API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 20th, 2013
83
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.18 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 13-05-20.01 - Dino 0.05.2013. 21:43:12.1.4 - x64
  2. Microsoft Windows 7 Ultimate 6.1.7601.1.1250.385.1033.18.4094.1852 [GMT 2:00]
  3. Running from: c:\users\Dino\Downloads\ComboFix.exe
  4. AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
  5. FW: Online Armor Firewall *Enabled* {BD3F5FCA-866B-1E2E-0A68-58900A751EA1}
  6. SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
  7. SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  8. .
  9. .
  10. ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  11. .
  12. .
  13. c:\program files (x86)\smartdl
  14. c:\program files (x86)\smartdl\gunzip.exe
  15. c:\program files (x86)\smartdl\header.bmp
  16. c:\program files (x86)\smartdl\header2.bmp
  17. c:\program files (x86)\smartdl\header3.bmp
  18. c:\program files (x86)\smartdl\next.bmp
  19. c:\program files (x86)\smartdl\skip.bmp
  20. c:\windows\SysWow64\frapsvid.dll
  21. .
  22. .
  23. ((((((((((((((((((((((((( Files Created from 2013-04-20 to 2013-05-20 )))))))))))))))))))))))))))))))
  24. .
  25. .
  26. 2013-05-20 08:19 . 2013-05-20 08:23 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
  27. 2013-05-18 14:41 . 2013-05-18 14:41 -------- d-----w- c:\program files (x86)\AGEIA Technologies
  28. 2013-05-12 17:06 . 2013-05-12 17:06 -------- d-----w- c:\users\Dino\AppData\Local\stellarium
  29. 2013-05-12 17:06 . 2013-05-12 17:06 -------- d-----w- c:\users\Dino\AppData\Roaming\Stellarium
  30. 2013-05-06 10:02 . 2013-05-06 10:01 83160 ----a-w- c:\windows\system32\drivers\avnetflt.sys
  31. 2013-04-29 14:15 . 2013-04-29 14:15 -------- d-----w- c:\program files (x86)\Common Files\Java
  32. 2013-04-29 13:58 . 2013-04-04 03:35 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
  33. 2013-04-21 17:20 . 2013-04-21 17:20 -------- d-----w- c:\program files (x86)\ree7
  34. .
  35. .
  36. .
  37. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  38. .
  39. 2013-05-15 13:12 . 2012-06-18 15:02 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  40. 2013-05-15 13:12 . 2012-06-18 15:02 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
  41. 2013-04-09 09:12 . 2010-11-21 03:24 6656 ----a-w- c:\windows\SysWow64\lpcio.dll
  42. 2013-04-04 12:50 . 2013-01-11 01:40 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
  43. 2013-04-01 16:08 . 2013-03-23 17:10 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
  44. 2013-04-01 16:08 . 2012-10-07 13:13 291088 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
  45. 2013-04-01 16:08 . 2013-03-23 17:10 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
  46. 2013-03-29 16:55 . 2013-03-29 16:55 868848 ----a-w- c:\windows\system32\drivers\sptd.sys
  47. 2013-03-27 11:01 . 2013-03-27 11:02 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys
  48. 2013-03-27 11:01 . 2013-03-27 11:02 130016 ----a-w- c:\windows\system32\drivers\avipbb.sys
  49. 2013-03-27 11:01 . 2013-03-27 11:02 100712 ----a-w- c:\windows\system32\drivers\avgntflt.sys
  50. 2013-03-25 15:32 . 2013-03-23 17:10 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
  51. 2013-03-23 16:20 . 2013-03-23 16:19 840264 ----a-w- c:\windows\system32\pbsvc.exe
  52. 2013-03-22 23:02 . 2013-03-22 23:02 329576 ----a-w- c:\windows\system32\libtidy.dll
  53. 2013-03-21 17:33 . 2013-03-21 17:33 258048 ----a-w- c:\windows\system32\libpcre.dll
  54. 2013-03-21 17:32 . 2013-03-21 17:32 284160 ----a-w- c:\windows\system32\encrashrep.dll
  55. 2013-03-06 03:42 . 2012-08-05 20:52 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
  56. 2013-03-06 03:42 . 2012-08-05 20:52 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll
  57. 2011-08-05 10:56 . 2011-08-05 10:56 645856 ----a-w- c:\program files\UIX.renderapi.dll
  58. 2011-08-05 10:56 . 2011-08-05 10:56 1530592 ----a-w- c:\program files\UIX.dll
  59. 2011-08-05 10:56 . 2011-08-05 10:56 1288928 ----a-w- c:\program files\UIXcontrols.dll
  60. 2011-08-05 10:56 . 2011-08-05 10:56 1272544 ----a-w- c:\program files\ZuneShell.dll
  61. 2011-08-05 10:56 . 2011-08-05 10:56 1175264 ----a-w- c:\program files\ZuneDBApi.dll
  62. 2011-08-05 10:53 . 2011-08-05 10:53 9440 ----a-w- c:\program files\ZuneWmduResources.dll
  63. 2011-08-05 10:53 . 2011-08-05 10:53 863968 ----a-w- c:\program files\ZuneWmdu.dll
  64. 2011-08-05 10:53 . 2011-08-05 10:53 74464 ----a-w- c:\program files\ZuneShellExt.dll
  65. 2011-08-05 10:53 . 2011-08-05 10:53 507104 ----a-w- c:\program files\ZuneSP.dll
  66. 2011-08-05 10:53 . 2011-08-05 10:53 467680 ----a-w- c:\program files\ZuneWlanCfgSvc.exe
  67. 2011-08-05 10:53 . 2011-08-05 10:53 4020448 ----a-w- c:\program files\ZuneSetup.exe
  68. 2011-08-05 10:53 . 2011-08-05 10:53 366816 ----a-w- c:\program files\ZuneSrcWrp.dll
  69. 2011-08-05 10:53 . 2011-08-05 10:53 306400 ----a-w- c:\program files\WMZuneComm.exe
  70. 2011-08-05 10:53 . 2011-08-05 10:53 27872 ----a-w- c:\program files\WMZuneTCP2UDP.dll
  71. 2011-08-05 10:53 . 2011-08-05 10:53 21216 ----a-w- c:\program files\WMZuneDTPTDNS.dll
  72. 2011-08-05 10:53 . 2011-08-05 10:53 196832 ----a-w- c:\program files\ZuneZMDB.Mobile.dll
  73. 2011-08-05 10:53 . 2011-08-05 10:53 18656 ----a-w- c:\program files\WMZuneCommProxyStub.dll
  74. 2011-08-05 10:53 . 2011-08-05 10:53 17632 ----a-w- c:\program files\ZuneShare.exe
  75. 2011-08-05 10:53 . 2011-08-05 10:53 16921312 ----a-w- c:\program files\ZuneShellResources.dll
  76. 2011-08-05 10:53 . 2011-08-05 10:53 157920 ----a-w- c:\program files\ZuneZMDB.Library.dll
  77. 2011-08-05 10:53 . 2011-08-05 10:53 157408 ----a-w- c:\program files\ZuneZMDB.ZuneHD.dll
  78. 2011-08-05 10:53 . 2011-08-05 10:53 152288 ----a-w- c:\program files\ZuneZMDB.Classic.dll
  79. 2011-08-05 10:53 . 2011-08-05 10:53 100064 ----a-w- c:\program files\ZuneTaskbar.dll
  80. 2011-08-05 10:53 . 2011-08-05 10:53 916704 ----a-w- c:\program files\ZuneQP.dll
  81. 2011-08-05 10:53 . 2011-08-05 10:53 683744 ----a-w- c:\program files\ZuneSH.dll
  82. 2011-08-05 10:53 . 2011-08-05 10:53 514272 ----a-w- c:\program files\ZuneSE.dll
  83. 2011-08-05 10:53 . 2011-08-05 10:53 3889376 ----a-w- c:\program files\ZuneResources.dll
  84. 2011-08-05 10:53 . 2011-08-05 10:53 155872 ----a-w- c:\program files\ZuneSA.dll
  85. 2011-08-05 10:53 . 2011-08-05 10:53 1257184 ----a-w- c:\program files\ZuneService.dll
  86. 2011-08-05 10:53 . 2011-08-05 10:53 879328 ----a-w- c:\program files\ZuneMBR.dll
  87. 2011-08-05 10:53 . 2011-08-05 10:53 8277728 ----a-w- c:\program files\ZuneNss.exe
  88. 2011-08-05 10:53 . 2011-08-05 10:53 72928 ----a-w- c:\program files\ZuneDXVA2.dll
  89. 2011-08-05 10:53 . 2011-08-05 10:53 707808 ----a-w- c:\program files\ZUNEMP4SDECD.dll
  90. 2011-08-05 10:53 . 2011-08-05 10:53 61664 ----a-w- c:\program files\ZuneCfg.dll
  91. 2011-08-05 10:53 . 2011-08-05 10:53 56544 ----a-w- c:\program files\ZuneConfig.exe
  92. 2011-08-05 10:53 . 2011-08-05 10:53 38624 ----a-w- c:\program files\ZuneEnc.exe
  93. 2011-08-05 10:53 . 2011-08-05 10:53 376544 ----a-w- c:\program files\ZuneEvr.dll
  94. 2011-08-05 10:53 . 2011-08-05 10:53 35552 ----a-w- c:\program files\UIXsup.dll
  95. 2011-08-05 10:53 . 2011-08-05 10:53 347872 ----a-w- c:\program files\ZuneNssci.dll
  96. 2011-08-05 10:53 . 2011-08-05 10:53 223968 ----a-w- c:\program files\Zune.exe
  97. 2011-08-05 10:53 . 2011-08-05 10:53 218848 ----a-w- c:\program files\ZuneHost.exe
  98. 2011-08-05 10:53 . 2011-08-05 10:53 212192 ----a-w- c:\program files\ZuneDB.dll
  99. 2011-08-05 10:53 . 2011-08-05 10:53 2110176 ----a-w- c:\program files\ZuneEncEng.dll
  100. 2011-08-05 10:53 . 2011-08-05 10:53 20704 ----a-w- c:\program files\ZunePS.dll
  101. 2011-08-05 10:53 . 2011-08-05 10:53 1752288 ----a-w- c:\program files\UIXrender.dll
  102. 2011-08-05 10:53 . 2011-08-05 10:53 163552 ----a-w- c:\program files\ZuneLauncher.exe
  103. 2011-08-05 10:53 . 2011-08-05 10:53 1481440 ----a-w- c:\program files\ZuneCore.dll
  104. 2011-08-05 10:53 . 2011-08-05 10:53 131296 ----a-w- c:\program files\ZunePresenter.dll
  105. 2011-08-05 10:53 . 2011-08-05 10:53 129248 ----a-w- c:\program files\ZuneEffects.dll
  106. 2011-08-05 10:53 . 2011-08-05 10:53 121056 ----a-w- c:\program files\ZuneAACDec.dll
  107. 2011-08-05 10:53 . 2011-08-05 10:53 1184480 ----a-w- c:\program files\ZuneH264Dec.dll
  108. 2011-08-05 10:53 . 2011-08-05 10:53 1161440 ----a-w- c:\program files\ZuneMde.dll
  109. 2011-08-05 10:53 . 2011-08-05 10:53 1096928 ----a-w- c:\program files\ZuneMarketplaceResources.dll
  110. 2011-08-05 10:53 . 2011-08-05 10:53 10061536 ----a-w- c:\program files\ZuneNativeLib.dll
  111. 2011-08-05 10:31 . 2011-08-05 10:31 182784 ----a-w- c:\program files\l3codecp.acm
  112. 2011-06-06 11:48 . 2011-06-06 11:48 856576 ----a-w- c:\program files\msvcp90.dll
  113. 2011-06-06 11:48 . 2011-06-06 11:48 626688 ----a-w- c:\program files\msvcr90.dll
  114. 2011-06-06 11:48 . 2011-06-06 11:48 245760 ----a-w- c:\program files\msvcm90.dll
  115. 2007-10-02 12:12 . 2007-10-02 12:12 1642568 ----a-w- c:\program files\msidcrl40.dll
  116. .
  117. .
  118. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  119. .
  120. .
  121. *Note* empty entries & legit default entries are not shown
  122. REGEDIT4
  123. .
  124. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
  125. @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
  126. [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
  127. 2013-03-23 01:16 222808 ----a-w- c:\users\Dino\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
  128. .
  129. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
  130. @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
  131. [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
  132. 2013-03-23 01:16 222808 ----a-w- c:\users\Dino\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
  133. .
  134. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
  135. @="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
  136. [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
  137. 2013-03-23 01:16 222808 ----a-w- c:\users\Dino\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\SkyDriveShell.dll
  138. .
  139. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
  140. @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
  141. [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
  142. 2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
  143. .
  144. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
  145. @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
  146. [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
  147. 2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
  148. .
  149. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
  150. @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
  151. [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
  152. 2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MICROS~2\Office15\GROOVEEX.DLL
  153. .
  154. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  155. "F.lux"="c:\users\Dino\Local Settings\Apps\F.lux\flux.exe" [2009-08-29 966656]
  156. "SkyDrive"="c:\users\Dino\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" [2013-03-23 256600]
  157. .
  158. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  159. "AMD AVT"="start AMD Accelerated Video Transcoding device initialization" [X]
  160. "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-05-06 345312]
  161. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-11-16 641704]
  162. "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
  163. .
  164. c:\users\Dino\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  165. MemInfo.lnk - e:\program files (x86)\MemInfo\meminfo.exe [2012-4-8 883712]
  166. YoWindow.lnk - e:\program files (x86)\YoWindow\yowindow.exe [2012-11-5 886664]
  167. .
  168. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  169. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  170. "ConsentPromptBehaviorUser"= 3 (0x3)
  171. "EnableLUA"= 0 (0x0)
  172. "EnableUIADesktopToggle"= 0 (0x0)
  173. "PromptOnSecureDesktop"= 0 (0x0)
  174. .
  175. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  176. "LoadAppInit_DLLs"=1 (0x1)
  177. .
  178. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
  179. @=""
  180. .
  181. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
  182. "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
  183. .
  184. R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2013-03-29 868848]
  185. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  186. R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-02-28 161384]
  187. R2 Wake my PC Lighthouse;Wake my PC Lighthouse;c:\program files (x86)\ree7\Wake my PC Lighthouse\WakeMyPC.WindowsService.exe [2012-12-12 42496]
  188. R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-01-31 102368]
  189. R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
  190. R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-06-18 1038088]
  191. R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2012-10-01 178824]
  192. R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-21 20992]
  193. R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2013-01-31 127488]
  194. R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2013-01-31 18944]
  195. R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2013-01-31 161280]
  196. R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys [2013-01-31 128000]
  197. R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-01-31 203104]
  198. R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-21 88960]
  199. R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-21 34816]
  200. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
  201. R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
  202. R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
  203. R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
  204. R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
  205. R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-11-24 1255736]
  206. R4 Web Assistant Updater;Web Assistant Updater;c:\program files\Web Assistant\ExtensionUpdaterService.exe [2012-06-25 185856]
  207. S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-03-27 28600]
  208. S1 OADevice;OADriver;c:\windows\SysWow64\Drivers\OADriver.sys [2012-10-03 61632]
  209. S1 oahlpXX;Online Armor helper driver;c:\windows\syswow64\drivers\oahlp64.sys [2012-10-03 62016]
  210. S1 OAmon;OAmon;c:\windows\SysWOW64\Drivers\OAmon.sys [2012-10-03 40520]
  211. S1 SASDIFSV;SASDIFSV;e:\program files\Super Anti Spyware\SASDIFSV64.SYS [2011-07-22 14928]
  212. S1 SASKUTIL;SASKUTIL;e:\program files\Super Anti Spyware\SASKUTIL64.SYS [2011-07-12 12368]
  213. S2 !SASCORE;SAS Core Service;e:\program files\Super Anti Spyware\SASCORE64.EXE [2012-07-11 140672]
  214. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-11-16 238080]
  215. S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-11-16 361984]
  216. S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-27 86752]
  217. S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-03-05 53888]
  218. S2 OAcat;Online Armor Helper Service;c:\program files (x86)\Online Armor\OAcat.exe [2012-10-03 216072]
  219. S2 SvcOnlineArmor;Online Armor;c:\program files (x86)\Online Armor\oasrv.exe [2012-10-03 4463864]
  220. S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
  221. S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
  222. S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
  223. S3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;c:\windows\system32\DRIVERS\LGSHidFilt.Sys [2012-10-02 66360]
  224. S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
  225. S3 OAnet;OnlineArmor Service;c:\windows\system32\DRIVERS\oanet.sys [2012-10-03 35376]
  226. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
  227. S3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM10664.sys [2009-10-01 1307648]
  228. .
  229. .
  230. Contents of the 'Scheduled Tasks' folder
  231. .
  232. 2013-05-20 c:\windows\Tasks\Adobe Flash Player Updater.job
  233. - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-18 13:12]
  234. .
  235. 2013-05-20 c:\windows\Tasks\GlaryInitialize.job
  236. - e:\program files (x86)\Glary Utilities\initialize.exe [2013-03-22 13:39]
  237. .
  238. 2013-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  239. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-11 19:22]
  240. .
  241. 2013-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  242. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-11 19:22]
  243. .
  244. .
  245. --------- X64 Entries -----------
  246. .
  247. .
  248. [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
  249. 2012-06-25 13:10 201728 ----a-w- c:\program files\Web Assistant\Extension64.dll
  250. .
  251. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
  252. @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
  253. [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
  254. 2013-03-23 01:16 261704 ----a-w- c:\users\Dino\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
  255. .
  256. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
  257. @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
  258. [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
  259. 2013-03-23 01:16 261704 ----a-w- c:\users\Dino\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
  260. .
  261. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
  262. @="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
  263. [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
  264. 2013-03-23 01:16 261704 ----a-w- c:\users\Dino\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64\SkyDriveShell64.dll
  265. .
  266. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
  267. @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
  268. [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
  269. 2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
  270. .
  271. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
  272. @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
  273. [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
  274. 2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
  275. .
  276. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
  277. @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
  278. [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
  279. 2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MICROS~3\Office15\GROOVEEX.DLL
  280. .
  281. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  282. "Cm106Sound"="c:\windows\Syswow64\cm106.dll" [2010-07-01 8151040]
  283. "@OnlineArmor GUI"="c:\program files (x86)\Online Armor\oaui.exe" [2012-10-03 2415104]
  284. "PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2007-12-10 323584]
  285. "Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-11-29 7406392]
  286. .
  287. ------- Supplementary Scan -------
  288. .
  289. uLocal Page = c:\windows\SYSTEM32\blank.htm
  290. mLocal Page = c:\windows\SYSTEM32\blank.htm
  291. uInternet Settings,ProxyOverride = *.local
  292. IE: Append to existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
  293. IE: Clip Image - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4
  294. IE: Clip selection - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3
  295. IE: Clip this page - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1
  296. IE: Clip URL - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0
  297. IE: Convert link target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  298. IE: Convert link target to existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  299. IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
  300. IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office15\EXCEL.EXE/3000
  301. IE: Free YouTube Download - c:\users\Dino\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
  302. IE: Free YouTube to MP3 Converter - c:\users\Dino\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
  303. IE: New Note - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html
  304. IE: Se&nd to OneNote - c:\progra~1\MICROS~3\Office15\ONBttnIE.dll/105
  305. TCP: Interfaces\{074A1557-773B-4A2F-857B-7AB1FE386023}: NameServer = 192.168.1.1
  306. Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
  307. FF - ProfilePath - c:\users\Dino\AppData\Roaming\Mozilla\Firefox\Profiles\i5s7rexs.default\
  308. FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
  309. FF - prefs.js: browser.search.selectedEngine - Google
  310. FF - prefs.js: browser.startup.homepage - about:home
  311. FF - prefs.js: keyword.URL - hxxps://www.google.hr/
  312. FF - ExtSQL: 2013-04-07 10:12; {888d99e7-e8b5-46a3-851e-1ec45da1e644}; c:\users\Dino\AppData\Roaming\Mozilla\Firefox\Profiles\i5s7rexs.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
  313. FF - user.js: extensions.incredibar_i.newTab - false
  314. FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6OyJ9ypI9u&loc=IB_TB&i=26&search=
  315. FF - user.js: extensions.incredibar_i.id - 9c878fe500000000000000241d2f6cc6
  316. FF - user.js: extensions.incredibar_i.instlDay - 15547
  317. FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14
  318. FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14
  319. FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.140:50
  320. FF - user.js: extensions.incredibar_i.prtnrId - Incredibar
  321. FF - user.js: extensions.incredibar_i.prdct - incredibar
  322. FF - user.js: extensions.incredibar_i.aflt - orgnl
  323. FF - user.js: extensions.incredibar_i.smplGrp - none
  324. FF - user.js: extensions.incredibar_i.tlbrId - base
  325. FF - user.js: extensions.incredibar_i.instlRef -
  326. FF - user.js: extensions.incredibar_i.dfltLng -
  327. FF - user.js: extensions.incredibar_i.excTlbr - false
  328. FF - user.js: extensions.incredibar_i.ms_url_id -
  329. FF - user.js: extensions.incredibar_i.upn2 - 6OyJ9ypI9u
  330. FF - user.js: extensions.incredibar_i.upn2n - 92261824217757300
  331. FF - user.js: extensions.incredibar_i.productid - 26
  332. FF - user.js: extensions.incredibar_i.installerproductid - 26
  333. FF - user.js: extensions.incredibar_i.did - 10643
  334. FF - user.js: extensions.incredibar_i.ppd - 1
  335. .
  336. - - - - ORPHANS REMOVED - - - -
  337. .
  338. AddRemove-Free Studio_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\Uninstall.exe
  339. .
  340. .
  341. .
  342. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MpsSvc]
  343. "ImagePath"="."
  344. .
  345. --------------------- LOCKED REGISTRY KEYS ---------------------
  346. .
  347. [HKEY_USERS\S-1-5-21-850714495-1330533816-1280765928-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
  348. "??"=hex:f7,3c,27,35,92,c4,fa,0e,9f,34,d5,99,c9,93,65,8e,fd,cc,51,05,cc,cb,8b,
  349. d9,20,52,5d,75,b7,fd,27,be,44,e6,f9,33,6f,77,41,77,cd,2b,e1,d1,f1,4e,56,1c,\
  350. "??"=hex:d6,4c,5a,8d,cf,aa,a6,b5,6e,c0,c4,7f,ec,fb,3b,e1
  351. .
  352. [HKEY_USERS\S-1-5-21-850714495-1330533816-1280765928-1001\Software\SecuROM\License information*]
  353. "datasecu"=hex:8b,c6,87,85,b5,23,0f,f3,b1,5c,db,52,c0,ef,e5,f6,01,09,b7,41,6c,
  354. 50,29,67,60,ee,43,8c,f4,60,08,01,4a,e1,5f,88,14,4c,95,95,58,d8,d0,26,85,a2,\
  355. "rkeysecu"=hex:da,bb,3e,70,1e,f7,b0,e9,7d,b9,0f,1d,34,d5,33,8c
  356. .
  357. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
  358. @Denied: (A 2) (Everyone)
  359. @="FlashBroker"
  360. "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
  361. .
  362. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
  363. "Enabled"=dword:00000001
  364. .
  365. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
  366. @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
  367. .
  368. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
  369. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  370. .
  371. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  372. @Denied: (A 2) (Everyone)
  373. @="IFlashBroker5"
  374. .
  375. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
  376. @="{00020424-0000-0000-C000-000000000046}"
  377. .
  378. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
  379. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  380. "Version"="1.0"
  381. .
  382. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
  383. @Denied: (A 2) (Everyone)
  384. @="FlashBroker"
  385. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
  386. .
  387. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
  388. "Enabled"=dword:00000001
  389. .
  390. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
  391. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
  392. .
  393. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
  394. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  395. .
  396. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  397. @Denied: (A 2) (Everyone)
  398. @="Shockwave Flash Object"
  399. .
  400. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  401. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
  402. "ThreadingModel"="Apartment"
  403. .
  404. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  405. @="0"
  406. .
  407. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  408. @="ShockwaveFlash.ShockwaveFlash.11"
  409. .
  410. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  411. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
  412. .
  413. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  414. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  415. .
  416. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  417. @="1.0"
  418. .
  419. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  420. @="ShockwaveFlash.ShockwaveFlash"
  421. .
  422. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  423. @Denied: (A 2) (Everyone)
  424. @="Macromedia Flash Factory Object"
  425. .
  426. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  427. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
  428. "ThreadingModel"="Apartment"
  429. .
  430. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  431. @="FlashFactory.FlashFactory.1"
  432. .
  433. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  434. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
  435. .
  436. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  437. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  438. .
  439. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  440. @="1.0"
  441. .
  442. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  443. @="FlashFactory.FlashFactory"
  444. .
  445. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  446. @Denied: (A 2) (Everyone)
  447. @="IFlashBroker5"
  448. .
  449. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
  450. @="{00020424-0000-0000-C000-000000000046}"
  451. .
  452. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
  453. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  454. "Version"="1.0"
  455. .
  456. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
  457. @="?????????????????? v1"
  458. .
  459. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
  460. @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
  461. .
  462. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
  463. @="?????????????????? v2"
  464. .
  465. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
  466. @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
  467. .
  468. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  469. @Denied: (A) (Everyone)
  470. "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
  471. .
  472. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  473. @Denied: (A) (Everyone)
  474. .
  475. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
  476. "Key"="ActionsPane3"
  477. "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
  478. .
  479. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  480. @Denied: (A) (Users)
  481. @Denied: (A) (Everyone)
  482. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  483. "BlindDial"=dword:00000000
  484. .
  485. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  486. @Denied: (A) (Users)
  487. @Denied: (A) (Everyone)
  488. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  489. "BlindDial"=dword:00000000
  490. .
  491. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
  492. @Denied: (A) (Users)
  493. @Denied: (A) (Everyone)
  494. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  495. "BlindDial"=dword:00000000
  496. .
  497. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  498. @Denied: (Full) (Everyone)
  499. .
  500. ------------------------ Other Running Processes ------------------------
  501. .
  502. c:\windows\SysWOW64\rundll32.exe
  503. c:\program files (x86)\Online Armor\OAhlp.exe
  504. c:\windows\system\Cm106eye.exe
  505. c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
  506. c:\windows\SysWOW64\PnkBstrA.exe
  507. .
  508. **************************************************************************
  509. .
  510. Completion time: 2013-05-20 21:59:28 - machine was rebooted
  511. ComboFix-quarantined-files.txt 2013-05-20 19:59
  512. .
  513. Pre-Run: 11.523.862.528 bytes free
  514. Post-Run: 11.498.319.872 bytes free
  515. .
  516. - - End Of File - - BC5067AD3BDE3639BDE2C3980720B0D1
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!