.png)
System Surveillance Pro 6.8.0.14 Download
Download File ->->->-> https://urllio.com/2tgK7i
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01Ran by Richard Chen Temp Lo (administrator) on DURRUTI on 29-01-2014 19:36:04Running from C:\\Users\\Richard\\DesktopWindows 8 (X64) OS Language: English(US)Internet Explorer Version 10Boot Mode: NormalThe only official download link for FRST:Download link for 32-Bit version: -recovery-scan-tool/dl/81/Download link for 64-Bit Version: -recovery-scan-tool/dl/82/Download link from any site other than Bleeping Computer is unpermitted or outdated.See tutorial for FRST: -frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(Microsoft Corporation) C:\\Windows\\System32\\wlanext.exe(Microsoft Corporation) C:\\Windows\\System32\\dasHost.exe(Intel Corporation) C:\\Program Files\\Intel\\WiFi\\bin\\EvtEng.exe(Intel Corporation) C:\\Program Files\\Intel\\iCLS Client\\HeciServer.exe(Intel Corporation) C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\DAL\\Jhi_service.exe(NETGEAR) C:\\Program Files (x86)\\NETGEAR Genie\\bin\\NETGEARGenieDaemon64.exe(Symantec Corporation) C:\\Program Files (x86)\\Norton PC Checkup\\Engine\\2.0.18.15\\ccSvcHst.exe(Intel Corporation) C:\\Program Files\\Common Files\\Intel\\WirelessCommon\\RegSrvc.exe() C:\\Program Files\\CyberLink\\Shared files\\RichVideo64.exe(TOSHIBA Corporation) C:\\Windows\\System32\\ThpSrv.exe(TOSHIBA Corporation) C:\\Windows\\System32\\TODDSrv.exe(Microsoft Corporation) C:\\Program Files\\Windows Defender\\MsMpEng.exe(Intel Corporation) C:\\Program Files\\Intel\\WiFi\\bin\\ZeroConfigService.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\Teco\\TecoService.exe(Intel Corporation) C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\FWService\\IntelMeFWService.exe(Intuit Inc.) C:\\Program Files (x86)\\Common Files\\Intuit\\Update Service v4\\IntuitUpdateService.exe(Intel Corporation) C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\LMS\\LMS.exe(Symantec Corporation) C:\\Program Files (x86)\\Norton PC Checkup\\Engine\\2.0.18.15\\SymcPCCULaunchSvc.exe(Intel Corporation) C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\UNS\\UNS.exe(Intel Corporation) C:\\Program Files (x86)\\Intel\\Intel Integrated Clock Controller Service\\ICCProxy.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\TPHM\\TPCHSrv.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\TOSHIBA Service Station\\TMachInfo.exe(Synaptics Incorporated) C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe(Microsoft Corporation) C:\\Program Files\\Microsoft Mouse and Keyboard Center\\itype.exe(Microsoft Corporation) C:\\Program Files\\Microsoft Mouse and Keyboard Center\\ipoint.exe(Symantec Corporation) C:\\Program Files (x86)\\Norton PC Checkup\\Engine\\2.0.18.15\\ccSvcHst.exe(Microsoft Corporation) C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\\LiveComm.exe(Synaptics Incorporated) C:\\Program Files\\Synaptics\\SynTP\\SynTPHelper.exe(Mozilla Corporation) C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe(Realtek Semiconductor) C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe(SRS Labs, Inc.) C:\\Program Files\\SRS Labs\\SRS Control Panel\\SRSPanel_64.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\Hotkey\\TCrdMain_Win8.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\Teco\\TecoResident.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\TPHM\\TPCHWMsg.exe(TOSHIBA Corporation) C:\\Program Files (x86)\\TOSHIBA\\System Setting\\TSleepSrv.exe() C:\\Program Files (x86)\\TOSHIBA\\System Setting\\TODDMain.exe(TOSHIBA Corporation) C:\\Windows\\System32\\ThpSrv.exe(Intel Corporation) C:\\Windows\\System32\\igfxsrvc.exe(Intel Corporation) C:\\Windows\\System32\\igfxtray.exe(Intel Corporation) C:\\Windows\\System32\\hkcmd.exe(Intel Corporation) C:\\Windows\\System32\\igfxpers.exe(Google) C:\\Program Files (x86)\\Google\\Drive\\googledrivesync.exe(Google) C:\\Program Files (x86)\\Google\\Drive\\googledrivesync.exe(TOSHIBA Corporation) C:\\Program Files\\Toshiba\\TOSHIBA Service Station\\ToshibaServiceStation.exe==================== Registry (Whitelisted) ==================HKLM\\...\\Run: [] - [x]HKLM\\...\\Run: [RtHDVCpl] - C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)HKLM\\...\\Run: [SRS Premium Sound 3D] - C:\\Program Files\\SRS Labs\\SRS Control Panel\\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.)HKLM\\...\\Run: [TCrdMain] - C:\\Program Files\\TOSHIBA\\Hotkey\\TCrdMain_Win8.exe [2608040 2012-08-13] (TOSHIBA Corporation)HKLM\\...\\Run: [TecoResident] - C:\\Program Files\\TOSHIBA\\Teco\\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)HKLM\\...\\Run: [TosWaitSrv] - C:\\Program Files\\TOSHIBA\\TPHM\\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)HKLM\\...\\Run: [TSleepSrv] - C:\\Program Files (x86)\\TOSHIBA\\System Setting\\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation)HKLM\\...\\Run: [TODDMain] - C:\\Program Files (x86)\\TOSHIBA\\System Setting\\TODDMain.exe [213136 2012-08-04] ()HKLM\\...\\Run: [ThpSrv] - C:\\windows\\system32\\thpsrv /logonHKLM-x32\\...\\Run: [Adobe ARM] - C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)HKLM-x32\\...\\Run: [APSDaemon] - C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)HKLM-x32\\...\\Run: [QuickTime Task] - C:\\Program Files (x86)\\QuickTime\\QTTask.exe [421888 2012-04-18] (Apple Inc.)HKLM-x32\\...\\Run: [SunJavaUpdateSched] - C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe [254336 2013-07-02] (Oracle Corporation)Winlogon\\Notify\\igfxcui: C:\\windows\\system32\\igfxdev.dll (Intel Corporation)HKCU\\...\\Run: [Pando Media Booster] - C:\\Program Files (x86)\\Pando Networks\\Media Booster\\PMB.exe [3093624 2012-12-27] ()HKCU\\...\\Run: [NETGEARGenie] - C:\\Program Files (x86)\\NETGEAR Genie\\bin\\NETGEARGenie.exe [1041736 2012-10-16] ()HKCU\\...\\Run: [GarenaPlus] - \"C:\\Program Files (x86)\\Garena Plus\\GarenaMessenger.exe\" -autolaunchHKCU\\...\\Run: [Steam] - C:\\Program Files (x86)\\Steam\\steam.exe [1815464 2014-01-07] (Valve Corporation)HKCU\\...\\Run: [GoogleDriveSync] - C:\\Program Files (x86)\\Google\\Drive\\googledrivesync.exe [20203904 2013-12-06] (Google)MountPoints2: {3228f149-4afc-11e3-be9e-00266c2ef4de} - \"F:\\TL_Bootstrap.exe\"MountPoints2: {fefeaaa2-5ce2-11e2-be7c-00266c2ef4de} - \"G:\\iStudio.exe\"AppInit_DLLs: C:\\windows\\Jaksta\\AC\\x64\\jaudcap.dll => C:\\windows\\Jaksta\\AC\\x64\\jaudcap.dll [311584 2013-12-20] (Jaksta Technologies Pty Ltd)AppInit_DLLs-x32: C:\\windows\\Jaksta\\AC\\x86\\jaudcap.dll => C:\\windows\\Jaksta\\AC\\x86\\jaudcap.dll [264480 2013-12-20] (Jaksta Technologies Pty Ltd)Startup: C:\\Users\\Richard\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\OpenOffice.org 3.4.1.lnkShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\\Program Files (x86)\\OpenOffice.org 3\\program\\quickstart.exe ()==================== Internet (Whitelisted) ====================HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = HKLM\\Software\\Wow6432Node\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = HKLM\\Software\\Wow6432Node\\Microsoft\\Internet Explorer\\Main,Start Page = SearchScopes: HKLM - DefaultScope {8747579D-2F3F-4B16-B0BA-042FB09E7551} URL = ={searchTerms}&form=IE10TR&src=IE10TR&pc=MATBJSSearchScopes: HKLM - {8747579D-2F3F-4B16-B0BA-042FB09E7551} URL = ={searchTerms}&form=IE10TR&src=IE10TR&pc=MATBJSSearchScopes: HKLM-x32 - {8747579D-2F3F-4B16-B0BA-042FB09E7551} URL = ={searchTerms}&form=IE10TR&src=IE10TR&pc=MATBJSSearchScopes: HKCU - DefaultScope {8747579D-2F3F-4B16-B0BA-042FB09E7551} URL =SearchScopes: HKCU - {8747579D-2F3F-4B16-B0BA-042FB09E7551} URL =BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre7\\bin\\ssv.dll (Oracle Corporation)BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\\Program Files\\Java\\jre7\\bin\\jp2ssv.dll (Oracle Corporation)BHO-x32: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files (x86)\\Java\\jre7\\bin\\ssv.dll (Oracle Corporation)BHO-x32: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\\Program Files (x86)\\Java\\jre7\\bin\\jp2ssv.dll (Oracle Corporation)Tcpip\\Parameters: [DhcpNameServer] 192.168.1.1FireFox:========FF ProfilePath: C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.defaultFF DefaultSearchEngine: DuckDuckGoFF Homepage: www.google.comFF Plugin: @adobe.com/FlashPlayer - C:\\windows\\system32\\Macromed\\Flash\\NPSWF64_11_9_900_170.dll ()FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\\windows\\system32\\npDeployJava1.dll (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\\Program Files\\Java\\jre7\\bin\\plugin2\\npjp2.dll (Oracle Corporation)FF Plugin-x32: @adobe.com/FlashPlayer - C:\\windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_9_900_170.dll ()FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\IPT\\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\IPT\\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\\Program Files (x86)\\Java\\jre7\\bin\\dtplugin\\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\\Program Files (x86)\\Java\\jre7\\bin\\plugin2\\npjp2.dll (Oracle Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\\Program Files (x86)\\Pando Networks\\Media Booster\\npPandoWebPlugin.dll (Pando Networks)FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\\Program Files (x86)\\Google\\Update\\1.3.22.3\\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\\Program Files (x86)\\Google\\Update\\1.3.22.3\\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\\Program Files (x86)\\VideoLAN\\VLC\\npvlc.dll (VideoLAN)FF Plugin-x32: Adobe Reader - C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\AIR\\nppdf32.dll (Adobe Systems Inc.)FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\\Users\\Richard\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll (Unity Technologies ApS)FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\\Program Files (x86)\\Pando Networks\\Media Booster\\npPandoWebPlugin.dll (Pando Networks)FF SearchPlugin: C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\searchplugins\\duckduckgo.xmlFF Extension: EPUBReader - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2013-12-03]FF Extension: DownloadHelper - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]FF Extension: Firebug - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\firebug@software.joehewitt.com.xpi [2013-08-18]FF Extension: DuckDuckGo Plus - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2013-07-11]FF Extension: Advertising Cookie Opt-out - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\optout@google.com.xpi [2013-09-20]FF Extension: Adblock Plus - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-07]FF Extension: BetterPrivacy - C:\\Users\\Richard\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0m6z1vxe.default\\Extensions\\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2013-12-29]==================== Services (Whitelisted) =================U2 Intel ME Service; C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\FWService\\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)U2 jhi_service; C:\\Program Files (x86)\\Intel\\Intel Management Engine Components\\DAL\\jhi_service.exe [166720 2012-06-25] (Intel Corporation)U3 MyWiFiDHCPDNS; C:\\Program Files\\Intel\\WiFi\\bin\\PanDhcpDns.exe [284912 2013-11-20] ()U2 NETGEARGenieDaemon; C:\\Program Files (x86)\\NETGEAR Genie\\bin\\NETGEARGenieDaemon64.exe [231752 2012-09-24] (NETGEAR)U2 Norton PC Checkup Application Launcher; C:\\Program Files (x86)\\Norton PC Checkup\\Engine\\2.0.18.15\\SymcPCCULaunchSvc.exe [123320 2012-07-23] (Symantec Corporation)U2 PCCUJobMgr; C:\\Program Files (x86)\\Norton PC Checkup\\Engine\\2.0.18.15\\ccSvcHst.exe [126392 2012-07-23] (Symantec Corporation)U2 RichVideo64; C:\\Program Files\\CyberLink\\Shared files\\RichVideo64.exe [390672 2012-09-11] ()U3 wampapache; c:\\wamp\\bin\\apache\\apache2.4.4\\bin\\httpd.exe [24576 2013-06-23] (Apache Software Foundation)U3 wampmysqld; c:\\wamp\\bin\\mysql\\mysql5.6.12\\bin\\mysqld.exe [12867584 2013-06-23] ()U2 WinDefend; C:\\Program Files\\Windows Defender\\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation)U2 ZeroConfigService; C:\\Program Files\\Intel\\WiFi\\bin\\ZeroConfigService.exe [3674864 2013-11-20] (Intel Corporation)==================== Drivers (Whitelisted) ====================U3 NETwNe64; C:\\Windows\\system32\\DRIVERS\\NETwew00.sys [3346912 2013-10-31] (Intel Corporation)U3 NPF; C:\\Windows\\System32\\drivers\\NPF.sys [35344 2011-02-11] (CACE Technologies, Inc.)U3 RSP2STOR; C:\\Windows\\system32\\DRIVERS\\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.)U3 SmbDrvI; C:\\Windows\\system32\\DRIVERS\\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)U3 Thotkey; C:\\Windows\\System32\\drivers\\Thotkey.sys [28632 2012-07-31] (Windows Win 7 DDK provider)U3 usb3Hub; C:\\Windows\\System32\\drivers\\usb3Hub.sys [48096 2012-08-09] (Windows Win 7 DDK provider)U3 XHCIPort; C:\\Windows\\System32\\drivers\\XHCIPort.sys [188384 2012-08-09] (Windows Win 7 DDK provider)U3 GGSAFERDriver; \\\\C:\\Program Files (x86)\\Garena Plus\\Room\\safedrv.sys [x]==================== NetSvcs (Whitelisted) ======================================= One Month Created Files and Folders ========2014-01-29 19:36 - 2014-01-29 19:36 - 00014932 _____ C:\\Users\\Richard\\Desktop\\FRST.txt2014-01-29 19:35 - 2014-01-29 19:36 - 00000000 ____D C:\\FRST2014-01-29 19:35 - 2014-01-29 19:35 - 02079744 _____ (Farbar) C:\\Users\\Richard\\Desktop\\FRST64.exe2014-01-17 12:15 - 2013-12-06 22:37 - 00688640 _____ (Microsoft Corporation) C:\\windows\\system32\\WSShared.dll2014-01-17 12:15 - 2013-12-06 22:37 - 00163840 _____ (Microsoft Corporation) C:\\windows\\system32\\Windows.ApplicationModel.Store.TestingFramework.dll2014-01-17 12:15 - 2013-12-06 21:15 - 00562688 _____ (Microsoft Corporation) C:\\windows\\SysWOW64\\WSShared.dll2014-01-17 12:15 - 2013-12-06 21:15 - 00124928 _____ (Microsoft Corporation) C:\\windows\\SysWOW64\\Windows.ApplicationModel.Store.TestingFramework.dll2014-01-16 21:46 - 2013-10-30 21:56 - 00915968 _____ (Microsoft Corporation) C:\\windows\\system32\\MPSSVC.dll2014-01-16 21:46 - 2013-10-30 21:56 - 00758784 _____ (Microsoft Corporation) C:\\windows\\system32\\FirewallAPI.dll2014-01-16 21:46 - 2013-10-30 20:01 - 00550400 _____ (Microsoft Corporation) C:\\windows\\SysWOW64\\FirewallAPI.dll2014-01-16 21:46 - 2013-10-30 19:42 - 00074752 _____ (Microsoft Corporation) C:\\windows\\system32\\Drivers\\mpsdrv.sys2014-01-16 21:46 - 2013-10-27 21:50 - 00588288 _____ (Microsoft Corporation) C:\\windows\\system32\\SHCore.dll2014-01-16 21:46 - 2013-10-27 20:05 - 00452608 _____ (Microsoft Corporation) C:\\windows\\SysWOW64\\SHCore.dll2014-01-16 21:46 - 2013-10-13 12:49 - 00100696 _____ (Microsoft Corporation) C:\\windows\\system32\\Drivers\\disk.sys2014-01-16 21:46 - 2013-08-26 21:21 - 00227840 _____ (Microsoft Corporation) C:\\windows\\system32\\WebClnt.dll2014-01-16 21:46 - 2013-08-26 21:19 - 00104448 _____ (Microsoft Corporation) C:\\windows\\system32\\davclnt.dll2014-01-16 21:46 - 2013-08-26 14:29 - 00199168 _____ (Microsoft Corporation) C:\\windows\\SysWOW64\\WebClnt.dll2014-01-16 21:46 - 2013-08-26 14:28 - 00086016 _____ (Microsoft Corporation) C:\\windows\\SysWOW64\\davclnt.dll2014-01-14 00:47 - 2014-01-14 00:47 - 00016827 _____ C:\\Users\\Richard\\Desktop\\dds.txt2014-01-14 00:47 - 2014-01-14 00:47 - 00006104 _____ C:\\Users\\Richard\\Desktop\\attach.txt2014-01-14 00:45 - 2014-01-14 00:45 - 00688992 ____R (Swearware) C:\\Users\\Richard\\Desktop\\dds.com2014-01-07 00:45 - 2014-01-07 00:45 - 00000000 ____D C:\\ProgramData\\Oracle2014-01-07 00:45 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\\windows\\SysWOW64\\WindowsAccessBridge-32.dll2014-01-07 00:45 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\\windows\\SysWOW64\\javaws.exe2014-01-07 00:45 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\\windows\\SysWOW64\\javaw.exe2014-01-07 00:45 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\\windows\\SysWOW64\\java.exe2014-01-07 00:44 - 2014-01-07 00:45 - 00005521 _____ C:\\windows\\SysWOW64\\jupdate-1.7.0_45-b18.log2014-01-07 00:43 - 2014-01-07 00:43 - 00915368 _____ (Oracle Corporation) C:\\Users\\Richard\\Desktop\\jxpiinstall.exe2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\\Users\\Richard\\AppData\\Roaming\\SomePDF2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\\Program Files (x86)\\SomePDF2013-12-30 01:00 - 2013-12-30 01:00 - 00000000 ____D C:\\Users\\Richard\\AppData\\Local\\Days of Wonder==================== One Month Modified Files and Folders =======2014-01-29 19:36 - 2014-01-29 19:36 - 00014932 _____ C:\\Users\\Richard\\Desktop\\FRST.txt2014-01-29 19:36 - 2014-01-29 19:35 - 00000000 ____D C:\\FRST2014-01-29 19:35 - 2014-01-29 19:35 - 02079744 _____ (Farbar) C:\\Users\\Richard\\Desktop\\FRST64.exe2014-01-29 19:34 - 2012-12-26 22:16 - 01861941 _____ C:\\windows\\WindowsUpdate.log2014-01-29 19:34 - 2012-07-26 00:12 - 00000000 ____D C:\\windows\\system32\\sru2014-01-29 19:33 - 2013-12-29 12:34 - 00000000 ___RD C:\\Users\\Richard\\Google Drive2014-01-29 19:33 - 2013-12-29 12:33 - 00000938 _____ C:\\windows\\Tasks\\GoogleUpdateTaskMachineCore.job2014-01-29 09:14 - 2012-12-27 00:10 - 00000830 _____ C:\\windows\\Tasks\\Adobe Flash Player Updater.job2014-01-29 09:13 - 2012-12-26 23:17 - 00000000 ____D C:\\Users\\Richard\\AppData\\Local\\CrashDumps2014-01-29 08:48 - 2013-12-29 12:33 - 00000942 _____ C:\\windows\\Tasks\\GoogleUpdateTaskMachineUA.job2014-01-29 08:40 - 2012-12-26 22:26 - 00003598 _____ C:\\windows\\System32\\Tasks\\Optimize Start Menu Cache Files-S-1-5-21-3829054314-2939892797-2231541473-10012014-01-29 08:40 - 2012-07-25 23:28 - 00848230 _____ C:\\windows\\system32\\PerfStringBackup.INI2014-01-29 08:35 - 2012-07-26 00:12 - 00000000 ____D C:\\windows\\AUInstallAgent2014-01-28 22:51 - 2013-08-09 21:16 - 00000000 ____D C:\\Users\\Richard\\AppData\\Local\\Paint.NET2014-01-28 20:18 - 2012-07-25 23:22 - 00000006 ____H C:\\windows\\Tasks\\SA.DAT2014-01-28 20:17 - 2012-07-25 21:26 - 00524288 ___SH C:\\windows\\system32\\config\\BBI2014-01-27 12:11 - 2012-07-26 00:12 - 00000000 ____D C:\\windows\\rescache2014-01-26 22:50 - 2012-12-27 00:07 - 00000000 ____D C:\\Users\\Richard\\AppData\\Local\\PMB Files2014-01-26 22:50 - 2012-12-27 00:07 - 00000000 ____D C:\\ProgramData\\PMB Files2014-01-24 20:21 - 2013-01-16 21:16 - 00000000 ____D C:\\Users\\Richard\\SkyDrive\\My Documents\\IBT2014-01-23 08:48 - 2013-01-16 21:16 - 00000000 ____D C:\\Users\\Richard\\SkyDrive\\My Documents\\Larkspur2014-01-21 00:24 - 2013-01-16 15:51 - 00000000 ____D C:\\Users\\Richard\\AppData\\Roaming\\vlc2014-01-20 21:20 - 2012-07-26 00:12 - 00000000 ____D C:\\windows\\system32\\NDF2014-01-20 21:16 - 2012-07-26 00:12 - 00000000 ____D C:\\windows\\WinStore2014-01-19 23:46 - 2013-02-16 23:38 - 00000000 ____D C:\\Program Files (x86)\\Steam2014-01-18 23:33 - 2013-02-09 00:00 - 00270496 ____N (Microsoft Corporation) C:\\windows\\system32\\MpSigStub.exe2014-01-18 09:18 - 2013-07-15 10:06 - 00000000 ____D C:\\windows\\system32\\MRT2014-01-18 09:16 - 2012-12-28 19:13 - 86054176 _____ (Microsoft Corporation) C:\\windows\\system32\\MRT.exe2014-01-14 00:47 - 2014-01-14 00:47 - 00016827 _____ C:\\Users\\Richard\\Desktop\\dds.txt2014-01-14 00:47 - 2014-01-14 00:47 - 00006104 _____ C:\\Users\\Richard\\Desktop\\attach.txt2014-01-14 00:45 - 2014-01-14 00:45 - 00688992 ____R (Swearware) C:\\Users\\Richard\\Desktop\\dds.com2014-01-14 00:29 - 2012-12-26 22:17 - 00000000 ____D C:\\Users\\Richard\\AppData\\Local\\VirtualStore2014-01-09 01:30 - 2013-08-02 00:56 - 00000000 ____D C:\\ProgramData\\CyberLink2014-01-09 00:02 - 2013-11-14 21:39 - 00694240 _____ (Adobe Systems Incorporated) C:\\windows\\SysWOW64\\FlashPlayerApp.exe2014-01-09 00:02 - 2013-11-14 21:39 - 00078296 _____ (Adobe Systems Incorporated) C:\\windows\\SysWOW64\\FlashPlayerCPLApp.cpl2014-01-08 23:20 - 2013-08-02 00:56 - 00000000 ____D C:\\Users\\Richard\\AppData\\Roaming\\CyberLink2014-01-08 23:18 - 2013-08-02 00:56 - 00000000 ____D C:\\Users\\Richard\\SkyDrive\\My Documents\\CyberLink2014-01-08 23:18 - 2013-08-02 00:56 - 00000000 ____D C:\\Users\\Public\\CyberLink2014-01-07 00:45 - 2014-01-07 00:45 - 00000000 ____D C:\\ProgramData\\Oracle2014-01-07 00:45 - 2014-01-07 00:44 - 00005521 _____ C:\\windows\\SysWOW64\\jupdate-1.7.0_45-b18.log2014-01-07 00:45 - 2013-03-19 09:17 - 00000000 ____D C:\\Program Files (x86)\\Java2014-01-07 00:43 - 2014-01-07 00:43 - 00915368 _____ (Oracle Corporation) C:\\Users\\Richard\\Desktop\\jxpiinstall.exe2014-01-06 22:51 - 2013-01-16 15:51 - 00000000 ____D C:\\Users\\Richard\\AppData\\Roaming\\dvdcss2014-01-06 20:34 - 2013-01-02 01:54 - 00000000 ____D C:\\Users\\Richard\\AppData\\Roaming\\Azureus2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\\Users\\Richard\\AppData\\Roaming\\SomePDF2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\\Program Files (x86)\\SomePDF2013-12-30 01:00 - 2013-12-30 01:00 - 00000000 ____D C:\\Users\\Richard\\AppData\\Local\\Days of Wonder2013-12-30 00:59 - 2013-07-11 23:00 - 00000000 ____D C:\\ProgramData\\Package CacheSome content of TEMP:====================C:\\Users\\Richard\\AppData\\Local\\Temp\\AskPIP_FF_.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\bassmod.dllC:\\Users\\Richard\\AppData\\Local\\Temp\\bitool.dllC:\\Users\\Richard\\AppData\\Local\\Temp\\dotnetfx 3.5 sp1.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\FreemakeVideoDownloader_3.5.0.7.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\i4jdel0.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\i4jdel1.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\i4jdel2.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\jre-7u17-windows-i586-iftw.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\jre-7u21-windows-i586-iftw.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\MouseKeyboardCenterx64_1033.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\mp3el.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\mpsetup.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\Paint.NET.3.5.11.Install.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\Quarantine.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\switchsetup.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\swt-win32-3740.dllC:\\Users\\Richard\\AppData\\Local\\Temp\\vcredist_x64.exeC:\\Users\\Richard\\AppData\\Local\\Temp\\WiseUpdX.exe==================== Bamital & volsnap Check =================C:\\Windows\\System32\\winlogon.exe => MD5 is legitC:\\Windows\\System32\\wininit.exe => MD5 is legitC:\\Windows\\explorer.exe => MD5 is legitC:\\Windows\\SysWOW64\\explorer.exe => MD5 is legitC:\\Windows\\System32\\svchost.exe => MD5 is legitC:\\Windows\\SysWOW64\\svchost.exe => MD5 is legitC:\\Windows\\System32\\services.exe => MD5 is legitC:\\Windows\\System32\\User32.dll => MD5 is legitC:\\Windows\\SysWOW64\\User32.dll => MD5 is legitC:\\Windows\\System32\\userinit.exe => MD5 is legitC:\\Windows\\SysWOW64\\userinit.exe => MD5 is legitC:\\Windows\\System32\\rpcss.dll => MD5 is legitC:\\Windows\\System32\\Drivers\\volsnap.sys => MD5 is legitLastRegBack: 2014-01-27 03:02==================== End Of Log ============================ 153554b96e
https://www.hjbbookclub.co.uk/forum/welcome-to-the-forum/wingate-proxy-server-with-crack
https://www.klocked.me/group/klocked-athletes/discussion/d11e6046-b8fc-4c2f-89a6-5fc7ad672f09