Yes, I have started a sub folder to record the various configurations. The Avira print screens would go right into it.
By the way, you haven't said anything about a cleaner. I got used to that Cleanup and and the ATF. Are they past tense?
DDS Log:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Edward Shaw at 9:58:00 on 2012-06-06
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.32664.29648 [GMT -6:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
D:\Programs\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
c:\Program Files (x86)\Hotkey\PowerBiosServer.exe
C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
D:\Programs\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ms corsvw.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\AuthenTec TrueSuite\KeepSafe\fvsvr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
D:\Programs\Adobe Acrobat 7.0\Distillr\acrotray.exe
D:\Programs\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\Pres entationFontCache.exe
C:\Program Files (x86)\Hotkey\Hotkey.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uDefault_Page_URL = https;//www.ixquick.com
uSearch Page = https://www.ixquick.com
uStart Page = https://www.ixquick.com/
uWindow Title = Internet Explorer, optimized for Bing and MSN
mWinlogon: Userinit=userinit.exe,
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - D:\Programs\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
BHO: TrueSuite Website Log On: {8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll
BHO: CIESpeechBHO Class: {8d10f6c4-0e01-4bd4-8601-11ac1fdf8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [<NO NAME>]
mRun: [Acrobat Assistant 7.0] "D:\Programs\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
mRun: [Adobe Version Cue CS2] "D:\Programs\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [QuickTime Task] "D:\Programs\QuickTime\QTTask.exe" -atboottime
mRun: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
mRun: [UpdReg] C:\Windows\UpdReg.EXE
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [Anti-phishing Domain Advisor] "C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe"
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\ADOBEA~1.LNK - C:\Windows\Installer\{AC76BA86-1033-0000-7760-000000000002}\SC_Acrobat.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\ADOBEG~1.LNK - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\Hotkey.lnk - C:\Program Files (x86)\Hotkey\Hotkey.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\MICROS~1.LNK - D:\Programs\Office\OSA9.EXE
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Convert link target to Adobe PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert to existing PDF - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: DhcpNameServer = 192.168.0.1 205.171.3.25
TCP: Interfaces\{567BD3D1-608F-4C29-B5D9-D426EC197A09} : DhcpNameServer = 192.168.0.1 205.171.3.25
AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
BHO-X64: AcroIEHlprObj Class: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programs\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
BHO-X64: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\x86\IEBHO.dll
BHO-X64: TrueSuite Website Log On - No File
BHO-X64: CIESpeechBHO Class: {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
BHO-X64: IESpeakDoc - No File
BHO-X64: AcroIEToolbarHelper Class: {AE7CD045-E861-484f-8273-0445EE161910} - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
TB-X64: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Programs\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
EB-X64: {182EC0BE-5110-49C8-A062-BEB1D02A220B} - No File
mRun-x64: [(Default)]
mRun-x64: [Acrobat Assistant 7.0] "D:\Programs\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
mRun-x64: [Adobe Version Cue CS2] "D:\Programs\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [QuickTime Task] "D:\Programs\QuickTime\QTTask.exe" -atboottime
mRun-x64: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
mRun-x64: [UpdReg] C:\Windows\UpdReg.EXE
mRun-x64: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun-x64: [Anti-phishing Domain Advisor] "C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe"
mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
AppInit_DLLs-X64: C:\Windows\SysWOW64\nvinit.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Edward Shaw\AppData\Roaming\Mozilla\Firefox\Profiles\z9pb brlw.default\
FF - prefs.js: browser.search.selectedEngine - Blekko
FF - prefs.js: browser.startup.homepage - hxxps://www.ixquick.com/
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnI=I%27m+Feeling+Lucky&ie=UTF-8&oe=UTF-8&q=
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
FF - plugin: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_20 2_235.dll
FF - plugin: D:\Programs\Adobe Acrobat 7.0\Acrobat\browser\nppdf32.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin2.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin3.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin4.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin5.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin6.dll
FF - plugin: D:\Programs\QuickTime\Plugins\npqtplugin7.dll
.
============= SERVICES / DRIVERS ===============
.
R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;C:\Windows\system32\DRIVERS\iusb3hcs.sys --> C:\Windows\system32\DRIVERS\iusb3hcs.sys [?]
R0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpc iflt.sys --> C:\Windows\system32\DRIVERS\nvpciflt.sys [?]
R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.s ys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-11 140672]
R2 AntiVirSchedulerService;Avira Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-6-5 86224]
R2 AntiVirService;Avira Realtime Protection;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-6-5 110032]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-3-13 138400]
R2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Bluetooth Suite\AdminService.exe [2011-3-13 74912]
R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgn tflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\ v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework6 4\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
R2 FPLService;TrueSuiteService;C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [2011-11-3 299848]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-5-22 13592]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-1-10 627936]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-5-22 161560]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-5-22 2458944]
R2 PaceLicenseDServices;PACE License Services;C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-7-9 2932224]
R2 PowerBiosServer;PowerBiosServer;C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [2011-2-18 35328]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-6-5 1153368]
R2 Sentinel64;Sentinel64;C:\Windows\system32\Drivers\ Sentinel64.sys --> C:\Windows\system32\Drivers\Sentinel64.sys [?]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-5-22 363800]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\iusb3hub.sys --> C:\Windows\system32\DRIVERS\iusb3hub.sys [?]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;C:\Windows\system32\DRIVERS\iusb3xhc.sys --> C:\Windows\system32\DRIVERS\iusb3xhc.sys [?]
R3 MEIx64;Intel(R) Management Engine Interface ;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 RSBASTOR;Realtek PCIE CardReader Driver - BA;C:\Windows\system32\DRIVERS\RtsBaStor.sys --> C:\Windows\system32\DRIVERS\RtsBaStor.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
S3 BtFilter;BtFilter;C:\Windows\system32\DRIVERS\btfi lter.sys --> C:\Windows\system32\DRIVERS\btfilter.sys [?]
S3 cphs;Intel(R) Content Protection HECI Service;C:\Windows\SysWOW64\IntelCpHeciSvc.exe [2012-3-19 276248]
S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-5-30 129976]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsus bflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-06-06 15:25:21 902656 ----a-w- C:\Windows\System32\d2d1.dll
2012-06-06 15:25:21 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll
2012-06-06 15:25:21 1139200 ----a-w- C:\Windows\System32\FntCache.dll
2012-06-06 04:22:06 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\SUPERAntiSpyware.com
2012-06-06 04:21:35 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2012-06-06 04:21:35 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2012-06-06 02:16:15 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
2012-06-06 02:16:15 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy
2012-06-06 00:34:06 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\Avira
2012-06-06 00:28:53 98848 ----a-w- C:\Windows\System32\drivers\avgntflt.sys
2012-06-06 00:28:53 27760 ----a-w- C:\Windows\System32\drivers\avkmgr.sys
2012-06-06 00:28:52 -------- d-----w- C:\ProgramData\Avira
2012-06-06 00:28:52 -------- d-----w- C:\Program Files (x86)\Avira
2012-06-05 22:54:50 -------- d-----w- C:\Program Files (x86)\ESET
2012-06-05 18:20:10 -------- d-----w- C:\Downloads
2012-06-05 18:05:20 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\antiphishing-vmninternethelper1_1dn
2012-06-05 16:21:10 98816 ----a-w- C:\Windows\System32\drivers\usbccgp.sys
2012-06-05 16:19:45 -------- d-----w- C:\ProgramData\Anti-phishing Domain Advisor
2012-06-05 16:19:29 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Google
2012-06-05 16:18:51 -------- d-----w- C:\ProgramData\blekko toolbars
2012-06-05 15:54:50 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2012-06-05 15:54:50 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2012-06-05 15:54:50 5120 ----a-w- C:\Windows\System32\wmi.dll
2012-06-05 15:54:50 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-06-05 15:54:50 220672 ----a-w- C:\Windows\System32\wintrust.dll
2012-06-05 15:54:50 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll
2012-06-05 15:54:50 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2012-06-05 13:08:48 70656 ----a-w- C:\Windows\SysWow64\fontsub.dll
2012-06-05 13:08:48 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-06-05 13:08:48 367616 ----a-w- C:\Windows\System32\atmfd.dll
2012-06-05 13:08:48 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-06-05 13:08:48 30208 ----a-w- C:\Windows\System32\dnscacheugc.exe
2012-06-05 13:08:48 294912 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-06-05 13:08:48 28672 ----a-w- C:\Windows\SysWow64\dnscacheugc.exe
2012-06-05 13:08:48 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2012-06-05 13:08:48 183296 ----a-w- C:\Windows\System32\dnsrslvr.dll
2012-06-05 13:08:48 100864 ----a-w- C:\Windows\System32\fontsub.dll
2012-06-05 13:03:20 8955792 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2012-06-05 13:03:18 8955792 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{AC39B827-6AF8-4204-BF91-C39AFBD206D9}\mpengine.dll
2012-06-04 23:34:30 -------- d-----w- C:\Windows\Panther
2012-06-04 23:31:20 -------- d--h--w- C:\$WINDOWS.~Q
2012-06-04 23:30:46 -------- d--h--w- C:\$INPLACE.~TR
2012-06-04 23:21:40 1560168 ----a-w- C:\Windows\System32\RTSnMg64.cpl
2012-06-04 21:47:37 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-06-04 21:47:37 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-06-04 21:47:37 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-06-04 21:47:31 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-06-04 21:47:31 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-06-04 21:47:31 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-06-04 21:47:31 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-06-04 21:35:55 -------- d-----w- C:\ProgramData\NVIDIA Corporation
2012-06-04 21:35:53 -------- d-----w- C:\Program Files\NVIDIA Corporation
2012-06-04 21:35:53 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation
2012-06-04 21:35:36 -------- d-----w- C:\Windows\SysWow64\RTCOM
2012-06-04 21:35:36 -------- d-----w- C:\Program Files\Realtek
2012-06-04 21:35:33 -------- d-----w- C:\Program Files\Synaptics
2012-06-01 13:53:35 16152 ----a-w- C:\Windows\System32\drivers\iusb3hcs.sys
2012-06-01 13:53:28 356120 ----a-w- C:\Windows\System32\drivers\iusb3hub.sys
2012-06-01 13:53:27 787736 ----a-w- C:\Windows\System32\drivers\iusb3xhc.sys
2012-06-01 13:50:36 9888872 ----a-w- C:\Windows\SysWow64\RtsBaStorIcon.dll
2012-06-01 13:50:36 292968 ----a-r- C:\Windows\System32\drivers\RtsBaStor.sys
2012-06-01 1337 757760 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\iKernel.dll
2012-06-01 13
2012-06-01 13
2012-06-01 13
2012-06-01 13
2012-06-01 13
2012-06-01 13
2012-06-01 13:04:49 -------- d-----w- C:\ProgramData\Downloaded Installations
2012-06-01 04:28:11 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\ElevatedDiagnostics
2012-05-30 14:34:09 -------- d-----w- C:\Program Files (x86)\Mozilla Maintenance Service
2012-05-30 13:47:02 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Diagnostics
2012-05-29 14:10:37 -------- d-----w- C:\Windows\System32\appmgmt
2012-05-29 00:09:50 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Apple Computer
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2012-05-27 14:16:25 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2012-05-27 14:16:02 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Apple
2012-05-27 13:44:34 -------- d-----w- C:\Windows\SysWow64\Wat
2012-05-27 13:44:34 -------- d-----w- C:\Windows\System32\Wat
2012-05-27 13:24:22 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Sony
2012-05-27 13:22:55 -------- d-----w- C:\Program Files (x86)\Sony
2012-05-27 12:16:08 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\Avid Technology
2012-05-27 12:15:04 53248 ----a-r- C:\Users\Edward Shaw\AppData\Roaming\Microsoft\Installer\{12E59A19-9883-4BEC-961F-AE95CD454C10}\ARPPRODUCTICON.exe
2012-05-27 12:13:41 53248 ----a-r- C:\Users\Edward Shaw\AppData\Roaming\Microsoft\Installer\{A876EBF9-9046-4953-888D-8A60B8777027}\ARPPRODUCTICON.exe
2012-05-27 12:03:21 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\Avid
2012-05-27 12:02:09 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\PACE Anti-Piracy
2012-05-27 12:02:09 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\PACE Anti-Piracy
2012-05-27 12:02:09 -------- d-----w- C:\ProgramData\PACE Anti-Piracy
2012-05-27 12:01:57 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\NVIDIA
2012-05-27 03:41:22 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Mozilla
2012-05-27 01:45:19 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\Malwarebytes
2012-05-27 01:45:13 -------- d-----w- C:\ProgramData\Malwarebytes
2012-05-27 01:45:12 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-05-27 01:45:12 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-05-27 00:56:13 -------- d-----w- C:\ProgramData\Avid
2012-05-27 00:42:26 -------- d-----w- C:\Program Files (x86)\Common Files\Digidesign
2012-05-27 00:42:10 -------- d-----w- C:\Program Files (x86)\Common Files\Avid
2012-05-27 00:41:35 -------- d-----w- C:\ProgramData\PACE
2012-05-27 00:41:34 -------- d-----w- C:\Program Files (x86)\Common Files\PACE
2012-05-27 00:40:23 142120 ----a-w- C:\Windows\System32\drivers\sentinel64.sys
2012-05-27 00:40:22 -------- d-----w- C:\Program Files (x86)\Common Files\SafeNet Sentinel
2012-05-27 00:40:18 -------- d-----w- C:\Windows\Downloaded Installations
2012-05-27 00:40:01 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\{6448F0A6-6813-11D6-A77B-00B0D0160060}
2012-05-27 00:36:03 -------- d-----w- C:\Program Files (x86)\Licenses
2012-05-27 00:35:42 -------- d-----w- C:\Program Files (x86)\Avid
2012-05-27 00:11:42 -------- d-----w- C:\ProgramData\AVAST Software
2012-05-27 00:11:42 -------- d-----w- C:\Program Files\AVAST Software
2012-05-26 19:51:21 -------- d-----w- C:\Windows\Msagent
2012-05-26 19:21:39 70304 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-26 19:21:39 419488 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-05-26 17:44:03 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Opera
2012-05-26 17:44:02 -------- d-----w- C:\Program Files (x86)\Opera Next
2012-05-26 16:54:31 -------- d--h--w- C:\Windows\msdownld.tmp
2012-05-26 05:38:00 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\Adobe
2012-05-26 05:33:22 -------- d-----w- C:\Windows\SysWow64\spool
2012-05-26 05:29:28 16384 ----a-w- C:\Windows\SysWow64\FileOps.exe
2012-05-26 05:29:28 -------- d-----w- C:\Windows\SysWow64\Adobe
2012-05-26 05:21:35 -------- d-----w- C:\Program Files (x86)\Common Files\Adobe Systems Shared
2012-05-26 03:42:35 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\AuthenTec
2012-05-26 03:40:19 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\KeepSafe
2012-05-26 03:40:19 -------- d-----w- C:\Users\Edward Shaw\AppData\Roaming\Intel Corporation
2012-05-26 03:40:09 -------- d-----w- C:\Users\Edward Shaw\AppData\Local\VirtualStore
2012-05-26 03:40:08 -------- d-sh--w- C:\Recovery
2012-05-22 16:41:10 -------- d-----w- C:\Program Files (x86)\Common Files\Intel Corporation
2012-05-22 16:39:08 -------- d-----w- C:\Windows\SysWow64\NV
2012-05-22 16:39:08 -------- d-----w- C:\Windows\System32\NV
2012-05-22 16:24:52 -------- d-----w- C:\Program Files (x86)\Common Files\Atheros
2012-05-22 16:24:52 -------- d-----w- C:\Program Files (x86)\Bluetooth Suite
2012-05-22 16:24:33 2228736 ----a-w- C:\Windows\System32\athrx.sys
2012-05-22 16:24:33 -------- d-----w- C:\Program Files (x86)\Atheros
2012-05-22 16:24:30 -------- d-----w- C:\ProgramData\Atheros
2012-05-22 15:46:00 -------- d-----w- C:\Program Files\Common Files\Intel
2012-05-22 15:46:00 -------- d-----w- C:\Program Files (x86)\Common Files\Intel
2012-05-22 15:44:57 -------- d-sh--w- C:\Windows\Installer
2012-05-22 15:44:57 -------- d-----w- C:\Program Files (x86)\Hotkey
2012-05-22 15:44:29 74344 ----a-w- C:\Windows\System32\RtNicProp64.dll
2012-05-22 15:44:29 677480 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2012-05-22 15:44:29 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2012-05-22 15:44:17 -------- d-----w- C:\Program Files (x86)\Realtek
2012-05-22 15:44:16 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps. dll
2012-05-22 15:44:16 1698408 ----a-r- C:\Windows\RtlExUpd.dll
2012-05-22 15:44:16 -------- d--h--w- C:\Program Files (x86)\Temp
2012-05-22 15:44:06 -------- d-----w- C:\Intel
2012-05-21 23:12:23 221480 ----a-w- C:\Windows\System32\SynTPAPI.dll
2012-05-21 23:12:23 147752 ----a-w- C:\Windows\System32\SynTPCo4.dll
2012-05-21 23:12:23 1393200 ----a-w- C:\Windows\System32\drivers\SynTP.sys
2012-05-21 23:12:23 107816 ----a-w- C:\Windows\SysWow64\SynTPCOM.dll
2012-05-21 23:12:22 400168 ----a-w- C:\Windows\System32\SynCOM.dll
2012-05-21 23:12:22 272168 ----a-w- C:\Windows\System32\SynCtrl.dll
2012-05-21 23:12:22 218408 ----a-w- C:\Windows\SysWow64\SynCtrl.dll
2012-05-21 23:12:22 173352 ----a-w- C:\Windows\SysWow64\SynCOM.dll
2012-05-21 23:11:56 60184 ----a-w- C:\Windows\System32\drivers\HECIx64.sys
2012-05-21 23:10:50 -------- d---a-w- C:\Drivers
.
==================== Find3M ====================
.
2012-04-19 02:56:30 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
2012-04-19 02:56:30 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
2012-03-31 06:05:57 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-03-31 04:39:37 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-03-31 04:39:37 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-03-31 03:10:03 3146240 ----a-w- C:\Windows\System32\win32k.sys
2012-03-30 11:35:47 1918320 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-03-27 02:25:18 90112 ----a-w- C:\Windows\System32\igfxCoIn_v2712.dll
2012-03-27 00:33:34 52736 ----a-w- C:\Windows\System32\OpenCL.dll
2012-03-27 00:33:34 51200 ----a-w- C:\Windows\SysWow64\OpenCL.dll
2012-03-27 00:33:28 94208 ----a-w- C:\Windows\System32\IccLibDll_x64.dll
2012-03-27 00:33:28 524800 ----a-w- C:\Windows\System32\iglhsip64.dll
2012-03-27 00:33:28 519680 ----a-w- C:\Windows\SysWow64\iglhsip32.dll
2012-03-27 00:33:28 2967040 ----a-w- C:\Windows\System32\igfxcmjit64.dll
2012-03-27 00:33:28 237056 ----a-w- C:\Windows\SysWow64\igfxcmrt32.dll
2012-03-27 00:33:28 2321408 ----a-w- C:\Windows\SysWow64\igfxcmjit32.dll
2012-03-27 00:33:28 213504 ----a-w- C:\Windows\System32\iglhcp64.dll
2012-03-27 00:33:28 193024 ----a-w- C:\Windows\System32\igfxcmrt64.dll
2012-03-27 00:33:28 177152 ----a-w- C:\Windows\SysWow64\iglhcp32.dll
2012-03-20 05:44:20 5888792 ----a-w- C:\Windows\System32\GfxUI.exe
2012-03-20 05:44:20 509720 ----a-w- C:\Windows\System32\igfxsrvc.exe
2012-03-20 05:44:20 439064 ----a-w- C:\Windows\System32\igfxpers.exe
2012-03-20 05:44:20 398616 ----a-w- C:\Windows\System32\hkcmd.exe
2012-03-20 05:44:20 276248 ----a-w- C:\Windows\SysWow64\IntelCpHeciSvc.exe
2012-03-20 05:44:20 250136 ----a-w- C:\Windows\System32\igfxext.exe
2012-03-20 05:44:20 184600 ----a-w- C:\Windows\System32\difx64.exe
2012-03-20 05:44:20 170264 ----a-w- C:\Windows\System32\igfxtray.exe
2012-03-20 05:42:08 90112 ----a-w- C:\Windows\System32\igfxCoIn_v2696.dll
2012-03-20 05:37:12 755188 ----a-w- C:\Windows\SysWow64\igkrng700.bin
2012-03-20 05:37:12 755188 ----a-w- C:\Windows\System32\igkrng700.bin
2012-03-20 05:37:12 561508 ----a-w- C:\Windows\SysWow64\igfcg700m.bin
2012-03-20 05:37:12 561508 ----a-w- C:\Windows\System32\igfcg700m.bin
2012-03-20 05:32:04 14745600 ----a-w- C:\Windows\System32\drivers\igdkmd64.sys
2012-03-20 05:31:56 8087040 ----a-w- C:\Windows\System32\igdumd64.dll
2012-03-20 05:31:14 79360 ----a-w- C:\Windows\System32\igdde64.dll
2012-03-20 05:26:56 6120960 ----a-w- C:\Windows\SysWow64\igdumd32.dll
2012-03-20 05:25:58 58880 ----a-w- C:\Windows\SysWow64\igdde32.dll
2012-03-20 05:22:10 9605632 ----a-w- C:\Windows\System32\igd10umd64.dll
2012-03-20 05:11:38 7795200 ----a-w- C:\Windows\SysWow64\igd10umd32.dll
2012-03-20 05:03:34 3749888 ----a-w- C:\Windows\System32\igdbcl64.dll
2012-03-20 05:03:32 591872 ----a-w- C:\Windows\System32\igdrcl64.dll
2012-03-20 05:03:30 236544 ----a-w- C:\Windows\System32\IntelOpenCL64.dll
2012-03-20 05:00:46 518144 ----a-w- C:\Windows\SysWow64\igdrcl32.dll
2012-03-20 05:00:32 2866688 ----a-w- C:\Windows\SysWow64\igdbcl32.dll
2012-03-20 05:00:28 188416 ----a-w- C:\Windows\SysWow64\IntelOpenCL32.dll
2012-03-20 04:55:04 28992000 ----a-w- C:\Windows\System32\igdfcl64.dll
2012-03-20 04:43:16 23460864 ----a-w- C:\Windows\SysWow64\igdfcl32.dll
2012-03-20 04:33:42 17226240 ----a-w- C:\Windows\System32\ig7icd64.dll
2012-03-20 04:23:38 13024256 ----a-w- C:\Windows\SysWow64\ig7icd32.dll
2012-03-20 04:17:56 28672 ----a-w- C:\Windows\System32\igfxexps.dll
2012-03-20 04:17:46 63488 ----a-w- C:\Windows\System32\igfxsrvc.dll
2012-03-20 04:17:22 110592 ----a-w- C:\Windows\System32\hccutils.dll
2012-03-20 04:17:14 9216 ----a-w- C:\Windows\System32\IGFXDEVLib.dll
2012-03-20 04:17:14 434688 ----a-w- C:\Windows\System32\igfxdev.dll
2012-03-20 04:17:14 172032 ----a-w- C:\Windows\System32\gfxSrvc.dll
2012-03-20 04:16:40 286208 ----a-w- C:\Windows\System32\igfxrenu.lrc
2012-03-20 04:16:38 142336 ----a-w- C:\Windows\System32\igfxdo.dll
2012-03-20 04:16:36 9007616 ----a-w- C:\Windows\System32\igfxress.dll
2012-03-20 04:12:06 25088 ----a-w- C:\Windows\SysWow64\igfxexps32.dll
2012-03-20 04:11:22 325120 ----a-w- C:\Windows\SysWow64\igfxdv32.dll
2012-03-17 07:58:57 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys
.
============= FINISH: 9:58:09.82 ===============
Reply With Quote