22:10 - 00275400 _____ () C:\Users\geoff\Documents\022714-24601-01.dmp
2014-02-28 21:00 - 2014-02-28 21:00 - 00000010 _____ () C:\Users\GeoffAdmin\AppData\Local\sponge.last.runtime.cache
2014-02-28 20:54 - 2014-02-28 20:54 - 02049128 _____ (Trend Micro Inc.) C:\Users\geoff\Downloads\HousecallLauncher.exe
2014-02-28 20:54 - 2014-02-28 20:54 - 00000036 _____ () C:\Users\GeoffAdmin\AppData\Local\housecall.guid.cache
2014-02-28 20:48 - 2014-02-28 20:48 - 00026264 _____ () C:\Users\GeoffAdmin\Desktop\attach.txt.bak
2014-02-28 20:48 - 2014-02-28 20:48 - 00019730 _____ () C:\Users\GeoffAdmin\Desktop\dds.txt.bak
2014-02-28 20:44 - 2014-02-28 20:44 - 00688992 ____R (Swearware) C:\Users\geoff\Downloads\dds.scr
2014-02-28 20:41 - 2014-03-01 13:03 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-02-28 20:41 - 2014-02-28 21:18 - 00000000 ____D () C:\rsit
2014-02-28 20:39 - 2014-02-28 20:39 - 00781383 _____ () C:\Users\geoff\Downloads\RSIT.exe
2014-02-28 20:23 - 2014-02-28 20:24 - 00315984 _____ () C:\Windows\Minidump\022814-24117-01.dmp
2014-02-27 22:10 - 2014-02-27 22:10 - 00275400 _____ () C:\Windows\Minidump\022714-24601-01.dmp
2014-02-27 21:42 - 2014-02-27 21:42 - 00275400 _____ () C:\Windows\Minidump\022714-23680-01.dmp
2014-02-27 21:23 - 2014-02-27 21:23 - 00275400 _____ () C:\Windows\Minidump\022714-23602-01.dmp
2014-02-26 22:40 - 2014-03-01 13:03 - 00000000 ____D () C:\symbols
2014-02-26 21:11 - 2014-02-26 21:11 - 00093552 _____ () C:\Users\geoff\Downloads\WinKeyFinder175.zip
2014-02-26 20:23 - 2014-03-01 13:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-26 20:23 - 2014-02-26 20:23 - 00001071 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-26 20:23 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-26 20:21 - 2014-02-26 20:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\geoff\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-26 20:20 - 2014-02-26 20:20 - 00065232 _____ (Malwarebytes) C:\Users\geoff\Downloads\regassassin-setup-1.03.exe
2014-02-26 20:19 - 2014-02-26 20:19 - 12589848 _____ (Malwarebytes Corp.) C:\Users\geoff\Downloads\mbar-1.07.0.1009.exe
2014-02-26 20:11 - 2014-02-26 20:11 - 10028532 _____ () C:\Users\geoff\Desktop\ccsc.reg
2014-02-26 20:06 - 2014-02-26 20:06 - 17065806 _____ () C:\Users\geoff\Desktop\CCS.reg
2014-02-26 20:03 - 2014-02-26 20:03 - 00275400 _____ () C:\Windows\Minidump\022614-24398-01.dmp
2014-02-26 19:59 - 2014-02-26 19:59 - 00275400 _____ () C:\Windows\Minidump\022614-25506-01.dmp
2014-02-26 19:48 - 2014-03-07 19:21 - 402513736 _____ () C:\Windows\MEMORY.DMP
2014-02-26 19:48 - 2014-02-26 19:48 - 00275400 _____ () C:\Windows\Minidump\022614-23790-01.dmp
2014-02-25 23:09 - 2014-03-01 13:03 - 00000000 ____D () C:\Windows\Standalone System Sweeper
2014-02-24 21:21 - 2014-02-24 21:22 - 00275288 _____ () C:\Windows\Minidump\022414-23961-01.dmp
2014-02-24 21:19 - 2014-02-24 21:19 - 00003352 ____N () C:\bootsqm.dat
2014-02-24 19:25 - 2014-02-24 19:26 - 00275400 _____ () C:\Windows\Minidump\022414-23946-01.dmp
2014-02-23 17:16 - 2014-02-23 17:16 - 00275400 _____ () C:\Windows\Minidump\022314-23478-01.dmp
2014-02-23 14:41 - 2014-02-23 14:41 - 00380416 _____ () C:\Users\geoff\Downloads\vjh2cwpo.exe
2014-02-23 14:29 - 2014-02-23 14:29 - 00275400 _____ () C:\Windows\Minidump\022314-24679-01.dmp
2014-02-23 14:13 - 2014-02-23 14:13 - 00275400 _____ () C:\Windows\Minidump\022314-23025-01.dmp
2014-02-23 12:16 - 2014-02-23 12:16 - 00334720 _____ (Sysinternals - www.sysinternals.com) C:\Users\GeoffAdmin\Downloads\RootkitRevealer (1).exe
2014-02-23 12:12 - 2014-02-23 12:12 - 85226312 _____ (Sophos Limited) C:\Users\GeoffAdmin\Downloads\Sophos Virus Removal Tool.exe
2014-02-23 12:10 - 2014-02-23 12:10 - 00102160 _____ () C:\Users\GeoffAdmin\Downloads\RootkitRevealer.chm
2014-02-23 12:09 - 2014-02-23 12:09 - 00334720 _____ (Sysinternals - www.sysinternals.com) C:\Users\GeoffAdmin\Downloads\RootkitRevealer.exe
2014-02-23 10:48 - 2014-02-23 10:48 - 00275400 _____ () C:\Windows\Minidump\022314-24445-01.dmp
2014-02-23 08:33 - 2014-02-23 08:33 - 00275400 _____ () C:\Windows\Minidump\022314-23680-01.dmp
2014-02-23 08:24 - 2014-03-01 13:03 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Local\Hewlett-Packard_Company
2014-02-23 08:23 - 2014-02-23 08:23 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Roaming\HP TCS
2014-02-23 08:22 - 2014-02-23 08:22 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Roaming\Hewlett-Packard
2014-02-23 07:44 - 2014-02-23 07:44 - 00275400 _____ () C:\Windows\Minidump\022314-26395-01.dmp
2014-02-22 18:19 - 2014-03-01 13:03 - 00000000 ____D () C:\Windows\pss
2014-02-22 18:15 - 2014-02-22 18:15 - 00275400 _____ () C:\Windows\Minidump\022214-25209-01.dmp
2014-02-22 16:17 - 2014-02-22 16:17 - 00001423 _____ () C:\Users\geoff\Desktop\autoruns.exe - Shortcut.lnk
2014-02-22 15:58 - 2014-02-22 15:58 - 00509264 _____ (Microsoft Corporation) C:\Users\geoff\Downloads\winsdk_web.exe
2014-02-22 15:06 - 2014-02-22 15:06 - 00049518 _____ () C:\Users\geoff\Downloads\autoruns.chm
2014-02-22 14:06 - 2014-02-22 14:06 - 00275400 _____ () C:\Windows\Minidump\022214-24180-01.dmp
2014-02-22 13:57 - 2014-02-22 13:58 - 00275400 _____ () C:\Windows\Minidump\022214-24601-01.dmp
2014-02-22 13:45 - 2014-02-22 13:46 - 00275400 _____ () C:\Windows\Minidump\022214-24133-01.dmp
2014-02-22 13:38 - 2014-02-22 13:38 - 00275400 _____ () C:\Windows\Minidump\022214-24913-01.dmp
2014-02-22 08:34 - 2014-02-22 08:34 - 00000000 ____D () C:\Users\geoff\AppData\Local\{B67A3A4E-802A-4834-BE81-F86AAB2F8159}
2014-02-21 20:33 - 2014-02-21 20:33 - 00000000 ____D () C:\Users\geoff\AppData\Local\{B0F4A322-066D-45C6-858E-EEF0181FDB0B}
2014-02-21 08:33 - 2014-02-21 08:33 - 00000000 ____D () C:\Users\geoff\AppData\Local\{814B5514-0A01-40DF-B13B-A8C8A7CF8F70}
2014-02-20 20:32 - 2014-02-20 20:33 - 00000000 ____D () C:\Users\geoff\AppData\Local\{9A634C7B-67E0-400F-A47E-85CE4ACA34D2}
2014-02-20 08:32 - 2014-02-20 08:32 - 00000000 ____D () C:\Users\geoff\AppData\Local\{09FDCC0D-A605-46CC-8219-59BCFEA2C3F0}
2014-02-19 20:32 - 2014-02-19 20:32 - 00000000 ____D () C:\Users\geoff\AppData\Local\{67BA0B76-89A1-460B-8554-3EB5DC8D0C5B}
2014-02-19 08:31 - 2014-02-19 08:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{92260675-5EDB-400B-AB34-AA7F3A0AEEAB}
2014-02-18 20:31 - 2014-02-18 20:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{2194A36C-5492-4EF5-A588-7E93E5220CF7}
2014-02-18 08:31 - 2014-02-18 08:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{977C9383-3F76-439F-BEEE-41F3D33DB1B5}
2014-02-17 20:31 - 2014-02-17 20:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{3A7EEE23-69AE-408C-8C70-D9ADF1F4C4B1}
2014-02-17 08:31 - 2014-02-17 08:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{D165DA32-3ADD-4F4A-A7EB-E0E8F5438482}
2014-02-16 13:33 - 2014-02-16 13:33 - 29515104 ____N (Symantec Corporation) C:\Users\geoff\Downloads\NortonIdentitySafe-EN-v1.exe
2014-02-16 11:39 - 2014-02-16 11:39 - 00000873 _____ () C:\Users\geoff\Downloads\doc.kml
2014-02-16 04:07 - 2014-02-16 04:07 - 00000000 ____D () C:\Users\geoff\AppData\Local\{968115E9-C897-498A-AF0A-29DDEFBA88A1}
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\geoff\AppData\Local\{BAED8697-94FB-4170-A602-39AB8AC5756E}
2014-02-15 14:39 - 2014-03-01 13:03 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BOINC
2014-02-15 14:37 - 2014-02-15 14:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-15 14:37 - 2014-02-15 14:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-15 14:37 - 2014-02-15 14:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-15 14:37 - 2014-02-15 14:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-15 14:36 - 2014-02-15 14:36 - 29141928 _____ (Oracle Corporation) C:\Users\geoff\Downloads\jre-7u51-windows-i586.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-15 14:33 - 2014-02-15 14:33 - 30796712 _____ (Oracle Corporation) C:\Users\geoff\Downloads\jre-7u51-windows-x64.exe
2014-02-15 14:23 - 2014-02-15 14:23 - 09476144 _____ (Space Sciences Laboratory, U.C. Berkeley) C:\Users\geoff\Downloads\boinc_7.2.39_windows_x86_64.exe
2014-02-14 19:21 - 2013-12-21 04:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 19:21 - 2013-12-21 03:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 19:20 - 2014-02-06 07:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 19:20 - 2014-02-06 06:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 19:20 - 2014-02-06 06:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 19:20 - 2014-02-06 06:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 19:20 - 2014-02-06 06:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 19:20 - 2014-02-06 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 19:20 - 2014-02-06 05:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 19:20 - 2014-02-06 05:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 19:20 - 2014-02-06 05:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 19:20 - 2014-02-06 05:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 19:20 - 2014-02-06 05:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 19:20 - 2014-02-06 05:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 19:20 - 2014-02-06 05:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 19:20 - 2014-02-06 05:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 19:20 - 2014-02-06 05:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 19:20 - 2014-02-06 05:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 19:20 - 2014-02-06 05:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 19:20 - 2014-02-06 05:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 19:20 - 2014-02-06 05:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 19:20 - 2014-02-06 04:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 19:20 - 2014-02-06 04:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 19:20 - 2014-02-06 04:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 19:20 - 2014-02-06 04:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 19:20 - 2014-02-06 04:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 19:20 - 2014-02-06 04:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 19:20 - 2014-02-06 04:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 19:20 - 2014-02-06 04:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 19:20 - 2014-02-06 04:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 19:20 - 2014-02-06 04:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 19:20 - 2014-02-06 04:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 19:20 - 2014-02-06 04:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 19:20 - 2014-02-06 04:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 19:20 - 2014-02-06 04:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 19:20 - 2014-02-06 04:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 19:20 - 2014-02-06 03:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 19:20 - 2014-02-06 03:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 19:20 - 2014-02-06 03:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 19:20 - 2014-02-06 03:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 19:20 - 2014-02-06 03:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 12:39 - 2014-02-14 12:39 - 00000000 ____D () C:\Users\geoff\AppData\Local\{EB671266-C25C-4972-9F11-96D143BB61A7}
2014-02-14 00:39 - 2014-02-14 00:39 - 00000000 ____D () C:\Users\geoff\AppData\Local\{9B3FA984-BDB2-4E30-8776-8B7EA0D56F27}
2014-02-13 12:39 - 2014-02-13 12:39 - 00000000 ____D () C:\Users\geoff\AppData\Local\{8ACE960D-EA6B-46F9-BD80-508F3DDC8269}
2014-02-12 21:48 - 2014-02-12 21:48 - 00000000 ____D () C:\Users\geoff\AppData\Local\{A61BA76F-BC4E-493A-840E-6E2DC5D6FE3E}
2014-02-12 09:47 - 2014-02-12 09:48 - 00000000 ____D () C:\Users\geoff\AppData\Local\{15B9705E-BC35-4E3A-88A2-9F5AED3E4F27}
2014-02-12 04:57 - 2013-12-31 18:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 04:57 - 2013-12-31 18:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 04:57 - 2013-12-24 18:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 04:57 - 2013-12-24 17:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 04:57 - 2013-12-05 21:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 04:57 - 2013-12-05 21:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 04:57 - 2013-12-05 21:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 04:57 - 2013-12-05 21:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 04:57 - 2013-12-03 21:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 04:57 - 2013-12-03 21:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 04:57 - 2013-12-03 21:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 04:57 - 2013-12-03 21:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 04:57 - 2013-12-03 21:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 04:57 - 2013-12-03 21:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 04:57 - 2013-12-03 21:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 04:57 - 2013-12-03 21:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 04:57 - 2013-12-03 21:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 04:57 - 2013-12-03 21:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 04:57 - 2013-12-03 21:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 04:57 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 04:57 - 2013-12-03 21:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 04:57 - 2013-12-03 21:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 04:57 - 2013-12-03 20:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 04:57 - 2013-12-03 20:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 04:57 - 2013-12-03 20:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 04:57 - 2013-12-03 20:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 04:57 - 2013-11-26 03:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 04:57 - 2013-11-22 17:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 21:47 - 2014-02-11 21:47 - 00000000 ____D () C:\Users\geoff\AppData\Local\{A872E65A-0C5A-477E-95EE-57BBAF7DE865}
2014-02-11 09:47 - 2014-02-11 09:47 - 00000000 ____D () C:\Users\geoff\AppData\Local\{E3621028-BA66-4DEE-86AA-FEDF0CDBFA48}
2014-02-10 21:46 - 2014-02-10 21:47 - 00000000 ____D () C:\Users\geoff\AppData\Local\{EEAEB6D2-9704-4CC1-A834-870114CB64A9}
2014-02-10 09:46 - 2014-02-10 09:46 - 00000000 ____D () C:\Users\geoff\AppData\Local\{C5D1B406-CFBE-40C4-9A87-3889A5608228}
2014-02-09 21:45 - 2014-02-09 21:46 - 00000000 ____D () C:\Users\geoff\AppData\Local\{9216D806-C4A8-4EC1-B3FB-BB218AB0F6AD}
2014-02-09 09:45 - 2014-02-09 09:45 - 00000000 ____D () C:\Users\geoff\AppData\Local\{10E83962-0FB8-4C9A-87CF-203D42FE9FB4}
2014-02-08 21:45 - 2014-02-08 21:45 - 00000000 ____D () C:\Users\geoff\AppData\Local\{7190F852-9724-4711-B84B-BF2AF4114287}
2014-02-08 09:44 - 2014-02-08 09:45 - 00000000 ____D () C:\Users\geoff\AppData\Local\{7DADDD29-C308-4E1A-8933-E6B28870FBAD}
2014-02-07 21:44 - 2014-02-07 21:44 - 00000000 ____D () C:\Users\geoff\AppData\Local\{051E8001-D7C0-4C97-9370-B3F3D5921E63}
2014-02-07 20:16 - 2014-02-07 20:16 - 54414336 _____ () C:\Users\geoff\Downloads\calibre-1.23.0.msi
2014-02-07 09:44 - 2014-02-07 09:44 - 00000000 ____D () C:\Users\geoff\AppData\Local\{3EBDDD78-B97E-4D6B-961E-7B326AFF1C36}
2014-02-06 21:43 - 2014-02-06 21:44 - 00000000 ____D () C:\Users\geoff\AppData\Local\{44751D69-5C3B-40A3-A896-E813D2BAF111}
2014-02-06 09:43 - 2014-02-06 09:43 - 00000000 ____D () C:\Users\geoff\AppData\Local\{E1386C77-0760-47DF-821C-14C6B83FE810}

==================== One Month Modified Files and Folders =======

2014-03-08 14:18 - 2014-03-08 14:17 - 00024797 _____ () C:\Users\geoff\Downloads\FRST.txt
2014-03-08 14:17 - 2014-03-08 14:13 - 00000000 ____D () C:\FRST
2014-03-08 14:12 - 2014-03-08 14:12 - 02156544 _____ (Farbar) C:\Users\geoff\Downloads\FRST64.exe
2014-03-08 13:53 - 2014-03-08 13:51 - 00000000 ____D () C:\AdwCleaner
2014-03-08 13:50 - 2014-03-08 13:50 - 01244192 _____ () C:\Users\geoff\Downloads\adwcleaner.exe
2014-03-08 07:06 - 2014-03-08 07:06 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-HP-Microsoft-Windows-7-Professional-(64-bit).dat
2014-03-08 07:06 - 2014-03-08 07:06 - 00000000 ____D () C:\RegBackup
2014-03-08 07:05 - 2014-03-08 07:05 - 00002197 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2014-03-08 07:04 - 2014-03-08 07:04 - 03944112 _____ () C:\Users\geoff\Downloads\tweaking.com_registry_backup_setup.exe
2014-03-08 07:04 - 2014-03-08 07:04 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2014-03-07 19:21 - 2014-03-07 19:21 - 00275400 _____ () C:\Windows\Minidump\030714-24492-01.dmp
2014-03-07 19:21 - 2014-02-26 19:48 - 402513736 _____ () C:\Windows\MEMORY.DMP
2014-03-07 19:21 - 2009-12-04 10:48 - 00000000 ____D () C:\Windows\Minidump
2014-03-01 13:16 - 2009-12-02 21:18 - 00000000 ____D () C:\ProgramData\Recovery
2014-03-01 13:03 - 2014-02-28 20:41 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-03-01 13:03 - 2014-02-26 22:40 - 00000000 ____D () C:\symbols
2014-03-01 13:03 - 2014-02-26 20:23 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-01 13:03 - 2014-02-25 23:09 - 00000000 ____D () C:\Windows\Standalone System Sweeper
2014-03-01 13:03 - 2014-02-23 08:24 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Local\Hewlett-Packard_Company
2014-03-01 13:03 - 2014-02-22 18:19 - 00000000 ____D () C:\Windows\pss
2014-03-01 13:03 - 2014-02-15 14:39 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BOINC
2014-03-01 13:03 - 2012-06-17 13:39 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Local\Hewlett-Packard
2014-03-01 13:03 - 2012-06-17 13:38 - 00000000 ____D () C:\Users\GeoffAdmin
2014-03-01 13:03 - 2011-05-14 21:09 - 00000000 ____D () C:\Program Files\BOINC
2014-03-01 13:03 - 2009-12-02 18:50 - 00000000 ____D () C:\Garmin
2014-03-01 13:03 - 2009-12-02 13:56 - 00000000 ____D () C:\MapSourceFiles
2014-03-01 13:03 - 2009-12-01 15:26 - 00000000 ____D () C:\ProgramData\BOINC
2014-03-01 13:03 - 2009-12-01 13:51 - 00000000 ____D () C:\Users\geoff
2014-03-01 13:03 - 2009-09-21 12:35 - 00000000 ____D () C:\ProgramData\Norton
2014-03-01 13:03 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-01 10:42 - 2014-03-01 10:42 - 00026881 _____ () C:\Users\GeoffAdmin\Desktop\attach.txt
2014-03-01 10:41 - 2014-03-01 10:42 - 00020251 _____ () C:\Users\GeoffAdmin\Desktop\dds.txt
2014-03-01 10:30 - 2014-03-01 10:30 - 00275400 _____ () C:\Windows\Minidump\030114-23852-01.dmp
2014-03-01 10:21 - 2009-07-14 00:13 - 00783334 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-01 10:18 - 2014-03-01 10:18 - 00275400 _____ () C:\Windows\Minidump\030114-23197-01.dmp
2014-03-01 09:06 - 2012-07-08 08:16 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Local\CrashDumps
2014-03-01 09:05 - 2014-03-01 09:05 - 00910000 _____ () C:\Users\GeoffAdmin\Downloads\MicrosoftSystemScan_b43b6a43-4f49-4af0-8d0d-841be4e91998.exe
2014-03-01 08:54 - 2014-03-01 08:54 - 00012932 _____ () C:\Users\geoff\Downloads\hijackthis.log
2014-03-01 08:53 - 2014-03-01 08:53 - 09289756 _____ () C:\Users\GeoffAdmin\Downloads\Results_HP_2014-03-01_08.52.53.cab
2014-03-01 08:48 - 2009-11-10 11:30 - 01548275 _____ () C:\Windows\WindowsUpdate.log
2014-03-01 08:41 - 2014-03-01 08:41 - 00350432 _____ (Microsoft Corporation) C:\Users\geoff\Downloads\ASH.0B198B7657555431334376787639B9.Run.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\winlogon.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\smss.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\services.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\lsm.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\lsass.exe
2014-02-28 23:31 - 2014-02-28 23:31 - 00000000 _____ () C:\Windows\SysWOW64\csrss.exe
2014-02-28 22:01 - 2014-02-28 22:01 - 00388608 _____ (Trend Micro Inc.) C:\Users\geoff\Downloads\HijackThis.exe
2014-02-28 22:00 - 2014-02-28 22:00 - 14839344 _____ (Trend Micro Inc.) C:\Users\geoff\Downloads\RootkitBusterV5.0-1171x64.exe
2014-02-28 21:18 - 2014-02-28 20:41 - 00000000 ____D () C:\rsit
2014-02-28 21:00 - 2014-02-28 21:00 - 00000010 _____ () C:\Users\GeoffAdmin\AppData\Local\sponge.last.runtime.cache
2014-02-28 20:54 - 2014-02-28 20:54 - 02049128 _____ (Trend Micro Inc.) C:\Users\geoff\Downloads\HousecallLauncher.exe
2014-02-28 20:54 - 2014-02-28 20:54 - 00000036 _____ () C:\Users\GeoffAdmin\AppData\Local\housecall.guid.cache
2014-02-28 20:48 - 2014-02-28 20:48 - 00026264 _____ () C:\Users\GeoffAdmin\Desktop\attach.txt.bak
2014-02-28 20:48 - 2014-02-28 20:48 - 00019730 _____ () C:\Users\GeoffAdmin\Desktop\dds.txt.bak
2014-02-28 20:44 - 2014-02-28 20:44 - 00688992 ____R (Swearware) C:\Users\geoff\Downloads\dds.scr
2014-02-28 20:39 - 2014-02-28 20:39 - 00781383 _____ () C:\Users\geoff\Downloads\RSIT.exe
2014-02-28 20:24 - 2014-02-28 21:31 - 00315984 _____ () C:\Users\geoff\Documents\022814-24117-01.dmp
2014-02-28 20:24 - 2014-02-28 20:23 - 00315984 _____ () C:\Windows\Minidump\022814-24117-01.dmp
2014-02-27 22:10 - 2014-02-28 21:31 - 00275400 _____ () C:\Users\geoff\Documents\022714-24601-01.dmp
2014-02-27 22:10 - 2014-02-27 22:10 - 00275400 _____ () C:\Windows\Minidump\022714-24601-01.dmp
2014-02-27 21:42 - 2014-02-27 21:42 - 00275400 _____ () C:\Windows\Minidump\022714-23680-01.dmp
2014-02-27 21:35 - 2009-12-01 15:26 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-02-27 21:34 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\registration
2014-02-27 21:23 - 2014-02-27 21:23 - 00275400 _____ () C:\Windows\Minidump\022714-23602-01.dmp
2014-02-26 22:27 - 2009-07-14 00:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-26 22:27 - 2009-07-14 00:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-26 21:11 - 2014-02-26 21:11 - 00093552 _____ () C:\Users\geoff\Downloads\WinKeyFinder175.zip
2014-02-26 20:23 - 2014-02-26 20:23 - 00001071 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-26 20:21 - 2014-02-26 20:21 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\geoff\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-26 20:20 - 2014-02-26 20:20 - 00065232 _____ (Malwarebytes) C:\Users\geoff\Downloads\regassassin-setup-1.03.exe
2014-02-26 20:19 - 2014-02-26 20:19 - 12589848 _____ (Malwarebytes Corp.) C:\Users\geoff\Downloads\mbar-1.07.0.1009.exe
2014-02-26 20:11 - 2014-02-26 20:11 - 10028532 _____ () C:\Users\geoff\Desktop\ccsc.reg
2014-02-26 20:06 - 2014-02-26 20:06 - 17065806 _____ () C:\Users\geoff\Desktop\CCS.reg
2014-02-26 20:03 - 2014-02-26 20:03 - 00275400 _____ () C:\Windows\Minidump\022614-24398-01.dmp
2014-02-26 19:59 - 2014-02-26 19:59 - 00275400 _____ () C:\Windows\Minidump\022614-25506-01.dmp
2014-02-26 19:48 - 2014-02-26 19:48 - 00275400 _____ () C:\Windows\Minidump\022614-23790-01.dmp
2014-02-24 21:22 - 2014-02-24 21:21 - 00275288 _____ () C:\Windows\Minidump\022414-23961-01.dmp
2014-02-24 21:21 - 2009-12-04 10:48 - 408264408 _____ () C:\Windows\MEMORY224.DMP
2014-02-24 21:19 - 2014-02-24 21:19 - 00003352 ____N () C:\bootsqm.dat
2014-02-24 19:26 - 2014-02-24 19:25 - 00275400 _____ () C:\Windows\Minidump\022414-23946-01.dmp
2014-02-23 17:16 - 2014-02-23 17:16 - 00275400 _____ () C:\Windows\Minidump\022314-23478-01.dmp
2014-02-23 14:41 - 2014-02-23 14:41 - 00380416 _____ () C:\Users\geoff\Downloads\vjh2cwpo.exe
2014-02-23 14:29 - 2014-02-23 14:29 - 00275400 _____ () C:\Windows\Minidump\022314-24679-01.dmp
2014-02-23 14:13 - 2014-02-23 14:13 - 00275400 _____ () C:\Windows\Minidump\022314-23025-01.dmp
2014-02-23 12:16 - 2014-02-23 12:16 - 00334720 _____ (Sysinternals - www.sysinternals.com) C:\Users\GeoffAdmin\Downloads\RootkitRevealer (1).exe
2014-02-23 12:12 - 2014-02-23 12:12 - 85226312 _____ (Sophos Limited) C:\Users\GeoffAdmin\Downloads\Sophos Virus Removal Tool.exe
2014-02-23 12:10 - 2014-02-23 12:10 - 00102160 _____ () C:\Users\GeoffAdmin\Downloads\RootkitRevealer.chm
2014-02-23 12:09 - 2014-02-23 12:09 - 00334720 _____ (Sysinternals - www.sysinternals.com) C:\Users\GeoffAdmin\Downloads\RootkitRevealer.exe
2014-02-23 10:48 - 2014-02-23 10:48 - 00275400 _____ () C:\Windows\Minidump\022314-24445-01.dmp
2014-02-23 08:33 - 2014-02-23 08:33 - 00275400 _____ () C:\Windows\Minidump\022314-23680-01.dmp
2014-02-23 08:23 - 2014-02-23 08:23 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Roaming\HP TCS
2014-02-23 08:22 - 2014-02-23 08:22 - 00000000 ____D () C:\Users\GeoffAdmin\AppData\Roaming\Hewlett-Packard
2014-02-23 07:44 - 2014-02-23 07:44 - 00275400 _____ () C:\Windows\Minidump\022314-26395-01.dmp
2014-02-22 18:15 - 2014-02-22 18:15 - 00275400 _____ () C:\Windows\Minidump\022214-25209-01.dmp
2014-02-22 16:17 - 2014-02-22 16:17 - 00001423 _____ () C:\Users\geoff\Desktop\autoruns.exe - Shortcut.lnk
2014-02-22 15:58 - 2014-02-22 15:58 - 00509264 _____ (Microsoft Corporation) C:\Users\geoff\Downloads\winsdk_web.exe
2014-02-22 15:06 - 2014-02-22 15:06 - 00049518 _____ () C:\Users\geoff\Downloads\autoruns.chm
2014-02-22 14:06 - 2014-02-22 14:06 - 00275400 _____ () C:\Windows\Minidump\022214-24180-01.dmp
2014-02-22 13:58 - 2014-02-22 13:57 - 00275400 _____ () C:\Windows\Minidump\022214-24601-01.dmp
2014-02-22 13:52 - 2012-12-16 08:46 - 00661184 _____ (Sysinternals - www.sysinternals.com) C:\Users\geoff\Downloads\autoruns.exe
2014-02-22 13:46 - 2014-02-22 13:45 - 00275400 _____ () C:\Windows\Minidump\022214-24133-01.dmp
2014-02-22 13:38 - 2014-02-22 13:38 - 00275400 _____ () C:\Windows\Minidump\022214-24913-01.dmp
2014-02-22 09:59 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-22 09:59 - 2009-07-13 23:51 - 00084454 _____ () C:\Windows\setupact.log
2014-02-22 09:17 - 2009-12-01 15:12 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-22 08:34 - 2014-02-22 08:34 - 00000000 ____D () C:\Users\geoff\AppData\Local\{B67A3A4E-802A-4834-BE81-F86AAB2F8159}
2014-02-21 20:33 - 2014-02-21 20:33 - 00000000 ____D () C:\Users\geoff\AppData\Local\{B0F4A322-066D-45C6-858E-EEF0181FDB0B}
2014-02-21 20:33 - 2010-10-23 16:30 - 00000000 ____D () C:\Users\geoff\AppData\Local\Windows Live
2014-02-21 14:27 - 2009-12-01 15:12 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-21 12:29 - 2009-12-01 15:12 - 00000880 _____ () C:\Windows\Tasks\Google Software Updater.job
2014-02-21 08:33 - 2014-02-21 08:33 - 00000000 ____D () C:\Users\geoff\AppData\Local\{814B5514-0A01-40DF-B13B-A8C8A7CF8F70}
2014-02-20 20:33 - 2014-02-20 20:32 - 00000000 ____D () C:\Users\geoff\AppData\Local\{9A634C7B-67E0-400F-A47E-85CE4ACA34D2}
2014-02-20 13:19 - 2011-11-06 17:47 - 00002173 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-20 08:32 - 2014-02-20 08:32 - 00000000 ____D () C:\Users\geoff\AppData\Local\{09FDCC0D-A605-46CC-8219-59BCFEA2C3F0}
2014-02-19 20:32 - 2014-02-19 20:32 - 00000000 ____D () C:\Users\geoff\AppData\Local\{67BA0B76-89A1-460B-8554-3EB5DC8D0C5B}
2014-02-19 19:19 - 2010-11-11 22:01 - 00000737 _____ () C:\Users\geoff\Documents\TwoRoads.txt
2014-02-19 15:14 - 2011-08-20 08:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-19 15:14 - 2010-11-17 18:02 - 00000000 ____D () C:\ProgramData\Skype
2014-02-19 08:31 - 2014-02-19 08:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{92260675-5EDB-400B-AB34-AA7F3A0AEEAB}
2014-02-18 21:31 - 2009-07-13 23:45 - 00020960 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-18 21:31 - 2009-07-13 23:45 - 00020960 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-18 20:31 - 2014-02-18 20:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{2194A36C-5492-4EF5-A588-7E93E5220CF7}
2014-02-18 08:31 - 2014-02-18 08:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{977C9383-3F76-439F-BEEE-41F3D33DB1B5}
2014-02-17 20:31 - 2014-02-17 20:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{3A7EEE23-69AE-408C-8C70-D9ADF1F4C4B1}
2014-02-17 08:31 - 2014-02-17 08:31 - 00000000 ____D () C:\Users\geoff\AppData\Local\{D165DA32-3ADD-4F4A-A7EB-E0E8F5438482}
2014-02-17 08:01 - 2013-02-16 08:13 - 00000000 ____D () C:\Users\geoff\AppData\Roaming\CarbonPoker
2014-02-16 15:14 - 2009-07-13 23:45 - 00447056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-16 15:12 - 2009-12-01 15:27 - 00275518 _____ () C:\Windows\PFRO.log
2014-02-16 13:33 - 2014-02-16 13:33 - 29515104 ____N (Symantec Corporation) C:\Users\geoff\Downloads\NortonIdentitySafe-EN-v1.exe
2014-02-16 11:39 - 2014-02-16 11:39 - 00000873 _____ () C:\Users\geoff\Downloads\doc.kml
2014-02-16 11:07 - 2012-05-12 08:18 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-02-16 11:06 - 2012-06-17 13:40 - 00120480 _____ () C:\Users\GeoffAdmin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-16 04:07 - 2014-02-16 04:07 - 00000000 ____D () C:\Users\geoff\AppData\Local\{968115E9-C897-498A-AF0A-29DDEFBA88A1}
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\geoff\AppData\Local\{BAED8697-94FB-4170-A602-39AB8AC5756E}
2014-02-15 16:07 - 2010-11-11 21:34 - 00120480 _____ () C:\Users\geoff\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-15 16:07 - 2010-10-23 16:53 - 00000000 ____D () C:\Users\geoff\AppData\Local\Windows Live Writer
2014-02-15 14:37 - 2014-02-15 14:37 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-15 14:37 - 2014-02-15 14:37 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-15 14:37 - 2014-02-15 14:37 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-15 14:37 - 2014-02-15 14:37 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-15 14:37 - 2013-10-20 17:52 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-15 14:36 - 2014-02-15 14:36 - 29141928 _____ (Oracle Corporation) C:\Users\geoff\Downloads\jre-7u51-windows-i586.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-15 14:35 - 2014-02-15 14:35 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-15 14:33 - 2014-02-15 14:33 - 30796712 _____ (Oracle Corporation) C:\Users\geoff\Downloads\jre-7u51-windows-x64.exe
2014-02-15 14:23 - 2014-02-15 14:23 - 09476144 _____ (Space Sciences Laboratory, U.C. Berkeley) C:\Users\geoff\Downloads\boinc_7.2.39_windows_x86_64.exe
2014-02-15 14:14 - 2011-07-09 08:10 - 00000000 ____D () C:\Users\geoff\AppData\Local\CrashDumps
2014-02-15 08:21 - 2009-12-13 17:09 - 02777169 _____ () C:\Users\geoff\Documents\gh 401K analysis.xlsx
2014-02-14 23:02 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache
2014-02-14 19:37 - 2011-01-28 17:47 - 00779248 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-14 19:32 - 2013-08-16 17:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-14 19:29 - 2009-12-01 14:21 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-14 12:39 - 2014-02-14 12:39 - 00000000 ____D () C:\Users\geoff\AppData\Local\{EB671266-C25C-4972-9F11-96D143BB61A7}
2014-02-14 00:39 - 2014-02-14 00:39 - 00000000 ____D () C:\Users\geoff\AppData\Local\{9B3FA984-BDB2-4E30-8776-8B7EA0D56F27}
2014-02-13 12:39 - 2014-02-13 12:39 - 00000000 ____D () C:\Users\geoff\AppData\Local\{8ACE960D-EA6B-46F9-BD80-508F3DDC8269}
2014-02-13 11:13 - 2012-04-17 19:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-13 11:13 - 2011-05-15 12:53 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-12 21:48 - 2014-02-12 21:48 - 00000000 ____D () C:\Users\geoff\AppData\Local\{A61BA76F-BC4E-493A-840E-6E2DC5D6FE3E}
2014-02-12 14:12 - 2009-12-01 15:12 - 00003892 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-12 14:12 - 2009-12-01 15:12 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-12 09:48 - 2014-02-12 09:47 - 00000000 ____D () C:\Users\geoff\AppData\Local\{15B9705E-BC35-4E3A-88A2-9F5AED3E4F27}
2014-02-11 21:47 - 2014-02-11 21:47 - 00000000 ____D () C:\Users\geoff\AppData\Local\{A872E65A-0C5A-477E-95EE-57BBAF7DE865}
2014-02-11 09:47 - 2014-02-11 09:47 - 00000000 ____D () C:\Users\geoff\AppData\Local\{E3621028-BA66-4DEE-86AA-FEDF0CDBFA48}
2014-02-10 21:47 - 2014-02-10 21:46 - 00000000 ____D () C:\Users\geoff\AppData\Local\{EEAEB6D2-9704-4CC1-A834-870114CB64A9}
2014-02-10 09:46 - 2014-02-10 09:46 - 00000000 ____D () C:\Users\geoff\AppData\Local\{C5D1B406-CFBE-40C4-9A87-3889A5608228}
2014-02-09 21:46 - 2014-02-09 21:45 - 00000000 ____D () C:\Users\geoff\AppData\Local\{9216D806-C4A8-4EC1-B3FB-BB218AB0F6AD}
2014-02-09 09:45 - 2014-02-09 09:45 - 00000000 ____D () C:\Users\geoff\AppData\Local\{10E83962-0FB8-4C9A-87CF-203D42FE9FB4}
2014-02-08 21:45 - 2014-02-08 21:45 - 00000000 ____D () C:\Users\geoff\AppData\Local\{7190F852-9724-4711-B84B-BF2AF4114287}
2014-02-08 09:45 - 2014-02-08 09:44 - 00000000 ____D () C:\Users\geoff\AppData\Local\{7DADDD29-C308-4E1A-8933-E6B28870FBAD}
2014-02-07 21:44 - 2014-02-07 21:44 - 00000000 ____D () C:\Users\geoff\AppData\Local\{051E8001-D7C0-4C97-9370-B3F3D5921E63}
2014-02-07 20:20 - 2012-12-01 22:02 - 00000000 ____D () C:\Calibre Library
2014-02-07 20:19 - 2012-12-09 17:11 - 00000950 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-02-07 20:19 - 2012-12-09 17:11 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2014-02-07 20:16 - 2014-02-07 20:16 - 54414336 _____ () C:\Users\geoff\Downloads\calibre-1.23.0.msi
2014-02-07 09:44 - 2014-02-07 09:44 - 00000000 ____D () C:\Users\geoff\AppData\Local\{3EBDDD78-B97E-4D6B-961E-7B326AFF1C36}
2014-02-07 02:21 - 2012-05-14 16:18 - 00003182 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForgeoff
2014-02-07 02:21 - 2012-05-14 16:18 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForgeoff.job
2014-02-06 21:44 - 2014-02-06 21:43 - 00000000 ____D () C:\Users\geoff\AppData\Local\{44751D69-5C3B-40A3-A896-E813D2BAF111}
2014-02-06 09:43 - 2014-02-06 09:43 - 00000000 ____D () C:\Users\geoff\AppData\Local\{E1386C77-0760-47DF-821C-14C6B83FE810}
2014-02-06 07:16 - 2014-02-14 19:20 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 06:30 - 2014-02-14 19:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 06:30 - 2014-02-14 19:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 06:12 - 2014-02-14 19:20 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 06:07 - 2014-02-14 19:20 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 06:06 - 2014-02-14 19:20 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 05:57 - 2014-02-14 19:20 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 05:56 - 2014-02-14 19:20 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 05:52 - 2014-02-14 19:20 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 05:49 - 2014-02-14 19:20 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 05:48 - 2014-02-14 19:20 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 05:48 - 2014-02-14 19:20 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 05:38 - 2014-02-14 19:20 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 05:32 - 2014-02-14 19:20 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 05:20 - 2014-02-14 19:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 05:17 - 2014-02-14 19:20 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 05:11 - 2014-02-14 19:20 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 05:01 - 2014-02-14 19:20 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 05:00 - 2014-02-14 19:20 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 04:57 - 2014-02-14 19:20 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 04:57 - 2014-02-14 19:20 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 04:52 - 2014-02-14 19:20 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 04:52 - 2014-02-14 19:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 04:50 - 2014-02-14 19:20 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 04:49 - 2014-02-14 19:20 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 04:47 - 2014-02-14 19:20 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 04:46 - 2014-02-14 19:20 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 04:25 - 2014-02-14 19:20 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 04:25 - 2014-02-14 19:20 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 04:24 - 2014-02-14 19:20 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 04:22 - 2014-02-14 19:20 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 04:13 - 2014-02-14 19:20 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 04:09 - 2014-02-14 19:20 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 04:03 - 2014-02-14 19:20 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 03:55 - 2014-02-14 19:20 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 03:41 - 2014-02-14 19:20 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 03:40 - 2014-02-14 19:20 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 03:36 - 2014-02-14 19:20 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 03:34 - 2014-02-14 19:20 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\geoff\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe
C:\Users\geoff\AppData\Local\Temp\javasysmo1784692008806181824.dll
C:\Users\geoff\AppData\Local\Temp\javasysmo1983644899849949117.dll
C:\Users\geoff\AppData\Local\Temp\ose00000.exe
C:\Users\geoff\AppData\Local\Temp\_is1903.exe
C:\Users\geoff\AppData\Local\Temp\_is3192.exe
C:\Users\GeoffAdmin\AppData\Local\Temp\CBRFEYFB.exe
C:\Users\GeoffAdmin\AppData\Local\Temp\ZZDXZFZI.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-18 00:14

==================== End Of Log ============================