API tools faq
paste
Guest User

scan

a guest
May 12th, 2012
89
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 45.29 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 12.5.2012 13:26:32 - Run 1
  2. OTL by OldTimer - Version 3.2.42.3 Folder = C:\Users\marija\Desktop
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 0000241A | Country: Serbia | Language: SRM | Date Format: d.M.yyyy
  6.  
  7. 3,60 Gb Total Physical Memory | 2,18 Gb Available Physical Memory | 60,37% Memory free
  8. 7,21 Gb Paging File | 5,60 Gb Available in Paging File | 77,77% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 146,39 Gb Total Space | 106,50 Gb Free Space | 72,75% Space Free | Partition Type: NTFS
  13. Drive E: | 97,66 Gb Total Space | 51,91 Gb Free Space | 53,16% Space Free | Partition Type: NTFS
  14. Drive F: | 43,95 Gb Total Space | 35,03 Gb Free Space | 79,70% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: MK | User Name: marija | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2012.05.12 13:23:51 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\marija\Desktop\OTL.exe
  23. PRC - [2012.05.07 22:22:09 | 000,879,984 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
  24. PRC - [2012.05.07 22:07:36 | 005,781,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgmfapx.exe
  25. PRC - [2012.04.23 15:58:33 | 000,918,880 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
  26. PRC - [2012.04.23 15:58:28 | 000,982,880 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
  27. PRC - [2012.04.09 11:20:30 | 003,063,968 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
  28. PRC - [2012.01.24 17:24:26 | 002,416,480 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
  29. PRC - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  30. PRC - [2011.11.23 02:36:24 | 002,391,832 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
  31. PRC - [2011.11.03 17:20:58 | 000,803,144 | ---- | M] (AVG) -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe
  32. PRC - [2011.10.12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
  33. PRC - [2011.08.02 06:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
  34. PRC - [2011.03.01 16:44:50 | 000,138,400 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
  35. PRC - [2011.01.29 15:52:10 | 000,623,520 | ---- | M] (Zbshareware Lab) -- C:\Program Files (x86)\USB Disk Security\USBGuard.exe
  36. PRC - [2010.12.27 17:30:22 | 001,817,088 | ---- | M] (Realsil Microelectronics Inc.) -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
  37. PRC - [2010.11.29 07:56:00 | 003,709,856 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE
  38.  
  39.  
  40. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  41.  
  42. MOD - [2012.04.28 04:07:01 | 000,444,400 | ---- | M] () -- C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\ppgooglenaclpluginchrome.dll
  43. MOD - [2012.04.28 04:06:59 | 003,915,248 | ---- | M] () -- C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\pdf.dll
  44. MOD - [2012.04.28 04:05:34 | 000,122,880 | ---- | M] () -- C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\avutil-51.dll
  45. MOD - [2012.04.28 04:05:33 | 000,220,672 | ---- | M] () -- C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\avformat-53.dll
  46. MOD - [2012.04.28 04:05:32 | 001,747,456 | ---- | M] () -- C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\avcodec-53.dll
  47. MOD - [2012.04.28 03:09:18 | 008,743,584 | ---- | M] () -- C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\gcswf32.dll
  48. MOD - [2012.04.23 15:58:28 | 000,982,880 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
  49. MOD - [2011.11.03 17:21:06 | 000,350,024 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG PC Tuneup\madExcept_.bpl
  50. MOD - [2011.11.03 17:21:06 | 000,184,136 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG PC Tuneup\madBasic_.bpl
  51. MOD - [2011.11.03 17:21:06 | 000,050,504 | ---- | M] () -- C:\Program Files (x86)\AVG\AVG PC Tuneup\madDisAsm_.bpl
  52. MOD - [2010.03.15 12:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt32.dll
  53.  
  54.  
  55. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  56.  
  57. SRV:[b]64bit:[/b] - [2011.07.05 16:08:28 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  58. SRV:[b]64bit:[/b] - [2011.04.27 18:21:18 | 000,288,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
  59. SRV:[b]64bit:[/b] - [2011.04.27 18:21:18 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
  60. SRV:[b]64bit:[/b] - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  61. SRV:[b]64bit:[/b] - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  62. SRV - [2012.05.03 08:31:10 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  63. SRV - [2012.04.23 15:58:33 | 000,918,880 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe -- (vToolbarUpdater10.2.0)
  64. SRV - [2012.04.09 11:20:30 | 003,063,968 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
  65. SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  66. SRV - [2011.11.23 02:36:24 | 002,391,832 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\avgfws.exe -- (avgfws)
  67. SRV - [2011.10.12 06:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)
  68. SRV - [2011.08.02 06:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
  69. SRV - [2011.03.01 16:44:50 | 000,138,400 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (Atheros Bt&Wlan Coex Agent)
  70. SRV - [2011.03.01 16:43:52 | 000,076,448 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
  71. SRV - [2010.12.27 17:30:22 | 001,817,088 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
  72. SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  73. SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  74.  
  75.  
  76. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  77.  
  78. DRV:[b]64bit:[/b] - [2012.02.23 14:32:04 | 000,095,760 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  79. DRV:[b]64bit:[/b] - [2011.12.21 13:30:32 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
  80. DRV:[b]64bit:[/b] - [2011.10.07 06:23:46 | 000,283,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
  81. DRV:[b]64bit:[/b] - [2011.09.13 06:30:08 | 000,037,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
  82. DRV:[b]64bit:[/b] - [2011.08.08 06:08:58 | 000,046,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
  83. DRV:[b]64bit:[/b] - [2011.07.11 01:14:36 | 000,375,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
  84. DRV:[b]64bit:[/b] - [2011.07.11 01:14:08 | 000,029,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
  85. DRV:[b]64bit:[/b] - [2011.07.11 01:14:06 | 000,120,400 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
  86. DRV:[b]64bit:[/b] - [2011.07.11 01:14:06 | 000,026,704 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AVGIDSEH.sys -- (AVGIDSEH)
  87. DRV:[b]64bit:[/b] - [2011.07.05 16:50:30 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  88. DRV:[b]64bit:[/b] - [2011.07.05 15:32:22 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  89. DRV:[b]64bit:[/b] - [2011.05.23 01:03:28 | 000,048,992 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgfwd6a.sys -- (Avgfwfd)
  90. DRV:[b]64bit:[/b] - [2011.04.27 16:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  91. DRV:[b]64bit:[/b] - [2011.04.21 21:17:10 | 002,727,424 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  92. DRV:[b]64bit:[/b] - [2011.04.16 02:37:50 | 000,079,488 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
  93. DRV:[b]64bit:[/b] - [2011.04.16 02:37:50 | 000,040,064 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
  94. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  95. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  96. DRV:[b]64bit:[/b] - [2011.03.05 01:16:20 | 000,436,840 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  97. DRV:[b]64bit:[/b] - [2011.03.01 16:44:08 | 000,280,224 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
  98. DRV:[b]64bit:[/b] - [2011.03.01 16:44:06 | 000,298,656 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
  99. DRV:[b]64bit:[/b] - [2011.03.01 16:44:06 | 000,201,376 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
  100. DRV:[b]64bit:[/b] - [2011.03.01 16:44:06 | 000,154,272 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
  101. DRV:[b]64bit:[/b] - [2011.03.01 16:44:06 | 000,055,456 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
  102. DRV:[b]64bit:[/b] - [2011.03.01 16:44:06 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
  103. DRV:[b]64bit:[/b] - [2011.03.01 16:44:06 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
  104. DRV:[b]64bit:[/b] - [2011.02.15 12:37:10 | 000,335,464 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
  105. DRV:[b]64bit:[/b] - [2010.11.21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  106. DRV:[b]64bit:[/b] - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  107. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  108. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  109. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  110. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  111. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  112. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  113. DRV:[b]64bit:[/b] - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
  114. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  115. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  116. DRV:[b]64bit:[/b] - [2009.07.14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  117. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  118. DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  119. DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  120. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  121. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  122. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  123.  
  124.  
  125. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  126.  
  127.  
  128. [color=#E56717]========== Internet Explorer ==========[/color]
  129.  
  130. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  131. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  132. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  133. IE - HKLM\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll (Conduit Ltd.)
  134. IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
  135. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  136. IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559
  137.  
  138. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1750559
  139. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  140. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
  141. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 33 B3 8B 21 DE BF CC 01 [binary data]
  142. IE - HKCU\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll (Conduit Ltd.)
  143. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  144. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  145. IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={FE233649-FF6A-4789-836E-E61B842FAE0E}&mid=78fe63a4b9ca47d0b6250196dc7a1107-22c65f8147967d96b478f33ea7b04e4e81c496db&lang=sr&ds=AVG&pr=pr&d=2012-04-16 13:35:04&v=8.0.0.34&sap=dsp&q={searchTerms}
  146. IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559
  147. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  148.  
  149. [color=#E56717]========== FireFox ==========[/color]
  150.  
  151. FF - prefs.js..browser.search.defaultthis.engineName: "BS Player Customized Web Search"
  152. FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}"
  153. FF - prefs.js..browser.search.selectedEngine: "BS Player Customized Web Search"
  154. FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT1750559&SearchSource=13"
  155. FF - prefs.js..extensions.enabledItems: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:3.10.0.1
  156. FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:12.0.0.1912
  157. FF - prefs.js..extensions.enabledItems: avg@toolbar:10.2.0.3
  158. FF - user.js - File not found
  159.  
  160. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  161. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  162. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  163. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
  164. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  165. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  166. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  167. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
  168. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  169. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  170. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
  171. FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
  172. FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
  173. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  174. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\marija\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  175. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\marija\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  176.  
  177. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2012.05.07 22:29:10 | 000,000,000 | ---D | M]
  178. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\10.2.0.3\ [2012.04.23 15:59:11 | 000,000,000 | ---D | M]
  179. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.01.11 14:31:03 | 000,000,000 | ---D | M]
  180. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.25\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.04.23 16:48:08 | 000,000,000 | ---D | M]
  181.  
  182. [2011.12.21 16:13:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\marija\AppData\Roaming\Mozilla\Extensions
  183. [2012.05.10 20:10:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\marija\AppData\Roaming\Mozilla\Firefox\Profiles\o8ioh4np.default\extensions
  184. [2012.03.16 03:08:22 | 000,000,000 | ---D | M] (BS Player Community Toolbar) -- C:\Users\marija\AppData\Roaming\Mozilla\Firefox\Profiles\o8ioh4np.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
  185. [2012.04.23 15:57:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\marija\AppData\Roaming\Mozilla\Firefox\Profiles\o8ioh4np.default\extensions\staged
  186. [2011.11.22 12:53:46 | 000,000,921 | ---- | M] () -- C:\Users\marija\AppData\Roaming\Mozilla\Firefox\Profiles\o8ioh4np.default\searchplugins\conduit.xml
  187. [2012.05.10 20:36:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  188. [2012.05.10 20:36:12 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
  189. [2012.05.07 22:29:10 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES (X86)\AVG\AVG2012\FIREFOX4
  190. [2012.04.23 15:59:11 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\PROGRAMDATA\AVG SECURE SEARCH\10.2.0.3
  191. [2012.04.23 15:58:26 | 000,003,766 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
  192.  
  193. [color=#E56717]========== Chrome ==========[/color]
  194.  
  195. CHR - default_search_provider: Google (Enabled)
  196. CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
  197. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
  198. CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
  199. CHR - plugin: Native Client (Enabled) = C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\ppGoogleNaClPluginChrome.dll
  200. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\pdf.dll
  201. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\marija\AppData\Local\Google\Chrome\Application\18.0.1025.168\gcswf32.dll
  202. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
  203. CHR - plugin: AVG Internet Security (Enabled) = C:\Users\marija\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1829_0\plugins/avgnpss.dll
  204. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
  205. CHR - plugin: Java Deployment Toolkit 6.0.210.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
  206. CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
  207. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
  208. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
  209. CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll
  210. CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll
  211. CHR - plugin: Google Update (Enabled) = C:\Users\marija\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
  212. CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
  213. CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
  214. CHR - Extension: YouTube = C:\Users\marija\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
  215. CHR - Extension: Google \u043F\u0440\u0435\u0442\u0440\u0430\u0433\u0430 = C:\Users\marija\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
  216. CHR - Extension: AVG Safe Search = C:\Users\marija\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\
  217. CHR - Extension: Skype Click to Call = C:\Users\marija\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.11.0.9874_0\
  218. CHR - Extension: Gmail = C:\Users\marija\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  219.  
  220. O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  221. O2:[b]64bit:[/b] - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
  222. O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
  223. O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
  224. O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll ()
  225. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  226. O2 - BHO: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll (Conduit Ltd.)
  227. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
  228. O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll ()
  229. O3 - HKLM\..\Toolbar: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll (Conduit Ltd.)
  230. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
  231. O3 - HKCU\..\Toolbar\WebBrowser: (BS Player Toolbar) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files (x86)\BS_Player\prxtbBS_P.dll (Conduit Ltd.)
  232. O4:[b]64bit:[/b] - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
  233. O4:[b]64bit:[/b] - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations)
  234. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  235. O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
  236. O4 - HKLM..\Run: [USB Security] C:\Program Files (x86)\USB Disk Security\USBGuard.exe (Zbshareware Lab)
  237. O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
  238. O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
  239. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  240. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  241. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  242. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  243. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  244. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  245. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
  246. O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
  247. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  248. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  249. O13[b]64bit:[/b] - gopher Prefix: missing
  250. O13 - gopher Prefix: missing
  251. O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
  252. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
  253. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Reg Error: Key error.)
  254. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
  255. O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
  256. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
  257. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  258. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{285409A6-8BE3-46EF-A417-4AB2BF88E8CC}: DhcpNameServer = 192.168.1.1
  259. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4B9EFCC4-F310-4725-A9CF-26D3B63289E7}: DhcpNameServer = 192.168.1.1
  260. O18:[b]64bit:[/b] - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
  261. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  262. O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
  263. O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found
  264. O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
  265. O18 - Protocol\Handler\ms-help - No CLSID value found
  266. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  267. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  268. O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll ()
  269. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  270. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  271. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  272. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  273. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  274. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  275. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  276. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  277. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  278. O32 - HKLM CDRom: AutoRun - 1
  279. O33 - MountPoints2\{3f015c6b-2c13-11e1-970a-d0df9a9f6884}\Shell - "" = AutoRun
  280. O33 - MountPoints2\{3f015c6b-2c13-11e1-970a-d0df9a9f6884}\Shell\AutoRun\command - "" = G:\SETUP.EXE
  281. O33 - MountPoints2\{3f015c6b-2c13-11e1-970a-d0df9a9f6884}\Shell\configure\command - "" = G:\SETUP.EXE
  282. O33 - MountPoints2\{3f015c6b-2c13-11e1-970a-d0df9a9f6884}\Shell\install\command - "" = G:\SETUP.EXE
  283. O33 - MountPoints2\{580f898b-63f5-11e1-93b1-d0df9a9f6884}\Shell - "" = AutoRun
  284. O33 - MountPoints2\{580f898b-63f5-11e1-93b1-d0df9a9f6884}\Shell\AutoRun\command - "" = H:\autorun.exe
  285. O33 - MountPoints2\{72bd7900-8e4c-11e1-97a9-d0df9a9f6884}\Shell - "" = AutoRun
  286. O33 - MountPoints2\{72bd7900-8e4c-11e1-97a9-d0df9a9f6884}\Shell\AutoRun\command - "" = H:\PcOptions.exe
  287. O33 - MountPoints2\{b8a1c0b9-5b90-11e1-a8dd-d0df9a9f6884}\Shell - "" = AutoRun
  288. O33 - MountPoints2\{b8a1c0b9-5b90-11e1-a8dd-d0df9a9f6884}\Shell\AutoRun\command - "" = J:\PcOptions.exe
  289. O33 - MountPoints2\H\Shell - "" = AutoRun
  290. O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
  291. O34 - HKLM BootExecute: (autocheck autochk *)
  292. O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart)
  293. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  294. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  295. O35 - HKLM\..comfile [open] -- "%1" %*
  296. O35 - HKLM\..exefile [open] -- "%1" %*
  297. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  298. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  299. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  300. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  301. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  302. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  303. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  304.  
  305. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  306.  
  307. [2012.05.12 13:23:44 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Users\marija\Desktop\OTL.exe
  308. [2012.05.11 22:51:14 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
  309. [2012.05.11 22:46:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD High-Definition Graphics Driver
  310. [2012.05.11 17:03:52 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\Canneverbe Limited
  311. [2012.05.11 17:03:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited
  312. [2012.05.11 17:02:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CDBurnerXP
  313. [2012.05.10 20:36:25 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
  314. [2012.05.10 20:35:15 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\Skype
  315. [2012.05.10 20:34:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  316. [2012.05.10 20:34:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
  317. [2012.05.10 20:34:41 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
  318. [2012.05.10 20:34:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
  319. [2012.05.10 19:54:00 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Local\AMD
  320. [2012.05.10 19:49:12 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\ATI
  321. [2012.05.10 19:49:12 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Local\ATI
  322. [2012.05.10 19:48:47 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
  323. [2012.05.10 19:46:10 | 000,046,136 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdiox64.sys
  324. [2012.05.10 19:42:55 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
  325. [2012.05.10 19:20:16 | 000,000,000 | ---D | C] -- C:\AMD
  326. [2012.05.07 22:26:46 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Local\GHISLER
  327. [2012.05.07 22:22:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent
  328. [2012.05.07 22:20:32 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\uTorrent
  329. [2012.05.07 22:15:08 | 000,000,000 | ---D | C] -- C:\totalcmd
  330. [2012.05.07 22:15:08 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\GHISLER
  331. [2012.05.07 21:46:04 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
  332. [2012.05.07 21:41:21 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Local\Google
  333. [2012.04.23 20:19:08 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  334. [2012.04.23 17:54:07 | 000,000,000 | ---D | C] -- C:\58bcc2d853a24d4b39
  335. [2012.04.23 17:05:01 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\AVG
  336. [2012.04.23 17:03:59 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
  337. [2012.04.23 17:03:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC Tuneup 2011
  338. [2012.04.23 15:57:40 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
  339. [2012.04.18 19:00:52 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Local\ElevatedDiagnostics
  340. [2012.04.16 14:09:51 | 000,000,000 | -H-D | C] -- C:\$AVG
  341. [2012.04.16 13:55:17 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\Zbshareware Lab
  342. [2012.04.16 13:55:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Zbshareware Lab
  343. [2012.04.16 13:55:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Disk Security
  344. [2012.04.16 13:55:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\USB Disk Security
  345. [2012.04.16 13:35:49 | 000,000,000 | ---D | C] -- C:\Users\marija\AppData\Roaming\AVG2012
  346. [2012.04.16 13:35:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2012
  347. [2012.04.16 13:34:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
  348. [2012.04.16 13:34:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search
  349. [2012.04.16 13:34:49 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
  350. [2012.04.16 13:34:37 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\AVG
  351. [2012.04.16 13:32:58 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2012
  352. [2012.04.16 13:32:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\AVG
  353. [2012.04.16 13:31:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
  354. [2012.04.16 13:28:30 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
  355. [2012.04.16 13:10:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  356. [2012.04.16 13:10:32 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  357.  
  358. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  359.  
  360. [2012.05.12 13:46:06 | 000,000,954 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-217405644-4294294696-3901680381-1000UA.job
  361. [2012.05.12 13:39:33 | 097,952,128 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm
  362. [2012.05.12 13:32:18 | 000,021,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  363. [2012.05.12 13:32:18 | 000,021,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  364. [2012.05.12 13:28:15 | 000,738,238 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  365. [2012.05.12 13:28:15 | 000,148,666 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  366. [2012.05.12 13:28:15 | 000,006,430 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  367. [2012.05.12 13:23:51 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\marija\Desktop\OTL.exe
  368. [2012.05.12 13:20:54 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini
  369. [2012.05.12 13:20:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  370. [2012.05.12 13:20:25 | 2902,646,784 | -HS- | M] () -- C:\hiberfil.sys
  371. [2012.05.11 21:52:11 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-217405644-4294294696-3901680381-1000Core.job
  372. [2012.05.11 20:06:55 | 000,625,339 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\iavifw.avm
  373. [2012.05.11 17:03:02 | 000,001,947 | ---- | M] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
  374. [2012.05.10 21:18:19 | 000,125,012 | ---- | M] () -- C:\Users\marija\Desktop\screen.jpg
  375. [2012.05.10 21:17:31 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  376. [2012.05.10 20:34:53 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
  377. [2012.05.07 22:22:09 | 000,000,967 | ---- | M] () -- C:\Users\marija\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
  378. [2012.04.23 17:03:22 | 000,001,166 | ---- | M] () -- C:\Users\marija\Application Data\Microsoft\Internet Explorer\Quick Launch\AVG PC Tuneup 2011.lnk
  379. [2012.04.23 17:03:22 | 000,001,142 | ---- | M] () -- C:\Users\marija\Desktop\AVG PC Tuneup 2011.lnk
  380. [2012.04.16 13:34:37 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm
  381. [2012.04.16 13:34:37 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\iavifw.avm
  382. [2012.04.16 13:34:37 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
  383.  
  384. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  385.  
  386. [2012.05.12 13:39:33 | 097,952,128 | ---- | C] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm
  387. [2012.05.11 20:06:55 | 000,625,339 | ---- | C] () -- C:\Windows\SysNative\drivers\AVG\iavifw.avm
  388. [2012.05.11 17:03:02 | 000,001,947 | ---- | C] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
  389. [2012.05.11 17:03:02 | 000,001,905 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
  390. [2012.05.10 21:05:45 | 000,125,012 | ---- | C] () -- C:\Users\marija\Desktop\screen.jpg
  391. [2012.05.10 20:34:53 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
  392. [2012.05.07 22:22:09 | 000,000,967 | ---- | C] () -- C:\Users\marija\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
  393. [2012.05.07 21:41:43 | 000,000,954 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-217405644-4294294696-3901680381-1000UA.job
  394. [2012.05.07 21:41:41 | 000,000,902 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-217405644-4294294696-3901680381-1000Core.job
  395. [2012.04.23 17:03:22 | 000,001,166 | ---- | C] () -- C:\Users\marija\Application Data\Microsoft\Internet Explorer\Quick Launch\AVG PC Tuneup 2011.lnk
  396. [2012.04.23 17:03:22 | 000,001,142 | ---- | C] () -- C:\Users\marija\Desktop\AVG PC Tuneup 2011.lnk
  397. [2012.04.16 13:34:37 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\incavi.avm
  398. [2012.04.16 13:34:37 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\iavifw.avm
  399. [2012.04.16 13:34:37 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
  400. [2012.04.16 13:10:47 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
  401. [2012.04.06 03:29:34 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  402. [2012.04.06 03:29:34 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  403. [2011.12.21 18:53:32 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  404. [2011.12.21 13:41:39 | 000,776,486 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  405. [2011.12.21 13:29:03 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  406. [2011.12.21 13:29:02 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
  407. [2011.12.21 13:29:00 | 000,810,496 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  408. [2011.12.21 13:29:00 | 000,183,808 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  409. [2011.12.21 13:29:00 | 000,080,896 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  410. [2011.12.21 13:25:30 | 000,921,665 | ---- | C] () -- C:\Windows\SysWow64\msvcrt-ruby18.dll
  411. [2011.12.21 13:25:30 | 000,271,264 | ---- | C] () -- C:\Windows\SysWow64\vbrun100.dll
  412. [2011.12.21 13:25:30 | 000,210,944 | ---- | C] () -- C:\Windows\SysWow64\msvcrt10.dll
  413. [2011.12.21 13:25:30 | 000,027,136 | ---- | C] () -- C:\Windows\SysWow64\pythonw.exe
  414. [2011.12.21 13:25:30 | 000,026,624 | ---- | C] () -- C:\Windows\SysWow64\python.exe
  415. [2011.12.21 13:25:30 | 000,020,537 | ---- | C] () -- C:\Windows\SysWow64\rubyw.exe
  416. [2011.12.21 13:25:30 | 000,020,536 | ---- | C] () -- C:\Windows\SysWow64\ruby.exe
  417. [2011.03.17 18:51:46 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  418.  
  419. [color=#E56717]========== Alternate Data Streams ==========[/color]
  420.  
  421. @Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:0B4227B4
  422. @Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:0B4227B4
  423.  
  424. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!