Hello Experts,
Today my trouble is the Internet connection running very inconsistent and browsers giving drastically different performance. I run all web internet accessable programs through a VPN service which I rent a Private Ip. My IP is not from a pool of previously used IP I am the one and only owner. This was told to as part of the security pitch and it is what I have paid for.
At present my system is all over the place with performance in general errors that come on then go off. Other like drivers not installed please install unable to download check your connection. I have a windows 7 64 bit Hp DV7 laptop AMD quad core which I think is fantastic other than being two years old. Google chrome and firefox are running drastically different. firefox is slow but connects to pages much faster in JAVA based instances. Chrome is over all much faster on sites not Java intensive. But when it comes to Java sites takes over 5 minutes at times to load.
I have looked into how much bloatware I have added on to firefox and have kept it to a minimum just for sercurity add ons not even themes are present. Not sure whatsoever to tell you about my Machines performance just that is causing me a lots of anguish and punishment from the God's
Please see log from DDS below:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
Run by R34P3R at 11:01:11 on 2012-01-06
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5883.4117 [GMT -6:00]
.
AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files (x86)\Astrill\astrill.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Astrill\ASOvpnSvc.exe
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Users\R34P3R\AppData\Local\TempImages\CheckVer104.exe
C:\Users\R34P3R\AppData\Local\TempImages\regver.exe
C:\Windows\System32\vds.exe
C:\Program Files (x86)\Astrill\openvpn.exe
C:\Windows\SysWOW64\ping.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit=userinit.exe
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\IPS\IPSBHO.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [Astrill] "C:\Program Files (x86)\Astrill\astrill.exe" /autostart
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
LSP: C:\Windows\system32\ASProxy.dll
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect118.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
TCP: DhcpNameServer = 5.5.0.1
TCP: Interfaces\{61CC1218-0DD6-48BB-8A4F-220B459F2008} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{61CC1218-0DD6-48BB-8A4F-220B459F2008}\D4F4A5946363 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{7CD7804F-61C3-470A-9165-9D50E166BC63} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{7CD7804F-61C3-470A-9165-9D50E166BC63} : DhcpNameServer = 5.5.0.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
BHO-X64: Symantec NCO BHO - No File
BHO-X64: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\IPS\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\R34P3R\AppData\Roaming\Mozilla\Firefox\Profiles\h1bcbqik.default\
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
---- FIREFOX POLICIES ----
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.cache.memory.capacity - 65536
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\N360x64\0501000.01D\SYMDS64.SYS --> C:\Windows\system32\drivers\N360x64\0501000.01D\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\N360x64\0501000.01D\SYMEFA64.SYS --> C:\Windows\system32\drivers\N360x64\0501000.01D\SYMEFA64.SYS [?]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20111221.003\BHDrvx64.sys [2011-12-21 1156216]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120105.001\IDSviA64.sys [2012-1-5 488568]
R1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\N360x64\0501000.01D\Ironx64.SYS --> C:\Windows\system32\drivers\N360x64\0501000.01D\Ironx64.SYS [?]
R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\system32\Drivers\N360x64\0501000.01D\SYMNETS.SYS --> C:\Windows\system32\Drivers\N360x64\0501000.01D\SYMNETS.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-12-24 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe --> C:\Windows\system32\Hpservice.exe [?]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-28 652872]
R2 N360;Norton Security Suite;C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccsvchst.exe [2011-12-24 130008]
R2 vcsFPService;Validity VCS Fingerprint Service;C:\Windows\System32\vcsFPService.exe [2010-2-23 1799472]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 ASOVPNHelper;Astrill OpenVPN Service;C:\Program Files (x86)\Astrill\ASOvpnSvc.exe [2011-12-28 434928]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-12-23 138360]
R3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2012-1-6 8456]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-24 136176]
S3 ASProxy;ASProxy;C:\Program Files (x86)\Astrill\ASProxy.exe [2011-12-28 1928616]
S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2012-1-6 14216]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-24 136176]
S3 Revoflt;Revoflt;C:\Windows\system32\DRIVERS\revoflt.sys --> C:\Windows\system32\DRIVERS\revoflt.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-01-06 13:32:55 9096 ----a-w- C:\Windows\System32\EuGdiDrv.sys
2012-01-06 13:32:55 86408 ----a-w- C:\Windows\SysWow64\setupempdrv03.exe
2012-01-06 13:32:55 8456 ----a-w- C:\Windows\SysWow64\EuGdiDrv.sys
2012-01-06 13:32:55 3321728 ----a-w- C:\Windows\System32\BootMan.exe
2012-01-06 13:32:55 2469760 ----a-w- C:\Windows\SysWow64\BootMan.exe
2012-01-06 13:32:55 19840 ----a-w- C:\Windows\SysWow64\EuEpmGdi.dll
2012-01-06 13:32:55 16776 ----a-w- C:\Windows\System32\epmntdrv.sys
2012-01-06 13:32:55 16256 ----a-w- C:\Windows\System32\EuEpmGdi.dll
2012-01-06 13:32:55 14216 ----a-w- C:\Windows\SysWow64\epmntdrv.sys
2012-01-06 13:32:55 100232 ----a-w- C:\Windows\System32\setupempdrvx64.exe
2012-01-06 13:32:48 -------- d-----w- C:\Program Files (x86)\EASEUS
2012-01-06 06:14:53 -------- d-----r- C:\Program Files (x86)\Skype
2012-01-05 21:50:07 -------- d-----w- C:\Users\R34P3R\AppData\Local\{E2025299-86E6-45D9-9A46-5055052080C5}
2012-01-05 21:49:45 -------- d-----w- C:\Users\R34P3R\AppData\Local\{D7F78A5D-0471-48CC-B6AC-B15FFFE16FF7}
2012-01-05 09:49:32 -------- d-----w- C:\Users\R34P3R\AppData\Local\{9A1EA5AB-23A7-49A6-A197-FE1C4080A2DA}
2012-01-05 09:49:10 -------- d-----w- C:\Users\R34P3R\AppData\Local\{1E6E7349-894B-4E66-BA3D-CBDAA1730593}
2012-01-04 21:48:57 -------- d-----w- C:\Users\R34P3R\AppData\Local\{49C13C29-F78F-4FE6-8E9C-28158C4AA473}
2012-01-04 21:48:35 -------- d-----w- C:\Users\R34P3R\AppData\Local\{7536C3E3-6485-4E4E-A8D9-43F68D083C8D}
2012-01-04 19:22:44 -------- d-----w- C:\Users\R34P3R\AppData\Local\VS Revo Group
2012-01-04 19:22:41 31800 ----a-w- C:\Windows\System32\drivers\revoflt.sys
2012-01-04 19:22:39 -------- d-----w- C:\Program Files\VS Revo Group
2012-01-04 19:03:35 -------- d-----w- C:\Users\R34P3R\AppData\Local\Fast_Crawler
2012-01-04 19:03:30 -------- d-----w- C:\Users\R34P3R\AppData\Local\TempImages
2012-01-04 19:00:39 209608 ------w- C:\Windows\SysWow64\TABCTL32.OCX
2012-01-04 19:00:39 124688 ------w- C:\Windows\SysWow64\Mswinsck.ocx
2012-01-04 19:00:39 1081616 ------w- C:\Windows\SysWow64\mscomctl.ocx
2012-01-04 19:00:39 101888 ------w- C:\Windows\SysWow64\VB6STKIT.DLL
2012-01-04 19:00:39 -------- d-----w- C:\Program Files (x86)\Northworks Solutions Ltd
2012-01-04 09:48:09 -------- d-----w- C:\Users\R34P3R\AppData\Local\{0DB1E778-A5E0-4F6E-97B4-E9B3FA264FCD}
2012-01-04 09:47:58 -------- d-----w- C:\Users\R34P3R\AppData\Local\{D5A5B358-0B3E-4873-814A-FFAC46F49AB0}
2012-01-04 05:10:17 -------- d-----w- C:\Users\R34P3R\AppData\Local\CrashDumps
2012-01-04 04:54:55 -------- d-----w- C:\temp
2012-01-04 04:54:21 -------- d-----w- C:\Users\R34P3R\.yawcam
2012-01-04 04:54:06 -------- d-----w- C:\Program Files (x86)\Yawcam
2012-01-04 03:37:09 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-01-03 21:43:53 -------- d-----w- C:\Users\R34P3R\AppData\Local\{285FB93C-A79B-4228-A52E-1C7118F76BEE}
2012-01-03 21:43:30 -------- d-----w- C:\Users\R34P3R\AppData\Local\{8FDE78CE-7F51-4CD5-99EE-4ECACAACED87}
2012-01-02 11:32:51 -------- d-----w- C:\Users\R34P3R\AppData\Local\{A1226570-82CD-4553-BF56-5D854D2AA2B1}
2012-01-02 11:32:27 -------- d-----w- C:\Users\R34P3R\AppData\Local\{394A8041-2220-4867-8908-BB61FF1581C0}
2012-01-02 03:12:49 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\HandBrake
2012-01-02 03:12:49 -------- d-----w- C:\Users\R34P3R\AppData\Local\HandBrake
2012-01-02 03:12:36 -------- d-----w- C:\Program Files (x86)\Handbrake
2012-01-01 23:32:01 -------- d-----w- C:\Users\R34P3R\AppData\Local\{3D5F6512-D6AE-4B1F-B254-1BF68219D51A}
2012-01-01 23:31:39 -------- d-----w- C:\Users\R34P3R\AppData\Local\{1B2F51E2-2F86-4D2A-A87C-7F64BBFD6758}
2012-01-01 11:31:26 -------- d-----w- C:\Users\R34P3R\AppData\Local\{E318772F-A83D-4688-9ADB-6458D92B4928}
2012-01-01 11:31:03 -------- d-----w- C:\Users\R34P3R\AppData\Local\{4EBB443F-708B-4AF3-BEC5-0A4E29AD9ADB}
2011-12-31 04:58:26 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Foxit Software
2011-12-31 04:57:23 -------- d-----w- C:\Program Files (x86)\Foxit Software
2011-12-31 04:44:43 -------- d-----w- C:\Users\R34P3R\AppData\Local\{070BF7C5-1200-4A5A-8F58-7EF02AA57438}
2011-12-31 04:44:19 -------- d-----w- C:\Users\R34P3R\AppData\Local\{7DEC5B93-D709-4BDA-AEB5-D722F2DB21C1}
2011-12-30 16:43:54 -------- d-----w- C:\Users\R34P3R\AppData\Local\{BFB40209-0F39-4C30-8631-0B0EF6377CFF}
2011-12-30 16:43:31 -------- d-----w- C:\Users\R34P3R\AppData\Local\{8383AE77-72C7-4DE5-A157-3A0E55FB6971}
2011-12-29 23:35:52 -------- d-----w- C:\Users\R34P3R\AppData\Local\{615D0AC9-29CC-497C-A633-89FB5F72A8E2}
2011-12-29 23:35:40 -------- d-----w- C:\Users\R34P3R\AppData\Local\{9B0CBAE9-3F4E-4C44-9C6D-E24C6E1E60F6}
2011-12-29 02:17:58 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Astrill
2011-12-29 02:17:36 -------- d-----w- C:\Program Files (x86)\Astrill
2011-12-29 01:48:32 -------- d-----w- C:\Program Files (x86)\OpenVPN
2011-12-28 23:40:41 -------- d-----w- C:\Users\R34P3R\AppData\Local\{0F291FE5-1FF7-4744-9135-548F22556252}
2011-12-28 23:40:19 -------- d-----w- C:\Users\R34P3R\AppData\Local\{29D0AE12-C7FF-4A58-AF10-5AAEF43D1C4C}
2011-12-28 18:26:21 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\foobar2000
2011-12-28 18:26:08 -------- d-----w- C:\Program Files (x86)\foobar2000
2011-12-28 09:51:04 -------- d-----w- C:\Users\R34P3R\AppData\Local\{E1872180-CD45-4F57-873F-C3FE6AA81561}
2011-12-28 09:50:41 -------- d-----w- C:\Users\R34P3R\AppData\Local\{6C684AC2-9754-4015-B7C7-F39FE9B1E04D}
2011-12-28 06:30:05 -------- d-----w- C:\Users\R34P3R\AppData\Local\QuickPar
2011-12-28 06:28:44 -------- d-----w- C:\Program Files (x86)\QuickPar
2011-12-27 23:04:35 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\SingularLabs
2011-12-27 23:03:17 -------- d-----w- C:\Program Files (x86)\System Ninja
2011-12-27 20:30:47 -------- d-----w- C:\Users\R34P3R\AppData\Local\{EE999611-071B-46D4-AA1A-0649FB479FC4}
2011-12-27 20:30:25 -------- d-----w- C:\Users\R34P3R\AppData\Local\{7E8B22DC-FB9B-42B1-8157-9687EF7A29A9}
2011-12-27 20:30:25 -------- d-----w- C:\Users\R34P3R\AppData\Local\{56E89108-0B5A-4223-854C-D10BF623F550}
2011-12-27 05:43:13 -------- d-----w- C:\Users\R34P3R\AppData\Local\Diagnostics
2011-12-27 05:17:21 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\IrfanView
2011-12-27 05:17:21 -------- d-----w- C:\Program Files (x86)\IrfanView
2011-12-26 14:27:12 -------- d-----w- C:\Users\R34P3R\AppData\Local\{959C92C3-C584-4A92-806F-8ADC73D0DFB5}
2011-12-26 14:26:49 -------- d-----w- C:\Users\R34P3R\AppData\Local\{B7ABDC3C-92D3-4CBC-9149-56F9DE1F89AC}
2011-12-26 05:31:43 902656 ----a-w- C:\Windows\System32\d2d1.dll
2011-12-26 05:31:43 1139200 ----a-w- C:\Windows\System32\FntCache.dll
2011-12-26 05:31:43 1076736 ----a-w- C:\Windows\SysWow64\DWrite.dll
2011-12-26 05:31:42 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll
2011-12-26 05:31:42 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2011-12-26 04:53:23 -------- d-----w- C:\Windows\System32\SPReview
2011-12-26 04:52:33 -------- d-----w- C:\Windows\System32\EventProviders
2011-12-25 23:37:05 -------- d-----w- C:\Users\R34P3R\AppData\Local\{31E1E44F-7B10-48E0-AD1F-1F0C58A57A12}
2011-12-25 23:36:42 -------- d-----w- C:\Users\R34P3R\AppData\Local\{917C0879-302F-4C8C-9531-650A356744A2}
2011-12-25 03:48:23 -------- d-----w- C:\Program Files\Validity Sensors
2011-12-25 03:46:36 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2011-12-25 03:46:32 -------- d-----w- C:\Program Files (x86)\Realtek
2011-12-25 02:50:09 90624 ----a-w- C:\Windows\System32\AESTCo64.dll
2011-12-25 02:50:09 68608 ----a-w- C:\Windows\System32\AESTAR64.dll
2011-12-25 02:50:09 442368 ----a-w- C:\Windows\System32\AESTEC64.dll
2011-12-25 02:50:09 220672 ----a-w- C:\Windows\System32\HPToneCtrls64.dll
2011-12-25 02:50:09 162304 ----a-w- C:\Windows\System32\AESTAC64.dll
2011-12-25 02:50:08 487424 ----a-w- C:\Windows\sttray64.exe
2011-12-25 02:50:08 1952256 ----a-w- C:\Windows\System32\stlang64.dll
2011-12-25 02:50:08 12829184 ----a-w- C:\Windows\System32\idtcpl64.cpl
2011-12-25 02:50:07 -------- d-----w- C:\Windows\System32\SRSLabs
2011-12-25 02:49:31 209920 ----a-w- C:\Windows\System32\staco64.dll
2011-12-25 02:49:30 646656 ------w- C:\Windows\System32\stapi64.dll
2011-12-25 02:49:30 515584 ----a-w- C:\Windows\System32\drivers\stwrt64.sys
2011-12-25 02:49:30 431616 ----a-w- C:\Windows\System32\stcplx64.dll
2011-12-25 02:49:30 1466880 ----a-w- C:\Windows\System32\stapo64.dll
2011-12-25 02:49:27 -------- d-----w- C:\Program Files\IDT
2011-12-25 02:48:10 -------- d-----w- C:\Program Files\Synaptics
2011-12-25 02:44:41 -------- d-----w- C:\Users\R34P3R\AppData\Local\ATI
2011-12-25 02:42:14 38456 ----a-w- C:\Windows\System32\drivers\usbfilter.sys
2011-12-25 02:42:14 -------- d-----w- C:\Program Files (x86)\AMD
2011-12-25 02:40:09 -------- d-----w- C:\Program Files (x86)\ATI Technologies
2011-12-25 02:39:46 -------- d-----w- C:\Program Files\ATI Technologies
2011-12-25 02:39:41 -------- d-----w- C:\Program Files\ATI
2011-12-25 02:39:17 -------- d-----w- C:\swsetup
2011-12-25 02:23:41 -------- d-----w- C:\Program Files (x86)\HP
2011-12-24 22:40:58 -------- d-----w- C:\Users\R34P3R\AppData\Local\{A0115C89-4BC9-4618-B947-59844FAD791B}
2011-12-24 22:40:46 -------- d-----w- C:\Users\R34P3R\AppData\Local\{F4E0B5A3-E358-47D8-97D3-5FDD64BE3854}
2011-12-24 09:34:12 912504 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\symefa64.sys
2011-12-24 09:34:12 744568 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\srtsp64.sys
2011-12-24 09:34:12 450680 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\symds64.sys
2011-12-24 09:34:12 40568 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\srtspx64.sys
2011-12-24 09:34:12 386168 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\symnets.sys
2011-12-24 09:34:12 171128 ----a-r- C:\Windows\System32\drivers\N360x64\0501000.01D\ironx64.sys
2011-12-24 09:33:51 -------- d-----w- C:\Windows\System32\drivers\N360x64\0501000.01D
2011-12-24 07:45:56 -------- d-----w- C:\Program Files\CCleaner
2011-12-24 07:44:39 -------- d-----w- C:\Users\R34P3R\AppData\Local\Google
2011-12-24 07:37:32 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Malwarebytes
2011-12-24 07:37:17 -------- d-----w- C:\ProgramData\Malwarebytes
2011-12-24 07:37:13 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-12-24 07:37:13 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-24 07:27:26 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
2011-12-24 07:10:22 -------- d-----w- C:\Users\R34P3R\AppData\Local\Newshosting
2011-12-24 07:10:19 -------- d-----w- C:\Users\R34P3R\AppData\Local\CrashRpt
2011-12-24 07:09:42 -------- d-----w- C:\ProgramData\Caphyon
2011-12-24 07:09:36 -------- d-----w- C:\Program Files\Newshosting
2011-12-24 07:08:08 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Newshosting
2011-12-24 05:20:59 3860992 ----a-w- C:\Windows\System32\UIRibbon.dll
2011-12-24 05:19:59 90112 ----a-w- C:\Windows\System32\nci.dll
2011-12-24 05:18:57 189952 ----a-w- C:\Windows\SysWow64\sqmapi.dll
2011-12-24 05:18:51 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll
2011-12-24 05:18:51 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll
2011-12-24 05:18:51 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll
2011-12-24 05:16:39 529408 ----a-w- C:\Windows\System32\wbemcomn.dll
2011-12-24 05:16:39 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll
2011-12-24 05:16:31 244736 ----a-w- C:\Windows\System32\sqmapi.dll
2011-12-24 04:45:57 -------- d-----w- C:\Users\R34P3R\AppData\Local\{081A8F2E-4EDD-4027-8095-C8C579337D09}
2011-12-24 04:45:44 -------- d-----w- C:\Users\R34P3R\AppData\Local\{A84B9CC7-C1FD-4F92-8BCD-C4120D42B463}
2011-12-24 04:45:32 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Windows Live Writer
2011-12-24 04:45:32 -------- d-----w- C:\Users\R34P3R\AppData\Local\Windows Live Writer
2011-12-24 04:45:00 -------- d-----w- C:\Users\R34P3R\Tracing
2011-12-24 04:40:31 -------- d-----w- C:\Windows\PCHEALTH
2011-12-24 04:36:22 -------- d-----w- C:\Users\R34P3R\AppData\Local\Windows Live
2011-12-24 04:36:20 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
2011-12-24 04:32:05 34288 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
2011-12-24 04:32:03 174200 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS
2011-12-24 04:32:03 -------- d-----w- C:\Program Files\Symantec
2011-12-24 04:32:03 -------- d-----w- C:\Program Files\Common Files\Symantec Shared
2011-12-24 04:31:51 125872 ----a-w- C:\Windows\System32\GEARAspi64.dll
2011-12-24 04:31:51 106928 ----a-w- C:\Windows\SysWow64\GEARAspi.dll
2011-12-24 04:31:46 -------- d-----w- C:\Windows\System32\drivers\N360x64
2011-12-24 04:31:45 -------- d-----w- C:\Program Files (x86)\Norton Security Suite
2011-12-24 04:31:35 -------- d-----w- C:\ProgramData\NortonInstaller
2011-12-24 04:31:35 -------- d-----w- C:\Program Files (x86)\NortonInstaller
2011-12-24 04:25:14 -------- d-----w- C:\ProgramData\Norton
2011-12-24 04:09:39 524200 ----a-w- C:\Windows\System32\ASProxy64.dll
2011-12-24 04:09:35 371624 ----a-w- C:\Windows\SysWow64\ASProxy.dll
2011-12-24 04:08:27 30720 ----a-w- C:\Windows\System32\drivers\tap0901.sys
2011-12-24 02:05:12 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-12-24 01:45:54 -------- d-----w- C:\Program Files (x86)\VideoLAN
2011-12-23 23:45:18 -------- d-----w- C:\Windows\Panther
2011-12-23 23:44:43 -------- d-----w- C:\Windows\SysWow64\Wat
2011-12-23 23:44:43 -------- d-----w- C:\Windows\System32\Wat
2011-12-23 22:32:32 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe
2011-12-23 22:32:32 31232 ----a-w- C:\Windows\System32\prevhost.exe
2011-12-23 22:30:59 288768 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
2011-12-23 22:29:54 723456 ----a-w- C:\Windows\System32\EncDec.dll
2011-12-23 22:29:54 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2011-12-23 22:22:58 5561216 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-12-23 22:22:56 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-12-23 22:22:55 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-12-23 22:17:05 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8588C424-94AD-45A4-9307-21DF2B645DEE}\mpengine.dll
2011-12-23 22:17:04 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-12-23 21:59:19 0 ----a-w- C:\Windows\ativpsrm.bin
2011-12-23 21:55:16 -------- d-----w- C:\Users\R34P3R\AppData\Local\VirtualStore
.
==================== Find3M ====================
.
2011-12-26 05:01:17 175616 ----a-w- C:\Windows\System32\msclmd.dll
2011-12-26 05:01:17 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2011-11-24 04:52:09 3145216 ----a-w- C:\Windows\System32\win32k.sys
2011-11-05 05:32:50 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-11-05 04:26:03 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-10-26 05:21:20 43520 ----a-w- C:\Windows\System32\csrsrv.dll
.
============= FINISH: 11:04:51.43 ===============
I am attaching the attach.txt file only ziped because I did not run the other application due to my 64 bit platform. Also, I do have access to a windows 7 64 bit disc (real for MS) PRE SP 1.
I am requesting any and all assistance you're able to offer in improving my machine to allow me to maintain working from home to my employers satisfaction for performance and privacy.
tks
Wess0824
**this posted was edited for missing attached txt file**
Today my trouble is the Internet connection running very inconsistent and browsers giving drastically different performance. I run all web internet accessable programs through a VPN service which I rent a Private Ip. My IP is not from a pool of previously used IP I am the one and only owner. This was told to as part of the security pitch and it is what I have paid for.
At present my system is all over the place with performance in general errors that come on then go off. Other like drivers not installed please install unable to download check your connection. I have a windows 7 64 bit Hp DV7 laptop AMD quad core which I think is fantastic other than being two years old. Google chrome and firefox are running drastically different. firefox is slow but connects to pages much faster in JAVA based instances. Chrome is over all much faster on sites not Java intensive. But when it comes to Java sites takes over 5 minutes at times to load.
I have looked into how much bloatware I have added on to firefox and have kept it to a minimum just for sercurity add ons not even themes are present. Not sure whatsoever to tell you about my Machines performance just that is causing me a lots of anguish and punishment from the God's
Please see log from DDS below:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
Run by R34P3R at 11:01:11 on 2012-01-06
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5883.4117 [GMT -6:00]
.
AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files (x86)\Astrill\astrill.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Astrill\ASOvpnSvc.exe
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Users\R34P3R\AppData\Local\TempImages\CheckVer104.exe
C:\Users\R34P3R\AppData\Local\TempImages\regver.exe
C:\Windows\System32\vds.exe
C:\Program Files (x86)\Astrill\openvpn.exe
C:\Windows\SysWOW64\ping.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit=userinit.exe
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\IPS\IPSBHO.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [Astrill] "C:\Program Files (x86)\Astrill\astrill.exe" /autostart
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
LSP: C:\Windows\system32\ASProxy.dll
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect118.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
TCP: DhcpNameServer = 5.5.0.1
TCP: Interfaces\{61CC1218-0DD6-48BB-8A4F-220B459F2008} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{61CC1218-0DD6-48BB-8A4F-220B459F2008}\D4F4A5946363 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{7CD7804F-61C3-470A-9165-9D50E166BC63} : NameServer = 8.8.8.8,8.8.4.4
TCP: Interfaces\{7CD7804F-61C3-470A-9165-9D50E166BC63} : DhcpNameServer = 5.5.0.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
BHO-X64: Symantec NCO BHO - No File
BHO-X64: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\IPS\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\R34P3R\AppData\Roaming\Mozilla\Firefox\Profiles\h1bcbqik.default\
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
---- FIREFOX POLICIES ----
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.cache.memory.capacity - 65536
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\N360x64\0501000.01D\SYMDS64.SYS --> C:\Windows\system32\drivers\N360x64\0501000.01D\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\N360x64\0501000.01D\SYMEFA64.SYS --> C:\Windows\system32\drivers\N360x64\0501000.01D\SYMEFA64.SYS [?]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20111221.003\BHDrvx64.sys [2011-12-21 1156216]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120105.001\IDSviA64.sys [2012-1-5 488568]
R1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\N360x64\0501000.01D\Ironx64.SYS --> C:\Windows\system32\drivers\N360x64\0501000.01D\Ironx64.SYS [?]
R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\system32\Drivers\N360x64\0501000.01D\SYMNETS.SYS --> C:\Windows\system32\Drivers\N360x64\0501000.01D\SYMNETS.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-12-24 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe --> C:\Windows\system32\Hpservice.exe [?]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-28 652872]
R2 N360;Norton Security Suite;C:\Program Files (x86)\Norton Security Suite\Engine\5.1.0.29\ccsvchst.exe [2011-12-24 130008]
R2 vcsFPService;Validity VCS Fingerprint Service;C:\Windows\System32\vcsFPService.exe [2010-2-23 1799472]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 ASOVPNHelper;Astrill OpenVPN Service;C:\Program Files (x86)\Astrill\ASOvpnSvc.exe [2011-12-28 434928]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-12-23 138360]
R3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2012-1-6 8456]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-24 136176]
S3 ASProxy;ASProxy;C:\Program Files (x86)\Astrill\ASProxy.exe [2011-12-28 1928616]
S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2012-1-6 14216]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-12-24 136176]
S3 Revoflt;Revoflt;C:\Windows\system32\DRIVERS\revoflt.sys --> C:\Windows\system32\DRIVERS\revoflt.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2012-01-06 13:32:55 9096 ----a-w- C:\Windows\System32\EuGdiDrv.sys
2012-01-06 13:32:55 86408 ----a-w- C:\Windows\SysWow64\setupempdrv03.exe
2012-01-06 13:32:55 8456 ----a-w- C:\Windows\SysWow64\EuGdiDrv.sys
2012-01-06 13:32:55 3321728 ----a-w- C:\Windows\System32\BootMan.exe
2012-01-06 13:32:55 2469760 ----a-w- C:\Windows\SysWow64\BootMan.exe
2012-01-06 13:32:55 19840 ----a-w- C:\Windows\SysWow64\EuEpmGdi.dll
2012-01-06 13:32:55 16776 ----a-w- C:\Windows\System32\epmntdrv.sys
2012-01-06 13:32:55 16256 ----a-w- C:\Windows\System32\EuEpmGdi.dll
2012-01-06 13:32:55 14216 ----a-w- C:\Windows\SysWow64\epmntdrv.sys
2012-01-06 13:32:55 100232 ----a-w- C:\Windows\System32\setupempdrvx64.exe
2012-01-06 13:32:48 -------- d-----w- C:\Program Files (x86)\EASEUS
2012-01-06 06:14:53 -------- d-----r- C:\Program Files (x86)\Skype
2012-01-05 21:50:07 -------- d-----w- C:\Users\R34P3R\AppData\Local\{E2025299-86E6-45D9-9A46-5055052080C5}
2012-01-05 21:49:45 -------- d-----w- C:\Users\R34P3R\AppData\Local\{D7F78A5D-0471-48CC-B6AC-B15FFFE16FF7}
2012-01-05 09:49:32 -------- d-----w- C:\Users\R34P3R\AppData\Local\{9A1EA5AB-23A7-49A6-A197-FE1C4080A2DA}
2012-01-05 09:49:10 -------- d-----w- C:\Users\R34P3R\AppData\Local\{1E6E7349-894B-4E66-BA3D-CBDAA1730593}
2012-01-04 21:48:57 -------- d-----w- C:\Users\R34P3R\AppData\Local\{49C13C29-F78F-4FE6-8E9C-28158C4AA473}
2012-01-04 21:48:35 -------- d-----w- C:\Users\R34P3R\AppData\Local\{7536C3E3-6485-4E4E-A8D9-43F68D083C8D}
2012-01-04 19:22:44 -------- d-----w- C:\Users\R34P3R\AppData\Local\VS Revo Group
2012-01-04 19:22:41 31800 ----a-w- C:\Windows\System32\drivers\revoflt.sys
2012-01-04 19:22:39 -------- d-----w- C:\Program Files\VS Revo Group
2012-01-04 19:03:35 -------- d-----w- C:\Users\R34P3R\AppData\Local\Fast_Crawler
2012-01-04 19:03:30 -------- d-----w- C:\Users\R34P3R\AppData\Local\TempImages
2012-01-04 19:00:39 209608 ------w- C:\Windows\SysWow64\TABCTL32.OCX
2012-01-04 19:00:39 124688 ------w- C:\Windows\SysWow64\Mswinsck.ocx
2012-01-04 19:00:39 1081616 ------w- C:\Windows\SysWow64\mscomctl.ocx
2012-01-04 19:00:39 101888 ------w- C:\Windows\SysWow64\VB6STKIT.DLL
2012-01-04 19:00:39 -------- d-----w- C:\Program Files (x86)\Northworks Solutions Ltd
2012-01-04 09:48:09 -------- d-----w- C:\Users\R34P3R\AppData\Local\{0DB1E778-A5E0-4F6E-97B4-E9B3FA264FCD}
2012-01-04 09:47:58 -------- d-----w- C:\Users\R34P3R\AppData\Local\{D5A5B358-0B3E-4873-814A-FFAC46F49AB0}
2012-01-04 05:10:17 -------- d-----w- C:\Users\R34P3R\AppData\Local\CrashDumps
2012-01-04 04:54:55 -------- d-----w- C:\temp
2012-01-04 04:54:21 -------- d-----w- C:\Users\R34P3R\.yawcam
2012-01-04 04:54:06 -------- d-----w- C:\Program Files (x86)\Yawcam
2012-01-04 03:37:09 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-01-03 21:43:53 -------- d-----w- C:\Users\R34P3R\AppData\Local\{285FB93C-A79B-4228-A52E-1C7118F76BEE}
2012-01-03 21:43:30 -------- d-----w- C:\Users\R34P3R\AppData\Local\{8FDE78CE-7F51-4CD5-99EE-4ECACAACED87}
2012-01-02 11:32:51 -------- d-----w- C:\Users\R34P3R\AppData\Local\{A1226570-82CD-4553-BF56-5D854D2AA2B1}
2012-01-02 11:32:27 -------- d-----w- C:\Users\R34P3R\AppData\Local\{394A8041-2220-4867-8908-BB61FF1581C0}
2012-01-02 03:12:49 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\HandBrake
2012-01-02 03:12:49 -------- d-----w- C:\Users\R34P3R\AppData\Local\HandBrake
2012-01-02 03:12:36 -------- d-----w- C:\Program Files (x86)\Handbrake
2012-01-01 23:32:01 -------- d-----w- C:\Users\R34P3R\AppData\Local\{3D5F6512-D6AE-4B1F-B254-1BF68219D51A}
2012-01-01 23:31:39 -------- d-----w- C:\Users\R34P3R\AppData\Local\{1B2F51E2-2F86-4D2A-A87C-7F64BBFD6758}
2012-01-01 11:31:26 -------- d-----w- C:\Users\R34P3R\AppData\Local\{E318772F-A83D-4688-9ADB-6458D92B4928}
2012-01-01 11:31:03 -------- d-----w- C:\Users\R34P3R\AppData\Local\{4EBB443F-708B-4AF3-BEC5-0A4E29AD9ADB}
2011-12-31 04:58:26 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Foxit Software
2011-12-31 04:57:23 -------- d-----w- C:\Program Files (x86)\Foxit Software
2011-12-31 04:44:43 -------- d-----w- C:\Users\R34P3R\AppData\Local\{070BF7C5-1200-4A5A-8F58-7EF02AA57438}
2011-12-31 04:44:19 -------- d-----w- C:\Users\R34P3R\AppData\Local\{7DEC5B93-D709-4BDA-AEB5-D722F2DB21C1}
2011-12-30 16:43:54 -------- d-----w- C:\Users\R34P3R\AppData\Local\{BFB40209-0F39-4C30-8631-0B0EF6377CFF}
2011-12-30 16:43:31 -------- d-----w- C:\Users\R34P3R\AppData\Local\{8383AE77-72C7-4DE5-A157-3A0E55FB6971}
2011-12-29 23:35:52 -------- d-----w- C:\Users\R34P3R\AppData\Local\{615D0AC9-29CC-497C-A633-89FB5F72A8E2}
2011-12-29 23:35:40 -------- d-----w- C:\Users\R34P3R\AppData\Local\{9B0CBAE9-3F4E-4C44-9C6D-E24C6E1E60F6}
2011-12-29 02:17:58 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Astrill
2011-12-29 02:17:36 -------- d-----w- C:\Program Files (x86)\Astrill
2011-12-29 01:48:32 -------- d-----w- C:\Program Files (x86)\OpenVPN
2011-12-28 23:40:41 -------- d-----w- C:\Users\R34P3R\AppData\Local\{0F291FE5-1FF7-4744-9135-548F22556252}
2011-12-28 23:40:19 -------- d-----w- C:\Users\R34P3R\AppData\Local\{29D0AE12-C7FF-4A58-AF10-5AAEF43D1C4C}
2011-12-28 18:26:21 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\foobar2000
2011-12-28 18:26:08 -------- d-----w- C:\Program Files (x86)\foobar2000
2011-12-28 09:51:04 -------- d-----w- C:\Users\R34P3R\AppData\Local\{E1872180-CD45-4F57-873F-C3FE6AA81561}
2011-12-28 09:50:41 -------- d-----w- C:\Users\R34P3R\AppData\Local\{6C684AC2-9754-4015-B7C7-F39FE9B1E04D}
2011-12-28 06:30:05 -------- d-----w- C:\Users\R34P3R\AppData\Local\QuickPar
2011-12-28 06:28:44 -------- d-----w- C:\Program Files (x86)\QuickPar
2011-12-27 23:04:35 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\SingularLabs
2011-12-27 23:03:17 -------- d-----w- C:\Program Files (x86)\System Ninja
2011-12-27 20:30:47 -------- d-----w- C:\Users\R34P3R\AppData\Local\{EE999611-071B-46D4-AA1A-0649FB479FC4}
2011-12-27 20:30:25 -------- d-----w- C:\Users\R34P3R\AppData\Local\{7E8B22DC-FB9B-42B1-8157-9687EF7A29A9}
2011-12-27 20:30:25 -------- d-----w- C:\Users\R34P3R\AppData\Local\{56E89108-0B5A-4223-854C-D10BF623F550}
2011-12-27 05:43:13 -------- d-----w- C:\Users\R34P3R\AppData\Local\Diagnostics
2011-12-27 05:17:21 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\IrfanView
2011-12-27 05:17:21 -------- d-----w- C:\Program Files (x86)\IrfanView
2011-12-26 14:27:12 -------- d-----w- C:\Users\R34P3R\AppData\Local\{959C92C3-C584-4A92-806F-8ADC73D0DFB5}
2011-12-26 14:26:49 -------- d-----w- C:\Users\R34P3R\AppData\Local\{B7ABDC3C-92D3-4CBC-9149-56F9DE1F89AC}
2011-12-26 05:31:43 902656 ----a-w- C:\Windows\System32\d2d1.dll
2011-12-26 05:31:43 1139200 ----a-w- C:\Windows\System32\FntCache.dll
2011-12-26 05:31:43 1076736 ----a-w- C:\Windows\SysWow64\DWrite.dll
2011-12-26 05:31:42 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll
2011-12-26 05:31:42 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2011-12-26 04:53:23 -------- d-----w- C:\Windows\System32\SPReview
2011-12-26 04:52:33 -------- d-----w- C:\Windows\System32\EventProviders
2011-12-25 23:37:05 -------- d-----w- C:\Users\R34P3R\AppData\Local\{31E1E44F-7B10-48E0-AD1F-1F0C58A57A12}
2011-12-25 23:36:42 -------- d-----w- C:\Users\R34P3R\AppData\Local\{917C0879-302F-4C8C-9531-650A356744A2}
2011-12-25 03:48:23 -------- d-----w- C:\Program Files\Validity Sensors
2011-12-25 03:46:36 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2011-12-25 03:46:32 -------- d-----w- C:\Program Files (x86)\Realtek
2011-12-25 02:50:09 90624 ----a-w- C:\Windows\System32\AESTCo64.dll
2011-12-25 02:50:09 68608 ----a-w- C:\Windows\System32\AESTAR64.dll
2011-12-25 02:50:09 442368 ----a-w- C:\Windows\System32\AESTEC64.dll
2011-12-25 02:50:09 220672 ----a-w- C:\Windows\System32\HPToneCtrls64.dll
2011-12-25 02:50:09 162304 ----a-w- C:\Windows\System32\AESTAC64.dll
2011-12-25 02:50:08 487424 ----a-w- C:\Windows\sttray64.exe
2011-12-25 02:50:08 1952256 ----a-w- C:\Windows\System32\stlang64.dll
2011-12-25 02:50:08 12829184 ----a-w- C:\Windows\System32\idtcpl64.cpl
2011-12-25 02:50:07 -------- d-----w- C:\Windows\System32\SRSLabs
2011-12-25 02:49:31 209920 ----a-w- C:\Windows\System32\staco64.dll
2011-12-25 02:49:30 646656 ------w- C:\Windows\System32\stapi64.dll
2011-12-25 02:49:30 515584 ----a-w- C:\Windows\System32\drivers\stwrt64.sys
2011-12-25 02:49:30 431616 ----a-w- C:\Windows\System32\stcplx64.dll
2011-12-25 02:49:30 1466880 ----a-w- C:\Windows\System32\stapo64.dll
2011-12-25 02:49:27 -------- d-----w- C:\Program Files\IDT
2011-12-25 02:48:10 -------- d-----w- C:\Program Files\Synaptics
2011-12-25 02:44:41 -------- d-----w- C:\Users\R34P3R\AppData\Local\ATI
2011-12-25 02:42:14 38456 ----a-w- C:\Windows\System32\drivers\usbfilter.sys
2011-12-25 02:42:14 -------- d-----w- C:\Program Files (x86)\AMD
2011-12-25 02:40:09 -------- d-----w- C:\Program Files (x86)\ATI Technologies
2011-12-25 02:39:46 -------- d-----w- C:\Program Files\ATI Technologies
2011-12-25 02:39:41 -------- d-----w- C:\Program Files\ATI
2011-12-25 02:39:17 -------- d-----w- C:\swsetup
2011-12-25 02:23:41 -------- d-----w- C:\Program Files (x86)\HP
2011-12-24 22:40:58 -------- d-----w- C:\Users\R34P3R\AppData\Local\{A0115C89-4BC9-4618-B947-59844FAD791B}
2011-12-24 22:40:46 -------- d-----w- C:\Users\R34P3R\AppData\Local\{F4E0B5A3-E358-47D8-97D3-5FDD64BE3854}
2011-12-24 09:34:12 912504 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\symefa64.sys
2011-12-24 09:34:12 744568 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\srtsp64.sys
2011-12-24 09:34:12 450680 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\symds64.sys
2011-12-24 09:34:12 40568 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\srtspx64.sys
2011-12-24 09:34:12 386168 ----a-w- C:\Windows\System32\drivers\N360x64\0501000.01D\symnets.sys
2011-12-24 09:34:12 171128 ----a-r- C:\Windows\System32\drivers\N360x64\0501000.01D\ironx64.sys
2011-12-24 09:33:51 -------- d-----w- C:\Windows\System32\drivers\N360x64\0501000.01D
2011-12-24 07:45:56 -------- d-----w- C:\Program Files\CCleaner
2011-12-24 07:44:39 -------- d-----w- C:\Users\R34P3R\AppData\Local\Google
2011-12-24 07:37:32 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Malwarebytes
2011-12-24 07:37:17 -------- d-----w- C:\ProgramData\Malwarebytes
2011-12-24 07:37:13 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-12-24 07:37:13 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-24 07:27:26 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
2011-12-24 07:10:22 -------- d-----w- C:\Users\R34P3R\AppData\Local\Newshosting
2011-12-24 07:10:19 -------- d-----w- C:\Users\R34P3R\AppData\Local\CrashRpt
2011-12-24 07:09:42 -------- d-----w- C:\ProgramData\Caphyon
2011-12-24 07:09:36 -------- d-----w- C:\Program Files\Newshosting
2011-12-24 07:08:08 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Newshosting
2011-12-24 05:20:59 3860992 ----a-w- C:\Windows\System32\UIRibbon.dll
2011-12-24 05:19:59 90112 ----a-w- C:\Windows\System32\nci.dll
2011-12-24 05:18:57 189952 ----a-w- C:\Windows\SysWow64\sqmapi.dll
2011-12-24 05:18:51 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll
2011-12-24 05:18:51 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll
2011-12-24 05:18:51 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll
2011-12-24 05:16:39 529408 ----a-w- C:\Windows\System32\wbemcomn.dll
2011-12-24 05:16:39 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll
2011-12-24 05:16:31 244736 ----a-w- C:\Windows\System32\sqmapi.dll
2011-12-24 04:45:57 -------- d-----w- C:\Users\R34P3R\AppData\Local\{081A8F2E-4EDD-4027-8095-C8C579337D09}
2011-12-24 04:45:44 -------- d-----w- C:\Users\R34P3R\AppData\Local\{A84B9CC7-C1FD-4F92-8BCD-C4120D42B463}
2011-12-24 04:45:32 -------- d-----w- C:\Users\R34P3R\AppData\Roaming\Windows Live Writer
2011-12-24 04:45:32 -------- d-----w- C:\Users\R34P3R\AppData\Local\Windows Live Writer
2011-12-24 04:45:00 -------- d-----w- C:\Users\R34P3R\Tracing
2011-12-24 04:40:31 -------- d-----w- C:\Windows\PCHEALTH
2011-12-24 04:36:22 -------- d-----w- C:\Users\R34P3R\AppData\Local\Windows Live
2011-12-24 04:36:20 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
2011-12-24 04:32:05 34288 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
2011-12-24 04:32:03 174200 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS
2011-12-24 04:32:03 -------- d-----w- C:\Program Files\Symantec
2011-12-24 04:32:03 -------- d-----w- C:\Program Files\Common Files\Symantec Shared
2011-12-24 04:31:51 125872 ----a-w- C:\Windows\System32\GEARAspi64.dll
2011-12-24 04:31:51 106928 ----a-w- C:\Windows\SysWow64\GEARAspi.dll
2011-12-24 04:31:46 -------- d-----w- C:\Windows\System32\drivers\N360x64
2011-12-24 04:31:45 -------- d-----w- C:\Program Files (x86)\Norton Security Suite
2011-12-24 04:31:35 -------- d-----w- C:\ProgramData\NortonInstaller
2011-12-24 04:31:35 -------- d-----w- C:\Program Files (x86)\NortonInstaller
2011-12-24 04:25:14 -------- d-----w- C:\ProgramData\Norton
2011-12-24 04:09:39 524200 ----a-w- C:\Windows\System32\ASProxy64.dll
2011-12-24 04:09:35 371624 ----a-w- C:\Windows\SysWow64\ASProxy.dll
2011-12-24 04:08:27 30720 ----a-w- C:\Windows\System32\drivers\tap0901.sys
2011-12-24 02:05:12 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-12-24 01:45:54 -------- d-----w- C:\Program Files (x86)\VideoLAN
2011-12-23 23:45:18 -------- d-----w- C:\Windows\Panther
2011-12-23 23:44:43 -------- d-----w- C:\Windows\SysWow64\Wat
2011-12-23 23:44:43 -------- d-----w- C:\Windows\System32\Wat
2011-12-23 22:32:32 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe
2011-12-23 22:32:32 31232 ----a-w- C:\Windows\System32\prevhost.exe
2011-12-23 22:30:59 288768 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
2011-12-23 22:29:54 723456 ----a-w- C:\Windows\System32\EncDec.dll
2011-12-23 22:29:54 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2011-12-23 22:22:58 5561216 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-12-23 22:22:56 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-12-23 22:22:55 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-12-23 22:17:05 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8588C424-94AD-45A4-9307-21DF2B645DEE}\mpengine.dll
2011-12-23 22:17:04 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-12-23 21:59:19 0 ----a-w- C:\Windows\ativpsrm.bin
2011-12-23 21:55:16 -------- d-----w- C:\Users\R34P3R\AppData\Local\VirtualStore
.
==================== Find3M ====================
.
2011-12-26 05:01:17 175616 ----a-w- C:\Windows\System32\msclmd.dll
2011-12-26 05:01:17 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2011-11-24 04:52:09 3145216 ----a-w- C:\Windows\System32\win32k.sys
2011-11-05 05:32:50 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-11-05 04:26:03 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-10-26 05:21:20 43520 ----a-w- C:\Windows\System32\csrsrv.dll
.
============= FINISH: 11:04:51.43 ===============
I am attaching the attach.txt file only ziped because I did not run the other application due to my 64 bit platform. Also, I do have access to a windows 7 64 bit disc (real for MS) PRE SP 1.
I am requesting any and all assistance you're able to offer in improving my machine to allow me to maintain working from home to my employers satisfaction for performance and privacy.
tks
Wess0824
**this posted was edited for missing attached txt file**
