What You Need to Know About System Surveillance Pro 6.8.0.14

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-01-2014 01Ran by Richard Chen Temp Lo (administrator) on DURRUTI on 29-01-2014 19:36:04Running from C:\Users\Richard\DesktopWindows 8 (X64) OS Language: English(US)Internet Explorer Version 10Boot Mode: NormalThe only official download link for FRST:Download link for 32-Bit version: -recovery-scan-tool/dl/81/Download link for 64-Bit Version: -recovery-scan-tool/dl/82/Download link from any site other than Bleeping Computer is unpermitted or outdated.See tutorial for FRST: -frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Microsoft Corporation) C:\Windows\System32\dasHost.exe(Intel Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe(Intel Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Management Engine Components\DAL\Jhi_service.exe(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe(Intel Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe() C:\Program Files\CyberLink\Shared files\RichVideo64.exe(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe(Intel Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\Teco\TecoService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Management Engine Components\FWService\IntelMeFWService.exe(Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Management Engine Components\LMS\LMS.exe(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\SymcPCCULaunchSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Management Engine Components\UNS\UNS.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Integrated Clock Controller Service\ICCProxy.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TPCHSrv.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Service Station\TMachInfo.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\Hotkey\TCrdMain_Win8.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\Teco\TecoResident.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\TPHM\TPCHWMsg.exe(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe() C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe(Intel Corporation) C:\Windows\System32\igfxsrvc.exe(Intel Corporation) C:\Windows\System32\igfxtray.exe(Intel Corporation) C:\Windows\System32\hkcmd.exe(Intel Corporation) C:\Windows\System32\igfxpers.exe(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe(TOSHIBA Corporation) C:\Program Files\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe==================== Registry (Whitelisted) ==================HKLM\...\Run: [] - [x]HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)HKLM\...\Run: [SRS Premium Sound 3D] - C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2170784 2012-08-19] (SRS Labs, Inc.)HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2608040 2012-08-13] (TOSHIBA Corporation)HKLM\...\Run: [TecoResident] - C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-13] (TOSHIBA Corporation)HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA Corporation)HKLM\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\System Setting\TSleepSrv.exe [1548952 2012-08-04] (TOSHIBA Corporation)HKLM\...\Run: [TODDMain] - C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] ()HKLM\...\Run: [ThpSrv] - C:\windows\system32\thpsrv /logonHKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-27] ()HKCU\...\Run: [NETGEARGenie] - C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe [1041736 2012-10-16] ()HKCU\...\Run: [GarenaPlus] - "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunchHKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1815464 2014-01-07] (Valve Corporation)HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)MountPoints2: 3228f149-4afc-11e3-be9e-00266c2ef4de - "F:\TL_Bootstrap.exe"MountPoints2: fefeaaa2-5ce2-11e2-be7c-00266c2ef4de - "G:\iStudio.exe"AppInit_DLLs: C:\windows\Jaksta\AC\x64\jaudcap.dll => C:\windows\Jaksta\AC\x64\jaudcap.dll [311584 2013-12-20] (Jaksta Technologies Pty Ltd)AppInit_DLLs-x32: C:\windows\Jaksta\AC\x86\jaudcap.dll => C:\windows\Jaksta\AC\x86\jaudcap.dll [264480 2013-12-20] (Jaksta Technologies Pty Ltd)Startup: C:\Users\Richard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnkShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()==================== Internet (Whitelisted) ====================HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKLM - DefaultScope 8747579D-2F3F-4B16-B0BA-042FB09E7551 URL = =searchTerms&form=IE10TR&src=IE10TR&pc=MATBJSSearchScopes: HKLM - 8747579D-2F3F-4B16-B0BA-042FB09E7551 URL = =searchTerms&form=IE10TR&src=IE10TR&pc=MATBJSSearchScopes: HKLM-x32 - 8747579D-2F3F-4B16-B0BA-042FB09E7551 URL = =searchTerms&form=IE10TR&src=IE10TR&pc=MATBJSSearchScopes: HKCU - DefaultScope 8747579D-2F3F-4B16-B0BA-042FB09E7551 URL =SearchScopes: HKCU - 8747579D-2F3F-4B16-B0BA-042FB09E7551 URL =BHO: Java™ Plug-In SSV Helper - 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO: Java™ Plug-In 2 SSV Helper - DBC80044-A445-435b-BC74-9C25C1C588A9 - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)BHO-x32: Java™ Plug-In SSV Helper - 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)BHO-x32: Java™ Plug-In 2 SSV Helper - DBC80044-A445-435b-BC74-9C25C1C588A9 - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)Tcpip\Parameters: [DhcpNameServer] 192.168.1.1FireFox:========FF ProfilePath: C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.defaultFF DefaultSearchEngine: DuckDuckGoFF Homepage: www.google.comFF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Richard\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)FF SearchPlugin: C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\searchplugins\duckduckgo.xmlFF Extension: EPUBReader - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\5384767E-00D9-40E9-B72F-9CC39D655D6F [2013-12-03]FF Extension: DownloadHelper - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\b9db16a4-6edc-47ec-a1f4-b86292ed211d [2013-08-27]FF Extension: Firebug - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\firebug@software.joehewitt.com.xpi [2013-08-18]FF Extension: DuckDuckGo Plus - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2013-07-11]FF Extension: Advertising Cookie Opt-out - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\optout@google.com.xpi [2013-09-20]FF Extension: Adblock Plus - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d.xpi [2013-12-07]FF Extension: BetterPrivacy - C:\Users\Richard\AppData\Roaming\Mozilla\Firefox\Profiles\0m6z1vxe.default\Extensions\d40f5e7b-d2cf-4856-b441-cc613eeffbe3.xpi [2013-12-29]==================== Services (Whitelisted) =================U2 Intel ME Service; C:\Program Files (x86)\Intel\Intel Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)U2 jhi_service; C:\Program Files (x86)\Intel\Intel Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)U3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-11-20] ()U2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [231752 2012-09-24] (NETGEAR)U2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\SymcPCCULaunchSvc.exe [123320 2012-07-23] (Symantec Corporation)U2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.15\ccSvcHst.exe [126392 2012-07-23] (Symantec Corporation)U2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-09-11] ()U3 wampapache; c:\wamp\bin\apache\apache2.4.4\bin\httpd.exe [24576 2013-06-23] (Apache Software Foundation)U3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.12\bin\mysqld.exe [12867584 2013-06-23] ()U2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation)U2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2013-11-20] (Intel Corporation)==================== Drivers (Whitelisted) ====================U3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3346912 2013-10-31] (Intel Corporation)U3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2011-02-11] (CACE Technologies, Inc.)U3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-03] (Realtek Semiconductor Corp.)U3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)U3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [28632 2012-07-31] (Windows Win 7 DDK provider)U3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-09] (Windows Win 7 DDK provider)U3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows Win 7 DDK provider)U3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [x]==================== NetSvcs (Whitelisted) ======================================= One Month Created Files and Folders ========2014-01-29 19:36 - 2014-01-29 19:36 - 00014932 _____ C:\Users\Richard\Desktop\FRST.txt2014-01-29 19:35 - 2014-01-29 19:36 - 00000000 ____D C:\FRST2014-01-29 19:35 - 2014-01-29 19:35 - 02079744 _____ (Farbar) C:\Users\Richard\Desktop\FRST64.exe2014-01-17 12:15 - 2013-12-06 22:37 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll2014-01-17 12:15 - 2013-12-06 22:37 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll2014-01-17 12:15 - 2013-12-06 21:15 - 00562688 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll2014-01-17 12:15 - 2013-12-06 21:15 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll2014-01-16 21:46 - 2013-10-30 21:56 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\MPSSVC.dll2014-01-16 21:46 - 2013-10-30 21:56 - 00758784 _____ (Microsoft Corporation) C:\windows\system32\FirewallAPI.dll2014-01-16 21:46 - 2013-10-30 20:01 - 00550400 _____ (Microsoft Corporation) C:\windows\SysWOW64\FirewallAPI.dll2014-01-16 21:46 - 2013-10-30 19:42 - 00074752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mpsdrv.sys2014-01-16 21:46 - 2013-10-27 21:50 - 00588288 _____ (Microsoft Corporation) C:\windows\system32\SHCore.dll2014-01-16 21:46 - 2013-10-27 20:05 - 00452608 _____ (Microsoft Corporation) C:\windows\SysWOW64\SHCore.dll2014-01-16 21:46 - 2013-10-13 12:49 - 00100696 _____ (Microsoft Corporation) C:\windows\system32\Drivers\disk.sys2014-01-16 21:46 - 2013-08-26 21:21 - 00227840 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll2014-01-16 21:46 - 2013-08-26 21:19 - 00104448 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll2014-01-16 21:46 - 2013-08-26 14:29 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll2014-01-16 21:46 - 2013-08-26 14:28 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll2014-01-14 00:47 - 2014-01-14 00:47 - 00016827 _____ C:\Users\Richard\Desktop\dds.txt2014-01-14 00:47 - 2014-01-14 00:47 - 00006104 _____ C:\Users\Richard\Desktop\attach.txt2014-01-14 00:45 - 2014-01-14 00:45 - 00688992 ____R (Swearware) C:\Users\Richard\Desktop\dds.com2014-01-07 00:45 - 2014-01-07 00:45 - 00000000 ____D C:\ProgramData\Oracle2014-01-07 00:45 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll2014-01-07 00:45 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe2014-01-07 00:45 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe2014-01-07 00:45 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe2014-01-07 00:44 - 2014-01-07 00:45 - 00005521 _____ C:\windows\SysWOW64\jupdate-1.7.0_45-b18.log2014-01-07 00:43 - 2014-01-07 00:43 - 00915368 _____ (Oracle Corporation) C:\Users\Richard\Desktop\jxpiinstall.exe2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\Users\Richard\AppData\Roaming\SomePDF2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\Program Files (x86)\SomePDF2013-12-30 01:00 - 2013-12-30 01:00 - 00000000 ____D C:\Users\Richard\AppData\Local\Days of Wonder==================== One Month Modified Files and Folders =======2014-01-29 19:36 - 2014-01-29 19:36 - 00014932 _____ C:\Users\Richard\Desktop\FRST.txt2014-01-29 19:36 - 2014-01-29 19:35 - 00000000 ____D C:\FRST2014-01-29 19:35 - 2014-01-29 19:35 - 02079744 _____ (Farbar) C:\Users\Richard\Desktop\FRST64.exe2014-01-29 19:34 - 2012-12-26 22:16 - 01861941 _____ C:\windows\WindowsUpdate.log2014-01-29 19:34 - 2012-07-26 00:12 - 00000000 ____D C:\windows\system32\sru2014-01-29 19:33 - 2013-12-29 12:34 - 00000000 ___RD C:\Users\Richard\Google Drive2014-01-29 19:33 - 2013-12-29 12:33 - 00000938 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job2014-01-29 09:14 - 2012-12-27 00:10 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job2014-01-29 09:13 - 2012-12-26 23:17 - 00000000 ____D C:\Users\Richard\AppData\Local\CrashDumps2014-01-29 08:48 - 2013-12-29 12:33 - 00000942 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job2014-01-29 08:40 - 2012-12-26 22:26 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3829054314-2939892797-2231541473-10012014-01-29 08:40 - 2012-07-25 23:28 - 00848230 _____ C:\windows\system32\PerfStringBackup.INI2014-01-29 08:35 - 2012-07-26 00:12 - 00000000 ____D C:\windows\AUInstallAgent2014-01-28 22:51 - 2013-08-09 21:16 - 00000000 ____D C:\Users\Richard\AppData\Local\Paint.NET2014-01-28 20:18 - 2012-07-25 23:22 - 00000006 ____H C:\windows\Tasks\SA.DAT2014-01-28 20:17 - 2012-07-25 21:26 - 00524288 ___SH C:\windows\system32\config\BBI2014-01-27 12:11 - 2012-07-26 00:12 - 00000000 ____D C:\windows\rescache2014-01-26 22:50 - 2012-12-27 00:07 - 00000000 ____D C:\Users\Richard\AppData\Local\PMB Files2014-01-26 22:50 - 2012-12-27 00:07 - 00000000 ____D C:\ProgramData\PMB Files2014-01-24 20:21 - 2013-01-16 21:16 - 00000000 ____D C:\Users\Richard\SkyDrive\My Documents\IBT2014-01-23 08:48 - 2013-01-16 21:16 - 00000000 ____D C:\Users\Richard\SkyDrive\My Documents\Larkspur2014-01-21 00:24 - 2013-01-16 15:51 - 00000000 ____D C:\Users\Richard\AppData\Roaming\vlc2014-01-20 21:20 - 2012-07-26 00:12 - 00000000 ____D C:\windows\system32\NDF2014-01-20 21:16 - 2012-07-26 00:12 - 00000000 ____D C:\windows\WinStore2014-01-19 23:46 - 2013-02-16 23:38 - 00000000 ____D C:\Program Files (x86)\Steam2014-01-18 23:33 - 2013-02-09 00:00 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe2014-01-18 09:18 - 2013-07-15 10:06 - 00000000 ____D C:\windows\system32\MRT2014-01-18 09:16 - 2012-12-28 19:13 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe2014-01-14 00:47 - 2014-01-14 00:47 - 00016827 _____ C:\Users\Richard\Desktop\dds.txt2014-01-14 00:47 - 2014-01-14 00:47 - 00006104 _____ C:\Users\Richard\Desktop\attach.txt2014-01-14 00:45 - 2014-01-14 00:45 - 00688992 ____R (Swearware) C:\Users\Richard\Desktop\dds.com2014-01-14 00:29 - 2012-12-26 22:17 - 00000000 ____D C:\Users\Richard\AppData\Local\VirtualStore2014-01-09 01:30 - 2013-08-02 00:56 - 00000000 ____D C:\ProgramData\CyberLink2014-01-09 00:02 - 2013-11-14 21:39 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe2014-01-09 00:02 - 2013-11-14 21:39 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl2014-01-08 23:20 - 2013-08-02 00:56 - 00000000 ____D C:\Users\Richard\AppData\Roaming\CyberLink2014-01-08 23:18 - 2013-08-02 00:56 - 00000000 ____D C:\Users\Richard\SkyDrive\My Documents\CyberLink2014-01-08 23:18 - 2013-08-02 00:56 - 00000000 ____D C:\Users\Public\CyberLink2014-01-07 00:45 - 2014-01-07 00:45 - 00000000 ____D C:\ProgramData\Oracle2014-01-07 00:45 - 2014-01-07 00:44 - 00005521 _____ C:\windows\SysWOW64\jupdate-1.7.0_45-b18.log2014-01-07 00:45 - 2013-03-19 09:17 - 00000000 ____D C:\Program Files (x86)\Java2014-01-07 00:43 - 2014-01-07 00:43 - 00915368 _____ (Oracle Corporation) C:\Users\Richard\Desktop\jxpiinstall.exe2014-01-06 22:51 - 2013-01-16 15:51 - 00000000 ____D C:\Users\Richard\AppData\Roaming\dvdcss2014-01-06 20:34 - 2013-01-02 01:54 - 00000000 ____D C:\Users\Richard\AppData\Roaming\Azureus2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\Users\Richard\AppData\Roaming\SomePDF2013-12-30 23:42 - 2013-12-30 23:42 - 00000000 ____D C:\Program Files (x86)\SomePDF2013-12-30 01:00 - 2013-12-30 01:00 - 00000000 ____D C:\Users\Richard\AppData\Local\Days of Wonder2013-12-30 00:59 - 2013-07-11 23:00 - 00000000 ____D C:\ProgramData\Package CacheSome content of TEMP:====================C:\Users\Richard\AppData\Local\Temp\AskPIP_FF_.exeC:\Users\Richard\AppData\Local\Temp\bassmod.dllC:\Users\Richard\AppData\Local\Temp\bitool.dllC:\Users\Richard\AppData\Local\Temp\dotnetfx 3.5 sp1.exeC:\Users\Richard\AppData\Local\Temp\FreemakeVideoDownloader_3.5.0.7.exeC:\Users\Richard\AppData\Local\Temp\i4jdel0.exeC:\Users\Richard\AppData\Local\Temp\i4jdel1.exeC:\Users\Richard\AppData\Local\Temp\i4jdel2.exeC:\Users\Richard\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exeC:\Users\Richard\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exeC:\Users\Richard\AppData\Local\Temp\MouseKeyboardCenterx64_1033.exeC:\Users\Richard\AppData\Local\Temp\mp3el.exeC:\Users\Richard\AppData\Local\Temp\mpsetup.exeC:\Users\Richard\AppData\Local\Temp\Paint.NET.3.5.11.Install.exeC:\Users\Richard\AppData\Local\Temp\Quarantine.exeC:\Users\Richard\AppData\Local\Temp\switchsetup.exeC:\Users\Richard\AppData\Local\Temp\swt-win32-3740.dllC:\Users\Richard\AppData\Local\Temp\vcredist_x64.exeC:\Users\Richard\AppData\Local\Temp\WiseUpdX.exe==================== Bamital & volsnap Check =================C:\Windows\System32\winlogon.exe => MD5 is legitC:\Windows\System32\wininit.exe => MD5 is legitC:\Windows\explorer.exe => MD5 is legitC:\Windows\SysWOW64\explorer.exe => MD5 is legitC:\Windows\System32\svchost.exe => MD5 is legitC:\Windows\SysWOW64\svchost.exe => MD5 is legitC:\Windows\System32\services.exe => MD5 is legitC:\Windows\System32\User32.dll => MD5 is legitC:\Windows\SysWOW64\User32.dll => MD5 is legitC:\Windows\System32\userinit.exe => MD5 is legitC:\Windows\SysWOW64\userinit.exe => MD5 is legitC:\Windows\System32\rpcss.dll => MD5 is legitC:\Windows\System32\Drivers\volsnap.sys => MD5 is legitLastRegBack: 2014-01-27 03:02==================== End Of Log ============================

System Surveillance Pro 6.8.0.14 download

Download File

2ff7e9595c