Solved Hidden processes

[Classified1]

Hello there, my computer has been acting up recently and there is no indication as to whether or not there is malware or a virus or not. Please help me if you can.

Here is the FRST.log

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:12-09-2015
Ran by Tony&Theodore (administrator) on TONYTHEODOREPC (12-09-2015 12:32:41)
Running from C:\Users\Tony&Theodore\Desktop
Loaded Profiles: Tony&Theodore & (Available Profiles: Tony&Theodore & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe
(ClanServers Hosting LLC) C:\Program Files (x86)\GameTracker\GSInGameService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Speedly) C:\Windows\SysWOW64\Speedly_FastIP.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(ClanServers Hosting LLC) C:\Program Files (x86)\GameTracker\GTLite.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(JME) C:\Program Files (x86)\jmesoft\hotkey.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-05] (Realtek Semiconductor)
HKLM\...\Run: [Launch LgDeviceAgent] => C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [415752 2009-08-13] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] => C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4195848 2009-08-13] (Logitech Inc.)
HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [Launch LCDMon] => C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2093064 2009-08-13] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-06-29] (Apple Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM-x32\...\Run: [jmekey] => C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME)
HKLM-x32\...\Run: [ModeSwitch] => C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SetDefaultSCR] => C:\Program Files (x86)\Lenovo\Lenovo Screensaver\SetDefaultSCR.exe [102400 2009-12-30] (Lenovo)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5212072 2015-07-29] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Logitech G35] => C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech(c))
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Run: [GameTracker] => C:\Program Files (x86)\GameTracker\GTLite.exe [4018968 2012-10-25] (ClanServers Hosting LLC)
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\scrnsave.scr [11264 2009-07-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2011-02-03] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2012-11-16]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{962325E9-F704-4D24-A1F1-98501D95B43A}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3718762900-4173039834-1257701688-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo.msn.com
HKU\S-1-5-21-3718762900-4173039834-1257701688-1005\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/
URLSearchHook: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> Default = {577bfa34-deb3-d944-c198-e5c5779b962a}
URLSearchHook: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 - FCToolbarURLSearchHook Class - {577bfa34-deb3-d944-c198-e5c5779b962a} - C:\Program Files (x86)\SocialRibbons LP5\Helper.dll ()
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> {439163E2-D3AF-4AE4-B485-BEA1F08C14ED} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=OVO2&o=APN10379&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABE&apn_dtid=^YYYYYY^YY^US&apn_uid=9d26b22b-a1a5-4f59-b475-bbdaf37930d6&apn_sauid=3185101A-6001-4564-AD7A-FA2BED89C542
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> {CC63C12E-BE8D-44BD-9921-9D5C36F6CBA2} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=937811&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1005 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-21] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-21] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1219159.dll [2015-06-26] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-09-12] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-09-12] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Tony&Theodore\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2013-02-28] (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-27] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: npDisplayEngine -> C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll [No File]
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: @nsroblox.roblox.com/launcher -> C:\Users\Tony&Theodore\AppData\Local\Roblox\Versions\version-c5357fcf5b544474\\NPRobloxProxy.dll [2013-07-25] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tony&Theodore\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-11] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-11-17] (The Happy Cloud)
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-08-20] ()
FF user.js: detected! => C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\user.js [2014-02-05]
FF Extension: suRf aandd keep - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\a.wvcg@vyruiu.net [2014-11-08]
FF Extension: YoutubeAdblocker - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\jjbxwo@yen.edu [2014-11-08]
FF Extension: ColorfulTabs - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-11-08]
FF Extension: My Homepage - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\myhomepage_manishjain9@gmail.com.xpi [2012-03-05]
FF Extension: SocialRibbons LP5 - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{3fe6b000-fd7d-a4e4-edda-ef3dc5c7f32c}.xpi [2012-04-22]
FF Extension: AniWeather - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{4176DFF4-4698-11DE-BEEB-45DA55D89593}.xpi [2012-03-05]
FF Extension: Adblock Plus - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-03-05]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4

Chrome:
=======
CHR StartupUrls: Default -> ""
CHR Plugin: (APP) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll => No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll => No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => No File
CHR Plugin: (Display Engine v2) - C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll => No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll => No File
CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Tony&Theodore\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Raidcall plugin) - C:\Users\Tony&Theodore\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll => No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll => No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\windows\SysWOW64\npDeployJava1.dll => No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll => No File
CHR Profile: C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2012-11-16]
CHR Extension: (AdBlock) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-11-16]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (YoutubeBookmark) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef [2013-12-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [jmfkcklnlgedgbglfkkgedjfmejoahla] - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\13.2.0.5\avg.crx <not found>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3259304 2015-07-29] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301896 2015-07-29] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 CEEBC40A-FDED-4C59-B354-939132350B01; C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [96752 2009-10-12] ()
S3 celavimushost; C:\Program Files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [124120 2015-08-18] (altPUG LLC)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2013-08-13] (Hi-Rez Studios) [File not signed]
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo) [File not signed]
S3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4466688 2007-11-07] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-19] (Electronic Arts)
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76152 2014-10-03] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 Speedly_FastIP; C:\windows\SysWOW64\Speedly_FastIP.exe [157816 2015-02-03] (Speedly)
R2 vToolbarUpdater13.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe [711112 2012-11-08] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 0070201353115617mcinstcleanup; C:\Users\TONY&T~1\AppData\Local\Temp\007020~1.EXE -cleanup -nolog [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [28504 2012-03-06] (AVAST Software)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [244504 2014-07-21] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [237536 2015-05-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [237848 2014-10-24] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [369120 2015-05-26] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [211936 2015-05-26] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [276960 2015-05-18] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [30568 2012-11-08] (AVG Technologies)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S1 KS0108; C:\Program Files (x86)\LcdStudio\ks0108.sys [3712 2008-03-10] () [File not signed]
R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
S1 LC7981; C:\Program Files (x86)\LcdStudio\LC7981.sys [5120 2008-03-10] () [File not signed]
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2015-07-01] (http://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-06-15] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
S1 n3900; C:\Program Files (x86)\LcdStudio\n3900.sys [3968 2008-03-10] () [File not signed]
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
S1 SED133x; C:\Program Files (x86)\LcdStudio\SED133x.sys [7424 2008-03-10] () [File not signed]
S1 T6963C; C:\Program Files (x86)\LcdStudio\T6963c.sys [6400 2008-03-10] () [File not signed]
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

[Classified1]

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-12 12:32 - 2015-09-12 12:33 - 00033124 _____ C:\Users\Tony&Theodore\Desktop\FRST.txt
2015-09-12 12:32 - 2015-09-12 12:32 - 02190848 _____ (Farbar) C:\Users\Tony&Theodore\Desktop\FRST64.exe
2015-09-12 12:32 - 2015-09-12 12:32 - 00000000 ____D C:\FRST
2015-09-08 21:42 - 2015-08-17 21:42 - 00393304 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-09-08 21:42 - 2015-08-17 21:14 - 00344168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-09-08 21:42 - 2015-08-15 02:48 - 25190400 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-09-08 21:42 - 2015-08-15 02:34 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-09-08 21:42 - 2015-08-15 02:33 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-09-08 21:42 - 2015-08-15 02:18 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-09-08 21:42 - 2015-08-15 02:18 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-09-08 21:42 - 2015-08-15 02:17 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-09-08 21:42 - 2015-08-15 02:17 - 00585216 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-09-08 21:42 - 2015-08-15 02:17 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-09-08 21:42 - 2015-08-15 02:17 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-09-08 21:42 - 2015-08-15 02:10 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-09-08 21:42 - 2015-08-15 02:09 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-09-08 21:42 - 2015-08-15 02:06 - 19856896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-09-08 21:42 - 2015-08-15 02:06 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-09-08 21:42 - 2015-08-15 02:04 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-09-08 21:42 - 2015-08-15 02:04 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-09-08 21:42 - 2015-08-15 02:04 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-09-08 21:42 - 2015-08-15 02:04 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-09-08 21:42 - 2015-08-15 02:00 - 05923328 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-09-08 21:42 - 2015-08-15 01:57 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-09-08 21:42 - 2015-08-15 01:53 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-09-08 21:42 - 2015-08-15 01:53 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-09-08 21:42 - 2015-08-15 01:46 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-09-08 21:42 - 2015-08-15 01:42 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-09-08 21:42 - 2015-08-15 01:41 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-09-08 21:42 - 2015-08-15 01:40 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-09-08 21:42 - 2015-08-15 01:40 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-09-08 21:42 - 2015-08-15 01:39 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-09-08 21:42 - 2015-08-15 01:39 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-09-08 21:42 - 2015-08-15 01:39 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-09-08 21:42 - 2015-08-15 01:38 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-09-08 21:42 - 2015-08-15 01:35 - 02279424 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-09-08 21:42 - 2015-08-15 01:33 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-09-08 21:42 - 2015-08-15 01:32 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-09-08 21:42 - 2015-08-15 01:30 - 00479232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-09-08 21:42 - 2015-08-15 01:29 - 00665600 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-09-08 21:42 - 2015-08-15 01:29 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-09-08 21:42 - 2015-08-15 01:29 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-09-08 21:42 - 2015-08-15 01:24 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-09-08 21:42 - 2015-08-15 01:23 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-09-08 21:42 - 2015-08-15 01:22 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-09-08 21:42 - 2015-08-15 01:22 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-09-08 21:42 - 2015-08-15 01:21 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-09-08 21:42 - 2015-08-15 01:16 - 14451712 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-09-08 21:42 - 2015-08-15 01:16 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-08 21:42 - 2015-08-15 01:14 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-09-08 21:42 - 2015-08-15 01:12 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-09-08 21:42 - 2015-08-15 01:11 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-09-08 21:42 - 2015-08-15 01:10 - 04520448 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-09-08 21:42 - 2015-08-15 01:07 - 02427392 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-09-08 21:42 - 2015-08-15 01:04 - 12857344 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-09-08 21:42 - 2015-08-15 01:02 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-09-08 21:42 - 2015-08-15 01:01 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-09-08 21:42 - 2015-08-15 01:01 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-09-08 21:42 - 2015-08-15 00:55 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-09-08 21:42 - 2015-08-15 00:43 - 01951232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-09-08 21:42 - 2015-08-15 00:43 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-09-08 21:42 - 2015-08-15 00:39 - 01310720 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-09-08 21:42 - 2015-08-15 00:37 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-09-08 21:42 - 2015-08-05 13:56 - 01110016 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2015-09-08 21:42 - 2015-08-05 13:56 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-09-08 21:42 - 2015-08-05 13:56 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll
2015-09-08 21:42 - 2015-08-05 13:40 - 00216064 _____ (Microsoft Corporation) C:\windows\SysWOW64\InkEd.dll
2015-09-08 21:42 - 2015-07-22 20:06 - 05568960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-09-08 21:42 - 2015-07-22 20:06 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-09-08 21:42 - 2015-07-22 20:06 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-09-08 21:42 - 2015-07-22 20:03 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-09-08 21:42 - 2015-07-22 20:03 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-09-08 21:42 - 2015-07-22 20:03 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01390592 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-09-08 21:42 - 2015-07-22 20:02 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-09-08 21:42 - 2015-07-22 20:02 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-09-08 21:42 - 2015-07-22 20:01 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-09-08 21:42 - 2015-07-22 20:01 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-09-08 21:42 - 2015-07-22 20:01 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-09-08 21:42 - 2015-07-22 13:57 - 03989952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-09-08 21:42 - 2015-07-22 13:57 - 03934656 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-09-08 21:42 - 2015-07-22 13:54 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00641536 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00635392 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-09-08 21:42 - 2015-07-22 13:52 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2015-09-08 21:42 - 2015-07-22 13:52 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-09-08 21:42 - 2015-07-22 13:52 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-09-08 21:42 - 2015-07-22 13:52 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-09-08 21:42 - 2015-07-22 12:48 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-09-08 21:42 - 2015-07-14 23:17 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-09-08 21:42 - 2015-07-14 22:54 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-09-08 21:42 - 2015-07-09 13:58 - 01632256 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-09-08 21:42 - 2015-07-09 13:58 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-09-08 21:42 - 2015-07-09 13:42 - 01372160 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-09-08 21:42 - 2015-07-09 13:42 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-09-08 21:41 - 2015-09-01 21:51 - 03209216 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-09-08 21:41 - 2015-09-01 21:47 - 00372736 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-09-08 21:41 - 2015-08-27 14:18 - 02004480 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-09-08 21:41 - 2015-08-27 14:18 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-09-08 21:41 - 2015-08-27 14:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-09-08 21:41 - 2015-08-27 14:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-09-08 21:41 - 2015-08-27 13:58 - 01391104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-09-08 21:41 - 2015-08-27 13:58 - 01241088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-09-08 21:41 - 2015-08-27 13:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-09-08 21:41 - 2015-08-27 13:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-09-08 21:41 - 2015-08-04 14:03 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-09-08 21:41 - 2015-08-04 14:00 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-09-08 21:41 - 2015-08-04 13:56 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-09-08 21:41 - 2015-08-04 13:56 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-09-08 21:41 - 2015-08-04 13:56 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-09-08 21:41 - 2015-08-04 13:55 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-09-08 21:41 - 2015-08-04 13:55 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-09-08 21:41 - 2015-08-04 13:47 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-09-08 21:41 - 2015-08-04 12:58 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-09-08 21:41 - 2015-07-22 20:03 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-09-08 21:41 - 2015-07-22 20:03 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-09-08 21:41 - 2015-07-22 20:02 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-09-08 21:41 - 2015-07-22 20:02 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-09-08 21:41 - 2015-07-22 20:02 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-09-08 21:41 - 2015-07-22 19:58 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-09-08 21:41 - 2015-07-22 19:57 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:51 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-09-08 21:41 - 2015-07-22 13:53 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-09-08 21:41 - 2015-07-22 13:53 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-09-08 21:41 - 2015-07-22 13:53 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-09-08 21:41 - 2015-07-22 13:52 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-09-08 21:41 - 2015-07-22 13:52 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-09-08 21:41 - 2015-07-22 13:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-09-08 21:41 - 2015-07-22 13:47 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-09-08 21:41 - 2015-07-22 13:46 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:45 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-09-08 21:41 - 2015-07-22 12:44 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-09-08 21:41 - 2015-07-22 12:44 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-09-08 21:41 - 2015-07-22 12:34 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-09-08 21:41 - 2015-07-22 12:34 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-09-08 21:41 - 2015-07-22 12:31 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:31 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:31 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:31 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-08 21:41 - 2015-06-25 06:06 - 00115136 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-09-08 21:41 - 2015-06-25 06:01 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-09-08 21:41 - 2015-06-25 06:01 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2015-09-08 21:41 - 2015-06-25 05:44 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-09-08 21:40 - 2015-09-01 22:48 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-09-08 21:40 - 2015-09-01 22:48 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-09-08 21:40 - 2015-09-01 22:48 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-09-08 21:40 - 2015-09-01 22:47 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-09-08 21:40 - 2015-09-01 21:33 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 03165696 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 02606080 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-09-08 21:40 - 2015-08-26 14:06 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-09-08 21:40 - 2015-08-26 14:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-09-08 21:40 - 2015-08-26 14:06 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-09-08 21:40 - 2015-08-26 14:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00093184 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-09-08 21:40 - 2015-08-26 13:55 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-09-07 13:33 - 2015-09-07 15:25 - 00827625 _____ C:\Users\Tony&Theodore\Downloads\El Proyecto Gramática.pptx
2015-08-20 21:07 - 2015-08-20 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-18 20:55 - 2015-08-18 20:55 - 00000000 ____D C:\ProgramData\Celavimus
2015-08-18 20:53 - 2015-08-18 20:53 - 00001201 _____ C:\Users\Public\Desktop\CEVO Client (CSGO).lnk
2015-08-18 20:53 - 2015-08-18 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEVO Client
2015-08-18 20:52 - 2015-08-18 20:52 - 24003197 _____ C:\Users\Tony&Theodore\Downloads\CEVO CSGO Client.zip

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-12 12:31 - 2015-04-23 16:02 - 00000000 ___RD C:\Users\Tony&Theodore\Desktop\Video Games
2015-09-12 12:31 - 2012-09-07 14:53 - 01333869 _____ C:\windows\WindowsUpdate.log
2015-09-12 12:22 - 2009-07-13 23:20 - 00000000 ____D C:\windows\rescache
2015-09-12 12:19 - 2012-04-04 14:49 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-09-12 12:14 - 2011-03-15 15:40 - 00000898 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-12 12:05 - 2012-02-14 16:25 - 00003998 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{FBC56AB4-1D1D-4A15-8142-FCC0A3DD2774}
2015-09-12 12:02 - 2009-07-14 00:45 - 00026192 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-12 12:02 - 2009-07-14 00:45 - 00026192 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-12 11:46 - 2012-11-15 17:55 - 00000000 ____D C:\ProgramData\MFAData
2015-09-12 11:44 - 2013-02-12 21:11 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\GameTracker
2015-09-12 11:44 - 2009-07-13 23:20 - 00000000 ____D C:\windows\tracing
2015-09-12 11:43 - 2012-12-27 00:15 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-12 11:43 - 2012-09-08 11:10 - 00091365 _____ C:\windows\setupact.log
2015-09-12 11:43 - 2011-03-15 15:40 - 00000894 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-12 11:43 - 2011-03-03 19:08 - 00065536 _____ C:\windows\system32\Ikeext.etl
2015-09-12 11:43 - 2009-07-14 01:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-09-11 22:22 - 2011-03-03 18:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-11 21:30 - 2014-04-27 18:38 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\TS3Client
2015-09-10 16:44 - 2015-01-07 17:04 - 00000000 __SHD C:\Users\Tony&Theodore\AppData\Local\EmieBrowserModeList
2015-09-10 16:44 - 2014-10-27 18:39 - 00000000 __SHD C:\Users\Tony&Theodore\AppData\Local\EmieUserList
2015-09-10 16:44 - 2014-10-27 18:39 - 00000000 __SHD C:\Users\Tony&Theodore\AppData\Local\EmieSiteList
2015-09-09 22:46 - 2015-04-22 17:27 - 00000000 ____D C:\Users\Tony&Theodore\Desktop\Wallpapers
2015-09-09 15:18 - 2012-03-05 17:38 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Local\CrashDumps
2015-09-09 15:13 - 2009-07-14 01:13 - 00799898 _____ C:\windows\system32\PerfStringBackup.INI
2015-09-09 15:07 - 2009-07-14 00:45 - 00488320 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-09 15:04 - 2009-07-26 00:48 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 15:04 - 2009-07-13 23:20 - 00000000 ____D C:\windows\PolicyDefinitions
2015-09-08 23:12 - 2011-03-19 10:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-08 23:11 - 2013-08-13 22:48 - 00000000 ____D C:\windows\system32\MRT
2015-09-07 22:42 - 2013-02-23 22:52 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\Skype
2015-09-03 16:27 - 2012-03-14 20:15 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-29 21:24 - 2013-10-15 21:03 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Local\Battle.net
2015-08-29 21:14 - 2013-10-15 21:03 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-27 21:06 - 2011-03-15 15:40 - 00003894 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-27 21:06 - 2011-03-15 15:40 - 00003642 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-26 18:37 - 2011-03-03 17:19 - 134753440 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-08-21 16:55 - 2009-07-14 01:08 - 00032656 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-08-20 21:07 - 2014-01-04 22:09 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-20 21:07 - 2014-01-04 22:09 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-20 21:07 - 2013-02-23 22:52 - 00000000 ____D C:\ProgramData\Skype
2015-08-18 20:53 - 2013-06-06 22:52 - 00000000 ____D C:\Program Files (x86)\CEVO
2015-08-17 18:20 - 2011-04-23 20:05 - 00000000 ____D C:\Users\Tony&Theodore\Tracing
2015-08-17 18:15 - 2011-06-11 08:30 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\Apple Computer
2015-08-15 17:48 - 2014-04-27 18:37 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-08-13 14:49 - 2014-12-10 16:09 - 00000000 ____D C:\windows\system32\appraiser
2015-08-13 14:49 - 2014-05-05 23:26 - 00000000 ___SD C:\windows\system32\CompatTel

==================== Files in the root of some directories =======

2011-03-15 15:34 - 2011-03-15 15:34 - 0000017 _____ () C:\Users\Tony&Theodore\AppData\Local\resmon.resmoncfg
2010-09-16 14:28 - 2010-09-16 14:28 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe
2011-08-08 16:13 - 2011-06-09 16:13 - 0000032 ____R () C:\ProgramData\hash.dat
2011-09-18 15:21 - 2011-09-18 15:21 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Files to move or delete:
====================
C:\ProgramData\flashax10.exe
C:\ProgramData\hash.dat
C:\Users\Tony&Theodore\invasion-installer-v2.bat


Some files in TEMP:
====================
C:\Users\Tony&Theodore\AppData\Local\Temp\12k-545c.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\2bhj9u8l.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\3g7ihx3r.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\7vjc6b3k.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\a3jcwvbq.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\aomrg2ln.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\eufec-ka.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\fkgzaid4.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\hcuninstaller_20140908_181957_1104.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\i4jdel0.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\installer_x64.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\installer_x86.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\nfoesjlo.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\nvStInst.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\nvz_1.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\nvz_2.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\q52tsjok.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\qc_a402013b_7656_4f6f_b57f_5a8ef69f5fc4_32.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\SIntf16.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\SIntf32.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\SIntfNT.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\sonarinst.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\suylfyla.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\ub7igiv-.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\ubiEED5.tmp.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\YgoUpdater.exe
C:\Users\Tony&Theodore\AppData\Local\Temp\yzvkwnhd.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\zmbdqr_k.dll
C:\Users\Tony&Theodore\AppData\Local\Temp\zpii94ub.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-12 12:14

==================== End of FRST.txt ============================

 

[Classified1]

Here is the Addition.log


Additional scan result of Farbar Recovery Scan Tool (x64) Version:12-09-2015
Ran by Tony&Theodore (2015-09-12 12:33:47)
Running from C:\Users\Tony&Theodore\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-03-03 22:35:19)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3718762900-4173039834-1257701688-500 - Administrator - Disabled)
Guest (S-1-5-21-3718762900-4173039834-1257701688-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3718762900-4173039834-1257701688-1003 - Limited - Enabled)
Tony&Theodore (S-1-5-21-3718762900-4173039834-1257701688-1001 - Administrator - Enabled) => C:\Users\Tony&Theodore
UpdatusUser (S-1-5-21-3718762900-4173039834-1257701688-1009 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

A New Zero (HKLM-x32\...\A New Zero) (Version: - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated)
Adobe Flash Media Live Encoder 3.2 (HKLM-x32\...\{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}) (Version: 3.2.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{0099B484-C24C-4D5F-8167-B0F6DF196E72}) (Version: 12.0.3.133 - Adobe Systems, Inc)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.9.159 - Adobe Systems, Inc.)
Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
applicationupdater (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\SOE-C:/Users/Tony&Theodore/AppData/Local/Sony Online Entertainment/ApplicationUpdater) (Version: - Sony Online Entertainment)
Arma 2 (HKLM-x32\...\Steam App 33900) (Version: - Bohemia Interactive)
ArmA 2 Free Uninstall (HKLM-x32\...\ArmA 2) (Version: - )
Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Assassin's Creed(R) III v1.02 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.02 - Ubisoft)
AutoCAD 2012 - English (HKLM\...\AutoCAD 2012 - English) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 - English (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 Language Pack - English (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)
Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion plug-in for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4830 - AVG Technologies)
AVG 2014 (Version: 14.0.4365 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4830 - AVG Technologies) Hidden
AVS Image Converter 2.0.2.160 (HKLM-x32\...\AVS Image Converter_is1) (Version: - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.)
AwesomiumSetup (HKLM-x32\...\{19EF99D1-7EE6-4B5E-ABEE-0B3825F703B0}) (Version: 1.00.0000 - SIX Networks GmbH)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.5.0.0 - Electronic Arts)
Battlefield 4™ Beta (HKLM-x32\...\{CFAB3721-549D-4827-A4E8-7F90192114AB}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BattlEye (A2Free) Uninstall (HKLM-x32\...\BattlEye A2 Free) (Version: - )
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
Blender (HKLM\...\Blender) (Version: 2.65a-release - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CEVO CS:GO Client Beta version 1.0 (HKLM-x32\...\CEVO CS:GO Client Beta_is1) (Version: 1.0 - )
CEVO Paladin (0.0.4.2) (HKLM-x32\...\cmn_cevo_is1) (Version: 0.0.4.2 - CEVO)
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Desura (HKLM-x32\...\Desura) (Version: 100.53 - Desura)
Desura: Black Mesa (HKLM-x32\...\Desura_18829136625680) (Version: Full - Black Mesa Dev Team)
Desura: No More Room in Hell (HKLM-x32\...\Desura_7876970020880) (Version: Open Beta - No More Room In Hell Development Team)
Desura: Project Zomboid (HKLM-x32\...\Desura_62350040236064) (Version: Alpha - The Indie Stone)
Diablo II (HKLM-x32\...\Diablo II) (Version: - Blizzard Entertainment)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - )
Dota 2 Test (HKLM-x32\...\Steam App 205790) (Version: - )
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
EVE Online (remove only) (HKLM-x32\...\EVE) (Version: - CCP Games Ltd.)
EverQuest II (HKLM-x32\...\Steam App 201230) (Version: - Sony Online Entertainment, LLC.)
EVGA OC Scanner X 2.2.2 (HKLM-x32\...\{CB92C58B-7BDF-48E3-92E3-51768DCCA585}_is1) (Version: - EVGA)
EVGA Precision X 3.0.3 (HKLM-x32\...\PrecisionX) (Version: 3.0.3 - EVGA Corporation)
Fallout New Vegas (HKLM-x32\...\Fallout New Vegas_is1) (Version: - )
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
Foldit (HKLM-x32\...\Foldit) (Version: - )
Fraps (HKLM-x32\...\Fraps) (Version: - )
gamelauncher-ps2-live (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\SOE-) (Version: - Sony Online Entertainment)
GameStop App (HKLM-x32\...\GameStop App) (Version: 4.00 - GameStop)
GameStop App (x32 Version: 4.00 - GameStop) Hidden
GameTracker Lite (HKLM-x32\...\GameTracker Lite) (Version: - ClanServers Hosting LLC.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Garry)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\{170EDFF0-10DA-3EB1-9FA0-7B92E3DBD8C1}) (Version: 65.61.49243 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden
Half-Life (HKLM-x32\...\Half-Life_is1) (Version: Half-Life - Non Steam - KingSOFT DVD)
Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve)
Half-Life: Blue Shift (HKLM-x32\...\Steam App 130) (Version: - Gearbox)
Happy Cloud Client (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\HappyCloud) (Version: 4.54 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Hitman 2: Silent Assassin (HKLM-x32\...\Hitman 2: Silent Assassin) (Version: - Eidos Interactive)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version: - Square Enix)
HP Officejet Pro 8500 A910 Basic Device Software (HKLM\...\{EE7C94CC-BECB-4000-B5E3-D895307B9D5E}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Officejet Pro 8500 A910 Help (HKLM-x32\...\{871B2A9D-0F12-44B3-88C1-E0CB10A232E4}) (Version: 140.0.2.2 - Hewlett Packard)
iCloud (HKLM\...\{D1829BE5-F305-4576-9593-C66FC7E0B008}) (Version: 1.0.2.17 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.1952 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 14.5 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
iTunes (HKLM\...\{4046F74A-28F8-48C6-A5D3-2AFC472574C1}) (Version: 12.2.0.145 - Apple Inc.)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive)
Kodu Game Lab (HKLM-x32\...\{9921C67F-CF6D-431E-B554-40075B8C6C10}) (Version: 1.2.18 - Microsoft Research)
LcdStudio 2.0 Build 806 (HKLM-x32\...\LcdStudio) (Version: 2.0 Build 806 - LcdStudio)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Lenovo Driver and Application Installation (HKLM-x32\...\{45970CD1-D599-47D4-938F-3E9800D54ED1}) (Version: 5.1.0.1119 - Lenovo)
Lenovo Healthcare Software (HKLM-x32\...\{9610EC3A-C7A0-4C31-9F3B-F9020C582B47}) (Version: 3.0.0.090928 - Lenovo)
Lenovo Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3321a3 - CyberLink Corp.)
Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.) Hidden
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.0827 - CyberLink Corp.)
Lenovo Rescue System (Version: 3.0.0827 - CyberLink Corp.) Hidden
Lenovo Screensaver (HKLM-x32\...\{803E6DED-5050-4E3D-B26A-5915397362CD}) (Version: 1.0.5.091230 - Lenovo)
Lethal League (HKLM-x32\...\Steam App 261180) (Version: - Team Reptile)
Logitech G35 (HKLM\...\{27607A94-33AC-4AA7-AACE-95AF6ACA3E30}) (Version: 1.1.178 - Logitech)
Logitech GamePanel Software 3.03.133 (HKLM\...\{6CC95B76-D380-46B2-9022-9353938E48BA}) (Version: 3.03.133 - Logitech Inc.)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.2.1 - www.leaguereplays.com)
LVT (HKLM-x32\...\{D3063097-EC84-4D21-84A4-9D852E974355}) (Version: 4.1.1.0930 - Lenovo)
LXH-JME2207FN Hotkey Driver (HKLM-x32\...\{42B21298-C850-4272-AFD9-636CBC005421}) (Version: 5.1.0804 - Lenovo)
Macromedia Extension Manager (HKLM-x32\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)
Macromedia Flash 8 (HKLM-x32\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)
Macromedia Flash 8 Video Encoder (HKLM-x32\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)
Macromedia Flash Player 8 (HKLM-x32\...\{885A63EA-382B-4DD4-A755-14809B8557D6}) (Version: 8.0.22.0 - Macromedia)
Malwarebytes Anti-Malware version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
MechWarrior Online (HKLM-x32\...\{73bcb521-8936-42d7-ad00-ec2bb399e26c}) (Version: 1.4.3.0 - Piranha Games Inc.)
MechWarrior Online (x32 Version: 1.4.3.0 - Piranha Games Inc.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Flight (HKLM-x32\...\Steam App 203850) (Version: - )
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM-x32\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 ENU (HKLM-x32\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft Visual Basic 2008 Express Edition - ENU (HKLM-x32\...\Microsoft Visual Basic 2008 Express Edition - ENU) (Version: - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM\...\{62577E41-C350-3D07-97C8-2B6CDB4BAD60}) (Version: 3.5.21022 - Microsoft)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM\...\{11EB1163-5761-4BC6-8F48-98DCF6A46BBF}) (Version: 6.1.5288.17011 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Mobile Mouse Server (HKLM-x32\...\{BAC8C2FD-1FF8-4615-B827-9042248121CB}) (Version: 2.6.4 - RPA Tech, Inc)
Moonbase Alpha (HKLM-x32\...\Steam App 39000) (Version: - Army Game Studio/Virtual Heroes supporting)
Mozilla Firefox 15.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 15.0.1 (x86 en-US)) (Version: 15.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 15.0.1 - Mozilla)
My Game Long Name (HKLM\...\UDK-65d14ca0-53ff-43fd-9ac9-d1cf2943f901) (Version: - Epic Games, Inc.)
myTV (HKLM-x32\...\{C54184D0-D281-4523-B357-0606209DB56C}) (Version: 3.4.1 - MyTV)
myTV (x32 Version: 3.4.1 - MyTV) Hidden
No More Room in Hell (HKLM-x32\...\Steam App 224260) (Version: - No More Room in Hell Team)
NVIDIA 3D Vision Controller Driver 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.23 - NVIDIA Corporation)
NVIDIA Graphics Driver 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
ORION: Prelude (HKLM-x32\...\Steam App 104900) (Version: - Spiral Game Studios)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.2.3.36532 - Grinding Gear Games)
PC Optimizer Pro (HKLM\...\PC Optimizer Pro) (Version: 6.1.6.6 - PC Optimizer Pro, Inc.) <==== ATTENTION
Pirates, Vikings, & Knights II (HKLM-x32\...\Steam App 17570) (Version: - PVKII Team) <==== ATTENTION
Pivot Stickfigure Animator version 2.2.6 (HKLM-x32\...\Pivot Stickfigure Animator_is1) (Version: 2.2.6 - )
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment)
Power Dial (HKLM-x32\...\{F90F759A-78EF-4370-B25E-EC5F710D1097}) (Version: 3.0.1.1010 - Lenovo)
PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - Indie Stone Studios)
Project Zomboid (remove only) (HKLM-x32\...\ProjectZomboid) (Version: - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Python 3.4.2 (HKLM-x32\...\{2583CDBA-8A53-4622-BB67-1D163714C1B4}) (Version: 3.4.16349 - Python Software Foundation)
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Race The Sun (HKLM-x32\...\Steam App 253030) (Version: - Flippfly LLC)
Racket v6.1.1 (x86_64) (HKLM-x32\...\Racket-x86_64-6.1.1) (Version: 6.1.1 - PLT Design Inc.)
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.1.8-1.0.4843.13 - raidcall.com)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30095 - Realtek Semiconductor Corp.)
ROBLOX Player for Tony&Theodore (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
ROBLOX Studio 2013 for Tony&Theodore (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - ROBLOX Corporation)
Roxio BackOnTrack (HKLM-x32\...\{32F9BACF-FCD3-4B6A-AD85-255A449B6FA5}) (Version: 1.3.1 - Roxio)
Sansa Updater (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Sansa Updater) (Version: 1.301 - SanDisk Corporation)
SaveTheChildren Reminder by We-Care.com v4.0.18.4 (HKLM-x32\...\{DF6742E3-EA39-48C1-9343-CC3651C9E6BA}) (Version: 4.0.18.4 - We-Care.com)
SDFormatter (HKLM-x32\...\{5A347920-4AFC-11D5-9FB0-800649886934}) (Version: - )
Secunia PSI (3.0.0.4001) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.4001 - Secunia)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version: - Croteam)
Serious Sam Classic: The Second Encounter (HKLM-x32\...\Steam App 41060) (Version: - Croteam)
Serious Sam Classics: Revolution (HKLM-x32\...\Steam App 227780) (Version: - Croteam)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Setup Support for Social Ribbons 1.0 (HKLM-x32\...\Setup Support for Social Ribbons) (Version: 1.0 - Sono Control Inc.)
SixaxisPairTool 0.3.0 (HKLM-x32\...\SixaxisPairTool_is1) (Version: 0.3.0 - Dancing Pixel Studios)
SK_Helper 1.74 (HKLM-x32\...\SP_bf299197) (Version: - Verified Publisher)
Skullgirls (HKLM-x32\...\Steam App 245170) (Version: - Lab Zero Games)
Skullgirls ∞Endless Beta∞ (HKLM-x32\...\Steam App 208610) (Version: - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 0.1.1682.0 - Hi-Rez Studios)
SocialRibbons LP5 (HKLM-x32\...\SocialRibbons LP5) (Version: - )
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - )
Source SDK (HKLM-x32\...\Steam App 211) (Version: - Valve)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Speccy (HKLM\...\Speccy) (Version: 1.22 - Piriform)
Speedly (HKLM-x32\...\{F42A1869-5C2D-4DBB-909C-F78DF900E348}_is1) (Version: 1.0 - Speedly WebApps)
Spiral Knights (HKLM-x32\...\Steam App 99900) (Version: - SEGA)
Spotify (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.3.24764 - Blizzard Entertainment)
Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
Stellarium 0.12.0 (HKLM\...\Stellarium_is1) (Version: 0.12.0 - Stellarium team)
Sumotori Full Version (HKLM-x32\...\Sumotori Full Version) (Version: - )
SUPER © v2011.build.49 (July 1st, 2011) version v2011.build.49 (HKLM-x32\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2011.build.49 - eRightSoft)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - Team Meat)
surff aannD kkeep (HKLM-x32\...\{A35CA8FF-CB7D-8361-1CB9-83219CD11C78}) (Version: 1.2.0.1036 - surf aand keEp) <==== ATTENTION
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synthesia (remove only) (HKLM-x32\...\Synthesia) (Version: - )
System Requirements Lab CYRI (HKLM-x32\...\{E5F05232-96B6-4552-A480-785A60A94B21}) (Version: 5.0.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 6 (HKLM-x32\...\TeamViewer 6) (Version: 6.0.10722 - TeamViewer GmbH)
TERA (HKLM-x32\...\{0FCDA0F8-F3E5-402E-B9B6-13CB2B01182B}) (Version: 1.6 - En Masse Entertainment)
The Battle for Middle-earth (tm) (HKLM-x32\...\{962E05CF-3394-496D-0091-850CF1762F6B}) (Version: - )
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Mighty Quest For Epic Loot version 1.216644 (HKLM-x32\...\The Mighty Quest For Epic Loot_is1) (Version: 1.216644 - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)
ThemeWallpaper (HKLM-x32\...\{F29CBF73-C211-4616-898A-379A2679F990}) (Version: 1.1.0.090901 - Lenovo)
Tribes: Ascend (HKLM-x32\...\Steam App 17080) (Version: - )
Ultra Street Fighter IV (HKLM-x32\...\Steam App 45760) (Version: - Capcom)
Unity Web Player (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Universe Sandbox (HKLM-x32\...\Universe Sandbox) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
VC Runtimes MSI (x32 Version: 9.0.21022 - Microsoft) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D264BD11-6A9B-11E4-A4F7-F04DA23A5C58}) (Version: 13.0.428 - Sony)
Vindictus (HKLM-x32\...\Steam App 212160) (Version: - )
Visual MP3 Splitter & Joiner 8.0 (HKLM-x32\...\Visual MP3 Splitter & Joiner_is1) (Version: - ManiacTools.com)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warhammer® 40,000®: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version: - Relic)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinRAR 4.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
Wondershare Video Editor(Build 3.5.1) (HKLM-x32\...\Wondershare Video Editor_is1) (Version: - Wondershare Software)
Worms World Party (HKLM-x32\...\{9A200E68-D5F4-4E70-910F-2871753A0E2B}) (Version: - )
Xilisoft DPG Converter (HKLM-x32\...\Xilisoft DPG Converter) (Version: 5.1.23.0515 - Xilisoft)
XSplit Broadcaster (HKLM-x32\...\{B431C2DC-1119-40F2-9EDD-55E384FE91AD}) (Version: 1.3.1311.1201 - SplitMediaLabs)
YGOPro DevPro (HKLM-x32\...\{43589988-FB5A-4C3A-B7EE-1D831EF9E89F}) (Version: 1.9.9 - DevPro)
YouTube Downloader Toolbar v4.6 (HKLM-x32\...\{72A7495B-18CD-4751-AC38-5DBED9C6B1E7}) (Version: 4.6 - Spigot, Inc.) <==== ATTENTION
Zombie Panic Source (HKLM-x32\...\Steam App 17500) (Version: - Zombie Panic! Team)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files (x86)\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acadficn.dll (Autodesk, Inc.)

==================== Restore Points =========================

03-09-2015 17:39:03 Scheduled Checkpoint
05-09-2015 12:38:47 Windows Update
06-09-2015 19:00:12 Windows Backup
08-09-2015 21:31:15 Windows Update
08-09-2015 22:51:33 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:34 - 2012-11-15 16:38 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B98EEF0-C017-4DB7-8222-C6BB119A1882} - System32\Tasks\Norton Management\Norton Error Processor => C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\SymErr.exe
Task: {13B785D9-9152-4A5D-AF7B-FD9050EBEE94} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {15112FB2-B40B-476B-83A3-3A628B57DC08} - System32\Tasks\Norton Management\Norton Error Analyzer => C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\SymErr.exe
Task: {1EAFA8F7-C18A-4003-8728-20AC67821A59} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {35DD399B-808C-481C-BFEA-76D9227FBE66} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3718762900-4173039834-1257701688-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {4562CEEA-697E-4905-94DA-2F638D84E150} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3718762900-4173039834-1257701688-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {4E699FCB-C2A4-4D46-B8CB-7AE6461257EC} - System32\Tasks\{15DCB9C0-D25B-4330-8EDB-2A71375ECC7B} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {573CEB2D-289D-49F1-8516-0A28FCF5C740} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.1.8\WSCStub.exe
Task: {6079D5D7-608C-4E53-9E49-F62296E9329C} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\FREEzeFrog\bin\2.0.23.0\FREEzeFrogSA.exe <==== ATTENTION
Task: {6493BCA3-BF6C-4F04-A783-FCA80AE7CB4A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.1.8\SymErr.exe
Task: {66056FFC-6128-47B5-B666-50353D613668} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.1.8\SymErr.exe
Task: {79DF1526-20E8-4B81-8BF7-7CBE0929CF0E} - System32\Tasks\{27FE0F87-BEE1-41F9-B750-ADCAE6C2A2C9} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {8A1981C7-DB8B-43B9-87A1-469FC62F1274} - System32\Tasks\{77AE41C8-3FCF-454D-BD8B-30B5B8F549AB} => pcalua.exe -a D:\Setup.exe -d D:\
Task: {BAE6B830-BE56-41FF-A0D4-756337AF4215} - System32\Tasks\{75BE05EA-15ED-4032-890C-55602933E2DE} => pcalua.exe -a "C:\Users\Tony&amp;Theodore\Downloads\Mix_Vibes_Pro\MIXVIBES PRO\MixVibesPro401.exe" -d "C:\Users\Tony&amp;Theodore\Downloads\Mix_Vibes_Pro\MIXVIBES PRO"
Task: {C3B5B6E9-93BD-4C2F-B006-6F37874D7154} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {CA0EEC5D-569A-402A-A5A4-327BB564DDCB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {CC2D4F46-AC48-4BF3-8BD1-B63697C334FD} - System32\Tasks\{131A5D89-F7D4-4A12-85B2-6F423F858416} => pcalua.exe -a C:\Users\Tony&amp;Theodore\Games\lotrbfme2_win_7_64bit_fix\setup.exe -d C:\Users\Tony&amp;Theodore\Games\lotrbfme2_win_7_64bit_fix
Task: {DE674CCB-1362-4614-8AC4-94642186DB7B} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {EC557E52-BF2A-44B6-A362-5E5C7F23528B} - System32\Tasks\Express Files Updater => C:\Program Files (x86)\ExpressFiles\EFupdater.exe <==== ATTENTION
Task: {F4A8D4DD-B113-47AD-A2C9-D057B6EA9240} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2012-12-27 00:15 - 2013-09-12 03:25 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-02-02 14:08 - 2011-02-02 14:08 - 00018656 _____ () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
2011-07-02 20:40 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2009-10-12 15:47 - 2009-10-12 15:47 - 00096752 _____ () C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe
2012-07-03 13:27 - 2014-10-03 17:52 - 00076152 _____ () C:\windows\SysWOW64\PnkBstrA.exe
2012-11-08 15:48 - 2012-11-08 15:48 - 00711112 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe
2010-09-16 14:05 - 2009-07-16 12:20 - 00032768 _____ () C:\Program Files (x86)\jmesoft\Keyhook.dll
2010-09-16 14:05 - 2007-12-31 13:27 - 00007168 _____ () C:\Program Files (x86)\jmesoft\VistaVolume.dll
2009-06-03 23:59 - 2009-06-03 23:59 - 00619816 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll
2009-06-03 23:59 - 2009-06-03 23:59 - 00013096 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll
2014-02-05 17:10 - 2013-07-24 10:24 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-10-17 15:22 - 2014-10-17 15:22 - 00170496 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll
2010-09-16 14:03 - 2010-03-03 23:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-09-03 16:27 - 2015-08-27 20:17 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll
2015-09-03 16:27 - 2015-08-27 20:17 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Tony&Theodore\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Air Mouse.lnk => C:\windows\pss\Air Mouse.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Tony&Theodore^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GameStop Now.lnk => C:\windows\pss\GameStop Now.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Healthcare => C:\Program Files\Lenovo\HealthCare\HealthCare.exe /hide
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: RaidCall => C:\Program Files (x86)\RaidCall\raidcall.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BC99E975-AE09-4873-90D3-7A5CE5F3A500}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{99B381A4-9B22-45E0-9CF7-2D6FA5E3A0D0}] => (Allow) svchost.exe
FirewallRules: [{C0DA4C5B-6354-43B3-B5D8-C1A09511FFA4}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{B16B7351-6A98-4B42-9234-0E7359283C74}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{09E63837-FFA4-45B6-9AAC-D7AEE6B2FD82}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{A71B4289-1FD2-4360-BFF6-76B91F85900E}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [UDP Query User{10FAE0D2-3CD5-4BB5-80EE-D75063C804D8}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [TCP Query User{88E379A7-45E6-4853-80EB-3A61760E454A}C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe
FirewallRules: [UDP Query User{AE876D98-0D37-44E6-8A25-CCFE09C8D777}C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe
FirewallRules: [{E371252D-E02D-48DD-9D10-54D56FCB7068}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{112372F4-DEE1-495D-ABE2-DE5B1BB08CD8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ADF49BBC-14FD-45A2-8EC0-1A2C6F4ADF71}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe
FirewallRules: [{BD6423C4-A462-4C40-80F9-0AD98B6194AF}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe
FirewallRules: [{D5429DDA-45FA-449A-93D9-8A1BA63C78D2}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe
FirewallRules: [{9C14E06E-CFB1-413A-AE7B-D0BBF1901CF2}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe
FirewallRules: [TCP Query User{778D55FD-AFD4-4D02-8986-7A1E8542AB74}C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe
FirewallRules: [UDP Query User{B35D30F8-54FE-45EC-B85C-628FF98DA6EC}C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe
FirewallRules: [{241FD511-FFB5-4977-B11C-0498B2330222}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{8AD16539-EFF0-476C-9862-B1FB404309EF}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{10C3CA2E-4EB2-4CF9-BA3D-55EC4B2462C2}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{CFE1898C-D428-467D-99B9-6B55D850820B}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{F2F6E98D-866B-4364-A151-DFED8FFDB928}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{8CABA158-3016-4311-941B-1DB9C2D3E35C}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{47D400C1-D301-4612-B964-E7910CB790BF}] => (Allow) C:\Users\Tony&Theodore\Downloads\Facemoods.exe
FirewallRules: [{919AC6B9-A905-4950-B98C-682E6FFD6462}] => (Allow) C:\Users\Tony&Theodore\Downloads\Facemoods.exe

 

[Classified1]

FirewallRules: [TCP Query User{6FE11DB9-C718-4FBF-9EAA-54927EA3BFB6}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [UDP Query User{50CAAABA-BE69-44F1-B0EE-EDA5515BB14C}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [TCP Query User{5E2C7A1B-A8D7-4D9D-9486-BAB579E8D0B5}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [UDP Query User{2BD2CEE9-C2E2-44E0-AC86-4E03BA420A6B}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [TCP Query User{4AE39C73-C3E8-4C9E-A2D5-EA1BD83BC42C}C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe
FirewallRules: [UDP Query User{8B4881CD-E3E7-4264-96B0-3C26A238B53B}C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe
FirewallRules: [TCP Query User{212E7F17-412A-4F43-8F63-542D1A9E5CDE}C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe
FirewallRules: [UDP Query User{8D70A4D1-7FF6-4CC0-B37D-4AC350C41567}C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe
FirewallRules: [TCP Query User{01777649-FFD4-4832-8F2D-E7BA16716494}C:\program files (x86)\starcraft ii\starcraft ii.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii.exe
FirewallRules: [UDP Query User{BA7CD9C2-8552-4ACA-9045-E1DF433FF8B5}C:\program files (x86)\starcraft ii\starcraft ii.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii.exe
FirewallRules: [TCP Query User{7AE680E7-B1C8-4004-8405-C312916A6CE6}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [UDP Query User{EEA484D3-F335-4603-BD35-661C7400A9B9}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [TCP Query User{1C831F77-FBF0-4004-A3D6-E1FB6CA27D93}C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe
FirewallRules: [UDP Query User{49FBF66F-1C3D-4D34-B58A-70B6FDAA892D}C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe
FirewallRules: [{5F7A3CFE-E43F-4F5B-BA72-D942CAD0A22A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{6B5A3C18-9CB7-4C45-9F7F-729E30D26A31}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{FF1D6155-713D-4993-B54C-5A2F5A83E608}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{0BD7733D-0DE8-43D6-9511-2EE0182BD86F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{4644AB0C-09E7-453D-8FB7-9170E90D3702}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\dinodday.exe
FirewallRules: [{D24E9E85-85DC-4CFE-8296-A1B9B0F8F747}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\dinodday.exe
FirewallRules: [{A5A2A4F4-28B2-4AF2-AA0C-8104E68BE819}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\srcds.exe
FirewallRules: [{39E570DB-8BF5-46BE-A535-D293845CFF8A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\srcds.exe
FirewallRules: [TCP Query User{8B6158E4-20E0-41A5-97AA-9754B5492E52}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{A562F72A-FFBC-4A77-AACA-4A5FB4227901}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{68FB8D29-696C-47B0-8D43-70311F6BCE90}C:\users\tony\desktop\utorrent.exe] => (Allow) C:\users\tony\desktop\utorrent.exe
FirewallRules: [UDP Query User{CE710392-542D-4CDB-830C-FFE77FE8BA3A}C:\users\tony\desktop\utorrent.exe] => (Allow) C:\users\tony\desktop\utorrent.exe
FirewallRules: [{75A46C94-6BE1-410D-B069-3DE88141A54B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [{DEC60361-C38D-4041-89B8-5A2B3EA20C85}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [TCP Query User{D22C73E4-77CA-44F7-ACAC-7BB8CA141F30}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [UDP Query User{3902E566-A837-4B0D-A82F-42511061DD2B}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [TCP Query User{1ABE62FC-FAE9-4325-996C-472690B17E44}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [UDP Query User{CBDC28EA-C1FA-459A-83A3-70B0B24295FA}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [TCP Query User{22E603D5-1E83-4253-8F7D-78B5F7407FA2}C:\program files (x86)\ultramixer\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ultramixer\jre\bin\javaw.exe
FirewallRules: [UDP Query User{BB4CD703-DEB5-417E-BF14-66D0A9BF0819}C:\program files (x86)\ultramixer\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ultramixer\jre\bin\javaw.exe
FirewallRules: [TCP Query User{1D6516C8-EB67-4B5B-9159-00AB35D42305}C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F4E37381-3F1B-47C0-A47B-05EFD030854C}C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F75ADAC2-9381-4D5A-91D7-F6A05AF1F76D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CB7A9652-6E59-4A36-88F7-08DB0DC803D2}] => (Allow) LPort=2869
FirewallRules: [{A25E5EFD-75CD-4713-9632-E2B71698B6A7}] => (Allow) LPort=1900
FirewallRules: [{13AE75A5-01B9-47BD-808D-2727DD1A9496}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{F6EA349B-596C-407C-A1A0-84AC4CE6590E}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Block) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{42F2E245-CF92-44EA-BC73-ADED4293B5D3}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Block) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{F3642756-B585-4B19-8A7B-11C48F42FCEA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AB19B93B-A807-475D-A2A2-9CADA993C76E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{089B8642-D0B8-4561-9759-96F7529A7AB0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FF59BE36-4036-4CC8-9638-30CF189CF0DE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{726FDCE9-6402-4DBC-AD7D-045B11D7CD58}C:\program files (x86)\starcraft ii\starcraft ii public test.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii public test.exe
FirewallRules: [UDP Query User{E7C0B230-444D-40FF-9815-A0D049E110DE}C:\program files (x86)\starcraft ii\starcraft ii public test.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii public test.exe
FirewallRules: [TCP Query User{C797DC0A-9639-42E3-88B9-D6B374004722}C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe
FirewallRules: [UDP Query User{F76E2F3E-AD10-46DB-9947-3C498F042B34}C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe
FirewallRules: [TCP Query User{C075F0AF-F20E-475E-AE17-073FE959E711}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [UDP Query User{466CC04D-EE26-4395-8991-CD9081AB4374}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [TCP Query User{6849171A-25A2-4CD4-A3AA-5501B747E10D}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [UDP Query User{87AFDA4A-92E6-4AB7-908B-CFA9A334B5AD}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [TCP Query User{F2D8F3C1-F00F-4A6B-B264-794E130FC01E}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [UDP Query User{5B453980-9A68-4E99-AA62-CB6F91640FA1}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [TCP Query User{099A064F-0C0A-453D-B048-86BA32E799E7}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [UDP Query User{BBFBE755-0EA3-42CD-BE09-6803212DA082}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [{8955DD40-9E2A-49DF-948F-B9ED1A2860CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\killingfloor\System\KillingFloor.exe
FirewallRules: [{2637A7F4-2F10-404B-857D-94C2D2E6695C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\killingfloor\System\KillingFloor.exe
FirewallRules: [{0BB6D3A5-A791-4A56-96FC-1A6BB6BC614C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nuclear dawn\nucleardawn.exe
FirewallRules: [{3F77CDAD-6468-46FB-AED7-D6D4FFB7FDB7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nuclear dawn\nucleardawn.exe
FirewallRules: [{5F9181E5-5F64-41C7-BDB0-1DD555B63F09}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{8A24D2B8-D936-47B8-9D1B-70ACA855CE67}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{5262F6DB-BD9A-4FF1-B1DD-EB59EFCF0D96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{A6FBC3B1-619B-44FA-B2A4-88D619B808BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{513F6B19-AEFE-44D6-BAA8-855BE8EAEF94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\crimecraft\SteamLauncher.exe
FirewallRules: [{6DAC8E49-2999-43C1-AA7D-C75262334EFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\crimecraft\SteamLauncher.exe
FirewallRules: [TCP Query User{C1133A9F-11FE-4A45-B4E7-97D9FDD129D7}C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe
FirewallRules: [UDP Query User{0E0D2740-9BAB-4999-943B-C57A8D99CE00}C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe
FirewallRules: [{F0B7AC88-4BA2-4B6A-A6C8-CB2AA2C0E57F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\day of defeat source\hl2.exe
FirewallRules: [{CAE54E0B-2EEE-48E8-90BF-51263967ADC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\day of defeat source\hl2.exe
FirewallRules: [TCP Query User{47558F81-F988-4EDE-BB25-65CEDEBD8C66}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [UDP Query User{BC55AECF-5BE0-46B3-9BC7-F50746E97F77}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [TCP Query User{4ED1A10A-AAE9-4101-BE8D-1E20788CE3F9}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [UDP Query User{8A09F8C5-330E-4A44-A5CA-00EFE133D4E1}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [TCP Query User{9A6054AD-84DF-4412-A536-53974C722C01}C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{E9BD9C68-7BAD-407A-AE57-503074687B19}C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{CA01CC75-5ECF-4D94-B8B8-AA9A85073295}C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe
FirewallRules: [UDP Query User{2C7FDA59-9318-42CE-A66B-427F19FA937A}C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe
FirewallRules: [TCP Query User{796F0B38-1B13-444C-ABE0-34AC053D27BF}C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{16A2DF22-C38F-42A7-85B8-7BF31AF2BC2D}C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{CB2C723F-BF53-4076-86BD-D3378359EF3E}C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{926713B3-2B06-4747-8891-9F8060C9C6F5}C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{587B3D83-74B7-46A6-A5B3-80043E37F1AF}C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{B7B4E784-4DFB-4F11-96EF-2A827080296B}C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{E1128764-7A8A-4304-BC08-D1703600FEE0}C:\program files (x86)\oovoo\oovoo.exe] => (Allow) C:\program files (x86)\oovoo\oovoo.exe
FirewallRules: [UDP Query User{B91F2AC8-1637-49BB-AE52-B1E84C7EE074}C:\program files (x86)\oovoo\oovoo.exe] => (Allow) C:\program files (x86)\oovoo\oovoo.exe
FirewallRules: [{905D9D8D-40E4-4237-9E59-3F42871DA103}] => (Allow) LPort=443
FirewallRules: [{06B2DDA2-D7A9-407E-BBB3-AE60E3A577D3}] => (Allow) LPort=443
FirewallRules: [{A0ED275A-6F4C-4FB6-BA18-13783C657CBA}] => (Allow) LPort=37674
FirewallRules: [{1D684AFC-AF05-4716-85E1-F2F765A87C43}] => (Allow) LPort=37674
FirewallRules: [{5280D71F-8693-4BD9-A129-B523547611CE}] => (Allow) LPort=37675
FirewallRules: [{55B89468-7654-4186-AEC0-F57EA3755863}] => (Allow) C:\Program Files (x86)\SocialRibbons LP5\TroubleShooter.exe
FirewallRules: [{06BB8CDC-5CDD-4D05-A33E-6D1950203C1A}] => (Allow) C:\Program Files (x86)\SocialRibbons LP5\TroubleShooter.exe
FirewallRules: [TCP Query User{BB0937E0-B5C3-4020-95A1-B345850EEB35}C:\program files\starcraft\starcraft.exe] => (Allow) C:\program files\starcraft\starcraft.exe
FirewallRules: [UDP Query User{ACDAA4C2-A955-421B-86CC-0FDDBE4F9F67}C:\program files\starcraft\starcraft.exe] => (Allow) C:\program files\starcraft\starcraft.exe
FirewallRules: [TCP Query User{E60D0AC7-7B05-4A66-BFAD-D9560571B5F2}C:\program files (x86)\java\jre6\bin\java.exe] => (Block) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [UDP Query User{23255D7E-5FEC-4AA0-BC24-56DC5CBE4CF8}C:\program files (x86)\java\jre6\bin\java.exe] => (Block) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [{FDBFA474-DFD7-4D8E-910D-075B1A0E0000}] => (Allow) C:\Users\Tony&Theodore\Downloads\A_Beginners_Guide_to_Ethical_Hacking.rar_downloader_224.exe
FirewallRules: [{7912CDCB-12E2-44A8-A5E6-25F213F047D1}] => (Allow) C:\Users\Tony&Theodore\Downloads\A_Beginners_Guide_to_Ethical_Hacking.rar_downloader_224.exe
FirewallRules: [{F75D0F48-A939-4FD8-9F13-3ED3573754C9}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe
FirewallRules: [{68CF28C4-6813-4472-8360-162E31D39102}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe
FirewallRules: [{3BD7349F-578D-48D2-9050-0FCE2CEEF285}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressDL.exe
FirewallRules: [{812EECEB-441E-414B-AADF-52DDE7891359}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressDL.exe
FirewallRules: [{D5117936-5F9A-4AD2-98E9-7A6F25AEA659}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.515\Agent.exe
FirewallRules: [{CD918B9D-7BD0-4E6D-B79F-1247D6DE47AE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.515\Agent.exe
FirewallRules: [{B0CC801B-C58D-4DED-8E25-F0DCD9EC67E7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.868\Agent.exe
FirewallRules: [{00DE7D69-1F47-460E-A955-4CD46B6700F8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.868\Agent.exe
FirewallRules: [{9BA2CE1E-7676-4D3A-A228-AE4611323010}] => (Allow) C:\Program Files (x86)\Diablo III Beta\Diablo III.exe
FirewallRules: [{D2EE22D1-1481-4B93-92C3-1C1DBFB0640A}] => (Allow) C:\Program Files (x86)\Diablo III Beta\Diablo III.exe
FirewallRules: [TCP Query User{4A50FB43-49D1-47A4-81DD-E21019C9D500}C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe
FirewallRules: [UDP Query User{51A3FD68-CA46-4D57-9D6D-52E7DC219512}C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe
FirewallRules: [{FDF0D322-C1AA-4F9D-BACF-C13F457E5EFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.954\Agent.exe
FirewallRules: [{8FB08601-FAAB-4B9D-A391-11A34B70B6D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.954\Agent.exe
FirewallRules: [{769289A8-71B6-4EF0-AE16-222197EB833C}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{3B2CC425-86E8-47A7-BCD3-0006BFA7FA93}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{0FD31281-B1F0-42F5-8FDD-46DC0CF0F0B1}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [{E9C4F436-AD02-4C26-9A41-0B86C44C0915}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [TCP Query User{6F76EA2F-3B72-443A-BFCE-CF6A5B8540A0}C:\programdata\battle.net\agent\agent.976\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.976\agent.exe
FirewallRules: [UDP Query User{A74BD2FB-CD4D-470D-86F6-A4B5547A6ECC}C:\programdata\battle.net\agent\agent.976\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.976\agent.exe
FirewallRules: [TCP Query User{70AA7121-3269-4A09-A5BC-1AFB6538815A}C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe
FirewallRules: [UDP Query User{B39E4B81-7AE9-4CB6-80C6-6779D6F03B3D}C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe
FirewallRules: [TCP Query User{ED6791A5-A905-4AB0-ABA7-AB2F01823876}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
FirewallRules: [UDP Query User{F3054A31-E35C-4BBD-9E4D-4A3CC8527DAD}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
FirewallRules: [TCP Query User{A8DC51A1-77A6-4899-8E05-ABE8D3A2B9A3}C:\programdata\battle.net\agent\agent.998\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.998\agent.exe
FirewallRules: [UDP Query User{2CEC080B-EB9D-445F-9FA6-C6C4FA4E25F8}C:\programdata\battle.net\agent\agent.998\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.998\agent.exe
FirewallRules: [TCP Query User{38C71097-3C78-481E-9CF6-DF88351FB85D}C:\programdata\battle.net\agent\agent.1040\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1040\agent.exe
FirewallRules: [UDP Query User{F4D9B184-BF53-4A7B-990C-C1B3610B2EE1}C:\programdata\battle.net\agent\agent.1040\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1040\agent.exe
FirewallRules: [{A67C4D4F-9576-4F0C-A021-E0A3C18E54B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\NMService.exe
FirewallRules: [{3ABBDE45-01F4-4E33-B636-62F2974D2391}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\NMService.exe
FirewallRules: [TCP Query User{2D65D062-FB64-4CFF-903E-510A931D3A6F}C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [UDP Query User{4C4FCCC8-40A1-4576-9EA3-31A6CF6F9C2D}C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [TCP Query User{51CB54FF-7E1A-490B-BFA1-21A0C5D54584}C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{3CDD5C85-DE79-4A5F-A7D5-4E755619A44E}C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{B951B44F-C20D-4728-90EF-B22A95FDA6E0}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [UDP Query User{4AC5E293-F5A1-4DA1-924C-E9F72345F30E}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [{48423061-2CBF-48A9-B5A3-A442F7883B82}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{449A8DDF-ECAF-4F95-8078-A69C655DCCFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{6D987EFA-DEA6-4EE4-9C02-05DB91B78792}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{17BE9CEA-B9E1-4FA2-B6E7-A4160BD4268D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{92BE3D15-5801-4CCE-ABF9-EEC34A59D49E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dawn of war ii - retribution\DOW2.exe
FirewallRules: [{9D9C6BEB-B4B0-49AA-8BFE-2E341001FC95}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dawn of war ii - retribution\DOW2.exe
FirewallRules: [{E2D9ED3E-0A05-4619-93BD-1AC6F5A344A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\microsoft flight\Flight.exe
FirewallRules: [{8EFBAA55-A451-48D1-B27D-EC9EDD9BBEC8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\microsoft flight\Flight.exe
FirewallRules: [TCP Query User{4AFD4EC3-B47D-4355-A246-83441D789B25}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [UDP Query User{581A7E7B-692B-4FFC-A5A7-5517DC65C004}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [TCP Query User{31BCCA4E-0A22-4509-BAFC-B731055E17C1}C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [UDP Query User{A8B3C66A-2F01-4FE8-A468-E13074E27FE3}C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [{5C309E83-BEA3-4ED2-8EB6-CC5FC2ECE738}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{66B8BE81-C18E-4F28-A3F9-AD6A5362D983}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{D4A37F45-5805-4756-9AAD-F3DC4CF55836}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{FA2FF4A3-D344-46C0-BC12-0EC3FD84C2CF}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{60D6E178-C0B4-4707-87CA-494E80FEDFC2}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
FirewallRules: [UDP Query User{0869C58E-44C9-4CA5-BAAC-5404FDE566A3}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
FirewallRules: [{57ED3387-8C56-40F7-AE4E-D62507518133}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{4F1B6370-A07A-428C-A0B1-CA13B0BCDE2D}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{91267BA3-5A72-4297-84AE-62A832807536}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe
FirewallRules: [{04EF5C00-083F-47AD-AFD0-2C34C86CA491}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe
FirewallRules: [{C0CED820-F949-404F-8802-FB65CDB78EC6}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
FirewallRules: [{68C824CB-3A67-4461-8A01-67BD9E106CB4}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
FirewallRules: [TCP Query User{253F8989-9863-4286-B664-F3EA36313441}F:\not school\starcraft\starcraft.exe] => (Block) F:\not school\starcraft\starcraft.exe
FirewallRules: [UDP Query User{E303E800-F4FC-4152-8618-369A6C6701BC}F:\not school\starcraft\starcraft.exe] => (Block) F:\not school\starcraft\starcraft.exe
FirewallRules: [TCP Query User{3810B4EE-24B6-401C-AC3B-ACD67EFAA66A}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [UDP Query User{8FBFAEBD-1852-4854-8536-7FE8E9879BA1}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [{A55C22EF-5C88-422F-AE84-0CD751F9D3B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{F6900941-383D-47D3-A8C9-3E4EF04465F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [TCP Query User{6BAFB8B9-6006-42F1-88B0-B6BA97B10737}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [UDP Query User{59A06F5E-5E8E-4EB5-85BA-B2041EAC49F6}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [TCP Query User{536E93D4-9541-48B9-ACCA-69EACD67A6B5}C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe] => (Allow) C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe
FirewallRules: [UDP Query User{00A90AD4-AAEE-40D2-9C87-C7F5CDD75771}C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe] => (Allow) C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe
FirewallRules: [{2C556198-8587-4C64-9C93-45FC9E038CBB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [{6685F3F6-31F4-4271-B095-90D28E809BF8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [{CBC83EDE-1C63-4526-B568-B0809F6FAB2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [{AABEEFBB-040D-459B-A6FF-6A216E4CF658}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [{0934D328-4187-4489-8649-FAED06B9E402}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{799C25D8-85E0-418A-B475-D77C6D0915C8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{F4297E55-F262-46D5-945F-317A7D8AEF77}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{1761D730-D6F4-460D-8691-BF0093FA77F6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{DD1F98D1-1909-4D29-B50D-91DB48FCEB4C}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [UDP Query User{1506E559-8D06-45D8-BFB0-353FDEA4DFA7}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [{D0ABC3C6-1DE7-440D-AD1A-191311060E6A}] => (Allow) C:\Program Files (x86)\Bohemia Interactive\ArmA 2 Free\arma2free.exe
FirewallRules: [{4E462E7B-0827-49AF-92CF-5E324442B07F}] => (Allow) C:\Program Files (x86)\Bohemia Interactive\ArmA 2 Free\arma2free.exe
FirewallRules: [TCP Query User{D336187E-4246-4372-890D-21DD1E29F474}C:\program files (x86)\a new zero\anewzero.exe] => (Allow) C:\program files (x86)\a new zero\anewzero.exe

 

[Classified1]

FirewallRules: [UDP Query User{2975C547-845F-42D0-9816-C935D8D91916}C:\program files (x86)\a new zero\anewzero.exe] => (Allow) C:\program files (x86)\a new zero\anewzero.exe
FirewallRules: [TCP Query User{E4AC75C9-119A-4AD5-9659-CA19DFDBC06F}C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe
FirewallRules: [UDP Query User{574A696F-21F3-4C5B-A202-37DDA434BC63}C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe
FirewallRules: [{48B8FD21-4E51-4783-B0DC-E99E7B4E92A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{24393C2A-227D-4687-9C6C-B8D18CA16F0A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [TCP Query User{02EB3161-5C4F-4E46-86FA-F46DFB8E39A6}C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe
FirewallRules: [UDP Query User{F0A6DC41-70FA-45FE-A536-E968EA767FAF}C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe
FirewallRules: [{BD31BBC4-0F99-40C0-8D20-9274C3732E17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{E73FAA0B-ED3D-429B-B5EA-463A7E57AE39}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [TCP Query User{C04622BA-180B-438F-8C37-6E38FB9B8DB4}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{F0EE1C43-2E1F-4BB2-BB20-74C68B95EE79}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{31029B14-4B41-4506-95EE-A1C9291DA163}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{D153A36C-0D9D-4D28-8B71-ABAE38A62935}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{325CAF0C-AE19-4A5E-95F3-88068D068CC6}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{73007C7F-468D-42EA-B2D7-C36CE5B11C20}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [TCP Query User{377977B0-26AD-409A-8FE1-D0731834C629}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{59013CC5-BAC6-4667-9029-507966B82C73}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{0791A659-8254-4B50-ADCB-7AE1C7E9978F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{3BA68F12-2E9A-49DB-8514-DB7B08F043AC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{F888EE1E-EA0B-42B2-80D1-4B42C51B6E95}C:\programdata\battle.net\agent\agent.1637\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1637\agent.exe
FirewallRules: [UDP Query User{77C69DBA-55F7-4C37-AB16-636AD3217A27}C:\programdata\battle.net\agent\agent.1637\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1637\agent.exe
FirewallRules: [{9A6ECAB8-7D5C-45F3-91B4-8E36A087CCB4}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [{806FCAA1-00A3-456B-92DA-A176C8F74272}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [TCP Query User{85A27161-F353-4D77-B074-D328778D0869}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
FirewallRules: [UDP Query User{F129162A-A4E7-49F9-AF5B-EC3837E409DC}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
FirewallRules: [TCP Query User{F99D4CEF-CCFC-4498-B353-88EF982DE8A7}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{063406AF-387F-48BE-8D3A-94A13C4FE13E}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [{F870C684-F5F3-4258-A949-8F6B4356E8A9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C09FB737-15B3-469C-8782-8FAC796FFD53}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9F07E0A9-4B84-421D-89C2-42760FD750AD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{68F94632-EE0B-4CD2-A73A-408F38EB03F2}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F984B49B-CBFC-4FF1-BCE3-9DAC6DEA56E1}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F92C2DAF-C132-452E-BA91-06EBF3E7B19F}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{B1882A66-4EFF-4847-90C4-0A5F1E2FC671}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe
FirewallRules: [UDP Query User{514C47E6-CE6B-4D07-8930-2C0F9CB2FF2A}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe
FirewallRules: [TCP Query User{E7A4F5B1-4715-4D3F-AF97-CCDA87EF0CA0}C:\program files (x86)\warcraft iii\war3.exe] => (Allow) C:\program files (x86)\warcraft iii\war3.exe
FirewallRules: [UDP Query User{4F98FCB9-63E9-4702-8860-870B3F2FE0EC}C:\program files (x86)\warcraft iii\war3.exe] => (Allow) C:\program files (x86)\warcraft iii\war3.exe
FirewallRules: [{7F3381AE-0C3B-4E8C-A536-6098FA50BBF7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{CEA0B46B-A0C4-4179-9DA3-1594E849195B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{101B52A3-EE37-4C11-9DF4-281C8C7C4302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
FirewallRules: [{5F902F09-E5F5-404D-9549-DECD58CADFD0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
FirewallRules: [{5EE6A27A-8AC7-456B-B8B6-DBC6BB017A54}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe
FirewallRules: [{76B1C38C-6B23-42C6-9617-71DA1436C75A}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe
FirewallRules: [{6F3D47B4-DF0E-4408-824C-8D4174B0776D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{C0A4844C-ECF4-4B38-90CB-0352FF2FC7FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{408DE0DB-392B-48EF-A6B7-0BB065414EB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{02793DF8-8F73-418E-A078-0C3B0BE5966B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{63DC09E2-1FD5-49FB-B04A-DD3C9887A191}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\garrysmod\hl2.exe
FirewallRules: [{E861E39A-AAD2-4E19-8C49-D826D750F48A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\garrysmod\hl2.exe
FirewallRules: [{1BE162CC-12EB-479D-9BDF-5F26C2712008}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{54301102-59BD-4DB6-AFB5-E16E97C41D58}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{0DA8AD9A-6A97-467C-86D5-E26EE4C39FA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2C4A1EE4-3E31-4D98-B586-E0739C0A6229}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{11ABCA57-6659-4E70-9508-D9A12D509DEC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{7113CA19-4B9F-4F52-BCC6-CF6D39C7A7DC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{24427AB2-8E59-4B8F-B7E1-591A8BF4158E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{EE1520B1-CD5B-4ECB-8018-718C1BD16EDF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{629DFBA5-2495-4A28-A61F-F3A8E6C03071}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [{C15B97A8-B293-49A0-A930-693C52D388CB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [{413EC452-7208-4BBF-A37B-A46CE4C0A468}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe
FirewallRules: [{56DB4C7D-9DF5-45E5-9778-644258A3035F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe
FirewallRules: [{53A4C20C-A95D-4F08-AE62-4A9925822269}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{052BC01E-5E69-4786-9B10-63AC739A746F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{8302458E-F775-49A8-B5C9-D8102C3EEE59}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{C388B2E8-F538-4224-B8F8-38C6E8540647}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [TCP Query User{990BF2D2-1F7D-4F31-AAC3-5FFF0C9BF7DA}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{AEBCFB34-2455-4764-852E-2137D06138BF}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [{B4DA061B-6E2F-4457-97AC-7D02D926D1D1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [{1CFE4FD4-44DD-416A-8B03-0B8E16BE91E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [TCP Query User{024C1AE3-1012-4DA5-A3BB-F49DF522FF4F}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [UDP Query User{BF5E5A12-4F4E-4DD7-BC51-F6F4D3B9D3B4}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [TCP Query User{C219B688-DC5B-4964-83C0-451008C32656}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [UDP Query User{CF7711E3-C567-4867-8463-2954FA498544}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [TCP Query User{2781B912-9C96-4660-90AE-179D638EDB16}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{B538EBCC-6E46-4BC2-9D6C-A9621A3F4AB8}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{F9530596-B9D7-446E-B03E-3CBC5769BB3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{850E1F8E-D7A0-41D2-B2B5-72E9613513B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [TCP Query User{A542A4DD-87D3-4D19-BE09-F64A13E8F6CE}C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{5D5880CF-70BC-43E8-ADFC-06BBD135F32E}C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe
FirewallRules: [{1F64933B-6BF1-4BCA-957A-9BCD39576993}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{99312798-886A-42D5-8CC4-2AA4EA2BC431}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{E4DF0521-5206-43B7-AC62-C375426D4694}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{FB381DB5-3C93-461F-8CBF-E00DE7B13944}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{5FEB364C-698C-4C22-AA17-B934104A596E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [{E1667DB3-6F2A-4D77-AC92-6D2FD00FA509}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [TCP Query User{431CCF13-809F-4A50-932B-8C6DD18A5333}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{928283E8-9F81-448A-9655-8010C29A6615}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{F71EFC99-9445-476E-A44F-39A30A57E04A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{3C945573-AC4E-4A61-B8C8-EA02672B064E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [TCP Query User{CE562B63-49DC-4675-BD8C-0EBF7593E2AF}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [UDP Query User{8FF8E96F-E496-4F25-BBFE-AC6F9AF44FA8}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [TCP Query User{370370B2-935C-4D35-A1D8-F7B028017E77}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [UDP Query User{12F30269-1BD2-4065-BCF6-CEF3E26C4B9C}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [{E1064C3D-C7C8-4530-910A-7F064F1C0522}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{8B6005BF-A264-4E1A-B283-616C44730A05}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{2B966167-96B6-44CF-8487-10F7BC06518B}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{7D5AF0B7-75E6-4A27-B129-6E18D2D52FE2}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [TCP Query User{8685D65D-6BA4-430F-835C-F76CBF2E9CAB}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{75F1B8D2-6B84-4830-9932-ACAF38BB8950}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{B768F7CC-3943-43DA-B603-F97B15E7BC0C}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe
FirewallRules: [UDP Query User{BA1D0BC0-5DEF-4E42-8033-DA2D3CB1F2FB}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe
FirewallRules: [TCP Query User{B39050CE-9CC2-4AFD-B90B-4A69133F17CA}C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe
FirewallRules: [UDP Query User{316071EC-FE0F-4624-A086-AF139089658D}C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe
FirewallRules: [{EB5EFE12-0594-45C5-911F-CE1E19ED5040}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{687E7B31-59CA-4551-95CC-32515A76D8C3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{FA57F9C4-A493-47F3-B344-523E8A72B82B}C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe
FirewallRules: [UDP Query User{65121B26-0743-4072-BD2A-03638100E7FC}C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe
FirewallRules: [{E4B5F0D2-447F-4D51-9DA4-115B1AB44CE0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{C0A98722-055A-4FFA-A933-249A69FBD743}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{61CAE4C1-4A10-4D53-B8A4-6260108EBC3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{FC4D1464-C78A-43C4-B5A8-003E784BA04F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{EA22CFB9-2D03-46D6-9BF6-6E3B0AED6589}C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [UDP Query User{39763CAC-DE1A-4D80-911D-2E23E70C502E}C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [{D1FFBAE4-8A97-40B7-BBFE-8E384D506061}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0C462BDF-65CF-43CB-8331-0C05ED5EE37C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CDF9D323-7424-4040-B8E5-9F3E63CF9EB5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D605F6AC-F7A0-43EA-8BEC-EABE762FB922}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0B58081F-EB99-4BD1-88E5-8260E2FCF46D}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D26BEBB8-E02B-489A-9543-949D45ACA1FE}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{97B8FB37-4345-4BF6-88AA-E1C3FA29D3D7}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{7EEE7247-9D7C-4063-B94A-49F88006B2B0}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{022F4603-859C-4080-A3B0-9888298506A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [{4222453A-754D-4CB4-9677-179598AF5386}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [{D530D411-0CE0-4F86-A71B-56EEF5E89E32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{F4D09447-DAEB-486E-B9D9-95100FEF4090}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [TCP Query User{49C5D9A1-346E-4F77-8CFD-E054E0FC01C5}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe
FirewallRules: [UDP Query User{609E73CB-E379-4AAE-AE56-74507E764DD7}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe
FirewallRules: [{78E45867-054C-4509-A528-21C9F9991F0D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2293\Agent.exe
FirewallRules: [{951E0AB9-E53B-4F9C-A033-4067AF397D8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2293\Agent.exe
FirewallRules: [{201A3823-B78F-461A-8747-A9F4C5F64954}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{CAA9B584-100A-47F2-BAED-86D4D41063BB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{C86B209B-DF71-4D66-8C2A-353AE63FE515}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{F6FB7EF0-8B08-4A01-BAAD-E42A9D903048}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{C3E1CAB0-8EB5-4EC0-8562-FDCB29E7209B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\sourcesdk\bin\SDKLauncher.exe
FirewallRules: [{C5802DD2-1088-40BA-A492-6660EB8E4B76}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\sourcesdk\bin\SDKLauncher.exe
FirewallRules: [{428C07FC-7578-476E-BA1A-7DC9787334A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{AA0E0DC7-DC69-4857-B72A-F1E61A2A647E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{DB6D152E-047E-4EE4-84A1-22B9021CAD04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{FB13F1BC-CF3A-4F8B-9362-72D597BB269D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{17FA27A6-D621-4527-BE70-60D590EF04DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{0B15A815-BDA7-4F62-A0A7-BE1C2C7A3EDE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{5209AB8B-A701-4015-9012-8CCF284FE573}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8CA72102-66D6-4BCF-8D8B-0CF5796BE6AA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{13A9E961-6086-49C5-8C1D-9BA935708959}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [{4973A67D-FEF4-4B6E-9EBB-B8772DD488B8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [TCP Query User{4203EF4E-9E38-42E9-94F3-C1E60160B03A}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{5BF2CE3A-0DF6-4AD8-B961-9262E8F997A0}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [{6CE867EB-A051-45DF-AADE-31C56E2138EA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{9E59FC2B-3789-44E5-AB50-2B1863D67226}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{870AA2F8-330D-4549-A8B7-B7D9A37BD4F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{E7C6C78A-FE86-4B51-87A2-DBE449AD621A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{1141D62F-A980-40EA-9ED2-FFC2B5ADF564}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{0C5E6C23-319B-4F52-B333-B46DFAD44F66}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{05B6A818-ABD4-47A8-A3A1-07D1C6022DA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{EC069294-E1DB-46F3-944B-0892F5244224}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{CBAE8771-305E-432E-9F6D-6818CFFC1632}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{547D35DB-1016-4187-A377-B4DE63A9D5E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{77D477F6-F6F2-4327-9658-CB320B434BC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{3DC4BBAC-FEA7-4D23-9922-5AA0B631382E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{96DE4C7B-D92B-45EB-B2D7-810D749670E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BC7F1AC8-67DA-4C73-BC5B-131AE2F130DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{6EEBCF30-7331-4580-916C-AFBA694EB660}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{7B556111-968C-4FFE-B8C8-E02E70375394}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{39EA9255-DDF9-4A9B-AA9C-9FF4284DDD6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{844CA5EF-E3FA-411B-8CDA-B1814F93145C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{91BFB33F-3412-4C93-B2B7-4B24169FBDED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8CC1D00B-109E-4999-9BA4-C20AB556FC0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{742B5E07-6C37-46F9-97B0-D1A72185ED42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{E5346ACC-42FE-4B6B-B4FC-2B4023981458}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BB3403B3-8B0F-4F19-B42E-8DD5DF160D37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{D62A7EDD-4E1F-4F01-8025-3CC9286B9D2B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{E6F30D92-CD57-4C07-8E7D-80B7641B9228}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
FirewallRules: [{FC2747F4-0045-4586-817A-A7F67B506420}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
FirewallRules: [{A055983A-1F49-4C2A-B5C8-CABA9C87BDE4}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe
FirewallRules: [{5CA90F17-2A83-4B9D-9E68-48BBD402F72E}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe
FirewallRules: [{17543F25-7C5E-4D1B-90E0-DCF0A7E9FFA5}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
FirewallRules: [{A19E5D68-518E-49AF-B9C7-E79E09C9B8FB}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
FirewallRules: [{50A8974D-C4A1-4FBD-B6AE-E1B5EF7631CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{C5695975-E799-4301-8627-B3759E2E52E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{56D706FA-3A2C-4827-B83A-C40C56730FC8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{59377707-42CB-456B-A8E9-AC646DDD043C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{0D94EEED-0138-4533-8207-5138432EFA63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{C24A2CA2-28A6-4F57-8265-6A84B265BD0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CF75AAE9-E8E2-43F2-B4B8-2E81A0D3FBC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{70384C82-C99D-44F9-9B9C-90AA9B8316E4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{E8CB5774-7808-4F4A-8566-60275B0E9BE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{9FA8CAD0-6E39-4748-9200-60747E7EF226}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{A0F37261-76CD-49AD-BE35-ED46C76E79F6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{77CD8BD2-3D51-4AA1-9D90-1B78660E2239}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{9FE4A51E-15A5-4614-9F68-DCA82244CF2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{B53DE3D0-1AC9-4D2A-BD2C-2611E799DC50}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{7AE69597-E151-4963-8C85-A89857C1B04B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BCFDBD2C-152D-47E4-A216-3DCCB7D28D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{85EC99D6-624C-453C-A58F-D1EB63BAFF23}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{286AE1C4-C257-4788-99AC-E26987211C7E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CA61F3A0-3CF2-4560-8F35-7721C757DDCB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BA638BE1-309A-4135-B01F-32CA7FB7AFA9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{FA6A89AB-EA57-4411-BE3D-20D3D2074BA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{5F4382AC-4405-49D1-8C35-BA0B7F058891}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{2A2818DA-EB8A-4A07-9B3D-5FDF9B3409EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4C30118A-F0C3-4930-8F2A-BF3FC1E8083D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{3DF7CE95-A900-4224-A031-BECECF68C715}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{F3378AD9-6203-477D-BE9A-E9D7629080F5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{D8C25309-8690-492E-8BE0-7C5FF0995CE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{20B70E74-8D0B-4CB6-9D20-D0DB8E5B0DB4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{00705DCB-94CC-4FAC-9D03-8B2B2685B539}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{F9A2352A-A296-463F-9B9D-400BFA303139}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{D4986BF8-BA9C-493C-B18C-532B2E9BEC0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{ADF08F92-3A8B-4825-A44E-01496A1EED7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{2577742E-A960-4B82-B04F-7E11840679AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{63B085AB-F34E-46A8-988D-B33115EF6106}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{A75E5E47-DD08-4415-AAD6-8C323980B91A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\vslauncher.exe
FirewallRules: [{63F2CFC2-0C7A-4846-9A7B-8EC8EADB618C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\vslauncher.exe
FirewallRules: [{14E423BE-4818-4D15-B318-692E1D564E16}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{DC891F6D-88FA-487D-B103-3712E84D9AD2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{888737ED-BD23-48C4-ACDD-D30E1F91C633}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{CD9B2F87-9F64-48D1-806E-D8759ED6A22A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{BCBDC7DA-1D4A-4A4D-90B8-FB18294155FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{FB0A70E8-4CA0-4A85-A44C-66EEAB46102F}] => (Allow) C:\Program


==================== End of Addition.txt ============================

 

[Broni]

Please, observe following rules:

• Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
• If you're stuck, or you're not sure about certain step, always ask before doing anything else.
• Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
• Never run more than one scan at a time.
• Keep updating me regarding your computer behavior, good, or bad.
• The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
• If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
• I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

=============================

Define "acting up".

Uninstall following unwanted programs:

PC Optimizer Pro
Pirates, Vikings, & Knights II
surff aannD kkeep
YouTube Downloader Toolbar v4.6

Download RogueKiller from one of the following links and save it to your Desktop:

Link 1
Link 2

• Close all the running programs
• Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
• Otherwise just double-click on RogueKiller.exe
• Pre-scan will start. Let it finish.
• Click on SCAN button.
• Wait until the Status box shows Scan Finished
• Click on Delete.
• Wait until the Status box shows Deleting Finished.
• Click on Report and copy/paste the content of the Notepad into your next reply.
• RKreport.txt could also be found on your desktop.
• If more than one log is produced post all logs.
• If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
NOTE. If you already have MBAM 2.0 installed scroll down.

• Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to the following:
  
• Launch Malwarebytes Anti-Malware
• A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
  
• Click Finish.
• On the Dashboard, click the 'Update Now >>' link
• After the update completes, click the 'Scan Now >>' button.
  
• Or, on the Dashboard, click the Scan Now >> button.
• If an update is available, click the Update Now button.
  
• A Threat Scan will begin.
• When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
• In most cases, a restart will be required.
• Wait for the prompt to restart the computer to appear, then click on Yes.

If you already have MBAM 2.0 installed:

• On the Dashboard, click the 'Update Now >>' link
• After the update completes, click the 'Scan Now >>' button.
  
• Or, on the Dashboard, click the Scan Now >> button.
• If an update is available, click the Update Now button.
  
• A Threat Scan will begin.
• When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
• In most cases, a restart will be required.
• Wait for the prompt to restart the computer to appear, then click on Yes.

How to get logs:
(Export log to save as txt)

• After the restart once you are back at your desktop, open MBAM once more.
• Click on the History tab > Application Logs.
• Double click on the Scan Log which shows the Date and time of the scan just performed.
• Click 'Export'.
• Click 'Text file (*.txt)'
• In the Save File dialog box which appears, click on Desktop.
• In the File name: box type a name for your scan log.
• A message box named 'File Saved' should appear stating "Your file has been successfully exported".
• Click Ok
• Attach that saved log to your next reply.

(Copy to clipboard for pasting into forum replies or tickets)

• After the restart once you are back at your desktop, open MBAM once more.
• Click on the History tab > Application Logs.
• Double click on the Scan Log which shows the Date and time of the scan just performed.
• Click 'Copy to Clipboard'
• Paste the contents of the clipboard into your reply.

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on adwcleaner.exe to run the tool.
• Click on Scan button.
• When the scan has finished click on Clean button.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the contents of that logfile with your next reply.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

 

[Classified1]

Acting up as in slow response times, unresponsive commands, and sometimes the internet would behave strangely and give me DSN errors.

I have deleted the programs you suggested, however it would not let me delete the youtube downloader toolbar.

Here's the roguekiller log

RogueKiller V10.10.4.0 [Sep 4 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Tony&Theodore [Administrator]
Started from : C:\Users\Tony&Theodore\Desktop\RogueKiller (1).exe
Mode : Delete -- Date : 09/13/2015 17:23:16

¤¤¤ Processes : 1 ¤¤¤
[VT.Grayson LLC (Speedly) (fs)] Speedly_FastIP.exe(3612) -- C:\Windows\SysWOW64\Speedly_FastIP.exe[7] -> Killed [TermProc]

¤¤¤ Registry : 8 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\0070201353115617mcinstcleanup (C:\Users\TONY&T~1\AppData\Local\Temp\007020~1.EXE -cleanup -nolog) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Speedly_FastIP (C:\windows\system32\Speedly_FastIP.exe start) -> Not selected
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\0070201353115617mcinstcleanup (C:\Users\TONY&T~1\AppData\Local\Temp\007020~1.EXE -cleanup -nolog) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Speedly_FastIP (C:\windows\system32\Speedly_FastIP.exe start) -> Not selected
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\0070201353115617mcinstcleanup (C:\Users\TONY&T~1\AppData\Local\Temp\007020~1.EXE -cleanup -nolog) -> Not selected
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Speedly_FastIP (C:\windows\system32\Speedly_FastIP.exe start) -> Not selected
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-3718762900-4173039834-1257701688-1005\Software\Microsoft\Internet Explorer\Main | Start Page : http://lenovo.msn.com -> Not selected
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-3718762900-4173039834-1257701688-1005\Software\Microsoft\Internet Explorer\Main | Start Page : http://lenovo.msn.com -> Not selected

¤¤¤ Tasks : 2 ¤¤¤
[PUP] \Express Files Updater -- C:\Program Files (x86)\ExpressFiles\EFupdater.exe -> Not selected
[PUP] \RunAsStdUser Task -- "C:\Program Files (x86)\FREEzeFrog\bin\2.0.23.0\FREEzeFrogSA.exe" -> Not selected

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: Hitachi HDS721010CLA332 +++++
--- User ---
[MBR] bba162d7cca2a2163f510207e11cfa2d
[BSP] 461fbea4cadd00c28b744022f5bdbf89 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 928093 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 1900941312 | Size: 25675 MB
User = LL1 ... OK
User = LL2 ... OK

Here is the malwarebytes log

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 9/13/2015
Scan Time: 5:29 PM
Logfile: MWBscan.txt
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.09.13.04
Rootkit Database: v2015.08.16.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Tony&Theodore

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 545016
Time Elapsed: 49 min, 2 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 19
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\INTERFACE\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\INTERFACE\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.SProtector, HKLM\SOFTWARE\WOW6432NODE\SProtector, Quarantined, [620635fa454647ef7073651746be758b],
PUP.Optional.Bandoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32215152-9626-4DE9-B7DA-FB4F98116BCD}, Quarantined, [b9af52dd5239a69073ef057bd23237c9],
PUP.Optional.Bandoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B16CDA48-A200-4643-AD24-688A42325EFB}, Quarantined, [5d0b949b26650e28263c1868aa5a1ee2],
PUP.Optional.WeCareReminder, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{DF6742E3-EA39-48C1-9343-CC3651C9E6BA}, Quarantined, [beaadf5090fb87af7cbd6b5532d216ea],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\ConduitEngine, Quarantined, [4721d25d7a11b97dd15220554eb61ce4],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\CONDUIT\DistributionEngine, Quarantined, [e97f8fa08605b383d66bc6aece364ab6],
PUP.Optional.Spigot, HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CC63C12E-BE8D-44BD-9921-9D5C36F6CBA2}, Quarantined, [6701a986414a78beb691e2d4c63e55ab],

Registry Values: 6
PUP.Optional.Bandoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{32215152-9626-4DE9-B7DA-FB4F98116BCD}|AppPath, C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar, Quarantined, [b9af52dd5239a69073ef057bd23237c9]
PUP.Optional.Bandoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B16CDA48-A200-4643-AD24-688A42325EFB}|AppPath, C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar, Quarantined, [5d0b949b26650e28263c1868aa5a1ee2]
PUP.Optional.WeCareReminder, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{DF6742E3-EA39-48C1-9343-CC3651C9E6BA}|Publisher, We-Care.com, Quarantined, [beaadf5090fb87af7cbd6b5532d216ea]
PUP.Optional.WeCareReminder, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{DF6742E3-EA39-48C1-9343-CC3651C9E6BA}|DisplayName, SaveTheChildren Reminder by We-Care.com v4.0.18.4, Quarantined, [acbceb444645c96d8aaf259b768e28d8]
PUP.Optional.Spigot, HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CC63C12E-BE8D-44BD-9921-9D5C36F6CBA2}|URL, http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=937811&p={searchTerms}, Quarantined, [6701a986414a78beb691e2d4c63e55ab]
PUP.Optional.Spigot, HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CC63C12E-BE8D-44BD-9921-9D5C36F6CBA2}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, Quarantined, [5e0a84ab1576a393bb8d358107fd2cd4]

Registry Data: 0
(No malicious items detected)

Folders: 4
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.SurfAndKeep, C:\Program Files (x86)\surff aannD kkeep, Quarantined, [6efa76b90a81171f85a11b9da75dc43c],
PUP.Optional.YouTubeAdBlocker, C:\Program Files (x86)\YoutubeAdblocker, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],

Files: 13
PUP.Optional.RegCleanPro, C:\Windows\System32\roboot64.exe, Quarantined, [076140efe0abc472162e534a58ad32ce],
PUP.Optional.InstallCore, C:\Users\Tony&Theodore\Downloads\CR_Downloader_for_chankast.exe, Quarantined, [91d70d22d8b3e74fc823e7d45fa2ed13],
PUP.Optional.InstallCore, C:\Users\Tony&Theodore\Downloads\CR_Downloader_for_project64.exe, Quarantined, [7cec89a6c9c27bbba546239815ecc739],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9\lsdb.js, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9\background.html, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9\content.js, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9\icon48.png, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9\manifest.json, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.MultiPlug, C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjllogggnifopkolpmkfgigpfppnkef\0.9\pyvgmL.js, Quarantined, [1a4e73bc99f2b77f6dabe3c290747987],
PUP.Optional.SurfAndKeep, C:\Program Files (x86)\surff aannD kkeep\4.tlb, Quarantined, [6efa76b90a81171f85a11b9da75dc43c],
PUP.Optional.SurfAndKeep, C:\Program Files (x86)\surff aannD kkeep\4.dat, Quarantined, [6efa76b90a81171f85a11b9da75dc43c],
PUP.Optional.YouTubeAdBlocker, C:\Program Files (x86)\YoutubeAdblocker\_2p0r5XJ.tlb, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],
PUP.Optional.YouTubeAdBlocker, C:\Program Files (x86)\YoutubeAdblocker\_2p0r5XJ.dat, Quarantined, [b5b33cf398f395a13cc7358d4aba827e],

Physical Sectors: 0
(No malicious items detected)


(end)

Here is the adware cleaner log

# AdwCleaner v5.007 - Logfile created 13/09/2015 at 18:28:59
# Updated 08/09/2015 by Xplode
# Database : 2015-09-10.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Tony&Theodore - TONYTHEODOREPC
# Running from : C:\Users\Tony&Theodore\Desktop\adwcleaner_5.007.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : Speedly_FastIP
[-] Service Deleted : CEEBC40A-FDED-4C59-B354-939132350B01
[-] Service Deleted : vToolbarUpdater13.2.0

***** [ Folders ] *****

[-] Folder Deleted : C:\SearchProtect
[-] Folder Deleted : C:\Program Files (x86)\BringStar
[-] Folder Deleted : C:\Program Files (x86)\SearchProtect
[-] Folder Deleted : C:\Program Files (x86)\Sk_Enhancer
[-] Folder Deleted : C:\Program Files (x86)\speedly
[-] Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Folder Deleted : C:\ProgramData\Fighters
[-] Folder Deleted : C:\ProgramData\ca1e260154983273
[-] Folder Deleted : C:\ProgramData\{3C9242AC-2350-4CF1-8F66-199117FA2174}
[-] Folder Deleted : C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\speedly
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\Local\PackageAware
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\LocalLow\Conduit
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\Roaming\SearchProtect
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\FCTB
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\a.wvcg@vyruiu.net
[-] Folder Deleted : C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\jjbxwo@yen.edu

***** [ Files ] *****

[-] File Deleted : C:\END
[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\nsprotector.js
[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo.xml
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ippkomaaonokjnfjoikaemidanojkfmm_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxps_www.superfish.com_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_smartsuggestor.net_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_smartsuggestor.net_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_answers.ask.com_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_answers.ask.com_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_en.softonic.com_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_smartsuggestor.net_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_smartsuggestor.net_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage-journal
[-] File Deleted : C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\user.js
[-] File Deleted : C:\windows\SysWOW64\Speedly_FastIP.exe

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Express Files Updater
[-] Task Deleted : RunAsStdUser Task

***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
[-] Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
[-] Key Deleted : HKLM\SOFTWARE\Classes\surf
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_bf299197
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}
[-] Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search
[-] Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\ExpressFiles
[-] Key Deleted : HKCU\Software\RegisteredApplicationsEx
[-] Key Deleted : HKCU\Software\SearchProtect
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\YahooPartnerToolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKLM\SOFTWARE\AVG Secure Search
[-] Key Deleted : HKLM\SOFTWARE\ExpressFiles
[-] Key Deleted : HKLM\SOFTWARE\SearchProtect
[-] Key Deleted : HKLM\SOFTWARE\Uniblue
[!] Key Not Deleted : HKLM\SOFTWARE\Uniblue\DriverScanner
[-] Key Deleted : HKLM\SOFTWARE\{F2E9660B-98AF-42c0-8258-9CDDF07BF95D}
[-] Key Deleted : HKLM\SOFTWARE\W3I
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F42A1869-5C2D-4DBB-909C-F78DF900E348}_is1
[!] Key Not Deleted : [x64] HKCU\Software\Conduit
[!] Key Not Deleted : [x64] HKCU\Software\ExpressFiles
[!] Key Not Deleted : [x64] HKCU\Software\RegisteredApplicationsEx
[!] Key Not Deleted : [x64] HKCU\Software\SearchProtect
[!] Key Not Deleted : [x64] HKCU\Software\Softonic
[!] Key Not Deleted : [x64] HKCU\Software\YahooPartnerToolbar
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\Conduit
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1CAE30F47D14B41B5FC8FA53658044
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{439163E2-D3AF-4AE4-B485-BEA1F08C14ED}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{439163E2-D3AF-4AE4-B485-BEA1F08C14ED}
[!] Key Not Deleted : HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\Microsoft\Internet Explorer\SearchScopes\{439163E2-D3AF-4AE4-B485-BEA1F08C14ED}

***** [ Web browsers ] *****

[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.AutoSearchEventData", "auto%20search");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.ClearCacheDate", 28);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.DNSCatch", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.DisplayEULA", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.DnsCatchEventData", "dns%20catch");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.EBOMode", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.EnableDCAData_xx", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.EnableDCA_xx", false);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.FirstLaunchShown", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.InstallDomain", "freecause.com");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.InstallType", "standard");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.LoadLayoutDate.100297", 8);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.NewTabSearchEventData", "tab%20search");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.ShowRecommendedOptions", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.StateReportDate", "1425173410322");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.TopRightSearchEventData", "top%20right%20search");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.beforeInstallSaved", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.beforeinstall.homepage", "chrome%3A//branding/locale/browserconfig.properties");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.beforeinstall.search", "Google");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.customNewTab", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.dcaDefaultMode", false);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.dcaShowInstallerPage", false);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.dcaShowSurvey", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.helpUsImprove", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.hideOthers", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.partnerauth", false);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.processAddrBar", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.restoreSearch", false);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.searchHistory", true);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.session", "295EBEF661F264D2E9EF8EB31279FBDB3BE2F501A862A30E4C00FC3259332468B4E21260B6537AC61CB63BEF7BBB41F5B3F538A9536BFD5073D7E1066DFC19B3D10D9CF0[...]
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.showFirstLaunchOptions", false);
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.tb_lang", "en");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.tool_id", "100297");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.user_id", "108568690");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.user_key", "0d09a72139ee469740f2c12ee09be55981e8f2ff");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.user_layouts", "100297");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.user_lnames", "SocialRibbons%20LP5");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.xml_service_url", "6bb94bbf55fe2f255901a560824a6ebe");
[-] [C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\prefs.js] [Preference] Deleted : user_pref("freecause3fe6b000fd7da4e4eddaef3dc5c7f32c.yahooSearch", true);
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : babylon.com
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : isearch.avg.com
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : netflix.com
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : sony-vegas.en.softonic.com
[-] [C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : hapjcfhlhbidaflnbnnhkojdpeiooogl

*************************

:: Winsock settings cleared

*************************

C:\AdwCleaner[S1].txt - [34133 bytes] - [16/11/2012 16:31:39]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [19245 bytes] ##########



Note: I have run the JRT as you suggested, however I opened it and let it run on its own, when I came back to my computer it was no longer there and there was no indication of any log file popping up.

 

[Broni]

Please download ComboFix from Here, Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

• Never rename Combofix unless instructed.
• Close any open browsers.
• Very Important! Temporarily disable your anti-virus and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
• Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
• Close any open browsers.
• WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
• Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
• If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
  If the connection is not there use restore point you created prior to running Combofix.
• Double click on combofix.exe & follow the prompts.

• 
  NOTE1. If Combofix asks you to install Recovery Console, please allow it.
  NOTE 2. If Combofix asks you to update the program, always do so.

• When finished, it will produce a report for you.
• Please post the "C:\ComboFix.txt"

**Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
**Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
Use AppRemover to uninstall it: https://www.techspot.com/downloads/5514-appremover.html
We can reinstall it when we're done with CF.
**Note 3: If you receive an error Illegal operation attempted on a registery key that has been marked for deletion, restart computer to fix the issue.
**Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


Make sure, you re-enable your security programs, when you're done with Combofix.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE.
If, for some reason, Combofix refuses to run, try the following...

Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
Do NOT run it yet.
Download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

Restart computer in safe mode

• Double-click on the Rkill desktop icon to run the tool.
• If using Windows Vista, 7 or 8 right-click on it and choose Run As Administrator.
• A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
• If not, delete the file, then download and use the one provided in Link 2.
• Do not reboot until instructed.
• If the tool does not run from any of the links provided, please let me know.

When the scan is done Notepad will open with rKill.txt log.
NOTE. rKill.txt log will also be present on your desktop.

Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.

 

[Classified1]

I ran Combofix and it appeared to do its task, however it just closed and didn't produce any log, even after I searched for it.

 

[Broni]

Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Make sure you checkmark Addition.txt box.
• Press Scan button.
• Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.

 

[Classified1]

I will do as you instructed above, however I re-ran the combofix because shortly after I posted my reply, it gave me an error to do it again.

Here is the log below.

ComboFix 15-09-07.01 - Tony&Theodore 09/13/2015 20:55:42.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8119.5882 [GMT -4:00]
Running from: c:\users\Tony&Theodore\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\program files (x86)\QuickTime\QTTask.exe
c:\users\Tony&Theodore\AppData\Local\Microsoft\Windows\Temporary Internet Files\{44593286-0161-4EDF-B683-62E378D452F4}.xps
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((((( Files Created from 2015-08-14 to 2015-09-14 )))))))))))))))))))))))))))))))
.
.
2015-09-14 01:12 . 2015-09-14 01:12 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2015-09-14 01:12 . 2015-09-14 01:12 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-09-14 01:12 . 2015-09-14 01:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-09-14 00:49 . 2015-09-14 00:49 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{59E65311-3CA2-4281-87E1-4C46CDAB7445}\offreg.dll
2015-09-14 00:31 . 2015-09-14 00:31 -------- d-----w- c:\program files (x86)\OPSWAT
2015-09-14 00:31 . 2015-09-14 00:31 -------- d-----w- c:\programdata\OPSWAT
2015-09-13 23:58 . 2015-09-14 00:03 -------- d-----w- c:\program files\Alice 3
2015-09-13 22:26 . 2015-09-13 22:28 -------- d-----w- C:\AdwCleaner
2015-09-13 20:32 . 2015-09-13 20:32 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-09-13 20:32 . 2015-09-13 21:23 -------- d-----w- c:\programdata\RogueKiller
2015-09-12 16:32 . 2015-09-12 16:34 -------- d-----w- C:\FRST
2015-09-09 01:41 . 2015-07-23 00:03 362496 ----a-w- c:\windows\system32\wow64win.dll
2015-09-09 01:40 . 2015-09-02 03:04 41984 ----a-w- c:\windows\system32\lpk.dll
2015-08-21 01:07 . 2015-08-21 01:07 -------- d-----w- c:\program files (x86)\Common Files\Skype
2015-08-19 00:55 . 2015-08-19 00:55 -------- d-----w- c:\programdata\Celavimus
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-09-13 22:25 . 2015-04-05 22:18 113880 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-08-26 22:37 . 2011-03-03 21:19 134753440 ----a-w- c:\windows\system32\MRT.exe
2015-08-11 18:50 . 2012-04-04 18:49 778440 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-08-11 18:50 . 2011-07-05 22:48 142536 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-07-30 18:06 . 2015-08-12 21:02 1648128 ----a-w- c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 21:02 1180160 ----a-w- c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 21:02 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 21:02 1251328 ----a-w- c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 21:02 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-13 03:41 103120 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-13 03:41 124624 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-28 20:09 . 2015-08-12 21:04 17344 ----a-w- c:\windows\system32\CompatTelRunner.exe
2015-07-28 20:05 . 2015-08-12 21:04 774656 ----a-w- c:\windows\system32\invagent.dll
2015-07-28 20:05 . 2015-08-12 21:04 743424 ----a-w- c:\windows\system32\generaltel.dll
2015-07-28 20:05 . 2015-08-12 21:04 437760 ----a-w- c:\windows\system32\devinv.dll
2015-07-28 20:05 . 2015-08-12 21:04 1116672 ----a-w- c:\windows\system32\appraiser.dll
2015-07-28 20:05 . 2015-08-12 21:04 69120 ----a-w- c:\windows\system32\acmigration.dll
2015-07-28 20:05 . 2015-08-12 21:04 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-07-28 19:55 . 2015-08-12 21:04 1148416 ----a-w- c:\windows\system32\aeinv.dll
2015-07-22 17:53 . 2015-09-09 01:42 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-07-22 00:25 . 2015-07-22 00:25 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-07-15 18:15 . 2015-08-12 21:04 94656 ----a-w- c:\windows\system32\drivers\mountmgr.sys
2015-07-15 18:10 . 2015-08-12 21:04 1743360 ----a-w- c:\windows\system32\sysmain.dll
2015-07-15 18:10 . 2015-08-12 21:04 11264 ----a-w- c:\windows\system32\msmmsp.dll
2015-07-15 03:19 . 2015-08-12 21:03 52736 ----a-w- c:\windows\system32\basesrv.dll
2015-07-10 17:51 . 2015-08-12 21:04 44032 ----a-w- c:\windows\system32\tsgqec.dll
2015-07-10 17:51 . 2015-08-12 21:04 14177280 ----a-w- c:\windows\system32\shell32.dll
2015-07-10 17:51 . 2015-08-12 21:04 3722752 ----a-w- c:\windows\system32\mstscax.dll
2015-07-10 17:51 . 2015-08-12 21:04 158720 ----a-w- c:\windows\system32\aaclient.dll
2015-07-10 17:34 . 2015-08-12 21:04 36864 ----a-w- c:\windows\SysWow64\tsgqec.dll
2015-07-10 17:34 . 2015-08-12 21:04 3221504 ----a-w- c:\windows\SysWow64\mstscax.dll
2015-07-10 17:33 . 2015-08-12 21:04 131584 ----a-w- c:\windows\SysWow64\aaclient.dll
2015-07-09 17:57 . 2015-08-12 21:02 193536 ----a-w- c:\windows\system32\notepad.exe
2015-07-09 17:57 . 2015-08-12 21:02 193536 ----a-w- c:\windows\notepad.exe
2015-07-09 17:42 . 2015-08-12 21:02 179712 ----a-w- c:\windows\SysWow64\notepad.exe
2015-07-04 18:07 . 2015-07-14 18:21 2087424 ----a-w- c:\windows\system32\ole32.dll
2015-07-04 17:48 . 2015-07-14 18:21 1414656 ----a-w- c:\windows\SysWow64\ole32.dll
2015-07-01 20:49 . 2015-08-12 21:02 260096 ----a-w- c:\windows\system32\WebClnt.dll
2015-07-01 20:48 . 2015-08-12 21:02 102912 ----a-w- c:\windows\system32\davclnt.dll
2015-07-01 20:30 . 2015-08-12 21:02 206848 ----a-w- c:\windows\SysWow64\WebClnt.dll
2015-07-01 20:30 . 2015-08-12 21:02 82432 ----a-w- c:\windows\SysWow64\davclnt.dll
2015-07-01 04:04 . 2015-07-01 04:04 76384 ----a-w- c:\windows\system32\libusb0.dll
2015-07-01 04:04 . 2015-07-01 04:04 52832 ----a-w- c:\windows\system32\drivers\libusb0.sys
2015-06-24 05:29 . 2015-06-24 05:29 1217192 ----a-w- c:\windows\SysWow64\FM20.DLL
2015-06-18 12:41 . 2015-04-05 22:17 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-06-18 12:41 . 2015-04-05 22:17 109272 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-06-18 12:41 . 2012-05-17 21:03 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-06-17 17:47 . 2015-07-14 18:22 404992 ----a-w- c:\windows\system32\gdi32.dll
2015-06-17 17:37 . 2015-07-14 18:22 312320 ----a-w- c:\windows\SysWow64\gdi32.dll
2015-06-17 04:23 . 2015-06-17 04:23 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2015-06-17 04:23 . 2015-06-17 04:23 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2006-05-03 16:06 163328 --sha-r- c:\windows\SysWOW64\flvDX.dll
2007-02-21 17:47 31232 --sha-r- c:\windows\SysWOW64\msfDX.dll
2008-03-16 19:30 216064 --sha-r- c:\windows\SysWOW64\nbDX.dll
2010-01-07 04:00 107520 --sha-r- c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{577bfa34-deb3-d944-c198-e5c5779b962a}"= "c:\program files (x86)\SocialRibbons LP5\Helper.dll" [2012-03-23 378880]
.
[HKEY_CLASSES_ROOT\clsid\{577bfa34-deb3-d944-c198-e5c5779b962a}]
[HKEY_CLASSES_ROOT\FreeCauseURLSearchHook.FCToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{BDFCADA9-5F0A-C814-25B7-80F5EA04B780}]
[HKEY_CLASSES_ROOT\FreeCauseURLSearchHook.FCToolbarURLSearchHook]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GameTracker"="c:\program files (x86)\GameTracker\GTLite.exe" [2012-10-25 4018968]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"jmekey"="c:\program files (x86)\jmesoft\hotkey.exe" [2009-07-16 114688]
"ModeSwitch"="c:\program files\Lenovo\Power Dial\LitModeSwitch.exe" [2009-09-27 163840]
"CLMLServer"="c:\program files (x86)\Lenovo\Power2Go\CLMLSvc.exe" [2009-06-04 103720]
"UpdateP2GoShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"SetDefaultSCR"="c:\program files (x86)\Lenovo\Lenovo Screensaver\SetDefaultSCR.exe" [2009-12-31 102400]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"Logitech G35"="c:\program files (x86)\Logitech\G35\G35.exe" [2010-10-05 1811800]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]
"Wondershare Helper Compact.exe"="c:\program files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" [2013-07-25 1985824]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712]
"GEARS"="c:\program files (x86)\OPSWAT\GEARS Client\GEARS.exe" [2015-08-07 1715008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2012-9-24 573536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 celavimushost;Celavimus Client Host;c:\program files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe;c:\program files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [x]
R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe;c:\program files (x86)\Common Files\Desura\desura_service.exe [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 libusb0;libusb-win32 - Kernel Driver 07/01/2015 0.0.0.0;c:\windows\system32\DRIVERS\libusb0.sys;c:\windows\SYSNATIVE\DRIVERS\libusb0.sys [x]
R3 LitModeCtrl;LitModeCtrl;c:\program files\Lenovo\Power Dial\LitModeCtrl.exe;c:\program files\Lenovo\Power Dial\LitModeCtrl.exe [x]
R3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys;c:\windows\SYSNATIVE\DRIVERS\lv302a64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf.sys [x]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys;c:\windows\SYSNATIVE\DRIVERS\Rts516xIR.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 aswKbd;aswKbd; [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GS In-Game Service;GS In-Game Service;c:\program files (x86)\GameTracker\GSInGameService.exe;c:\program files (x86)\GameTracker\GSInGameService.exe [x]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 LenovoCOMSvc;LenovoCOMService;c:\program files\Lenovo\Power Dial\LenovoCOMSvc.exe;c:\program files\Lenovo\Power Dial\LenovoCOMSvc.exe [x]
S2 OPSWATGEARSHelper;OPSWAT GEARS Helper;c:\program files (x86)\OPSWAT\GEARS Client\GearsHelper.exe;c:\program files (x86)\OPSWAT\GEARS Client\GearsHelper.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WAOnDemand;OPSWAT GEARS Client;c:\program files (x86)\OPSWAT\OnDemand\GearsAgentService.exe;c:\program files (x86)\OPSWAT\OnDemand\GearsAgentService.exe [x]
S2 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver;c:\windows\system32\drivers\DDCDrv.sys;c:\windows\SYSNATIVE\drivers\DDCDrv.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfDHP2amd64.sys [x]
S3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfSBVMamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys;c:\windows\SYSNATIVE\drivers\LVUSBS64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys;c:\windows\SYSNATIVE\Drivers\nx6000.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
S3 t_mouse.sys;HID-compliand device;c:\windows\system32\DRIVERS\t_mouse.sys;c:\windows\SYSNATIVE\DRIVERS\t_mouse.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - AVGTP
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-09-03 20:26 997704 ----a-w- c:\program files (x86)\Google\Chrome\Application\45.0.2454.85\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-09-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 18:50]
.
2015-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-15 01:05]
.
2015-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-15 01:05]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-05 8060960]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 415256]
"Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2009-08-13 415752]
"Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2009-08-13 4195848]
"MouseDriver"="TiltWheelMouse.exe" [2012-12-19 241152]
"Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2009-08-13 2093064]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-06-29 170280]
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MIF5BA~1\Office14\ONBttnIE.dll/105
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-QuickTime Task - c:\program files (x86)\QuickTime\QTTask.exe
Wow6432Node-HKLM-Run-QuickTime Task - c:\program files (x86)\QuickTime\QTTask.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-BattlEye A2 Free - c:\program files (x86)\Bohemia Interactive\ArmA 2 FreeBattlEye\UnInstallBE.exe
AddRemove-BattlEye for A2 - c:\program files (x86)\Steam\steamapps\common\Arma 2BattlEye\UnInstallBE.exe
AddRemove-GameStop App - c:\programdata\{3C9242AC-2350-4CF1-8F66-199117FA2174}\GameStopApp_setup.exe
AddRemove-StarCraft II Beta - c:\program files (x86)\Common Files\Blizzard Entertainment\StarCraft II Beta (4)\Uninstall.exe
AddRemove-{EA450D5D-95EA-4FD0-B8B0-6D8E68FBE2C7} - c:\programdata\{3C9242AC-2350-4CF1-8F66-199117FA2174}\GameStopApp_setup.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}"=hex:51,66,7a,6c,4c,1d,38,12,26,bd,a8,
0a,e6,f4,22,0e,f1,4c,12,2a,bb,94,a4,70
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"=hex:51,66,7a,6c,4c,1d,38,12,94,83,60,
bb,86,ad,dc,08,d0,28,de,c7,86,fa,1f,e8
"{30F9B915-B755-4826-820B-08FBA6BD249D}"=hex:51,66,7a,6c,4c,1d,38,12,7b,ba,ea,
34,67,f9,48,0d,fd,1d,4b,bb,a3,e3,60,89
"{F3FEE66E-E034-436A-86E4-9690573BEE8A}"=hex:51,66,7a,6c,4c,1d,38,12,00,e5,ed,
f7,06,ae,04,06,f9,f2,d5,d0,52,65,aa,9e
"{5911488E-9D1E-40EC-8CBB-06B231CC153F}"=hex:51,66,7a,6c,4c,1d,38,12,e0,4b,02,
5d,2c,d3,82,05,f3,ad,45,f2,34,92,51,2b
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"=hex:51,66,7a,6c,4c,1d,38,12,df,c1,0b,
27,57,07,ba,54,e4,0e,43,d0,22,fb,89,5b
"{95B7759C-8C7F-4BF1-B163-73684A933233}"=hex:51,66,7a,6c,4c,1d,38,12,f2,76,a4,
91,4d,c2,9f,0e,ce,75,30,28,4f,cd,76,27
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{31332EEF-CB9F-458F-AFEB-D30E9A66B6BA}"=hex:51,66,7a,6c,4c,1d,38,12,81,2d,20,
35,ad,85,e1,00,d0,fd,90,4e,9f,38,f2,ae
"{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}"=hex:51,66,7a,6c,4c,1d,38,12,7c,f0,b1,
38,5c,21,3d,0e,d9,78,0d,25,e1,c9,8c,d4
"{6E13D095-45C3-4271-9475-F3B48227DD9F}"=hex:51,66,7a,6c,4c,1d,38,12,fb,d3,00,
6a,f1,0b,1f,07,eb,63,b0,f4,87,79,99,8b
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{9FDDE16B-836F-4806-AB1F-1455CBEFF289}"=hex:51,66,7a,6c,4c,1d,38,12,05,e2,ce,
9b,5d,cd,68,0d,d4,09,57,15,ce,b1,b6,9d
"{AA58ED58-01DD-4D91-8333-CF10577473F7}"=hex:51,66,7a,6c,4c,1d,38,12,36,ee,4b,
ae,ef,4f,ff,08,fc,25,8c,50,52,2a,37,e3
"{B164E929-A1B6-4A06-B104-2CD0E90A88FF}"=hex:51,66,7a,6c,4c,1d,38,12,47,ea,77,
b5,84,ef,68,0f,ce,12,6f,90,ec,54,cc,eb
"{B49699FC-1665-4414-A1CB-C4A2A4A13EEC}"=hex:51,66,7a,6c,4c,1d,38,12,92,9a,85,
b0,57,58,7a,01,de,dd,87,e2,a1,ff,7a,f8
"{B4F3A835-0E21-4959-BA22-42B3008E02FF}"=hex:51,66,7a,6c,4c,1d,38,12,5b,ab,e0,
b0,13,40,37,0c,c5,34,01,f3,05,d0,46,eb
"{CBF3FDCA-6104-1864-D931-D737D2BFC202}"=hex:51,66,7a,6c,4c,1d,38,12,a4,fe,e0,
cf,36,2f,0a,5d,a6,27,94,77,d7,e1,86,16
"{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}"=hex:51,66,7a,6c,4c,1d,38,12,b0,f3,37,
dc,52,73,39,0a,e1,a7,25,43,3b,93,ce,af
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}"=hex:51,66,7a,6c,4c,1d,38,12,70,05,61,
f9,ec,d1,23,0d,da,9c,48,eb,44,0f,8e,cc
.
[HKEY_USERS\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (S-1-5-21-3718762900-4173039834-1257701688-1001)
@Denied: (2) (LocalSystem)
"Progid"="vcard_wab_auto_file"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.18"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-09-13 21:16:55
ComboFix-quarantined-files.txt 2015-09-14 01:16
.
Pre-Run: 172,262,170,624 bytes free
Post-Run: 194,207,617,024 bytes free
.
- - End Of File - - 1971B5DEBCDED3D9BDF9B1052CE1A227

 

[Classified1]

FRST.log

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:12-09-2015
Ran by Tony&Theodore (administrator) on TONYTHEODOREPC (13-09-2015 22:09:09)
Running from C:\Users\Tony&Theodore\Desktop
Loaded Profiles: Tony&Theodore (Available Profiles: Tony&Theodore & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(ClanServers Hosting LLC) C:\Program Files (x86)\GameTracker\GTLite.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ClanServers Hosting LLC) C:\Program Files (x86)\GameTracker\GSInGameService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech\GamePanel Software\Applets\LCDRSS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(JME) C:\Program Files (x86)\jmesoft\hotkey.exe
(CyberLink) C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G35\G35.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(OPSWAT, Inc.) C:\Program Files (x86)\OPSWAT\GEARS Client\GearsHelper.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
(OPSWAT, Inc.) C:\Program Files (x86)\OPSWAT\OnDemand\GearsAgentService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(OPSWAT, Inc.) C:\Program Files (x86)\OPSWAT\OnDemand\ondemands\bs\wabpoes.exe
(OPSWAT, Inc.) C:\Program Files (x86)\OPSWAT\OnDemand\ondemands\wd\waodwd.exe
(OPSWAT, Inc.) C:\Program Files (x86)\OPSWAT\OnDemand\ondemands\bs\wabpmsn.exe
(OPSWAT, Inc.) C:\Program Files (x86)\OPSWAT\OnDemand\ondemands\oesis\wa_3rd_party_host_32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8060960 2009-08-05] (Realtek Semiconductor)
HKLM\...\Run: [Launch LgDeviceAgent] => C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [415752 2009-08-13] (Logitech Inc.)
HKLM\...\Run: [Launch LGDCore] => C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [4195848 2009-08-13] (Logitech Inc.)
HKLM\...\Run: [MouseDriver] => C:\windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [Launch LCDMon] => C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2093064 2009-08-13] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-06-29] (Apple Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-03] (Intel Corporation)
HKLM-x32\...\Run: [jmekey] => C:\Program Files (x86)\jmesoft\hotkey.exe [114688 2009-07-16] (JME)
HKLM-x32\...\Run: [ModeSwitch] => C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [SetDefaultSCR] => C:\Program Files (x86)\Lenovo\Lenovo Screensaver\SetDefaultSCR.exe [102400 2009-12-30] (Lenovo)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Logitech G35] => C:\Program Files (x86)\Logitech\G35\G35.exe [1811800 2010-10-05] (Logitech(c))
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1985824 2013-07-25] (Wondershare)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [GEARS] => C:\Program Files (x86)\OPSWAT\GEARS Client\GEARS.exe [1715008 2015-08-07] (OPSWAT, Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Run: [GameTracker] => C:\Program Files (x86)\GameTracker\GTLite.exe [4018968 2012-10-25] (ClanServers Hosting LLC)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2011-02-03] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2012-11-16]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{962325E9-F704-4D24-A1F1-98501D95B43A}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> Default = {577bfa34-deb3-d944-c198-e5c5779b962a}
URLSearchHook: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 - FCToolbarURLSearchHook Class - {577bfa34-deb3-d944-c198-e5c5779b962a} - C:\Program Files (x86)\SocialRibbons LP5\Helper.dll ()
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-21] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-21] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1219159.dll [2015-06-26] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2014-12-03] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-09-12] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-09-12] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Tony&Theodore\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2013-02-28] (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-27] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin-x32: npDisplayEngine -> C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll [No File]
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: @nsroblox.roblox.com/launcher -> C:\Users\Tony&Theodore\AppData\Local\Roblox\Versions\version-c5357fcf5b544474\\NPRobloxProxy.dll [2013-07-25] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Tony&Theodore\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-11] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-11-17] (The Happy Cloud)
FF Plugin HKU\S-1-5-21-3718762900-4173039834-1257701688-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-08-20] ()
FF Extension: ColorfulTabs - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-11-08]
FF Extension: My Homepage - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\myhomepage_manishjain9@gmail.com.xpi [2012-03-05]
FF Extension: SocialRibbons LP5 - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{3fe6b000-fd7d-a4e4-edda-ef3dc5c7f32c}.xpi [2012-04-22]
FF Extension: AniWeather - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{4176DFF4-4698-11DE-BEEB-45DA55D89593}.xpi [2012-03-05]
FF Extension: Adblock Plus - C:\Users\Tony&Theodore\AppData\Roaming\Mozilla\Firefox\Profiles\8jxpji4t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-03-05]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG2012\Firefox4

Chrome:
=======
CHR StartupUrls: Default -> ""
CHR Plugin: (APP) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\pdf.dll => No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll => No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll => No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => No File
CHR Plugin: (Display Engine v2) - C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll => No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll => No File
CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Tony&Theodore\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Raidcall plugin) - C:\Users\Tony&Theodore\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll => No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll => No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\windows\SysWOW64\npDeployJava1.dll => No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll => No File
CHR Profile: C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2012-11-16]
CHR Extension: (AdBlock) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2012-11-16]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path/update_url>

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-27] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 celavimushost; C:\Program Files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [124120 2015-08-18] (altPUG LLC)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2013-08-13] (Hi-Rez Studios) [File not signed]
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo) [File not signed]
S3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4466688 2007-11-07] (Microsoft Corporation)
R2 OPSWATGEARSHelper; C:\Program Files (x86)\OPSWAT\GEARS Client\GearsHelper.exe [178496 2015-08-07] (OPSWAT, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-19] (Electronic Arts)
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76152 2014-10-03] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 WAOnDemand; C:\Program Files (x86)\OPSWAT\OnDemand\GearsAgentService.exe [924080 2015-08-07] (OPSWAT, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [28504 2012-03-06] (AVAST Software)
R1 avgtp; C:\windows\system32\drivers\avgtpx64.sys [30568 2012-11-08] (AVG Technologies)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S1 KS0108; C:\Program Files (x86)\LcdStudio\ks0108.sys [3712 2008-03-10] () [File not signed]
R3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2amd64.sys [62168 2010-09-29] (Logitech)
R3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMamd64.sys [377176 2010-09-29] (Logitech)
S1 LC7981; C:\Program Files (x86)\LcdStudio\LC7981.sys [5120 2008-03-10] () [File not signed]
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2015-07-01] (http://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S1 n3900; C:\Program Files (x86)\LcdStudio\n3900.sys [3968 2008-03-10] () [File not signed]
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation )
S1 SED133x; C:\Program Files (x86)\LcdStudio\SED133x.sys [7424 2008-03-10] () [File not signed]
S1 T6963C; C:\Program Files (x86)\LcdStudio\T6963c.sys [6400 2008-03-10] () [File not signed]
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-09-13] ()
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-13 21:16 - 2015-09-13 21:16 - 00030113 _____ C:\ComboFix.txt
2015-09-13 20:53 - 2011-06-26 02:45 - 00256000 _____ C:\windows\PEV.exe
2015-09-13 20:53 - 2010-11-07 13:20 - 00208896 _____ C:\windows\MBR.exe
2015-09-13 20:53 - 2009-04-20 00:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2015-09-13 20:53 - 2000-08-30 20:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2015-09-13 20:53 - 2000-08-30 20:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2015-09-13 20:53 - 2000-08-30 20:00 - 00098816 _____ C:\windows\sed.exe
2015-09-13 20:53 - 2000-08-30 20:00 - 00080412 _____ C:\windows\grep.exe
2015-09-13 20:53 - 2000-08-30 20:00 - 00068096 _____ C:\windows\zip.exe
2015-09-13 20:41 - 2015-09-13 21:16 - 00000000 ____D C:\Qoobox
2015-09-13 20:32 - 2015-09-13 20:40 - 00000360 _____ C:\Users\Tony&Theodore\AppData\Local\multiscan.log
2015-09-13 20:30 - 2015-09-13 20:30 - 12529664 _____ C:\Users\Tony&Theodore\Downloads\OPSWAT_GEARS_CLIENT_3445-7c867995737c1853977386e89a5560c5.msi
2015-09-13 20:29 - 2015-09-13 20:29 - 05635119 ____R (Swearware) C:\Users\Tony&Theodore\Desktop\ComboFix.exe
2015-09-13 20:05 - 2015-09-13 20:05 - 00000000 ____D C:\Users\Tony&Theodore\Documents\Alice3
2015-09-13 20:03 - 2015-09-13 20:03 - 00001791 _____ C:\Users\Public\Desktop\Alice 3.lnk
2015-09-13 20:03 - 2015-09-13 20:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alice 3
2015-09-13 19:58 - 2015-09-13 20:03 - 00000000 ____D C:\Program Files\Alice 3
2015-09-13 19:43 - 2015-09-13 19:43 - 02985490 _____ C:\Users\Tony&Theodore\Downloads\JF_V02_S02_L02.pptx
2015-09-13 19:00 - 2015-09-13 19:06 - 1082310656 _____ (Alice Team, Carnegie Mellon University) C:\Users\Tony&Theodore\Downloads\Alice3_windows-x64_Offline_3_2_5_0_0.exe
2015-09-13 18:34 - 2015-09-13 18:34 - 00019397 _____ C:\Users\Tony&Theodore\Desktop\AdwCleaner[C1].txt
2015-09-13 18:26 - 2015-09-13 18:28 - 00000000 ____D C:\AdwCleaner
2015-09-13 18:26 - 2015-09-13 18:26 - 00008402 _____ C:\Users\Tony&Theodore\Desktop\MWBscan.txt
2015-09-13 17:23 - 2015-09-13 17:23 - 00006088 _____ C:\Users\Tony&Theodore\Desktop\rk_9ABB.tmp.txt
2015-09-13 16:32 - 2015-09-13 17:23 - 00000000 ____D C:\ProgramData\RogueKiller
2015-09-13 16:32 - 2015-09-13 16:32 - 00035064 _____ C:\windows\system32\Drivers\TrueSight.sys
2015-09-13 16:30 - 2015-09-13 16:30 - 01800104 _____ (Malwarebytes Corporation) C:\Users\Tony&Theodore\Desktop\JRT.exe
2015-09-13 16:29 - 2015-09-13 16:29 - 01660416 _____ C:\Users\Tony&Theodore\Desktop\adwcleaner_5.007.exe
2015-09-13 16:27 - 2015-09-13 16:28 - 18779208 _____ C:\Users\Tony&Theodore\Desktop\RogueKiller (1).exe
2015-09-12 12:33 - 2015-09-12 12:34 - 00158072 _____ C:\Users\Tony&Theodore\Desktop\Addition.txt
2015-09-12 12:32 - 2015-09-13 22:09 - 00028636 _____ C:\Users\Tony&Theodore\Desktop\FRST.txt
2015-09-12 12:32 - 2015-09-13 22:09 - 00000000 ____D C:\FRST
2015-09-12 12:32 - 2015-09-12 12:32 - 02190848 _____ (Farbar) C:\Users\Tony&Theodore\Desktop\FRST64.exe
2015-09-08 21:42 - 2015-08-17 21:42 - 00393304 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-09-08 21:42 - 2015-08-17 21:14 - 00344168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2015-09-08 21:42 - 2015-08-15 02:48 - 25190400 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-09-08 21:42 - 2015-08-15 02:34 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-09-08 21:42 - 2015-08-15 02:33 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-09-08 21:42 - 2015-08-15 02:18 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-09-08 21:42 - 2015-08-15 02:18 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-09-08 21:42 - 2015-08-15 02:17 - 02886144 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-09-08 21:42 - 2015-08-15 02:17 - 00585216 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-09-08 21:42 - 2015-08-15 02:17 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-09-08 21:42 - 2015-08-15 02:17 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-09-08 21:42 - 2015-08-15 02:10 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-09-08 21:42 - 2015-08-15 02:09 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-09-08 21:42 - 2015-08-15 02:06 - 19856896 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2015-09-08 21:42 - 2015-08-15 02:06 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-09-08 21:42 - 2015-08-15 02:04 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-09-08 21:42 - 2015-08-15 02:04 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-09-08 21:42 - 2015-08-15 02:04 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-09-08 21:42 - 2015-08-15 02:04 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-09-08 21:42 - 2015-08-15 02:00 - 05923328 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-09-08 21:42 - 2015-08-15 01:57 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-09-08 21:42 - 2015-08-15 01:53 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2015-09-08 21:42 - 2015-08-15 01:53 - 00490496 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-09-08 21:42 - 2015-08-15 01:46 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-09-08 21:42 - 2015-08-15 01:42 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-09-08 21:42 - 2015-08-15 01:41 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-09-08 21:42 - 2015-08-15 01:40 - 00504832 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2015-09-08 21:42 - 2015-08-15 01:40 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2015-09-08 21:42 - 2015-08-15 01:39 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2015-09-08 21:42 - 2015-08-15 01:39 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-09-08 21:42 - 2015-08-15 01:39 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2015-09-08 21:42 - 2015-08-15 01:38 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2015-09-08 21:42 - 2015-08-15 01:35 - 02279424 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2015-09-08 21:42 - 2015-08-15 01:33 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2015-09-08 21:42 - 2015-08-15 01:32 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2015-09-08 21:42 - 2015-08-15 01:30 - 00479232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2015-09-08 21:42 - 2015-08-15 01:29 - 00665600 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2015-09-08 21:42 - 2015-08-15 01:29 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2015-09-08 21:42 - 2015-08-15 01:29 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2015-09-08 21:42 - 2015-08-15 01:24 - 00720384 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-09-08 21:42 - 2015-08-15 01:23 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-09-08 21:42 - 2015-08-15 01:22 - 02126336 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-09-08 21:42 - 2015-08-15 01:22 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-09-08 21:42 - 2015-08-15 01:21 - 00418304 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2015-09-08 21:42 - 2015-08-15 01:16 - 14451712 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-09-08 21:42 - 2015-08-15 01:16 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-08 21:42 - 2015-08-15 01:14 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2015-09-08 21:42 - 2015-08-15 01:12 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2015-09-08 21:42 - 2015-08-15 01:11 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2015-09-08 21:42 - 2015-08-15 01:10 - 04520448 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2015-09-08 21:42 - 2015-08-15 01:07 - 02427392 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-09-08 21:42 - 2015-08-15 01:04 - 12857344 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2015-09-08 21:42 - 2015-08-15 01:02 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2015-09-08 21:42 - 2015-08-15 01:01 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2015-09-08 21:42 - 2015-08-15 01:01 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2015-09-08 21:42 - 2015-08-15 00:55 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-09-08 21:42 - 2015-08-15 00:43 - 01951232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2015-09-08 21:42 - 2015-08-15 00:43 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-09-08 21:42 - 2015-08-15 00:39 - 01310720 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2015-09-08 21:42 - 2015-08-15 00:37 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2015-09-08 21:42 - 2015-08-05 13:56 - 01110016 _____ (Microsoft Corporation) C:\windows\system32\schedsvc.dll
2015-09-08 21:42 - 2015-08-05 13:56 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2015-09-08 21:42 - 2015-08-05 13:56 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll
2015-09-08 21:42 - 2015-08-05 13:40 - 00216064 _____ (Microsoft Corporation) C:\windows\SysWOW64\InkEd.dll
2015-09-08 21:42 - 2015-07-22 20:06 - 05568960 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-09-08 21:42 - 2015-07-22 20:06 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-09-08 21:42 - 2015-07-22 20:06 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-09-08 21:42 - 2015-07-22 20:03 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-09-08 21:42 - 2015-07-22 20:03 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2015-09-08 21:42 - 2015-07-22 20:03 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01390592 _____ (Microsoft Corporation) C:\windows\system32\diagtrack.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00879104 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00309760 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-09-08 21:42 - 2015-07-22 20:02 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-09-08 21:42 - 2015-07-22 20:02 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-09-08 21:42 - 2015-07-22 20:02 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2015-09-08 21:42 - 2015-07-22 20:01 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2015-09-08 21:42 - 2015-07-22 20:01 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-09-08 21:42 - 2015-07-22 20:01 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-09-08 21:42 - 2015-07-22 13:57 - 03989952 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2015-09-08 21:42 - 2015-07-22 13:57 - 03934656 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2015-09-08 21:42 - 2015-07-22 13:54 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00641536 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00635392 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00248832 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00221184 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2015-09-08 21:42 - 2015-07-22 13:53 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2015-09-08 21:42 - 2015-07-22 13:52 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll

 

[Classified1]

2015-09-08 21:42 - 2015-07-22 13:52 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2015-09-08 21:42 - 2015-07-22 13:52 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2015-09-08 21:42 - 2015-07-22 13:52 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2015-09-08 21:42 - 2015-07-22 12:48 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\UtcResources.dll
2015-09-08 21:42 - 2015-07-14 23:17 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2015-09-08 21:42 - 2015-07-14 22:54 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2015-09-08 21:42 - 2015-07-09 13:58 - 01632256 _____ (Microsoft Corporation) C:\windows\system32\dwmcore.dll
2015-09-08 21:42 - 2015-07-09 13:58 - 00082944 _____ (Microsoft Corporation) C:\windows\system32\dwmapi.dll
2015-09-08 21:42 - 2015-07-09 13:42 - 01372160 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmcore.dll
2015-09-08 21:42 - 2015-07-09 13:42 - 00067584 _____ (Microsoft Corporation) C:\windows\SysWOW64\dwmapi.dll
2015-09-08 21:41 - 2015-09-01 21:51 - 03209216 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-09-08 21:41 - 2015-09-01 21:47 - 00372736 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-09-08 21:41 - 2015-08-27 14:18 - 02004480 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-09-08 21:41 - 2015-08-27 14:18 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-09-08 21:41 - 2015-08-27 14:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-09-08 21:41 - 2015-08-27 14:13 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2015-09-08 21:41 - 2015-08-27 13:58 - 01391104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6.dll
2015-09-08 21:41 - 2015-08-27 13:58 - 01241088 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2015-09-08 21:41 - 2015-08-27 13:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml6r.dll
2015-09-08 21:41 - 2015-08-27 13:51 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2015-09-08 21:41 - 2015-08-04 14:03 - 00692672 _____ (Microsoft Corporation) C:\windows\system32\winload.efi
2015-09-08 21:41 - 2015-08-04 14:00 - 00616360 _____ (Microsoft Corporation) C:\windows\system32\winresume.efi
2015-09-08 21:41 - 2015-08-04 13:56 - 00063488 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-09-08 21:41 - 2015-08-04 13:56 - 00059392 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-09-08 21:41 - 2015-08-04 13:56 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-09-08 21:41 - 2015-08-04 13:55 - 00147456 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-09-08 21:41 - 2015-08-04 13:55 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-09-08 21:41 - 2015-08-04 13:47 - 00050688 _____ (Microsoft Corporation) C:\windows\SysWOW64\appidapi.dll
2015-09-08 21:41 - 2015-08-04 12:58 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-09-08 21:41 - 2015-07-22 20:03 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2015-09-08 21:41 - 2015-07-22 20:03 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2015-09-08 21:41 - 2015-07-22 20:02 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-09-08 21:41 - 2015-07-22 20:02 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-09-08 21:41 - 2015-07-22 20:02 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-09-08 21:41 - 2015-07-22 19:58 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-09-08 21:41 - 2015-07-22 19:57 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:52 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 19:51 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-09-08 21:41 - 2015-07-22 13:53 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2015-09-08 21:41 - 2015-07-22 13:53 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2015-09-08 21:41 - 2015-07-22 13:53 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2015-09-08 21:41 - 2015-07-22 13:52 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2015-09-08 21:41 - 2015-07-22 13:52 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2015-09-08 21:41 - 2015-07-22 13:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2015-09-08 21:41 - 2015-07-22 13:47 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2015-09-08 21:41 - 2015-07-22 13:46 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 13:42 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:45 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-09-08 21:41 - 2015-07-22 12:44 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-09-08 21:41 - 2015-07-22 12:44 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-09-08 21:41 - 2015-07-22 12:34 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2015-09-08 21:41 - 2015-07-22 12:34 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2015-09-08 21:41 - 2015-07-22 12:31 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:31 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:31 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-08 21:41 - 2015-07-22 12:31 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-08 21:41 - 2015-06-25 06:06 - 00115136 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2015-09-08 21:41 - 2015-06-25 06:01 - 01941504 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2015-09-08 21:41 - 2015-06-25 06:01 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2015-09-08 21:41 - 2015-06-25 05:44 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-09-08 21:40 - 2015-09-01 23:04 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-09-08 21:40 - 2015-09-01 22:48 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2015-09-08 21:40 - 2015-09-01 22:48 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2015-09-08 21:40 - 2015-09-01 22:48 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2015-09-08 21:40 - 2015-09-01 22:47 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2015-09-08 21:40 - 2015-09-01 21:33 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 03165696 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 02606080 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-09-08 21:40 - 2015-08-26 14:07 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-09-08 21:40 - 2015-08-26 14:06 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-09-08 21:40 - 2015-08-26 14:06 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-09-08 21:40 - 2015-08-26 14:06 - 00037376 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-09-08 21:40 - 2015-08-26 14:06 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00566784 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00173056 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00093184 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2015-09-08 21:40 - 2015-08-26 13:56 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2015-09-08 21:40 - 2015-08-26 13:55 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2015-09-07 13:33 - 2015-09-07 15:25 - 00827625 _____ C:\Users\Tony&Theodore\Downloads\El Proyecto Gramática.pptx
2015-08-20 21:07 - 2015-08-20 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-18 20:55 - 2015-08-18 20:55 - 00000000 ____D C:\ProgramData\Celavimus
2015-08-18 20:53 - 2015-08-18 20:53 - 00001201 _____ C:\Users\Public\Desktop\CEVO Client (CSGO).lnk
2015-08-18 20:53 - 2015-08-18 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEVO Client
2015-08-18 20:52 - 2015-08-18 20:52 - 24003197 _____ C:\Users\Tony&Theodore\Downloads\CEVO CSGO Client.zip

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-13 22:05 - 2009-07-13 23:20 - 00000000 ____D C:\windows\tracing
2015-09-13 21:19 - 2012-04-04 14:49 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-09-13 21:14 - 2009-07-13 22:34 - 00000215 _____ C:\windows\system.ini
2015-09-13 21:12 - 2012-11-16 23:11 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-09-13 21:11 - 2011-03-15 15:40 - 00000898 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-13 21:11 - 2011-03-15 15:40 - 00000894 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-13 20:49 - 2009-07-14 00:45 - 00026192 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-13 20:49 - 2009-07-14 00:45 - 00026192 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-13 20:47 - 2012-09-07 14:53 - 01435672 _____ C:\windows\WindowsUpdate.log
2015-09-13 20:38 - 2013-02-12 21:11 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\GameTracker
2015-09-13 20:38 - 2011-03-03 19:08 - 00065536 _____ C:\windows\system32\Ikeext.etl
2015-09-13 20:37 - 2012-12-27 00:15 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-13 20:37 - 2012-09-08 11:10 - 00091589 _____ C:\windows\setupact.log
2015-09-13 20:37 - 2009-07-14 01:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-09-13 20:36 - 2014-05-06 15:28 - 00000000 ____D C:\ProgramData\AVG2014
2015-09-13 20:36 - 2012-11-15 17:55 - 00000000 ____D C:\ProgramData\MFAData
2015-09-13 20:36 - 2012-09-10 21:13 - 00593168 _____ C:\windows\PFRO.log
2015-09-13 20:35 - 2011-03-03 18:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-13 18:39 - 2011-03-03 18:35 - 00000000 ____D C:\Users\Tony&Theodore
2015-09-13 18:29 - 2011-06-22 18:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-13 18:25 - 2015-04-05 18:18 - 00113880 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-13 17:28 - 2015-04-05 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-13 17:28 - 2015-04-05 18:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-13 17:28 - 2012-05-17 17:03 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-13 15:19 - 2012-02-14 16:25 - 00003998 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{FBC56AB4-1D1D-4A15-8142-FCC0A3DD2774}
2015-09-12 22:30 - 2013-02-23 22:52 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\Skype
2015-09-12 18:13 - 2012-03-05 17:38 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Local\CrashDumps
2015-09-12 12:31 - 2015-04-23 16:02 - 00000000 ___RD C:\Users\Tony&Theodore\Desktop\Video Games
2015-09-12 12:22 - 2009-07-13 23:20 - 00000000 ____D C:\windows\rescache
2015-09-11 21:30 - 2014-04-27 18:38 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\TS3Client
2015-09-10 16:44 - 2015-01-07 17:04 - 00000000 __SHD C:\Users\Tony&Theodore\AppData\Local\EmieBrowserModeList
2015-09-10 16:44 - 2014-10-27 18:39 - 00000000 __SHD C:\Users\Tony&Theodore\AppData\Local\EmieUserList
2015-09-10 16:44 - 2014-10-27 18:39 - 00000000 __SHD C:\Users\Tony&Theodore\AppData\Local\EmieSiteList
2015-09-09 22:46 - 2015-04-22 17:27 - 00000000 ____D C:\Users\Tony&Theodore\Desktop\Wallpapers
2015-09-09 15:13 - 2009-07-14 01:13 - 00799898 _____ C:\windows\system32\PerfStringBackup.INI
2015-09-09 15:07 - 2009-07-14 00:45 - 00488320 _____ C:\windows\system32\FNTCACHE.DAT
2015-09-09 15:04 - 2009-07-26 00:48 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-09 15:04 - 2009-07-13 23:20 - 00000000 ____D C:\windows\PolicyDefinitions
2015-09-08 23:12 - 2011-03-19 10:25 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-09-08 23:11 - 2013-08-13 22:48 - 00000000 ____D C:\windows\system32\MRT
2015-09-03 16:27 - 2012-03-14 20:15 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-29 21:24 - 2013-10-15 21:03 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Local\Battle.net
2015-08-29 21:14 - 2013-10-15 21:03 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-27 21:06 - 2011-03-15 15:40 - 00003894 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-27 21:06 - 2011-03-15 15:40 - 00003642 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-26 18:37 - 2011-03-03 17:19 - 134753440 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-08-21 16:55 - 2009-07-14 01:08 - 00032656 _____ C:\windows\Tasks\SCHEDLGU.TXT
2015-08-20 21:07 - 2014-01-04 22:09 - 00002697 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-20 21:07 - 2014-01-04 22:09 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-20 21:07 - 2013-02-23 22:52 - 00000000 ____D C:\ProgramData\Skype
2015-08-18 20:53 - 2013-06-06 22:52 - 00000000 ____D C:\Program Files (x86)\CEVO
2015-08-17 18:20 - 2011-04-23 20:05 - 00000000 ____D C:\Users\Tony&Theodore\Tracing
2015-08-17 18:15 - 2011-06-11 08:30 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\Apple Computer
2015-08-15 17:48 - 2014-04-27 18:37 - 00000000 ____D C:\Users\Tony&Theodore\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

==================== Files in the root of some directories =======

2015-09-13 20:32 - 2015-09-13 20:40 - 0000360 _____ () C:\Users\Tony&Theodore\AppData\Local\multiscan.log
2011-03-15 15:34 - 2011-03-15 15:34 - 0000017 _____ () C:\Users\Tony&Theodore\AppData\Local\resmon.resmoncfg
2010-09-16 14:28 - 2010-09-16 14:28 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe
2011-08-08 16:13 - 2011-06-09 16:13 - 0000032 ____R () C:\ProgramData\hash.dat
2011-09-18 15:21 - 2011-09-18 15:21 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Files to move or delete:
====================
C:\ProgramData\flashax10.exe
C:\ProgramData\hash.dat
C:\Users\Tony&Theodore\invasion-installer-v2.bat


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-12 12:14

==================== End of FRST.txt ============================

 

[Classified1]

Addition.log

Additional scan result of Farbar Recovery Scan Tool (x64) Version:12-09-2015
Ran by Tony&Theodore (2015-09-13 22:09:40)
Running from C:\Users\Tony&Theodore\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-03-03 22:35:19)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3718762900-4173039834-1257701688-500 - Administrator - Disabled)
Guest (S-1-5-21-3718762900-4173039834-1257701688-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3718762900-4173039834-1257701688-1003 - Limited - Enabled)
Tony&Theodore (S-1-5-21-3718762900-4173039834-1257701688-1001 - Administrator - Enabled) => C:\Users\Tony&Theodore
UpdatusUser (S-1-5-21-3718762900-4173039834-1257701688-1009 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

A New Zero (HKLM-x32\...\A New Zero) (Version: - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated)
Adobe Flash Media Live Encoder 3.2 (HKLM-x32\...\{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}) (Version: 3.2.0 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{0099B484-C24C-4D5F-8167-B0F6DF196E72}) (Version: 12.0.3.133 - Adobe Systems, Inc)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.9.159 - Adobe Systems, Inc.)
Alice 3 3.2.5.0.0 (HKLM\...\8894-1892-1685-3469) (Version: 3.2.5.0.0 - Alice Team, Carnegie Mellon University)
Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
applicationupdater (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\SOE-C:/Users/Tony&Theodore/AppData/Local/Sony Online Entertainment/ApplicationUpdater) (Version: - Sony Online Entertainment)
Arma 2 (HKLM-x32\...\Steam App 33900) (Version: - Bohemia Interactive)
ArmA 2 Free Uninstall (HKLM-x32\...\ArmA 2) (Version: - )
Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Assassin's Creed(R) III v1.02 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.02 - Ubisoft)
AutoCAD 2012 - English (HKLM\...\AutoCAD 2012 - English) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 - English (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 Language Pack - English (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)
Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion plug-in for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
AVG 2014 (Version: 14.0.4365 - AVG Technologies) Hidden
AVS Image Converter 2.0.2.160 (HKLM-x32\...\AVS Image Converter_is1) (Version: - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (HKLM-x32\...\AVS Update Manager_is1) (Version: - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (HKLM-x32\...\AVS4YOU Software Navigator_is1) (Version: - Online Media Technologies Ltd.)
AwesomiumSetup (HKLM-x32\...\{19EF99D1-7EE6-4B5E-ABEE-0B3825F703B0}) (Version: 1.00.0000 - SIX Networks GmbH)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.5.0.0 - Electronic Arts)
Battlefield 4™ Beta (HKLM-x32\...\{CFAB3721-549D-4827-A4E8-7F90192114AB}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BattlEye (A2Free) Uninstall (HKLM-x32\...\BattlEye A2 Free) (Version: - )
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
Blender (HKLM\...\Blender) (Version: 2.65a-release - Blender Foundation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CEVO CS:GO Client Beta version 1.0 (HKLM-x32\...\CEVO CS:GO Client Beta_is1) (Version: 1.0 - )
CEVO Paladin (0.0.4.2) (HKLM-x32\...\cmn_cevo_is1) (Version: 0.0.4.2 - CEVO)
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Desura (HKLM-x32\...\Desura) (Version: 100.53 - Desura)
Desura: Black Mesa (HKLM-x32\...\Desura_18829136625680) (Version: Full - Black Mesa Dev Team)
Desura: No More Room in Hell (HKLM-x32\...\Desura_7876970020880) (Version: Open Beta - No More Room In Hell Development Team)
Desura: Project Zomboid (HKLM-x32\...\Desura_62350040236064) (Version: Alpha - The Indie Stone)
Diablo II (HKLM-x32\...\Diablo II) (Version: - Blizzard Entertainment)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - )
Dota 2 Test (HKLM-x32\...\Steam App 205790) (Version: - )
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
EVE Online (remove only) (HKLM-x32\...\EVE) (Version: - CCP Games Ltd.)
EverQuest II (HKLM-x32\...\Steam App 201230) (Version: - Sony Online Entertainment, LLC.)
EVGA OC Scanner X 2.2.2 (HKLM-x32\...\{CB92C58B-7BDF-48E3-92E3-51768DCCA585}_is1) (Version: - EVGA)
EVGA Precision X 3.0.3 (HKLM-x32\...\PrecisionX) (Version: 3.0.3 - EVGA Corporation)
Fallout New Vegas (HKLM-x32\...\Fallout New Vegas_is1) (Version: - )
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
Foldit (HKLM-x32\...\Foldit) (Version: - )
Fraps (HKLM-x32\...\Fraps) (Version: - )
gamelauncher-ps2-live (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\SOE-) (Version: - Sony Online Entertainment)
GameStop App (HKLM-x32\...\GameStop App) (Version: 4.00 - GameStop)
GameStop App (x32 Version: 4.00 - GameStop) Hidden
GameTracker Lite (HKLM-x32\...\GameTracker Lite) (Version: - ClanServers Hosting LLC.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Garry)
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\{170EDFF0-10DA-3EB1-9FA0-7B92E3DBD8C1}) (Version: 65.61.49243 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden
Half-Life (HKLM-x32\...\Half-Life_is1) (Version: Half-Life - Non Steam - KingSOFT DVD)
Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve)
Half-Life: Blue Shift (HKLM-x32\...\Steam App 130) (Version: - Gearbox)
Happy Cloud Client (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\HappyCloud) (Version: 4.54 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Hitman 2: Silent Assassin (HKLM-x32\...\Hitman 2: Silent Assassin) (Version: - Eidos Interactive)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version: - Square Enix)
HP Officejet Pro 8500 A910 Basic Device Software (HKLM\...\{EE7C94CC-BECB-4000-B5E3-D895307B9D5E}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
HP Officejet Pro 8500 A910 Help (HKLM-x32\...\{871B2A9D-0F12-44B3-88C1-E0CB10A232E4}) (Version: 140.0.2.2 - Hewlett Packard)
iCloud (HKLM\...\{D1829BE5-F305-4576-9593-C66FC7E0B008}) (Version: 1.0.2.17 - Apple Inc.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.1952 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 14.5 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation)
iTunes (HKLM\...\{4046F74A-28F8-48C6-A5D3-2AFC472574C1}) (Version: 12.2.0.145 - Apple Inc.)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive)
Kodu Game Lab (HKLM-x32\...\{9921C67F-CF6D-431E-B554-40075B8C6C10}) (Version: 1.2.18 - Microsoft Research)
LcdStudio 2.0 Build 806 (HKLM-x32\...\LcdStudio) (Version: 2.0 Build 806 - LcdStudio)
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Lenovo Driver and Application Installation (HKLM-x32\...\{45970CD1-D599-47D4-938F-3E9800D54ED1}) (Version: 5.1.0.1119 - Lenovo)
Lenovo Healthcare Software (HKLM-x32\...\{9610EC3A-C7A0-4C31-9F3B-F9020C582B47}) (Version: 3.0.0.090928 - Lenovo)
Lenovo Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.3321a3 - CyberLink Corp.)
Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.) Hidden
Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 3.0.0827 - CyberLink Corp.)
Lenovo Rescue System (Version: 3.0.0827 - CyberLink Corp.) Hidden
Lenovo Screensaver (HKLM-x32\...\{803E6DED-5050-4E3D-B26A-5915397362CD}) (Version: 1.0.5.091230 - Lenovo)
Lethal League (HKLM-x32\...\Steam App 261180) (Version: - Team Reptile)
Logitech G35 (HKLM\...\{27607A94-33AC-4AA7-AACE-95AF6ACA3E30}) (Version: 1.1.178 - Logitech)
Logitech GamePanel Software 3.03.133 (HKLM\...\{6CC95B76-D380-46B2-9022-9353938E48BA}) (Version: 3.03.133 - Logitech Inc.)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.2.1 - www.leaguereplays.com)
LVT (HKLM-x32\...\{D3063097-EC84-4D21-84A4-9D852E974355}) (Version: 4.1.1.0930 - Lenovo)
LXH-JME2207FN Hotkey Driver (HKLM-x32\...\{42B21298-C850-4272-AFD9-636CBC005421}) (Version: 5.1.0804 - Lenovo)
Macromedia Extension Manager (HKLM-x32\...\{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}) (Version: 1.7.240 - Macromedia, Inc.)
Macromedia Flash 8 (HKLM-x32\...\{2BD5C305-1B27-4D41-B690-7A61172D2FEB}) (Version: 8.00.0000 - Macromedia)
Macromedia Flash 8 Video Encoder (HKLM-x32\...\{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}) (Version: 1.00.0000 - Macromedia)
Macromedia Flash Player 8 (HKLM-x32\...\{885A63EA-382B-4DD4-A755-14809B8557D6}) (Version: 8.0.22.0 - Macromedia)
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
MechWarrior Online (HKLM-x32\...\{73bcb521-8936-42d7-ad00-ec2bb399e26c}) (Version: 1.4.3.0 - Piranha Games Inc.)
MechWarrior Online (x32 Version: 1.4.3.0 - Piranha Games Inc.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Flight (HKLM-x32\...\Steam App 203850) (Version: - )
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM-x32\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 ENU (HKLM-x32\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation)
Microsoft Visual Basic 2008 Express Edition - ENU (HKLM-x32\...\Microsoft Visual Basic 2008 Express Edition - ENU) (Version: - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM\...\{62577E41-C350-3D07-97C8-2B6CDB4BAD60}) (Version: 3.5.21022 - Microsoft)
Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM\...\{11EB1163-5761-4BC6-8F48-98DCF6A46BBF}) (Version: 6.1.5288.17011 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Mobile Mouse Server (HKLM-x32\...\{BAC8C2FD-1FF8-4615-B827-9042248121CB}) (Version: 2.6.4 - RPA Tech, Inc)
Moonbase Alpha (HKLM-x32\...\Steam App 39000) (Version: - Army Game Studio/Virtual Heroes supporting)
Mozilla Firefox 15.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 15.0.1 (x86 en-US)) (Version: 15.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 15.0.1 - Mozilla)
My Game Long Name (HKLM\...\UDK-65d14ca0-53ff-43fd-9ac9-d1cf2943f901) (Version: - Epic Games, Inc.)
myTV (HKLM-x32\...\{C54184D0-D281-4523-B357-0606209DB56C}) (Version: 3.4.1 - MyTV)
myTV (x32 Version: 3.4.1 - MyTV) Hidden
No More Room in Hell (HKLM-x32\...\Steam App 224260) (Version: - No More Room in Hell Team)
NVIDIA 3D Vision Controller Driver 326.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 326.01 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.23 - NVIDIA Corporation)
NVIDIA Graphics Driver 327.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.23 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OPSWAT GEARS Uninstall (only) (HKLM-x32\...\OPSWAT Gears) (Version: 7.4.88.0 - OPSWAT, Inc.)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
ORION: Prelude (HKLM-x32\...\Steam App 104900) (Version: - Spiral Game Studios)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.2.3.36532 - Grinding Gear Games)
Pivot Stickfigure Animator version 2.2.6 (HKLM-x32\...\Pivot Stickfigure Animator_is1) (Version: 2.2.6 - )
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment)
Power Dial (HKLM-x32\...\{F90F759A-78EF-4370-B25E-EC5F710D1097}) (Version: 3.0.1.1010 - Lenovo)
PowerISO (HKLM-x32\...\PowerISO) (Version: 4.8 - PowerISO Computing, Inc.)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - Indie Stone Studios)
Project Zomboid (remove only) (HKLM-x32\...\ProjectZomboid) (Version: - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Python 3.4.2 (HKLM-x32\...\{2583CDBA-8A53-4622-BB67-1D163714C1B4}) (Version: 3.4.16349 - Python Software Foundation)
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Race The Sun (HKLM-x32\...\Steam App 253030) (Version: - Flippfly LLC)
Racket v6.1.1 (x86_64) (HKLM-x32\...\Racket-x86_64-6.1.1) (Version: 6.1.1 - PLT Design Inc.)
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.1.8-1.0.4843.13 - raidcall.com)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5911 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30095 - Realtek Semiconductor Corp.)
ROBLOX Player for Tony&Theodore (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
ROBLOX Studio 2013 for Tony&Theodore (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - ROBLOX Corporation)
Roxio BackOnTrack (HKLM-x32\...\{32F9BACF-FCD3-4B6A-AD85-255A449B6FA5}) (Version: 1.3.1 - Roxio)
Sansa Updater (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Sansa Updater) (Version: 1.301 - SanDisk Corporation)
SDFormatter (HKLM-x32\...\{5A347920-4AFC-11D5-9FB0-800649886934}) (Version: - )
Secunia PSI (3.0.0.4001) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.4001 - Secunia)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version: - Croteam)
Serious Sam Classic: The Second Encounter (HKLM-x32\...\Steam App 41060) (Version: - Croteam)
Serious Sam Classics: Revolution (HKLM-x32\...\Steam App 227780) (Version: - Croteam)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Setup Support for Social Ribbons 1.0 (HKLM-x32\...\Setup Support for Social Ribbons) (Version: 1.0 - Sono Control Inc.)
SixaxisPairTool 0.3.0 (HKLM-x32\...\SixaxisPairTool_is1) (Version: 0.3.0 - Dancing Pixel Studios)
Skullgirls (HKLM-x32\...\Steam App 245170) (Version: - Lab Zero Games)
Skullgirls ∞Endless Beta∞ (HKLM-x32\...\Steam App 208610) (Version: - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 0.1.1682.0 - Hi-Rez Studios)
SocialRibbons LP5 (HKLM-x32\...\SocialRibbons LP5) (Version: - )
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - )
Source SDK (HKLM-x32\...\Steam App 211) (Version: - Valve)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
Speccy (HKLM\...\Speccy) (Version: 1.22 - Piriform)
Spiral Knights (HKLM-x32\...\Steam App 99900) (Version: - SEGA)
Spotify (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\Spotify) (Version: 0.9.14.13.gba5645ad - Spotify AB)
StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.3.24764 - Blizzard Entertainment)
Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve)
Stellarium 0.12.0 (HKLM\...\Stellarium_is1) (Version: 0.12.0 - Stellarium team)
Sumotori Full Version (HKLM-x32\...\Sumotori Full Version) (Version: - )
SUPER © v2011.build.49 (July 1st, 2011) version v2011.build.49 (HKLM-x32\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2011.build.49 - eRightSoft)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - Team Meat)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synthesia (remove only) (HKLM-x32\...\Synthesia) (Version: - )
System Requirements Lab CYRI (HKLM-x32\...\{E5F05232-96B6-4552-A480-785A60A94B21}) (Version: 5.0.6.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 6 (HKLM-x32\...\TeamViewer 6) (Version: 6.0.10722 - TeamViewer GmbH)
TERA (HKLM-x32\...\{0FCDA0F8-F3E5-402E-B9B6-13CB2B01182B}) (Version: 1.6 - En Masse Entertainment)
The Battle for Middle-earth (tm) (HKLM-x32\...\{962E05CF-3394-496D-0091-850CF1762F6B}) (Version: - )
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Mighty Quest For Epic Loot version 1.216644 (HKLM-x32\...\The Mighty Quest For Epic Loot_is1) (Version: 1.216644 - )
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version: - Telltale Games)
ThemeWallpaper (HKLM-x32\...\{F29CBF73-C211-4616-898A-379A2679F990}) (Version: 1.1.0.090901 - Lenovo)
Tribes: Ascend (HKLM-x32\...\Steam App 17080) (Version: - )
Ultra Street Fighter IV (HKLM-x32\...\Steam App 45760) (Version: - Capcom)
Unity Web Player (HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Universe Sandbox (HKLM-x32\...\Universe Sandbox) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
VC Runtimes MSI (x32 Version: 9.0.21022 - Microsoft) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D264BD11-6A9B-11E4-A4F7-F04DA23A5C58}) (Version: 13.0.428 - Sony)
Vindictus (HKLM-x32\...\Steam App 212160) (Version: - )
Visual MP3 Splitter & Joiner 8.0 (HKLM-x32\...\Visual MP3 Splitter & Joiner_is1) (Version: - ManiacTools.com)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warhammer® 40,000®: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version: - Relic)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinRAR 4.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
Wondershare Video Editor(Build 3.5.1) (HKLM-x32\...\Wondershare Video Editor_is1) (Version: - Wondershare Software)
Worms World Party (HKLM-x32\...\{9A200E68-D5F4-4E70-910F-2871753A0E2B}) (Version: - )
Xilisoft DPG Converter (HKLM-x32\...\Xilisoft DPG Converter) (Version: 5.1.23.0515 - Xilisoft)
XSplit Broadcaster (HKLM-x32\...\{B431C2DC-1119-40F2-9EDD-55E384FE91AD}) (Version: 1.3.1311.1201 - SplitMediaLabs)
YGOPro DevPro (HKLM-x32\...\{43589988-FB5A-4C3A-B7EE-1D831EF9E89F}) (Version: 1.9.9 - DevPro)
YouTube Downloader Toolbar v4.6 (HKLM-x32\...\{72A7495B-18CD-4751-AC38-5DBED9C6B1E7}) (Version: 4.6 - Spigot, Inc.) <==== ATTENTION
Zombie Panic Source (HKLM-x32\...\Steam App 17500) (Version: - Zombie Panic! Team)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files (x86)\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acadficn.dll (Autodesk, Inc.)

==================== Restore Points =========================

08-09-2015 21:31:15 Windows Update
08-09-2015 22:51:33 Windows Update
13-09-2015 18:37:04 JRT Pre-Junkware Removal
13-09-2015 19:00:13 Windows Backup
13-09-2015 20:30:47 Installed OPSWAT GEARS

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:34 - 2015-09-13 21:14 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0B98EEF0-C017-4DB7-8222-C6BB119A1882} - System32\Tasks\Norton Management\Norton Error Processor => C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\SymErr.exe
Task: {13B785D9-9152-4A5D-AF7B-FD9050EBEE94} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {15112FB2-B40B-476B-83A3-3A628B57DC08} - System32\Tasks\Norton Management\Norton Error Analyzer => C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\SymErr.exe
Task: {1EAFA8F7-C18A-4003-8728-20AC67821A59} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {35DD399B-808C-481C-BFEA-76D9227FBE66} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3718762900-4173039834-1257701688-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {4562CEEA-697E-4905-94DA-2F638D84E150} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3718762900-4173039834-1257701688-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {4E699FCB-C2A4-4D46-B8CB-7AE6461257EC} - System32\Tasks\{15DCB9C0-D25B-4330-8EDB-2A71375ECC7B} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {573CEB2D-289D-49F1-8516-0A28FCF5C740} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.1.8\WSCStub.exe
Task: {6493BCA3-BF6C-4F04-A783-FCA80AE7CB4A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.1.8\SymErr.exe
Task: {66056FFC-6128-47B5-B666-50353D613668} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.6.1.8\SymErr.exe
Task: {79DF1526-20E8-4B81-8BF7-7CBE0929CF0E} - System32\Tasks\{27FE0F87-BEE1-41F9-B750-ADCAE6C2A2C9} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {8A1981C7-DB8B-43B9-87A1-469FC62F1274} - System32\Tasks\{77AE41C8-3FCF-454D-BD8B-30B5B8F549AB} => pcalua.exe -a D:\Setup.exe -d D:\
Task: {BAE6B830-BE56-41FF-A0D4-756337AF4215} - System32\Tasks\{75BE05EA-15ED-4032-890C-55602933E2DE} => pcalua.exe -a "C:\Users\Tony&amp;Theodore\Downloads\Mix_Vibes_Pro\MIXVIBES PRO\MixVibesPro401.exe" -d "C:\Users\Tony&amp;Theodore\Downloads\Mix_Vibes_Pro\MIXVIBES PRO"
Task: {C3B5B6E9-93BD-4C2F-B006-6F37874D7154} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {CA0EEC5D-569A-402A-A5A4-327BB564DDCB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {CC2D4F46-AC48-4BF3-8BD1-B63697C334FD} - System32\Tasks\{131A5D89-F7D4-4A12-85B2-6F423F858416} => pcalua.exe -a C:\Users\Tony&amp;Theodore\Games\lotrbfme2_win_7_64bit_fix\setup.exe -d C:\Users\Tony&amp;Theodore\Games\lotrbfme2_win_7_64bit_fix
Task: {DE674CCB-1362-4614-8AC4-94642186DB7B} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {F4A8D4DD-B113-47AD-A2C9-D057B6EA9240} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2012-12-27 00:15 - 2013-09-12 03:25 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-02-02 14:08 - 2011-02-02 14:08 - 00018656 _____ () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
2012-07-03 13:27 - 2014-10-03 17:52 - 00076152 _____ () C:\windows\SysWOW64\PnkBstrA.exe
2010-09-16 14:05 - 2009-07-16 12:20 - 00032768 _____ () C:\Program Files (x86)\jmesoft\Keyhook.dll
2010-09-16 14:05 - 2007-12-31 13:27 - 00007168 _____ () C:\Program Files (x86)\jmesoft\VistaVolume.dll
2009-06-03 23:59 - 2009-06-03 23:59 - 00619816 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll
2009-06-03 23:59 - 2009-06-03 23:59 - 00013096 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll
2014-02-05 17:10 - 2013-07-24 10:24 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2014-10-17 15:22 - 2014-10-17 15:22 - 00170496 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3d576cbc4ffc5ad06fd61510c5d8f326\IsdiInterop.ni.dll
2010-09-16 14:03 - 2010-03-03 23:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-03-08 01:17 - 2013-03-08 01:17 - 07816192 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avcodec-54.dll
2013-03-08 01:17 - 2013-03-08 01:17 - 00188416 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avutil-52.dll
2013-03-08 01:17 - 2013-03-08 01:17 - 01425920 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\avformat-54.dll
2013-03-08 01:17 - 2013-03-08 01:17 - 00336896 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\swscale-2.dll
2013-03-08 01:17 - 2013-03-08 01:17 - 00096256 _____ () C:\Program Files (x86)\SplitMediaLabs\XSplit\swresample-0.dll
2015-09-03 16:27 - 2015-08-27 20:17 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll
2015-09-03 16:27 - 2015-08-27 20:17 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll
2015-09-03 16:27 - 2015-08-27 20:17 - 16393032 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Tony&Theodore\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Air Mouse.lnk => C:\windows\pss\Air Mouse.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Tony&Theodore^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GameStop Now.lnk => C:\windows\pss\GameStop Now.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Healthcare => C:\Program Files\Lenovo\HealthCare\HealthCare.exe /hide
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: RaidCall => C:\Program Files (x86)\RaidCall\raidcall.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{BC99E975-AE09-4873-90D3-7A5CE5F3A500}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{99B381A4-9B22-45E0-9CF7-2D6FA5E3A0D0}] => (Allow) svchost.exe
FirewallRules: [{C0DA4C5B-6354-43B3-B5D8-C1A09511FFA4}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{B16B7351-6A98-4B42-9234-0E7359283C74}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{09E63837-FFA4-45B6-9AAC-D7AEE6B2FD82}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{A71B4289-1FD2-4360-BFF6-76B91F85900E}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [UDP Query User{10FAE0D2-3CD5-4BB5-80EE-D75063C804D8}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [TCP Query User{88E379A7-45E6-4853-80EB-3A61760E454A}C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe
FirewallRules: [UDP Query User{AE876D98-0D37-44E6-8A25-CCFE09C8D777}C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base17326\sc2.exe
FirewallRules: [{E371252D-E02D-48DD-9D10-54D56FCB7068}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{112372F4-DEE1-495D-ABE2-DE5B1BB08CD8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{ADF49BBC-14FD-45A2-8EC0-1A2C6F4ADF71}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe
FirewallRules: [{BD6423C4-A462-4C40-80F9-0AD98B6194AF}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe
FirewallRules: [{D5429DDA-45FA-449A-93D9-8A1BA63C78D2}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe
FirewallRules: [{9C14E06E-CFB1-413A-AE7B-D0BBF1901CF2}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe
FirewallRules: [TCP Query User{778D55FD-AFD4-4D02-8986-7A1E8542AB74}C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe
FirewallRules: [UDP Query User{B35D30F8-54FE-45EC-B85C-628FF98DA6EC}C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base18574\sc2.exe
FirewallRules: [{241FD511-FFB5-4977-B11C-0498B2330222}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{8AD16539-EFF0-476C-9862-B1FB404309EF}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{10C3CA2E-4EB2-4CF9-BA3D-55EC4B2462C2}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{CFE1898C-D428-467D-99B9-6B55D850820B}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{F2F6E98D-866B-4364-A151-DFED8FFDB928}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{8CABA158-3016-4311-941B-1DB9C2D3E35C}] => (Allow) C:\Users\Tony&Theodore\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{47D400C1-D301-4612-B964-E7910CB790BF}] => (Allow) C:\Users\Tony&Theodore\Downloads\Facemoods.exe
FirewallRules: [{919AC6B9-A905-4950-B98C-682E6FFD6462}] => (Allow) C:\Users\Tony&Theodore\Downloads\Facemoods.exe
FirewallRules: [TCP Query User{6FE11DB9-C718-4FBF-9EAA-54927EA3BFB6}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [UDP Query User{50CAAABA-BE69-44F1-B0EE-EDA5515BB14C}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [TCP Query User{5E2C7A1B-A8D7-4D9D-9486-BAB579E8D0B5}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [UDP Query User{2BD2CEE9-C2E2-44E0-AC86-4E03BA420A6B}C:\program files (x86)\valve\half-life\hl.exe] => (Allow) C:\program files (x86)\valve\half-life\hl.exe
FirewallRules: [TCP Query User{4AE39C73-C3E8-4C9E-A2D5-EA1BD83BC42C}C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe
FirewallRules: [UDP Query User{8B4881CD-E3E7-4264-96B0-3C26A238B53B}C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\half-life blue shift\hl.exe
FirewallRules: [TCP Query User{212E7F17-412A-4F43-8F63-542D1A9E5CDE}C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe
FirewallRules: [UDP Query User{8D70A4D1-7FF6-4CC0-B37D-4AC350C41567}C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\global agenda live\binaries\globalagenda.exe
FirewallRules: [TCP Query User{01777649-FFD4-4832-8F2D-E7BA16716494}C:\program files (x86)\starcraft ii\starcraft ii.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii.exe
FirewallRules: [UDP Query User{BA7CD9C2-8552-4ACA-9045-E1DF433FF8B5}C:\program files (x86)\starcraft ii\starcraft ii.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii.exe
FirewallRules: [TCP Query User{7AE680E7-B1C8-4004-8405-C312916A6CE6}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [UDP Query User{EEA484D3-F335-4603-BD35-661C7400A9B9}C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe] => (Allow) C:\program files (x86)\starcraft ii\support\blizzarddownloader.exe
FirewallRules: [TCP Query User{1C831F77-FBF0-4004-A3D6-E1FB6CA27D93}C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe
FirewallRules: [UDP Query User{49FBF66F-1C3D-4D34-B58A-70B6FDAA892D}C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19132\sc2.exe
FirewallRules: [{5F7A3CFE-E43F-4F5B-BA72-D942CAD0A22A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{6B5A3C18-9CB7-4C45-9F7F-729E30D26A31}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
FirewallRules: [{FF1D6155-713D-4993-B54C-5A2F5A83E608}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{0BD7733D-0DE8-43D6-9511-2EE0182BD86F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
FirewallRules: [{4644AB0C-09E7-453D-8FB7-9170E90D3702}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\dinodday.exe
FirewallRules: [{D24E9E85-85DC-4CFE-8296-A1B9B0F8F747}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\dinodday.exe
FirewallRules: [{A5A2A4F4-28B2-4AF2-AA0C-8104E68BE819}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\srcds.exe

 

[Classified1]

(Allow) C:\Program Files (x86)\Steam\SteamApps\common\dino d-day\srcds.exe
FirewallRules: [TCP Query User{8B6158E4-20E0-41A5-97AA-9754B5492E52}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [UDP Query User{A562F72A-FFBC-4A77-AACA-4A5FB4227901}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe
FirewallRules: [TCP Query User{68FB8D29-696C-47B0-8D43-70311F6BCE90}C:\users\tony\desktop\utorrent.exe] => (Allow) C:\users\tony\desktop\utorrent.exe
FirewallRules: [UDP Query User{CE710392-542D-4CDB-830C-FFE77FE8BA3A}C:\users\tony\desktop\utorrent.exe] => (Allow) C:\users\tony\desktop\utorrent.exe
FirewallRules: [{75A46C94-6BE1-410D-B069-3DE88141A54B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [{DEC60361-C38D-4041-89B8-5A2B3EA20C85}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [TCP Query User{D22C73E4-77CA-44F7-ACAC-7BB8CA141F30}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [UDP Query User{3902E566-A837-4B0D-A82F-42511061DD2B}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [TCP Query User{1ABE62FC-FAE9-4325-996C-472690B17E44}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [UDP Query User{CBDC28EA-C1FA-459A-83A3-70B0B24295FA}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [TCP Query User{22E603D5-1E83-4253-8F7D-78B5F7407FA2}C:\program files (x86)\ultramixer\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ultramixer\jre\bin\javaw.exe
FirewallRules: [UDP Query User{BB4CD703-DEB5-417E-BF14-66D0A9BF0819}C:\program files (x86)\ultramixer\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ultramixer\jre\bin\javaw.exe
FirewallRules: [TCP Query User{1D6516C8-EB67-4B5B-9159-00AB35D42305}C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F4E37381-3F1B-47C0-A47B-05EFD030854C}C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tony&theodore\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F75ADAC2-9381-4D5A-91D7-F6A05AF1F76D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{CB7A9652-6E59-4A36-88F7-08DB0DC803D2}] => (Allow) LPort=2869
FirewallRules: [{A25E5EFD-75CD-4713-9632-E2B71698B6A7}] => (Allow) LPort=1900
FirewallRules: [{13AE75A5-01B9-47BD-808D-2727DD1A9496}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{F6EA349B-596C-407C-A1A0-84AC4CE6590E}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Block) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{42F2E245-CF92-44EA-BC73-ADED4293B5D3}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Block) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{F3642756-B585-4B19-8A7B-11C48F42FCEA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{AB19B93B-A807-475D-A2A2-9CADA993C76E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{089B8642-D0B8-4561-9759-96F7529A7AB0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FF59BE36-4036-4CC8-9638-30CF189CF0DE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{726FDCE9-6402-4DBC-AD7D-045B11D7CD58}C:\program files (x86)\starcraft ii\starcraft ii public test.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii public test.exe
FirewallRules: [UDP Query User{E7C0B230-444D-40FF-9815-A0D049E110DE}C:\program files (x86)\starcraft ii\starcraft ii public test.exe] => (Allow) C:\program files (x86)\starcraft ii\starcraft ii public test.exe
FirewallRules: [TCP Query User{C797DC0A-9639-42E3-88B9-D6B374004722}C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe
FirewallRules: [UDP Query User{F76E2F3E-AD10-46DB-9947-3C498F042B34}C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\test\versions\base19679\sc2.exe
FirewallRules: [TCP Query User{C075F0AF-F20E-475E-AE17-073FE959E711}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [UDP Query User{466CC04D-EE26-4395-8991-CD9081AB4374}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [TCP Query User{6849171A-25A2-4CD4-A3AA-5501B747E10D}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [UDP Query User{87AFDA4A-92E6-4AB7-908B-CFA9A334B5AD}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [TCP Query User{F2D8F3C1-F00F-4A6B-B264-794E130FC01E}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [UDP Query User{5B453980-9A68-4E99-AA62-CB6F91640FA1}C:\program files (x86)\air mouse\air mouse\air mouse.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\air mouse.exe
FirewallRules: [TCP Query User{099A064F-0C0A-453D-B048-86BA32E799E7}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [UDP Query User{BBFBE755-0EA3-42CD-BE09-6803212DA082}C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe] => (Allow) C:\program files (x86)\air mouse\air mouse\mobile mouse service.exe
FirewallRules: [{8955DD40-9E2A-49DF-948F-B9ED1A2860CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\killingfloor\System\KillingFloor.exe
FirewallRules: [{2637A7F4-2F10-404B-857D-94C2D2E6695C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\killingfloor\System\KillingFloor.exe
FirewallRules: [{0BB6D3A5-A791-4A56-96FC-1A6BB6BC614C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nuclear dawn\nucleardawn.exe
FirewallRules: [{3F77CDAD-6468-46FB-AED7-D6D4FFB7FDB7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nuclear dawn\nucleardawn.exe
FirewallRules: [{5F9181E5-5F64-41C7-BDB0-1DD555B63F09}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{8A24D2B8-D936-47B8-9D1B-70ACA855CE67}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{5262F6DB-BD9A-4FF1-B1DD-EB59EFCF0D96}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{A6FBC3B1-619B-44FA-B2A4-88D619B808BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{513F6B19-AEFE-44D6-BAA8-855BE8EAEF94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\crimecraft\SteamLauncher.exe
FirewallRules: [{6DAC8E49-2999-43C1-AA7D-C75262334EFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\crimecraft\SteamLauncher.exe
FirewallRules: [TCP Query User{C1133A9F-11FE-4A45-B4E7-97D9FDD129D7}C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe
FirewallRules: [UDP Query User{0E0D2740-9BAB-4999-943B-C57A8D99CE00}C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crimecraft\binaries\crimecraft.exe
FirewallRules: [{F0B7AC88-4BA2-4B6A-A6C8-CB2AA2C0E57F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\day of defeat source\hl2.exe
FirewallRules: [{CAE54E0B-2EEE-48E8-90BF-51263967ADC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\day of defeat source\hl2.exe
FirewallRules: [TCP Query User{47558F81-F988-4EDE-BB25-65CEDEBD8C66}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [UDP Query User{BC55AECF-5BE0-46B3-9BC7-F50746E97F77}C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base19679\sc2.exe
FirewallRules: [TCP Query User{4ED1A10A-AAE9-4101-BE8D-1E20788CE3F9}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [UDP Query User{8A09F8C5-330E-4A44-A5CA-00EFE133D4E1}C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\team fortress 2\hl2.exe
FirewallRules: [TCP Query User{9A6054AD-84DF-4412-A536-53974C722C01}C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{E9BD9C68-7BAD-407A-AE57-503074687B19}C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8500 a910\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{CA01CC75-5ECF-4D94-B8B8-AA9A85073295}C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe
FirewallRules: [UDP Query User{2C7FDA59-9318-42CE-A66B-427F19FA937A}C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base21029\sc2.exe
FirewallRules: [TCP Query User{796F0B38-1B13-444C-ABE0-34AC053D27BF}C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{16A2DF22-C38F-42A7-85B8-7BF31AF2BC2D}C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\downloads\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{CB2C723F-BF53-4076-86BD-D3378359EF3E}C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{926713B3-2B06-4747-8891-9F8060C9C6F5}C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{587B3D83-74B7-46A6-A5B3-80043E37F1AF}C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{B7B4E784-4DFB-4F11-96EF-2A827080296B}C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\new folder (6)\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{E1128764-7A8A-4304-BC08-D1703600FEE0}C:\program files (x86)\oovoo\oovoo.exe] => (Allow) C:\program files (x86)\oovoo\oovoo.exe
FirewallRules: [UDP Query User{B91F2AC8-1637-49BB-AE52-B1E84C7EE074}C:\program files (x86)\oovoo\oovoo.exe] => (Allow) C:\program files (x86)\oovoo\oovoo.exe
FirewallRules: [{905D9D8D-40E4-4237-9E59-3F42871DA103}] => (Allow) LPort=443
FirewallRules: [{06B2DDA2-D7A9-407E-BBB3-AE60E3A577D3}] => (Allow) LPort=443
FirewallRules: [{A0ED275A-6F4C-4FB6-BA18-13783C657CBA}] => (Allow) LPort=37674
FirewallRules: [{1D684AFC-AF05-4716-85E1-F2F765A87C43}] => (Allow) LPort=37674
FirewallRules: [{5280D71F-8693-4BD9-A129-B523547611CE}] => (Allow) LPort=37675
FirewallRules: [{55B89468-7654-4186-AEC0-F57EA3755863}] => (Allow) C:\Program Files (x86)\SocialRibbons LP5\TroubleShooter.exe
FirewallRules: [{06BB8CDC-5CDD-4D05-A33E-6D1950203C1A}] => (Allow) C:\Program Files (x86)\SocialRibbons LP5\TroubleShooter.exe
FirewallRules: [TCP Query User{BB0937E0-B5C3-4020-95A1-B345850EEB35}C:\program files\starcraft\starcraft.exe] => (Allow) C:\program files\starcraft\starcraft.exe
FirewallRules: [UDP Query User{ACDAA4C2-A955-421B-86CC-0FDDBE4F9F67}C:\program files\starcraft\starcraft.exe] => (Allow) C:\program files\starcraft\starcraft.exe
FirewallRules: [TCP Query User{E60D0AC7-7B05-4A66-BFAD-D9560571B5F2}C:\program files (x86)\java\jre6\bin\java.exe] => (Block) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [UDP Query User{23255D7E-5FEC-4AA0-BC24-56DC5CBE4CF8}C:\program files (x86)\java\jre6\bin\java.exe] => (Block) C:\program files (x86)\java\jre6\bin\java.exe
FirewallRules: [{FDBFA474-DFD7-4D8E-910D-075B1A0E0000}] => (Allow) C:\Users\Tony&Theodore\Downloads\A_Beginners_Guide_to_Ethical_Hacking.rar_downloader_224.exe
FirewallRules: [{7912CDCB-12E2-44A8-A5E6-25F213F047D1}] => (Allow) C:\Users\Tony&Theodore\Downloads\A_Beginners_Guide_to_Ethical_Hacking.rar_downloader_224.exe
FirewallRules: [{F75D0F48-A939-4FD8-9F13-3ED3573754C9}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe
FirewallRules: [{68CF28C4-6813-4472-8360-162E31D39102}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressFiles.exe
FirewallRules: [{3BD7349F-578D-48D2-9050-0FCE2CEEF285}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressDL.exe
FirewallRules: [{812EECEB-441E-414B-AADF-52DDE7891359}] => (Allow) C:\Program Files (x86)\ExpressFiles\ExpressDL.exe
FirewallRules: [{D5117936-5F9A-4AD2-98E9-7A6F25AEA659}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.515\Agent.exe
FirewallRules: [{CD918B9D-7BD0-4E6D-B79F-1247D6DE47AE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.515\Agent.exe
FirewallRules: [{B0CC801B-C58D-4DED-8E25-F0DCD9EC67E7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.868\Agent.exe
FirewallRules: [{00DE7D69-1F47-460E-A955-4CD46B6700F8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.868\Agent.exe
FirewallRules: [{9BA2CE1E-7676-4D3A-A228-AE4611323010}] => (Allow) C:\Program Files (x86)\Diablo III Beta\Diablo III.exe
FirewallRules: [{D2EE22D1-1481-4B93-92C3-1C1DBFB0640A}] => (Allow) C:\Program Files (x86)\Diablo III Beta\Diablo III.exe
FirewallRules: [TCP Query User{4A50FB43-49D1-47A4-81DD-E21019C9D500}C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe
FirewallRules: [UDP Query User{51A3FD68-CA46-4D57-9D6D-52E7DC219512}C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_diablo2_enus.exe
FirewallRules: [{FDF0D322-C1AA-4F9D-BACF-C13F457E5EFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.954\Agent.exe
FirewallRules: [{8FB08601-FAAB-4B9D-A391-11A34B70B6D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.954\Agent.exe
FirewallRules: [{769289A8-71B6-4EF0-AE16-222197EB833C}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{3B2CC425-86E8-47A7-BCD3-0006BFA7FA93}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{0FD31281-B1F0-42F5-8FDD-46DC0CF0F0B1}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [{E9C4F436-AD02-4C26-9A41-0B86C44C0915}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
FirewallRules: [TCP Query User{6F76EA2F-3B72-443A-BFCE-CF6A5B8540A0}C:\programdata\battle.net\agent\agent.976\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.976\agent.exe
FirewallRules: [UDP Query User{A74BD2FB-CD4D-470D-86F6-A4B5547A6ECC}C:\programdata\battle.net\agent\agent.976\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.976\agent.exe
FirewallRules: [TCP Query User{70AA7121-3269-4A09-A5BC-1AFB6538815A}C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe
FirewallRules: [UDP Query User{B39E4B81-7AE9-4CB6-80C6-6779D6F03B3D}C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_starcraft_combo_enus.exe
FirewallRules: [TCP Query User{ED6791A5-A905-4AB0-ABA7-AB2F01823876}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
FirewallRules: [UDP Query User{F3054A31-E35C-4BBD-9E4D-4A3CC8527DAD}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
FirewallRules: [TCP Query User{A8DC51A1-77A6-4899-8E05-ABE8D3A2B9A3}C:\programdata\battle.net\agent\agent.998\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.998\agent.exe
FirewallRules: [UDP Query User{2CEC080B-EB9D-445F-9FA6-C6C4FA4E25F8}C:\programdata\battle.net\agent\agent.998\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.998\agent.exe
FirewallRules: [TCP Query User{38C71097-3C78-481E-9CF6-DF88351FB85D}C:\programdata\battle.net\agent\agent.1040\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1040\agent.exe
FirewallRules: [UDP Query User{F4D9B184-BF53-4A7B-990C-C1B3610B2EE1}C:\programdata\battle.net\agent\agent.1040\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1040\agent.exe
FirewallRules: [{A67C4D4F-9576-4F0C-A021-E0A3C18E54B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\NMService.exe
FirewallRules: [{3ABBDE45-01F4-4E33-B636-62F2974D2391}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\NMService.exe
FirewallRules: [TCP Query User{2D65D062-FB64-4CFF-903E-510A931D3A6F}C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [UDP Query User{4C4FCCC8-40A1-4576-9EA3-31A6CF6F9C2D}C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\tribesascend.exe
FirewallRules: [TCP Query User{51CB54FF-7E1A-490B-BFA1-21A0C5D54584}C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe
FirewallRules: [UDP Query User{3CDD5C85-DE79-4A5F-A7D5-4E755619A44E}C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe] => (Allow) C:\users\tony&theodore\desktop\ragdoll games\teenagemutantninjapuppets017b.exe
FirewallRules: [TCP Query User{B951B44F-C20D-4728-90EF-B22A95FDA6E0}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [UDP Query User{4AC5E293-F5A1-4DA1-924C-E9F72345F30E}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [{48423061-2CBF-48A9-B5A3-A442F7883B82}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{449A8DDF-ECAF-4F95-8078-A69C655DCCFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\counter-strike source\hl2.exe
FirewallRules: [{6D987EFA-DEA6-4EE4-9C02-05DB91B78792}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{17BE9CEA-B9E1-4FA2-B6E7-A4160BD4268D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{92BE3D15-5801-4CCE-ABF9-EEC34A59D49E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dawn of war ii - retribution\DOW2.exe
FirewallRules: [{9D9C6BEB-B4B0-49AA-8BFE-2E341001FC95}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dawn of war ii - retribution\DOW2.exe
FirewallRules: [{E2D9ED3E-0A05-4619-93BD-1AC6F5A344A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\microsoft flight\Flight.exe
FirewallRules: [{8EFBAA55-A451-48D1-B27D-EC9EDD9BBEC8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\microsoft flight\Flight.exe
FirewallRules: [TCP Query User{4AFD4EC3-B47D-4355-A246-83441D789B25}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [UDP Query User{581A7E7B-692B-4FFC-A5A7-5517DC65C004}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [TCP Query User{31BCCA4E-0A22-4509-BAFC-B731055E17C1}C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [UDP Query User{A8B3C66A-2F01-4FE8-A468-E13074E27FE3}C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\program files (x86)\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [{5C309E83-BEA3-4ED2-8EB6-CC5FC2ECE738}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{66B8BE81-C18E-4F28-A3F9-AD6A5362D983}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{D4A37F45-5805-4756-9AAD-F3DC4CF55836}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{FA2FF4A3-D344-46C0-BC12-0EC3FD84C2CF}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{60D6E178-C0B4-4707-87CA-494E80FEDFC2}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
FirewallRules: [UDP Query User{0869C58E-44C9-4CA5-BAAC-5404FDE566A3}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
FirewallRules: [{57ED3387-8C56-40F7-AE4E-D62507518133}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{4F1B6370-A07A-428C-A0B1-CA13B0BCDE2D}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
FirewallRules: [{91267BA3-5A72-4297-84AE-62A832807536}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe
FirewallRules: [{04EF5C00-083F-47AD-AFD0-2C34C86CA491}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgdiagex.exe
FirewallRules: [{C0CED820-F949-404F-8802-FB65CDB78EC6}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
FirewallRules: [{68C824CB-3A67-4461-8A01-67BD9E106CB4}] => (Allow) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
FirewallRules: [TCP Query User{253F8989-9863-4286-B664-F3EA36313441}F:\not school\starcraft\starcraft.exe] => (Block) F:\not school\starcraft\starcraft.exe
FirewallRules: [UDP Query User{E303E800-F4FC-4152-8618-369A6C6701BC}F:\not school\starcraft\starcraft.exe] => (Block) F:\not school\starcraft\starcraft.exe
FirewallRules: [TCP Query User{3810B4EE-24B6-401C-AC3B-ACD67EFAA66A}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [UDP Query User{8FBFAEBD-1852-4854-8536-7FE8E9879BA1}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [{A55C22EF-5C88-422F-AE84-0CD751F9D3B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{F6900941-383D-47D3-A8C9-3E4EF04465F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [TCP Query User{6BAFB8B9-6006-42F1-88B0-B6BA97B10737}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [UDP Query User{59A06F5E-5E8E-4EB5-85BA-B2041EAC49F6}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [TCP Query User{536E93D4-9541-48B9-ACCA-69EACD67A6B5}C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe] => (Allow) C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe
FirewallRules: [UDP Query User{00A90AD4-AAEE-40D2-9C87-C7F5CDD75771}C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe] => (Allow) C:\program files (x86)\desura\common\erie\binaries\win32\udk.exe
FirewallRules: [{2C556198-8587-4C64-9C93-45FC9E038CBB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [{6685F3F6-31F4-4271-B095-90D28E809BF8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [{CBC83EDE-1C63-4526-B568-B0809F6FAB2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [{AABEEFBB-040D-459B-A6FF-6A216E4CF658}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\zombie panic! source\hl2.exe
FirewallRules: [{0934D328-4187-4489-8649-FAED06B9E402}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{799C25D8-85E0-418A-B475-D77C6D0915C8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{F4297E55-F262-46D5-945F-317A7D8AEF77}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{1761D730-D6F4-460D-8691-BF0093FA77F6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{DD1F98D1-1909-4D29-B50D-91DB48FCEB4C}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [UDP Query User{1506E559-8D06-45D8-BFB0-353FDEA4DFA7}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [{D0ABC3C6-1DE7-440D-AD1A-191311060E6A}] => (Allow) C:\Program Files (x86)\Bohemia Interactive\ArmA 2 Free\arma2free.exe
FirewallRules: [{4E462E7B-0827-49AF-92CF-5E324442B07F}] => (Allow) C:\Program Files (x86)\Bohemia Interactive\ArmA 2 Free\arma2free.exe
FirewallRules: [TCP Query User{D336187E-4246-4372-890D-21DD1E29F474}C:\program files (x86)\a new zero\anewzero.exe] => (Allow) C:\program files (x86)\a new zero\anewzero.exe
FirewallRules: [UDP Query User{2975C547-845F-42D0-9816-C935D8D91916}C:\program files (x86)\a new zero\anewzero.exe] => (Allow) C:\program files (x86)\a new zero\anewzero.exe
FirewallRules: [TCP Query User{E4AC75C9-119A-4AD5-9659-CA19DFDBC06F}C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe
FirewallRules: [UDP Query User{574A696F-21F3-4C5B-A202-37DDA434BC63}C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\downloads\subrosa07b\subrosa07b\subrosa.exe
FirewallRules: [{48B8FD21-4E51-4783-B0DC-E99E7B4E92A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{24393C2A-227D-4687-9C6C-B8D18CA16F0A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [TCP Query User{02EB3161-5C4F-4E46-86FA-F46DFB8E39A6}C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe
FirewallRules: [UDP Query User{F0A6DC41-70FA-45FE-A536-E968EA767FAF}C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\subrosa.exe
FirewallRules: [{BD31BBC4-0F99-40C0-8D20-9274C3732E17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{E73FAA0B-ED3D-429B-B5EA-463A7E57AE39}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [TCP Query User{C04622BA-180B-438F-8C37-6E38FB9B8DB4}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{F0EE1C43-2E1F-4BB2-BB20-74C68B95EE79}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{31029B14-4B41-4506-95EE-A1C9291DA163}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{D153A36C-0D9D-4D28-8B71-ABAE38A62935}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{325CAF0C-AE19-4A5E-95F3-88068D068CC6}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{73007C7F-468D-42EA-B2D7-C36CE5B11C20}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [TCP Query User{377977B0-26AD-409A-8FE1-D0731834C629}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{59013CC5-BAC6-4667-9029-507966B82C73}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{0791A659-8254-4B50-ADCB-7AE1C7E9978F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{3BA68F12-2E9A-49DB-8514-DB7B08F043AC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{F888EE1E-EA0B-42B2-80D1-4B42C51B6E95}C:\programdata\battle.net\agent\agent.1637\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1637\agent.exe
FirewallRules: [UDP Query User{77C69DBA-55F7-4C37-AB16-636AD3217A27}C:\programdata\battle.net\agent\agent.1637\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.1637\agent.exe
FirewallRules: [{9A6ECAB8-7D5C-45F3-91B4-8E36A087CCB4}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [{806FCAA1-00A3-456B-92DA-A176C8F74272}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [TCP Query User{85A27161-F353-4D77-B074-D328778D0869}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
FirewallRules: [UDP Query User{F129162A-A4E7-49F9-AF5B-EC3837E409DC}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
FirewallRules: [TCP Query User{F99D4CEF-CCFC-4498-B353-88EF982DE8A7}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{063406AF-387F-48BE-8D3A-94A13C4FE13E}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [{F870C684-F5F3-4258-A949-8F6B4356E8A9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C09FB737-15B3-469C-8782-8FAC796FFD53}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{9F07E0A9-4B84-421D-89C2-42760FD750AD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{68F94632-EE0B-4CD2-A73A-408F38EB03F2}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F984B49B-CBFC-4FF1-BCE3-9DAC6DEA56E1}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F92C2DAF-C132-452E-BA91-06EBF3E7B19F}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{B1882A66-4EFF-4847-90C4-0A5F1E2FC671}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe
FirewallRules: [UDP Query User{514C47E6-CE6B-4D07-8930-2C0F9CB2FF2A}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus.exe
FirewallRules: [TCP Query User{E7A4F5B1-4715-4D3F-AF97-CCDA87EF0CA0}C:\program files (x86)\warcraft iii\war3.exe] => (Allow) C:\program files (x86)\warcraft iii\war3.exe
FirewallRules: [UDP Query User{4F98FCB9-63E9-4702-8860-870B3F2FE0EC}C:\program files (x86)\warcraft iii\war3.exe] => (Allow) C:\program files (x86)\warcraft iii\war3.exe
FirewallRules: [{7F3381AE-0C3B-4E8C-A536-6098FA50BBF7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{CEA0B46B-A0C4-4179-9DA3-1594E849195B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{101B52A3-EE37-4C11-9DF4-281C8C7C4302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
FirewallRules: [{5F902F09-E5F5-404D-9549-DECD58CADFD0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
FirewallRules: [{5EE6A27A-8AC7-456B-B8B6-DBC6BB017A54}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe
FirewallRules: [{76B1C38C-6B23-42C6-9617-71DA1436C75A}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe
FirewallRules: [{6F3D47B4-DF0E-4408-824C-8D4174B0776D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{C0A4844C-ECF4-4B38-90CB-0352FF2FC7FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{408DE0DB-392B-48EF-A6B7-0BB065414EB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{02793DF8-8F73-418E-A078-0C3B0BE5966B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{63DC09E2-1FD5-49FB-B04A-DD3C9887A191}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\garrysmod\hl2.exe
FirewallRules: [{E861E39A-AAD2-4E19-8C49-D826D750F48A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\garrysmod\hl2.exe

 

[Classified1]

(Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{54301102-59BD-4DB6-AFB5-E16E97C41D58}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{0DA8AD9A-6A97-467C-86D5-E26EE4C39FA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2C4A1EE4-3E31-4D98-B586-E0739C0A6229}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{11ABCA57-6659-4E70-9508-D9A12D509DEC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{7113CA19-4B9F-4F52-BCC6-CF6D39C7A7DC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{24427AB2-8E59-4B8F-B7E1-591A8BF4158E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{EE1520B1-CD5B-4ECB-8018-718C1BD16EDF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{629DFBA5-2495-4A28-A61F-F3A8E6C03071}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [{C15B97A8-B293-49A0-A930-693C52D388CB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [{413EC452-7208-4BBF-A37B-A46CE4C0A468}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe
FirewallRules: [{56DB4C7D-9DF5-45E5-9778-644258A3035F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe
FirewallRules: [{53A4C20C-A95D-4F08-AE62-4A9925822269}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{052BC01E-5E69-4786-9B10-63AC739A746F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{8302458E-F775-49A8-B5C9-D8102C3EEE59}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{C388B2E8-F538-4224-B8F8-38C6E8540647}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [TCP Query User{990BF2D2-1F7D-4F31-AAC3-5FFF0C9BF7DA}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{AEBCFB34-2455-4764-852E-2137D06138BF}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [{B4DA061B-6E2F-4457-97AC-7D02D926D1D1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [{1CFE4FD4-44DD-416A-8B03-0B8E16BE91E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 test\dota.exe
FirewallRules: [TCP Query User{024C1AE3-1012-4DA5-A3BB-F49DF522FF4F}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [UDP Query User{BF5E5A12-4F4E-4DD7-BC51-F6F4D3B9D3B4}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe
FirewallRules: [TCP Query User{C219B688-DC5B-4964-83C0-451008C32656}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [UDP Query User{CF7711E3-C567-4867-8463-2954FA498544}C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\source sdk base\hl2.exe
FirewallRules: [TCP Query User{2781B912-9C96-4660-90AE-179D638EDB16}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{B538EBCC-6E46-4BC2-9D6C-A9621A3F4AB8}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{F9530596-B9D7-446E-B03E-3CBC5769BB3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [{850E1F8E-D7A0-41D2-B2B5-72E9613513B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2\arma2.exe
FirewallRules: [TCP Query User{A542A4DD-87D3-4D19-BE09-F64A13E8F6CE}C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{5D5880CF-70BC-43E8-ADFC-06BBD135F32E}C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\tony&theodore\documents\arma 2\expansion\beta\arma2oa.exe
FirewallRules: [{1F64933B-6BF1-4BCA-957A-9BCD39576993}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{99312798-886A-42D5-8CC4-2AA4EA2BC431}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{E4DF0521-5206-43B7-AC62-C375426D4694}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{FB381DB5-3C93-461F-8CBF-E00DE7B13944}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{5FEB364C-698C-4C22-AA17-B934104A596E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [{E1667DB3-6F2A-4D77-AC92-6D2FD00FA509}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [TCP Query User{431CCF13-809F-4A50-932B-8C6DD18A5333}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{928283E8-9F81-448A-9655-8010C29A6615}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{F71EFC99-9445-476E-A44F-39A30A57E04A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{3C945573-AC4E-4A61-B8C8-EA02672B064E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [TCP Query User{CE562B63-49DC-4675-BD8C-0EBF7593E2AF}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [UDP Query User{8FF8E96F-E496-4F25-BBFE-AC6F9AF44FA8}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [TCP Query User{370370B2-935C-4D35-A1D8-F7B028017E77}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [UDP Query User{12F30269-1BD2-4065-BCF6-CEF3E26C4B9C}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2.exe
FirewallRules: [{E1064C3D-C7C8-4530-910A-7F064F1C0522}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{8B6005BF-A264-4E1A-B283-616C44730A05}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AC3SP.exe
FirewallRules: [{2B966167-96B6-44CF-8487-10F7BC06518B}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [{7D5AF0B7-75E6-4A27-B129-6E18D2D52FE2}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed III\AssassinsCreed3.exe
FirewallRules: [TCP Query User{8685D65D-6BA4-430F-835C-F76CBF2E9CAB}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{75F1B8D2-6B84-4830-9932-ACAF38BB8950}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{B768F7CC-3943-43DA-B603-F97B15E7BC0C}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe
FirewallRules: [UDP Query User{BA1D0BC0-5DEF-4E42-8033-DA2D3CB1F2FB}C:\program files (x86)\origin games\battlefield 3\bf3.exe] => (Allow) C:\program files (x86)\origin games\battlefield 3\bf3.exe
FirewallRules: [TCP Query User{B39050CE-9CC2-4AFD-B90B-4A69133F17CA}C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe
FirewallRules: [UDP Query User{316071EC-FE0F-4624-A086-AF139089658D}C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe] => (Allow) C:\users\tony&theodore\desktop\subrosa07b\dedicated.exe
FirewallRules: [{EB5EFE12-0594-45C5-911F-CE1E19ED5040}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{687E7B31-59CA-4551-95CC-32515A76D8C3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{FA57F9C4-A493-47F3-B344-523E8A72B82B}C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe
FirewallRules: [UDP Query User{65121B26-0743-4072-BD2A-03638100E7FC}C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dawn of war ii - retribution\dow2.exe
FirewallRules: [{E4B5F0D2-447F-4D51-9DA4-115B1AB44CE0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{C0A98722-055A-4FFA-A933-249A69FBD743}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\moon base alpha\Binaries\Win32\MoonBaseAlphaGame.exe
FirewallRules: [{61CAE4C1-4A10-4D53-B8A4-6260108EBC3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{FC4D1464-C78A-43C4-B5A8-003E784BA04F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [TCP Query User{EA22CFB9-2D03-46D6-9BF6-6E3B0AED6589}C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [UDP Query User{39763CAC-DE1A-4D80-911D-2E23E70C502E}C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\z0mb1e105\pirates, vikings, and knights ii\hl2.exe
FirewallRules: [{D1FFBAE4-8A97-40B7-BBFE-8E384D506061}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0C462BDF-65CF-43CB-8331-0C05ED5EE37C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CDF9D323-7424-4040-B8E5-9F3E63CF9EB5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D605F6AC-F7A0-43EA-8BEC-EABE762FB922}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0B58081F-EB99-4BD1-88E5-8260E2FCF46D}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D26BEBB8-E02B-489A-9543-949D45ACA1FE}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{97B8FB37-4345-4BF6-88AA-E1C3FA29D3D7}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{7EEE7247-9D7C-4063-B94A-49F88006B2B0}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4 Beta\bf4.exe
FirewallRules: [{022F4603-859C-4080-A3B0-9888298506A2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [{4222453A-754D-4CB4-9677-179598AF5386}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\source sdk base 2007\hl2.exe
FirewallRules: [{D530D411-0CE0-4F86-A71B-56EEF5E89E32}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{F4D09447-DAEB-486E-B9D9-95100FEF4090}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [TCP Query User{49C5D9A1-346E-4F77-8CFD-E054E0FC01C5}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe
FirewallRules: [UDP Query User{609E73CB-E379-4AAE-AE56-74507E764DD7}C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe] => (Allow) C:\users\tony&theodore\downloads\downloader_warcraft3_reign_of_chaos_enus (1).exe
FirewallRules: [{78E45867-054C-4509-A528-21C9F9991F0D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2293\Agent.exe
FirewallRules: [{951E0AB9-E53B-4F9C-A033-4067AF397D8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2293\Agent.exe
FirewallRules: [{201A3823-B78F-461A-8747-A9F4C5F64954}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{CAA9B584-100A-47F2-BAED-86D4D41063BB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{C86B209B-DF71-4D66-8C2A-353AE63FE515}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{F6FB7EF0-8B08-4A01-BAAD-E42A9D903048}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{C3E1CAB0-8EB5-4EC0-8562-FDCB29E7209B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\sourcesdk\bin\SDKLauncher.exe
FirewallRules: [{C5802DD2-1088-40BA-A492-6660EB8E4B76}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\sourcesdk\bin\SDKLauncher.exe
FirewallRules: [{428C07FC-7578-476E-BA1A-7DC9787334A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{AA0E0DC7-DC69-4857-B72A-F1E61A2A647E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{DB6D152E-047E-4EE4-84A1-22B9021CAD04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{FB13F1BC-CF3A-4F8B-9362-72D597BB269D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{17FA27A6-D621-4527-BE70-60D590EF04DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{0B15A815-BDA7-4F62-A0A7-BE1C2C7A3EDE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{5209AB8B-A701-4015-9012-8CCF284FE573}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8CA72102-66D6-4BCF-8D8B-0CF5796BE6AA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{13A9E961-6086-49C5-8C1D-9BA935708959}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [{4973A67D-FEF4-4B6E-9EBB-B8772DD488B8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [TCP Query User{4203EF4E-9E38-42E9-94F3-C1E60160B03A}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{5BF2CE3A-0DF6-4AD8-B961-9262E8F997A0}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [{6CE867EB-A051-45DF-AADE-31C56E2138EA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{9E59FC2B-3789-44E5-AB50-2B1863D67226}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{870AA2F8-330D-4549-A8B7-B7D9A37BD4F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{E7C6C78A-FE86-4B51-87A2-DBE449AD621A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{1141D62F-A980-40EA-9ED2-FFC2B5ADF564}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{0C5E6C23-319B-4F52-B333-B46DFAD44F66}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{05B6A818-ABD4-47A8-A3A1-07D1C6022DA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{EC069294-E1DB-46F3-944B-0892F5244224}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{CBAE8771-305E-432E-9F6D-6818CFFC1632}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{547D35DB-1016-4187-A377-B4DE63A9D5E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{77D477F6-F6F2-4327-9658-CB320B434BC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{3DC4BBAC-FEA7-4D23-9922-5AA0B631382E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{96DE4C7B-D92B-45EB-B2D7-810D749670E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BC7F1AC8-67DA-4C73-BC5B-131AE2F130DF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{6EEBCF30-7331-4580-916C-AFBA694EB660}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{7B556111-968C-4FFE-B8C8-E02E70375394}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{39EA9255-DDF9-4A9B-AA9C-9FF4284DDD6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{844CA5EF-E3FA-411B-8CDA-B1814F93145C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{91BFB33F-3412-4C93-B2B7-4B24169FBDED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8CC1D00B-109E-4999-9BA4-C20AB556FC0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{742B5E07-6C37-46F9-97B0-D1A72185ED42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{E5346ACC-42FE-4B6B-B4FC-2B4023981458}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BB3403B3-8B0F-4F19-B42E-8DD5DF160D37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{D62A7EDD-4E1F-4F01-8025-3CC9286B9D2B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{E6F30D92-CD57-4C07-8E7D-80B7641B9228}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
FirewallRules: [{FC2747F4-0045-4586-817A-A7F67B506420}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
FirewallRules: [{A055983A-1F49-4C2A-B5C8-CABA9C87BDE4}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe
FirewallRules: [{5CA90F17-2A83-4B9D-9E68-48BBD402F72E}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe
FirewallRules: [{17543F25-7C5E-4D1B-90E0-DCF0A7E9FFA5}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
FirewallRules: [{A19E5D68-518E-49AF-B9C7-E79E09C9B8FB}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
FirewallRules: [{50A8974D-C4A1-4FBD-B6AE-E1B5EF7631CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{C5695975-E799-4301-8627-B3759E2E52E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{56D706FA-3A2C-4827-B83A-C40C56730FC8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{59377707-42CB-456B-A8E9-AC646DDD043C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{0D94EEED-0138-4533-8207-5138432EFA63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{C24A2CA2-28A6-4F57-8265-6A84B265BD0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CF75AAE9-E8E2-43F2-B4B8-2E81A0D3FBC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{70384C82-C99D-44F9-9B9C-90AA9B8316E4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{E8CB5774-7808-4F4A-8566-60275B0E9BE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{9FA8CAD0-6E39-4748-9200-60747E7EF226}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{A0F37261-76CD-49AD-BE35-ED46C76E79F6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{77CD8BD2-3D51-4AA1-9D90-1B78660E2239}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{9FE4A51E-15A5-4614-9F68-DCA82244CF2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{B53DE3D0-1AC9-4D2A-BD2C-2611E799DC50}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{7AE69597-E151-4963-8C85-A89857C1B04B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BCFDBD2C-152D-47E4-A216-3DCCB7D28D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{85EC99D6-624C-453C-A58F-D1EB63BAFF23}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{286AE1C4-C257-4788-99AC-E26987211C7E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CA61F3A0-3CF2-4560-8F35-7721C757DDCB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{BA638BE1-309A-4135-B01F-32CA7FB7AFA9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{FA6A89AB-EA57-4411-BE3D-20D3D2074BA7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{5F4382AC-4405-49D1-8C35-BA0B7F058891}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{2A2818DA-EB8A-4A07-9B3D-5FDF9B3409EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4C30118A-F0C3-4930-8F2A-BF3FC1E8083D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{3DF7CE95-A900-4224-A031-BECECF68C715}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{F3378AD9-6203-477D-BE9A-E9D7629080F5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{D8C25309-8690-492E-8BE0-7C5FF0995CE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{20B70E74-8D0B-4CB6-9D20-D0DB8E5B0DB4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{00705DCB-94CC-4FAC-9D03-8B2B2685B539}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{F9A2352A-A296-463F-9B9D-400BFA303139}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{D4986BF8-BA9C-493C-B18C-532B2E9BEC0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{ADF08F92-3A8B-4825-A44E-01496A1EED7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{2577742E-A960-4B82-B04F-7E11840679AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{63B085AB-F34E-46A8-988D-B33115EF6106}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{A75E5E47-DD08-4415-AAD6-8C323980B91A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\vslauncher.exe
FirewallRules: [{63F2CFC2-0C7A-4846-9A7B-8EC8EADB618C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\vslauncher.exe
FirewallRules: [{14E423BE-4818-4D15-B318-692E1D564E16}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{DC891F6D-88FA-487D-B103-3712E84D9AD2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{888737ED-BD23-48C4-ACDD-D30E1F91C633}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{CD9B2F87-9F64-48D1-806E-D8759ED6A22A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{BCBDC7DA-1D4A-4A4D-90B8-FB18294155FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{FB0A70E8-4CA0-4A85-A44C-66EEAB46102F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{71E3C4A4-2B92-4B61-B6FD-C9CA8A799924}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{4C190AFE-9EA6-45AC-957D-59B1EAA54341}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CAFAF2D2-DCDA-42FF-8725-C3CEDC2CD895}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{6EAA95E7-098B-4C14-9712-CB028724A09D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F4A6D139-3AA3-4008-BC03-23E7C88D3CEE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{128DD118-E972-4793-A3E7-FD732835C471}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe
FirewallRules: [{C6353FBD-10D9-474F-B466-BDE32A22CDA6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{B54BAB60-1FA8-4911-809B-376F4AC60F9C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{41C631DF-2273-4848-8248-D826D711DF93}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{B02CDB91-9D25-4755-A036-E219CE2AAA78}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{93BE7BE5-6961-4194-8516-90A2F1E8984A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{DD0AD7BB-EE30-4B1A-884D-AD000D47C458}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{002EA134-C4A8-4D42-B2C2-0E14E9C9C11B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{D1BFAED8-F1D5-44A5-852B-64907D6C65E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{F7D4E8C5-EDEB-44FC-9194-EFC5FAAF9ABB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{ED22CB20-F228-4072-ADE5-611F1FD1F4FF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{64E781DF-14C3-4B96-853D-E1DABF2E9D9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{E3229997-2CC4-45B7-A145-754499730726}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{735047FF-CF6C-4344-954D-676A792D1699}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [{153E204A-E6D7-47B8-B4B5-2F3921A65A74}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [{C9CFE873-7070-4810-A030-0276675CF697}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{DC33AD36-DE26-499E-B137-98125EBA29C6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{C5445FD2-1972-4876-A39E-7E6A974C9FD7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{07976C68-7665-404E-A62F-62D5378D54F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{8CB49359-8F85-4CE8-9E77-BD3BF00FB59D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [{98518C59-2061-4F5F-989B-B66CC29C640E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [{D5D93B08-217F-4FF7-92EF-96AE71215A58}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{66B8F03D-CCFB-468D-989D-9191FA2FF92B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{FB84C048-9F86-4689-BB9D-0936D22A4E46}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{45CCB8E7-2DB8-431C-A533-FEB4B43BDF33}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8927D0B3-4D67-4C46-A16C-272165BE1187}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{E7673331-EDD9-4E01-9599-78D7BAD4328E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{A6209ACA-6DAA-4438-9D15-947785991B50}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{4DDCD9E4-69F5-49CB-8AD2-4112FFF9620D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CA95887D-0214-4D5F-911C-D632181DC95C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{16C52B15-096B-4047-99CA-7DC331C1C65E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{5CBC05C0-1F32-4040-9B1D-64163FED8751}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{ECA43841-5EEA-4312-88BB-2FC77CAD3028}] => (Allow) C:\ProgramData\HappyCloud\Cache\TERA\TERA-Launcher.exe
FirewallRules: [{EE7A189A-9A2F-45F4-B0D4-538DF57802FF}] => (Allow) C:\ProgramData\HappyCloud\Cache\TERA\TERA-Launcher.exe
FirewallRules: [{C3E32487-4835-4497-8A18-F7C9FADBCB98}] => (Allow) C:\ProgramData\HappyCloud\Cache\TERA\Client\TL.exe
FirewallRules: [{651A10A4-3109-4E95-9B8D-572F10975EAE}] => (Allow) C:\ProgramData\HappyCloud\Cache\TERA\Client\TL.exe
FirewallRules: [{16B5570F-BF97-4531-A31A-BF2DB2E2F276}] => (Allow) C:\ProgramData\HappyCloud\Cache\TERA\Client\Binaries\TERA.exe
FirewallRules: [{4D7591CA-58CD-402E-B91B-1134AC4A2C80}] => (Allow) C:\ProgramData\HappyCloud\Cache\TERA\Client\Binaries\TERA.exe
FirewallRules: [{A86F3625-73A1-42CE-BD7C-174F1CCED45A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{43601640-FD70-4E41-8FBE-AC22847434F1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{692F8923-E68A-4207-A034-CDD9D6AD7213}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{41E02E98-23D0-46FB-B586-CA9DEB190C44}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [TCP Query User{99632A20-3669-464E-B71C-6DC5567F2109}C:\programdata\battle.net\agent\agent.beta.2581\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2581\agent.exe
FirewallRules: [UDP Query User{A1535A27-0833-4B56-9C4E-07CEC25EB526}C:\programdata\battle.net\agent\agent.beta.2581\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2581\agent.exe
FirewallRules: [{5C09DBD2-D726-4562-825C-23E0799B35E5}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{CE4ACC41-8784-43AE-A880-A601C73BD95E}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{2C10B911-E537-4251-A639-6AEBCA80841B}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{70C8EF61-761F-41A1-BC3E-2A7B152AA8C7}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{D4860497-D052-4B1D-9CC7-ABB050AE5FC8}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{338986AE-7309-4053-9A08-D55FD3FBC774}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{FCB40539-5C1A-4CDA-A60A-B33866445D85}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{BE15FECE-A8AE-46BF-B6BD-F16B0F669982}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{A276B45E-A3A7-4ED2-BF5D-1279D68EA6CF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{0825ED42-FAC3-4759-ABCF-799C2D7F63A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [TCP Query User{6DD850F6-CE48-4FEB-8FE3-FDD981DFB736}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{2FA024B5-1D3F-49EF-82E3-116588EE91EE}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{CDE229A7-E905-4C1D-9FC4-68BE6E3B8C26}] => (Block) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{B82ECF7F-4786-4755-AA60-45C63F3C07C2}] => (Block) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [TCP Query User{0808D047-D34E-4646-AC66-66090ADC548F}C:\program files (x86)\ccp\eve\bin\exefile.exe] => (Allow) C:\program files (x86)\ccp\eve\bin\exefile.exe
FirewallRules: [UDP Query User{BB0498BD-715A-4AF4-BA87-CA51078E19F6}C:\program files (x86)\ccp\eve\bin\exefile.exe] => (Allow) C:\program files (x86)\ccp\eve\bin\exefile.exe
FirewallRules: [{4FE72C7E-2C1A-4A52-885C-B02F86D00E65}] => (Block) C:\program files (x86)\ccp\eve\bin\exefile.exe
FirewallRules: [{D350674C-927D-4695-839D-6833D2AAFC5D}] => (Block) C:\program files (x86)\ccp\eve\bin\exefile.exe
FirewallRules: [{4D65EA15-C739-4242-8DE9-1FF5AE7EAB54}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{C0C61208-3E87-4AF2-A84A-9063DEA8E040}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{FCD6A4F5-3069-4197-99F1-4DFAB81BB791}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{4047ABE3-7AFA-4CE4-AAA8-4A86134A4485}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{E7D174AB-9FFA-4194-AD81-F6E47CDBAD18}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\sourcesdk\bin\SDKLauncher.exe
FirewallRules: [{602305CF-0578-4741-ACA6-6E9BD0983334}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\sourcesdk\bin\SDKLauncher.exe
FirewallRules: [{EEC04B9C-9624-41E3-8599-2FCC972C5588}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{52FEE291-F6D8-4306-A147-9CFA3B6C837E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{2886641A-4BFC-46AA-B2EF-BD045A75BF2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{D8AEF022-99A5-4E88-8614-90539AB33504}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{8C6A1459-7920-44E4-A78F-BBD1432FBD53}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{846EBE96-9EAB-483E-B81E-57B524DDEFA9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{54740E38-10BE-4CEC-971B-FB468F309792}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Free to Play\FTP.exe
FirewallRules: [{AA5DC3B5-9042-4F24-97B3-951900E0985D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Free to Play\FTP.exe
FirewallRules: [{40D1C59F-66DA-4C0B-A3FB-AF750AD0E8EF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{A35ECB42-B69F-40C6-AEA7-DA2E58834F6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [TCP Query User{CFE31BBE-AAE3-4A83-A149-B2C3DE91E96C}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [UDP Query User{C9F11BBD-8E2E-4B6C-8519-D2B51040EAF3}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{FF67701C-20FF-4AA5-888B-2CFBA64E62E3}] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{3325399F-0DC4-481D-B851-4E409DABB222}] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{12CFFB13-3F67-48F4-998C-D0F9F27F24D1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{93D477F3-32C9-4431-837A-77E442A193F3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{A3642B83-2C5E-4368-923F-E5646028F42B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{42CF5BCC-4140-44AF-98CF-0F4453A58016}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{3C15C2EE-DD46-402D-AB52-4DD1E75E21B8}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe
FirewallRules: [{13CD501F-F24E-49FF-8AF8-A3248A4F8BCA}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe
FirewallRules: [{EFCA1E6F-9EFD-432F-9C0E-80C44855621A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{6CCA6E66-CFDD-4968-85F5-8CA874BFA05A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [TCP Query User{58C5F61D-D5BA-4050-AE3D-1B91B6F9E738}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{658D4FFF-E6A3-44BB-B3B7-5F70F685FE69}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{64E5A738-1885-4AEF-A5E5-0D11377B8E78}] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{2417E14A-6552-4E24-AC9D-F457F5FB5794}] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [TCP Query User{95170809-783F-43CC-AEE6-81E9B7176DCF}C:\users\tony&theodore\downloads\withsix-play.exe] => (Allow) C:\users\tony&theodore\downloads\withsix-play.exe
FirewallRules: [UDP Query User{56957D20-5F55-4328-BBA9-FB8F05EBF38E}C:\users\tony&theodore\downloads\withsix-play.exe] => (Allow) C:\users\tony&theodore\downloads\withsix-play.exe
FirewallRules: [{6EF530C3-1392-41DD-8C8A-89B8ACAB0E91}] => (Block) C:\users\tony&theodore\downloads\withsix-play.exe
FirewallRules: [{82D00281-FDBB-4019-8E1F-D71BF276C689}] => (Block) C:\users\tony&theodore\downloads\withsix-play.exe
FirewallRules: [TCP Query User{2E6EBEF2-227F-4572-9591-9ABB5EAE5BBB}C:\users\tony&theodore\documents\arma 2\beta_oa\arma2oa.exe] => (Allow) C:\users\tony&theodore\documents\arma 2\beta_oa\arma2oa.exe
FirewallRules: [UDP Query User{C399D5D1-5D80-47C4-A670-997DBC4290C7}C:\users\tony&theodore\documents\arma 2\beta_oa\arma2oa.exe] => (Allow) C:\users\tony&theodore\documents\arma 2\beta_oa\arma2oa.exe
FirewallRules: [{B6D64865-B164-4A08-A2BD-04DDF5AE2B61}] => (Block) C:\users\tony&theodore\documents\arma 2\beta_oa\arma2oa.exe
FirewallRules: [{874D9DEA-75AB-408D-B439-E9211C7CE8A0}] => (Block) C:\users\tony&theodore\documents\arma 2\beta_oa\arma2oa.exe
FirewallRules: [{CB4DDADD-C243-4070-A138-23C6BB7E0B14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{E5A0A600-076C-4C14-9224-3D0F4F2EBE83}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{F1C632BD-C1E6-4E3E-BA92-884088D5D5FF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{7A65D46A-BFFE-46BD-89E8-53748E1FACF4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{F5B332B9-DCE0-4B34-9212-E2B9F3CE9552}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{396B4AB5-47BC-4AD4-9471-460862B0F21F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [TCP Query User{9DFBA224-FA0B-4EE5-8FE3-6F81EB5D6B54}C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{3B063FCE-21B2-434F-A1F5-011BD3A0FB0B}C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{43F166A9-6001-4F6A-817C-51404174433A}] => (Block) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{B28E874F-58C0-4792-BA40-8AED00BF5BD5}] => (Block) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{29F993B1-465F-47F6-A0DE-9F103745DB1D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{77A1F8D6-5CDE-4745-8E1E-52008C64E4A0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{3E21E1DA-C8EF-4984-BEBE-520EF2DAE3DE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{F70DDD5E-3976-4FE1-B7B3-585F17594B6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{E7D07310-6EEC-4440-9858-693729852C10}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{86E9F03A-094C-4735-85A7-050F06C0A34C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{971BA275-7E71-436A-886C-50C6C4D5E059}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{625C0671-EAFD-482B-B333-F4BCBF2A5FA8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{82F1847F-69FE-4385-83B0-290BA4D3E78C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{9333703B-3A70-4E39-84B4-C15EA74B410F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{E18F7F54-889A-44A6-86F2-41AAFCBF28D4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{9FA105AB-0655-4E4B-99F4-9632D0488973}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C28C903E-D055-4A29-85F0-DCBD1B85849B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\vslauncher.exe
FirewallRules: [{9F73F818-8A83-434E-9770-3F72C6E4518D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\vslauncher.exe
FirewallRules: [{3613715A-36D2-4888-9FA4-8BA022D71FF9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{48B16E71-0D21-435D-87F5-36C9A042622E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{13991D5E-1C47-432E-AF0F-A5D99E52D40F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{31D80F64-6770-4797-A640-BFE56E8EDAE1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{80D3800C-F2FD-419B-9B4A-B3FDD50EFCCB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{9B573B04-8CEA-4C7B-AE61-21303A9AB59B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{CFDBCAFD-A3C1-4B42-9644-B1DF1824081C}] => (Allow) C:\Program Files (x86)\TERA\TERA-Launcher.exe
FirewallRules: [{7E9809F5-9F71-4FD8-9593-ED96B6D31DE2}] => (Allow) C:\Program Files (x86)\TERA\TERA-Launcher.exe
FirewallRules: [{7A2DC87D-FFD9-4CB5-9D99-137D455701A5}] => (Allow) C:\Program Files (x86)\TERA\TERA-Launcher.exe
FirewallRules: [{4C98230C-D133-4D5D-AAB7-8ECB465BCA44}] => (Allow) C:\Program Files (x86)\TERA\TERA-Launcher.exe
FirewallRules: [{5FE0FD49-5869-4A51-A68B-237776BAA744}] => (Allow) C:\Program Files (x86)\TERA\Client\TERA.exe
FirewallRules: [{5469D506-3EFC-440F-A3D7-2559244F2976}] => (Allow) C:\Program Files (x86)\TERA\Client\TERA.exe
FirewallRules: [{F10A6C75-3093-403D-9743-AB6363B2546E}] => (Allow) C:\Program Files (x86)\TERA\Client\TERA.exe

 

[Classified1]

(Allow) C:\Program Files (x86)\TERA\Client\TERA.exe
FirewallRules: [{69C4FD11-DA09-4E70-A7CD-1D6599177B9C}] => (Allow) C:\Program Files (x86)\TERA\Client\TL.exe
FirewallRules: [{7F75377F-FDBB-439B-BAAD-200AB3BBE471}] => (Allow) C:\Program Files (x86)\TERA\Client\TL.exe
FirewallRules: [{11437DDF-89B0-40C6-AF86-3F03758A163D}] => (Allow) C:\Program Files (x86)\TERA\Client\TL.exe
FirewallRules: [{70B4EE14-0CB8-4DED-9898-889CDA27A67F}] => (Allow) C:\Program Files (x86)\TERA\Client\TL.exe
FirewallRules: [{8884BB70-AB2A-4856-8779-3E8CB5DD24CD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{856F23EF-CBE0-437A-BBA8-AE56F92B9502}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{ABB699E9-5F79-4F63-B6AA-7909FCD13576}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{93134A60-CC86-4A5A-9986-BBD062FBC742}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{EFCBBCDA-07FD-4116-9A24-591071A67CD3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nmrih\sdk\hl2.exe
FirewallRules: [{A9017469-FCBB-4C0D-A83C-5DAEFF5B2D5E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nmrih\sdk\hl2.exe
FirewallRules: [{C96FE2EB-5F5F-4C74-9858-1B2BB3404080}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{5B62969B-2415-4DEB-B18B-647753DA29FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{5C34886A-F9D3-414B-98F2-B9904A762930}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{1E10BB64-C7B2-4F23-916E-75F213C4FFED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe
FirewallRules: [{E440BDFD-2AB8-4BFA-9CE5-B335EDEFDA2F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{C4EC3666-2D0B-483E-8DF8-294E0284998C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{4252A4D3-D339-4485-B44F-428A861C454A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{9C25DD98-E1D3-4219-8DEB-7C89B9AC3D01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{476323C9-01B1-4D04-8D6E-5F6EF5C5123B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\pirates, vikings, and knights ii\srcds.exe
FirewallRules: [{C6308093-7B42-4539-9262-451E6F08B70C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\z0mb1e105\pirates, vikings, and knights ii\srcds.exe
FirewallRules: [{084083DD-876B-4DFD-9929-5B90542F8232}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{74C4C1B5-528C-4074-BEDB-AFADFF1CA62A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{C2B0910E-668A-4162-9D5B-AE3EDFCDD8BC}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{F798A07E-A647-4866-9D01-7124CD83E180}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{B54A6665-92C0-49DB-97B6-609581BF6562}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{FADD155A-35E3-4F77-8967-F61342FAF5D5}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{5EBA384E-5597-4F88-9EC6-F538A8320194}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{72C8CE99-EB48-4589-A245-624AC1DDC50F}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{E35E97EC-7D17-4F35-B126-4C44581FA115}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [{626D2A58-4E9B-4EFF-B224-88E37B2D387C}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [{C95F4049-E70D-4925-96DF-E8D441ECEE48}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{475C93C6-65C6-4C35-BAFE-C4CE9A064F75}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [TCP Query User{3F6D2F9D-0484-4E29-B5DC-5A7C5D53A9F0}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{16FEE463-9396-4504-999D-D29863AF2427}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{AE940337-E598-466F-897B-D9B2D97ED404}] => (Block) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{655A0D21-ED6E-44FF-BA65-0393EA8B6E46}] => (Block) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{F598113C-1443-4174-B89E-BA7C25BE5B07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Orion Dino Beatdown\Binaries\Win32\DinoHordeGame.exe
FirewallRules: [{2980FDBC-AE66-4BE8-944F-AF08EA49C5AF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Orion Dino Beatdown\Binaries\Win32\DinoHordeGame.exe
FirewallRules: [{38781C46-A40F-47F8-8846-874888C82CA4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{93A29AE4-A9A3-4228-A0F7-C0805E538D94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{74C8FEB8-A28A-49CE-8F65-E2DF5D200BD2}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
FirewallRules: [{277D3057-801E-4264-B7EF-676BF27F962D}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
FirewallRules: [{9BD6019B-0D06-4C50-BD2A-FE45D13B754D}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe
FirewallRules: [{657D53A7-0EAB-4B36-9F00-3578C2FD33D1}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe
FirewallRules: [{9ACA998A-2E16-4ED1-88CC-BCF43157882E}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
FirewallRules: [{993A054B-D51B-404A-95A2-6433BE704CFE}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
FirewallRules: [{23D59858-7935-4E1E-AEAE-3D0599B7B73F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\lethalleague\LethalLeague.exe
FirewallRules: [{EC6FF045-63D3-412E-8834-BE06CA49814A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\lethalleague\LethalLeague.exe
FirewallRules: [{58457C64-AA11-421E-B0FE-41871F7DC980}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{7BB52D34-576B-4FF4-821D-74ACBE9F19AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{DF651CD0-ADBF-4457-A8B8-6072C90139D8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{E437E9D8-2ECF-4009-850A-F7CCBEA4D426}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [TCP Query User{AE908BFB-3071-4D28-9CDC-DC3301C06146}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{541E00C8-EC5F-43E1-88F8-207024718378}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [{95C105BE-648A-4B6B-A36C-B2433D72DDAC}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [{EF495B11-031F-4DE7-9C67-BBD8D61933E9}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{6E4826A6-94B3-4F83-9BEE-4470CBD8A4B2}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{96A605A7-2A6F-4B76-8850-74ED8471A967}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [{14025947-09D1-47BB-9AC3-C0C0785191D9}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [{E3BC8D0B-BCC0-4C76-81D6-03A6E5AA794D}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [{0F363F12-9499-4644-90D0-7B945800ACD0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{87F9EFA6-2466-4179-BEC4-7FBB3A395567}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [TCP Query User{9C550457-4625-4CE6-A3FC-CA2F644D6311}C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [UDP Query User{A2240D57-3480-459C-95EF-69CBD9491BEF}C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{E4A33B06-66EB-47EA-B832-17B82E3C0E41}] => (Block) C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{74B0364F-E67B-430E-9726-670AD993FA81}] => (Block) C:\program files (x86)\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{2AF4E54B-7FD6-4801-B9A3-6E071FF14F3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\EverQuest 2\LaunchPad.exe
FirewallRules: [{B20E3F20-B620-470D-990D-4BF5D53DF70B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\EverQuest 2\LaunchPad.exe
FirewallRules: [TCP Query User{E9942383-267A-4539-AE9E-37A74733705E}C:\program files (x86)\steam\steamapps\common\everquest 2\eq2voiceservice.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\everquest 2\eq2voiceservice.exe
FirewallRules: [UDP Query User{4ECF8C9A-C028-41D0-B1BE-D17FF3D31D0D}C:\program files (x86)\steam\steamapps\common\everquest 2\eq2voiceservice.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\everquest 2\eq2voiceservice.exe
FirewallRules: [{B7AAB7CF-7CF6-4140-AF57-E1300EA142D0}] => (Block) C:\program files (x86)\steam\steamapps\common\everquest 2\eq2voiceservice.exe
FirewallRules: [{E9510B5A-4305-4885-A60A-1F9065D09012}] => (Block) C:\program files (x86)\steam\steamapps\common\everquest 2\eq2voiceservice.exe
FirewallRules: [TCP Query User{4F7EE4FE-5722-4AA1-A85A-8D33EA73946F}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{664EB0F8-875B-4E27-AAA2-244235CF0B88}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{D8BA7587-19D2-4B55-8F22-C7FB852CC6E3}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{CEF16758-0E0D-4D8F-B346-056D64DBD7EC}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{DFC4E2FC-AB7D-42FF-BA24-6314E8F2653D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\nxsteam.exe
FirewallRules: [{2323A651-D923-4BA1-B334-9B33B542E98E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\nxsteam.exe
FirewallRules: [{AEFC1EBB-1DB0-4AFE-B13F-E04105343D3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The Second Encounter\Bin\SeriousSam.exe
FirewallRules: [{F1A78F12-438B-48FA-8902-6FD1D0B08208}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The Second Encounter\Bin\SeriousSam.exe
FirewallRules: [{284F8C9F-F60B-40A7-801D-B88509B20C7A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The Second Encounter\Bin\SeriousEditor.exe
FirewallRules: [{081BD95C-8B8F-4F93-A838-73D81A158847}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The Second Encounter\Bin\SeriousEditor.exe
FirewallRules: [{80B42CF1-82C3-45FA-8676-A5944D6191B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The Second Encounter\Bin\SeriousModeler.exe
FirewallRules: [{EAE91ECA-06ED-4DE1-861E-9C75682432F3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The Second Encounter\Bin\SeriousModeler.exe
FirewallRules: [{3DE812B5-A6D5-49F8-9CD4-43A161897B77}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Revolution\Bin\SeriousSam.exe
FirewallRules: [{7E1478F2-0DC4-4B92-A079-F588A1EE2766}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Revolution\Bin\SeriousSam.exe
FirewallRules: [{B732AE35-54C8-4A06-89B7-A8513E17373F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{FA0B1994-E792-4A86-8255-E923F8D28E71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{1E548FDF-9712-4AF2-BB7F-933C72DD2651}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{D8349AD9-A9A3-46CF-919E-445694CCF344}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{19039A24-E2DB-48F1-93B7-4AD78449BAA9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The First Encounter\Bin\SeriousSam.exe
FirewallRules: [{3887EA02-AE02-4B5B-ABE2-E318C45285D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The First Encounter\Bin\SeriousSam.exe
FirewallRules: [{1851520D-7185-4D7E-BA75-ED61B1349EB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The First Encounter\Bin\SeriousEditor.exe
FirewallRules: [{0B5F5E8B-DC3F-41F8-84C7-8B8E05D58A75}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The First Encounter\Bin\SeriousEditor.exe
FirewallRules: [{E055AC1B-C923-4C0C-96C9-68F50C9AD14E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The First Encounter\Bin\SeriousModeler.exe
FirewallRules: [{61FD3FAB-0276-4A98-B6B7-05E8523E9497}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam Classic The First Encounter\Bin\SeriousModeler.exe
FirewallRules: [{8E3879EC-1E36-4BBC-A623-1B516C1F0956}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skullgirls\SkullGirls.exe
FirewallRules: [{C5C6D3CF-DFCD-45C6-B669-17B688AA407C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skullgirls\SkullGirls.exe
FirewallRules: [{D31E6C9A-D200-4DB6-A156-ED14C5F34D36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skullgirls Beta\SkullGirls.exe
FirewallRules: [{91DC792E-DA0E-4D4D-9EA8-0581AE873C21}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skullgirls Beta\SkullGirls.exe
FirewallRules: [{ED3434A0-B601-4801-861E-42FE70302739}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{93334351-3C75-4C07-B465-6726CC9997FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe
FirewallRules: [{2B8711E1-497C-4E8D-96F0-17271300261E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe
FirewallRules: [{8A27AC06-EB7B-48F0-B623-4ED9777161AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\nxsteam.exe
FirewallRules: [{721CE33F-A297-45AA-89B3-0378C5F7A3B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Vindictus\en-US\nxsteam.exe
FirewallRules: [{7C25A65C-CC7F-49EA-B6B1-467B6F6EC5EC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1375F31E-51E5-4AA9-90DA-062344B21A07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E8F4B86A-D488-4F4A-A6E7-09CAFFF13F85}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{3C8E6CEE-68FC-4C51-8F86-A1FB0934B889}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe
FirewallRules: [{BD476600-9654-44C5-9730-C47731C92F4B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\tribes\Binaries\Win32\HirezBridge.exe

==================== Faulty Device Manager Devices =============

Name: Logitech G13 Joystick
Description: Logitech G13 Joystick
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: (Standard system devices)
Service: LGVirHid
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2 Mouse
Description: Microsoft PS/2 Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/13/2015 08:33:28 PM) (Source: MsiInstaller) (EventID: 11404) (User: TonyTheodorePC)
Description: SA_Error1709: StandardAction(0xC00706AD): Product: AVG 2014 -- Error 1404. SA_Error1404: StandardAction(0xC007057C): Could not delete key \SOFTWARE\AVG\AVG2014. System error . Verify that you have sufficient access to that key, or contact your support personnel.

Error: (09/13/2015 08:30:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0070201353115617) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

Error: (09/13/2015 07:00:14 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0070201353115617) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

Error: (09/13/2015 04:00:05 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )
Description: 80004005

Error: (09/13/2015 03:00:06 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )
Description: 80004005

Error: (09/12/2015 09:00:02 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )
Description: 80004005

Error: (09/12/2015 08:00:07 PM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )
Description: 80004005

Error: (09/12/2015 06:13:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: LolClient.exe, version: 0.0.0.0, time stamp: 0x515663e0
Faulting module name: Adobe AIR.dll, version: 3.7.0.1530, time stamp: 0x5156646c
Exception code: 0xc0000005
Fault offset: 0x0006dd76
Faulting process id: 0x23f8
Faulting application start time: 0xLolClient.exe0
Faulting application path: LolClient.exe1
Faulting module path: LolClient.exe2
Report Id: LolClient.exe3

Error: (09/12/2015 11:49:19 AM) (Source: Customer Experience Improvement Program) (EventID: 1006) (User: )
Description: 80004005

Error: (09/11/2015 07:48:26 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7020


System errors:
=============
Error: (09/13/2015 09:14:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (09/13/2015 09:12:02 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (09/13/2015 09:06:25 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

Error: (09/13/2015 08:39:32 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
KS0108
LC7981
n3900
SED133x
T6963C

Error: (09/13/2015 08:38:34 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (09/13/2015 08:38:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NVIDIA Update Service Daemon service failed to start due to the following error:
%%1069

Error: (09/13/2015 08:38:31 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error:
%%1330

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Error: (09/13/2015 08:36:46 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Program Files (x86)\LcdStudio\ks0108.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (09/13/2015 08:36:46 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Program Files (x86)\LcdStudio\LC7981.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (09/13/2015 08:36:46 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Program Files (x86)\LcdStudio\n3900.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.


Microsoft Office:
=========================

CodeIntegrity:
===================================
Date: 2015-09-13 21:12:02.041
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 21:12:01.946
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.851
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\KS0108.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.757
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\KS0108.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.679
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\LC7981.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.586
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\LC7981.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.461
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\n3900.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.383
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\n3900.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.227
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\SED133x.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-09-13 20:36:46.133
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\LcdStudio\SED133x.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
Percentage of memory in use: 42%
Total physical RAM: 8118.52 MB
Available physical RAM: 4634.07 MB
Total Virtual: 16235.25 MB
Available Virtual: 13035.68 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:906.34 GB) (Free:180.98 GB) NTFS ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: EC46E5A6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=906.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=25.1 GB) - (Type=12)

==================== End of Addition.txt ============================

 

[Broni]

Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

[Classified1]

I have followed your instructions as followed, here is the log below.

Fix result of Farbar Recovery Scan Tool (x64) Version:12-09-2015
Ran by Tony&Theodore (2015-09-14 15:38:02) Run:1
Running from C:\Users\Tony&Theodore\Desktop
Loaded Profiles: Tony&Theodore (Available Profiles: Tony&Theodore & UpdatusUser)
Boot Mode: Normal
==============================================

fixlist content:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope value is missing
Toolbar: HKU\S-1-5-21-3718762900-4173039834-1257701688-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: npDisplayEngine -> C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll [No File]
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\pdf.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => No File
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll => No File
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll => No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => No File
CHR Plugin: (Display Engine v2) - C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll => No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll => No File
CHR Plugin: (Shockwave for Director) - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll => No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll => No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\windows\SysWOW64\npDeployJava1.dll => No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll => No File
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path/update_url>
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
2015-09-13 20:32 - 2015-09-13 20:40 - 0000360 _____ () C:\Users\Tony&Theodore\AppData\Local\multiscan.log
2011-03-15 15:34 - 2011-03-15 15:34 - 0000017 _____ () C:\Users\Tony&Theodore\AppData\Local\resmon.resmoncfg
2010-09-16 14:28 - 2010-09-16 14:28 - 1914000 _____ (Adobe Systems Incorporated) C:\ProgramData\flashax10.exe
2011-08-08 16:13 - 2011-06-09 16:13 - 0000032 ____R () C:\ProgramData\hash.dat
2011-09-18 15:21 - 2011-09-18 15:21 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
C:\ProgramData\flashax10.exe
C:\ProgramData\hash.dat
C:\Users\Tony&Theodore\invasion-installer-v2.bat
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{72A7495B-18CD-4751-AC38-5DBED9C6B1E7}


*****************

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
"HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => key removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\S-1-5-21-3718762900-4173039834-1257701688-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.7" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\npDisplayEngine" => key removed successfully
C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\ppGoogleNaClPluginChrome.dll => not found.
C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\pdf.dll => not found.
C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => not found.
C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => not found.
C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll => not found.
C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll => not found.
C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => moved successfully
C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll => not found.
C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll => not found.
C:\Program Files (x86)\LivingPlay Games\nplplaypop.dll => not found.
C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll => not found.
C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll => not found.
C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll => not found.
C:\windows\SysWOW64\npDeployJava1.dll => not found.
c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll => not found.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk" => key removed successfully
catchme => service removed successfully
EagleX64 => service removed successfully
RtsUIR => service removed successfully
USBCCID => service removed successfully
Could not move "C:\Users\Tony&Theodore\AppData\Local\multiscan.log" => Scheduled to move on reboot.
C:\Users\Tony&Theodore\AppData\Local\resmon.resmoncfg => moved successfully
C:\ProgramData\flashax10.exe => moved successfully
C:\ProgramData\hash.dat => moved successfully
C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc => moved successfully
"C:\ProgramData\flashax10.exe" => File/Folder not found.
"C:\ProgramData\hash.dat" => File/Folder not found.
C:\Users\Tony&Theodore\invasion-installer-v2.bat => moved successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{72A7495B-18CD-4751-AC38-5DBED9C6B1E7} => key removed successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-09-14 15:39:57)<=

C:\Users\Tony&Theodore\AppData\Local\multiscan.log => Is moved successfully

==== End of Fixlog 15:39:58 ====

 

[Broni]

Last scans...

Download Security Check from here or here and save it to your Desktop.

• Double-click SecurityCheck.exe
• Follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
Make sure the following options are checked:

• Internet Services
• Windows Firewall
• System Restore
• Security Center
• Windows Update
• Windows Defender
• Other Services

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

• Double click on TFC.exe to run the program.
• Click on Start button to begin cleaning process.
• TFC will close all running programs, and it may ask you to restart computer.

Download Sophos Free Virus Removal Tool and save it to your desktop.

• Double click the icon and select Run
• Click Next
• Select I accept the terms in this license agreement, then click Next twice
• Click Install
• Click Finish to launch the program
• Once the virus database has been updated click Start Scanning
• If any threats are found click Details, then View log file... (bottom left hand corner)
• Copy and paste the results in your reply
• Close the Notepad document, close the Threat Details screen, then click Start cleanup
• Click Exit to close the program

 

[Classified1]

So I ran all of the scans you requested, except for the Sophos Free Virus Removal tool. I downloaded it and attempted to run it overnight for at least 2 days, and it is very slow.

As for the rest of the scans they ran fine, except the checkup.txt was completely empty, the only text I was able to receive was the FSS.txt
Here it is below

Farbar Service Scanner Version: 26-07-2015
Ran by Tony&Theodore (administrator) on 14-09-2015 at 16:42:36
Running from "C:\Users\Tony&Theodore\Desktop"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****

 

[Broni]

Re-run Security Check one more time.

Instead of Sophos try this...

Please run a free online scan with the ESET Online Scanner

• Disable your antivirus program
• Click on "Run ESET Online Scanner" button.
• Tick the box next to YES, I accept the Terms of Use
• Click Start
• Accept any security warnings from your browser.
• Check Scan archives
• Click Start
• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
• When the scan completes, push List of found threats
• Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.

 

[Broni]

Still with me?

 

[Classified1]

I'm still here, sorry for the wait but I am still working on the security checkup.
Here is the ESETScan

C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\nsprotector.js.vir Win32/Conduit.SearchProtect.A potentially unwanted application
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Sk_Enhancer\uninstall.exe.vir a variant of Win32/SProtector.B potentially unwanted application
C:\Users\Tony&Theodore\Downloads\cbsidlm-cbsi176-VSDC_Free_Video_Editor-SEO-75764187.exe a variant of Win32/CNETInstaller.B potentially unwanted application
C:\Users\Tony&Theodore\Downloads\CT3223346_Opswat.exe Win32/Toolbar.Conduit potentially unwanted application

 

[Broni]

I still need you to re-run Security Check and see if you'll get some log this time.