API tools faq
paste
Advertisement
Guest User

OTL-Logfile

a guest
Jul 23rd, 2013
22
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 60.03 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 7/23/2013 2:11:21 PM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dominic\Downloads
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16635)
  5. Locale: 00000409 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
  6.  
  7. 15.98 Gb Total Physical Memory | 13.35 Gb Available Physical Memory | 83.55% Memory free
  8. 31.96 Gb Paging File | 28.87 Gb Available in Paging File | 90.31% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 103.14 Gb Total Space | 7.20 Gb Free Space | 6.98% Space Free | Partition Type: NTFS
  13. Drive D: | 931.51 Gb Total Space | 427.13 Gb Free Space | 45.85% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: DOMINIC-PC | User Name: Dominic | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2013/07/23 14:10:06 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dominic\Downloads\OTL.exe
  22. PRC - [2013/07/23 07:40:03 | 001,992,328 | ---- | M] () -- C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
  23. PRC - [2013/07/12 20:49:47 | 000,846,288 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. PRC - [2013/07/10 22:08:53 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  25. PRC - [2013/06/28 14:02:06 | 002,255,184 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
  26. PRC - [2013/06/27 14:07:51 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
  27. PRC - [2013/06/27 14:07:40 | 000,345,144 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
  28. PRC - [2013/06/27 14:07:40 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
  29. PRC - [2013/06/16 08:14:16 | 000,802,136 | ---- | M] (BitTorrent Inc.) -- D:\U Torrent\uTorrent.exe
  30. PRC - [2013/06/06 23:59:45 | 001,925,656 | ---- | M] (Aeria Games & Entertainment) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
  31. PRC - [2013/06/06 08:01:43 | 000,169,640 | ---- | M] (APN LLC.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
  32. PRC - [2013/06/06 08:01:35 | 001,495,712 | ---- | M] (APN) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
  33. PRC - [2013/06/05 18:40:38 | 000,364,112 | ---- | M] (http://www.goforfiles.com/) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe
  34. PRC - [2013/06/05 01:01:52 | 004,489,472 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Dominic\AppData\Local\Akamai\netsession_win.exe
  35. PRC - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  36. PRC - [2013/04/23 09:48:17 | 010,244,448 | ---- | M] (TeamViewer GmbH) -- C:\Users\Dominic\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe
  37. PRC - [2013/04/23 09:48:17 | 004,171,104 | ---- | M] (TeamViewer GmbH) -- c:\users\dominic\appdata\local\temp\teamviewer\version8\TeamViewer_Desktop.exe
  38. PRC - [2013/04/23 09:40:59 | 000,193,888 | ---- | M] (TeamViewer GmbH) -- C:\Users\Dominic\AppData\Local\Temp\TeamViewer\Version8\tv_w32.exe
  39. PRC - [2013/03/15 07:53:06 | 001,266,464 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  40. PRC - [2013/03/14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  41. PRC - [2012/08/27 13:12:30 | 001,121,016 | ---- | M] (Bogdan Sharkov) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
  42. PRC - [2012/01/19 13:30:04 | 000,114,992 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
  43. PRC - [2011/10/12 12:22:02 | 000,218,408 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
  44. PRC - [2011/10/12 12:22:01 | 000,321,832 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
  45. PRC - [2011/10/12 12:22:00 | 000,214,312 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLMSService.exe
  46. PRC - [2011/08/31 12:35:01 | 000,185,640 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
  47. PRC - [2011/08/11 05:58:26 | 000,627,304 | ---- | M] () -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
  48. PRC - [2011/07/29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
  49. PRC - [2011/05/30 04:54:14 | 000,036,456 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
  50. PRC - [2011/05/13 02:59:00 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
  51. PRC - [2011/04/22 18:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe
  52. PRC - [2011/04/02 23:34:42 | 000,340,848 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
  53. PRC - [2011/04/02 23:09:38 | 000,173,424 | ---- | M] (Egis Technology Inc. ) -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
  54. PRC - [2011/03/29 04:49:06 | 000,408,432 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
  55. PRC - [2011/03/29 04:48:54 | 000,202,608 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
  56. PRC - [2010/12/13 15:37:16 | 000,135,536 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
  57. PRC - [2010/11/24 22:08:06 | 000,021,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Common Files\Intel\Intel Extreme Tuning Utility\PerfTuneService.exe
  58. PRC - [2010/09/14 04:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  59. PRC - [2010/05/04 21:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
  60.  
  61.  
  62. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  63.  
  64. MOD - [2013/07/23 07:40:03 | 001,992,328 | ---- | M] () -- C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
  65. MOD - [2013/07/12 20:49:44 | 000,396,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
  66. MOD - [2013/07/12 20:49:43 | 013,599,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
  67. MOD - [2013/07/12 20:49:42 | 004,052,944 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll
  68. MOD - [2013/07/12 20:48:52 | 000,601,552 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\libglesv2.dll
  69. MOD - [2013/07/12 20:48:51 | 000,123,344 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\libegl.dll
  70. MOD - [2013/07/12 20:48:49 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ffmpegsumo.dll
  71. MOD - [2013/07/12 12:23:54 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\9a5879b4dd5bbfb9ddf7b3c3557705d8\System.Management.ni.dll
  72. MOD - [2013/07/12 12:22:49 | 000,787,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\3bd9827250aa3b940842ad88faeea546\System.EnterpriseServices.ni.dll
  73. MOD - [2013/07/12 12:22:49 | 000,649,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\e530f142251fb9ed307b2c680bc3e59c\System.Transactions.ni.dll
  74. MOD - [2013/07/12 12:22:49 | 000,236,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\3bd9827250aa3b940842ad88faeea546\System.EnterpriseServices.Wrapper.dll
  75. MOD - [2013/07/12 12:22:48 | 002,647,552 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\a6c1bfa66e0c02057bd59138e48db3ad\System.Runtime.Serialization.ni.dll
  76. MOD - [2013/07/12 12:22:31 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cb4cf75e03a2ece5f14766e9175f47e6\System.Xaml.ni.dll
  77. MOD - [2013/07/11 07:15:47 | 018,003,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ec4178796e7d9e9b088b26997a6dc866\PresentationFramework.ni.dll
  78. MOD - [2013/07/11 07:15:39 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b9d6e1198b5cf137fc0d97f0930fd3e4\PresentationCore.ni.dll
  79. MOD - [2013/07/11 07:15:38 | 006,817,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\860349acf665c9efa5de11e159a8bb8a\System.Data.ni.dll
  80. MOD - [2013/07/11 07:15:37 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\88b9d1c2090f7f3e0e61833ec101923c\System.Windows.Forms.ni.dll
  81. MOD - [2013/07/11 07:15:34 | 007,070,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\fbd506dcd9a25540d1e5bf95c7bcd896\System.Core.ni.dll
  82. MOD - [2013/07/11 07:15:32 | 005,628,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\6af6587a49ca918291917ca318dabbbc\System.Xml.ni.dll
  83. MOD - [2013/07/11 07:15:32 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\02309fbbabbd12cfb07d79a684f4c821\WindowsBase.ni.dll
  84. MOD - [2013/07/11 07:15:31 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\67dd6be3025ef27a6c035a656ae85b63\PresentationFramework.Aero.ni.dll
  85. MOD - [2013/07/11 07:15:30 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\203d9fcb7dfa54b7923d01ca8bfea8d0\System.Drawing.ni.dll
  86. MOD - [2013/07/11 07:15:30 | 001,013,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\af542b07d5ab8851604628f895888336\System.Configuration.ni.dll
  87. MOD - [2013/07/11 07:15:29 | 009,099,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\1c0a3dbd8b8c2033b811036ff7043ef3\System.ni.dll
  88. MOD - [2013/07/11 07:11:55 | 014,418,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c799474a067f07ef3a167d75029fa012\mscorlib.ni.dll
  89. MOD - [2013/02/12 10:31:06 | 002,010,624 | ---- | M] () -- D:\ManyCam\Bin\opencv_core220.dll
  90. MOD - [2013/02/12 10:31:06 | 001,241,088 | ---- | M] () -- D:\ManyCam\Bin\opencv_imgproc220.dll
  91. MOD - [2011/10/12 12:22:01 | 000,321,832 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
  92. MOD - [2011/10/12 12:22:00 | 000,370,984 | ---- | M] () -- C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
  93. MOD - [2011/08/11 05:58:26 | 000,627,304 | ---- | M] () -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
  94. MOD - [2011/08/11 05:57:22 | 000,151,656 | ---- | M] () -- C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyHook.dll
  95. MOD - [2011/07/29 01:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
  96. MOD - [2011/07/29 01:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
  97.  
  98.  
  99. [color=#E56717]========== Services (SafeList) ==========[/color]
  100.  
  101. SRV:[b]64bit:[/b] - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
  102. SRV:[b]64bit:[/b] - [2011/08/05 12:53:12 | 000,467,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
  103. SRV:[b]64bit:[/b] - [2011/08/05 12:53:12 | 000,306,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)
  104. SRV:[b]64bit:[/b] - [2011/08/05 12:53:06 | 008,277,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
  105. SRV:[b]64bit:[/b] - [2011/04/22 18:44:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Live Updater Service)
  106. SRV:[b]64bit:[/b] - [2010/12/13 15:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
  107. SRV:[b]64bit:[/b] - [2010/09/23 03:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  108. SRV:[b]64bit:[/b] - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  109. SRV - [2013/07/10 22:08:53 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  110. SRV - [2013/06/28 14:02:04 | 002,470,736 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
  111. SRV - [2013/06/27 14:07:51 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
  112. SRV - [2013/06/27 14:07:40 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
  113. SRV - [2013/06/26 22:36:07 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  114. SRV - [2013/06/07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  115. SRV - [2013/06/06 08:01:43 | 000,169,640 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
  116. SRV - [2013/06/03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  117. SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  118. SRV - [2013/04/23 08:48:26 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Paused] -- D:\SMITE\HiPatchService.exe -- (HiPatchService)
  119. SRV - [2013/03/15 07:53:06 | 001,266,464 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  120. SRV - [2013/03/14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  121. SRV - [2013/01/28 14:19:28 | 002,402,080 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
  122. SRV - [2012/02/14 16:49:12 | 000,736,104 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
  123. SRV - [2011/11/28 23:38:00 | 004,229,912 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
  124. SRV - [2011/06/07 22:25:12 | 000,191,752 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
  125. SRV - [2011/05/30 04:54:14 | 000,036,456 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe -- (GREGService)
  126. SRV - [2011/05/13 02:59:00 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
  127. SRV - [2011/04/02 23:09:38 | 000,173,424 | ---- | M] (Egis Technology Inc. ) [Auto | Running] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service)
  128. SRV - [2010/11/24 22:08:06 | 000,021,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intel\Intel Extreme Tuning Utility\PerfTuneService.exe -- (XTUService)
  129. SRV - [2010/10/12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  130. SRV - [2010/09/14 04:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  131. SRV - [2010/05/04 21:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
  132. SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  133. SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  134.  
  135.  
  136. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  137.  
  138. DRV:[b]64bit:[/b] - [2013/04/25 07:18:28 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
  139. DRV:[b]64bit:[/b] - [2013/04/25 07:18:28 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
  140. DRV:[b]64bit:[/b] - [2013/04/25 07:18:28 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
  141. DRV:[b]64bit:[/b] - [2013/01/31 11:50:58 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
  142. DRV:[b]64bit:[/b] - [2012/12/19 07:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  143. DRV:[b]64bit:[/b] - [2012/10/11 05:08:10 | 000,044,928 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
  144. DRV:[b]64bit:[/b] - [2012/08/23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  145. DRV:[b]64bit:[/b] - [2012/08/23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  146. DRV:[b]64bit:[/b] - [2012/08/23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  147. DRV:[b]64bit:[/b] - [2012/08/03 07:00:06 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
  148. DRV:[b]64bit:[/b] - [2012/08/03 07:00:06 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
  149. DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  150. DRV:[b]64bit:[/b] - [2012/01/05 01:01:54 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
  151. DRV:[b]64bit:[/b] - [2011/11/30 23:09:34 | 000,358,576 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1c62x64.sys -- (e1cexpress)
  152. DRV:[b]64bit:[/b] - [2011/07/13 10:49:19 | 000,062,776 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
  153. DRV:[b]64bit:[/b] - [2011/07/13 10:49:19 | 000,022,648 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
  154. DRV:[b]64bit:[/b] - [2011/07/13 10:49:19 | 000,020,520 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
  155. DRV:[b]64bit:[/b] - [2011/06/30 08:03:04 | 000,054,784 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
  156. DRV:[b]64bit:[/b] - [2011/06/30 08:03:02 | 000,077,696 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
  157. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  158. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  159. DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  160. DRV:[b]64bit:[/b] - [2010/10/19 10:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  161. DRV:[b]64bit:[/b] - [2010/09/14 03:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  162. DRV:[b]64bit:[/b] - [2010/08/18 10:28:32 | 000,026,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT)
  163. DRV:[b]64bit:[/b] - [2010/08/11 05:40:06 | 001,014,624 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
  164. DRV:[b]64bit:[/b] - [2010/06/09 20:00:14 | 000,028,544 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\intelsmb.sys -- (smbusp)
  165. DRV:[b]64bit:[/b] - [2009/09/23 03:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
  166. DRV:[b]64bit:[/b] - [2009/09/23 03:46:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
  167. DRV:[b]64bit:[/b] - [2009/09/23 03:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
  168. DRV:[b]64bit:[/b] - [2009/09/23 03:32:35 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd)
  169. DRV:[b]64bit:[/b] - [2009/09/23 03:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
  170. DRV:[b]64bit:[/b] - [2009/09/16 07:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t)
  171. DRV:[b]64bit:[/b] - [2009/08/13 23:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  172. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  173. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  174. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  175. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  176. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  177. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  178. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  179. DRV:[b]64bit:[/b] - [2009/03/18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  180. DRV:[b]64bit:[/b] - [2009/02/03 17:46:14 | 000,077,952 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfsync04.sys -- (sfsync04)
  181. DRV:[b]64bit:[/b] - [2009/02/03 17:40:13 | 000,077,432 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfdrv01a.sys -- (sfdrv01a)
  182. DRV:[b]64bit:[/b] - [2009/02/03 17:37:50 | 000,075,384 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)
  183. DRV:[b]64bit:[/b] - [2007/02/08 19:47:24 | 000,107,384 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02)
  184. DRV:[b]64bit:[/b] - [2006/06/14 16:58:10 | 000,014,192 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)
  185. DRV - [2013/07/21 10:51:15 | 000,021,712 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\DrvAgent64.SYS -- (DrvAgent64)
  186. DRV - [2012/11/16 16:51:26 | 000,011,880 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
  187. DRV - [2010/09/16 00:30:50 | 000,034,304 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\ProgramData\Intel\Extreme Tuning Utility\IOCbios\64bit\iOCbios.sys -- (IOCBIOS)
  188. DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  189. DRV - [2005/01/03 17:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
  190.  
  191.  
  192. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  193.  
  194.  
  195. [color=#E56717]========== Internet Explorer ==========[/color]
  196.  
  197. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  198. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
  199. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  200. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
  201.  
  202. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
  203. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ch.msn.com/
  204. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-CH
  205. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9A 7E A4 6C D9 5D CE 01 [binary data]
  206. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  207. IE - HKCU\..\SearchScopes\{9B337247-2074-4372-BF1C-1F3BCE4346D9}: "URL" = http://asksearch.ask.com/redirect?client=ie&src=kw&tb=MYC3&itbv=11.7.1.77&o=APN10457&locale=de_EU&apn_uid=1C0487D3-7C5C-4E9F-8799-5B60380B83A5&apn_ptnrs=^AKH&apn_dtid=^YYYYYY^YY^CH&apn_dbr=ff_19.0&doi=2013-03-19&q={searchTerms}&
  208. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  209. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  210.  
  211. [color=#E56717]========== FireFox ==========[/color]
  212.  
  213. FF - prefs.js..browser.search.defaultengine: "Ask Search"
  214. FF - prefs.js..browser.search.defaultenginename: "Ask Search"
  215. FF - prefs.js..browser.search.order.1: "Ask Search"
  216. FF - prefs.js..browser.search.selectedEngine: "Google"
  217. FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.145
  218. FF - prefs.js..extensions.enabledAddons: stealthyextension%40gmail.com:2.5
  219. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
  220. FF - prefs.js..network.proxy.ftp: "87.230.23.54"
  221. FF - prefs.js..network.proxy.ftp_port: 8088
  222. FF - prefs.js..network.proxy.http: "87.230.23.54"
  223. FF - prefs.js..network.proxy.http_port: 8088
  224. FF - prefs.js..network.proxy.no_proxies_on: ", stealthy.co"
  225. FF - prefs.js..network.proxy.share_proxy_settings: true
  226. FF - prefs.js..network.proxy.socks: "87.230.23.54"
  227. FF - prefs.js..network.proxy.socks_port: 8088
  228. FF - prefs.js..network.proxy.ssl: "87.230.23.54"
  229. FF - prefs.js..network.proxy.ssl_port: 8088
  230. FF - prefs.js..network.proxy.type: 0
  231. FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
  232. FF - user.js - File not found
  233.  
  234. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
  235. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
  236. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
  237. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  238. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  239. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
  240. FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
  241. FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
  242. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  243. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  244. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
  245. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  246. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  247. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  248. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  249. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  250. FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
  251. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  252. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  253. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  254. FF - HKLM\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\Users\Dominic\AppData\LocalLow\Sony Online Entertainment\npsoe.dll ()
  255. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  256. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  257. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\3\NP_wtapp.dll ()
  258. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  259. FF - HKCU\Software\MozillaPlugins\@eximion.com/KalydoPlayer: C:\Users\Dominic\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
  260. FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  261.  
  262. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/01/20 22:02:20 | 000,000,000 | ---D | M]
  263. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/06/26 22:36:05 | 000,000,000 | ---D | M]
  264.  
  265. [2012/01/14 17:12:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominic\AppData\Roaming\mozilla\Extensions
  266. [2013/06/08 07:34:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominic\AppData\Roaming\mozilla\Firefox\Profiles\zaa45bp0.default\extensions
  267. [2013/02/09 20:45:08 | 000,185,839 | ---- | M] () (No name found) -- C:\Users\Dominic\AppData\Roaming\mozilla\firefox\profiles\zaa45bp0.default\extensions\stealthyextension@gmail.com.xpi
  268. [2013/06/08 07:34:16 | 000,447,078 | ---- | M] () (No name found) -- C:\Users\Dominic\AppData\Roaming\mozilla\firefox\profiles\zaa45bp0.default\extensions\toolbar_MYC3@apn.ask.com.xpi
  269. [2013/01/08 07:48:00 | 000,190,000 | ---- | M] () (No name found) -- C:\Users\Dominic\AppData\Roaming\mozilla\firefox\profiles\zaa45bp0.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
  270. [2013/06/07 14:52:39 | 000,002,510 | ---- | M] () -- C:\Users\Dominic\AppData\Roaming\mozilla\firefox\profiles\zaa45bp0.default\searchplugins\ask-search.xml
  271. [2012/01/30 20:08:14 | 000,003,915 | ---- | M] () -- C:\Users\Dominic\AppData\Roaming\mozilla\firefox\profiles\zaa45bp0.default\searchplugins\sweetim.xml
  272. [2013/06/26 22:36:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  273. [2013/06/26 22:36:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  274. [2012/01/20 22:02:20 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 &lt;video&gt;) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
  275.  
  276. [color=#E56717]========== Chrome ==========[/color]
  277.  
  278. CHR - default_search_provider: Google (Enabled)
  279. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
  280. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
  281. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
  282. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  283. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
  284. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll
  285. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
  286. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL
  287. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
  288. CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
  289. CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
  290. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
  291. CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll
  292. CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
  293. CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
  294. CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
  295. CHR - plugin: WildTangent Games App V2 Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\3\NP_wtapp.dll
  296. CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  297. CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll
  298. CHR - plugin: SOE Web Installer (Enabled) = C:\Users\Dominic\AppData\LocalLow\Sony Online Entertainment\npsoe.dll
  299. CHR - plugin: Kalydo Player Plugin for Mozilla (Enabled) = C:\Users\Dominic\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll
  300. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll
  301. CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
  302. CHR - Extension: Google Docs = C:\Users\Dominic\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  303. CHR - Extension: Google Drive = C:\Users\Dominic\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  304. CHR - Extension: YouTube = C:\Users\Dominic\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  305. CHR - Extension: Google-Suche = C:\Users\Dominic\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  306. CHR - Extension: Mehr Leistung und Videoformate f\u00FCr dein HTML5 \u003Cvideo\u003E = C:\Users\Dominic\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
  307. CHR - Extension: Google Mail = C:\Users\Dominic\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  308.  
  309. O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  310. O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
  311. O2:[b]64bit:[/b] - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
  312. O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
  313. O2 - BHO: (Ask Toolbar) - {4D594333-0076-A76A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MYC3\Passport.dll (APN LLC.)
  314. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  315. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
  316. O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
  317. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  318. O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
  319. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  320. O3 - HKLM\..\Toolbar: (Ask Toolbar) - {4D594333-0076-A76A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\MYC3\Passport.dll (APN LLC.)
  321. O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
  322. O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
  323. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  324. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  325. O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
  326. O4:[b]64bit:[/b] - HKLM..\Run: [Zune Launcher] C:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)
  327. O4 - HKLM..\Run: [Aeria Ignite] C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe (Aeria Games & Entertainment)
  328. O4 - HKLM..\Run: [ApnTBMon] C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
  329. O4 - HKLM..\Run: [ArcadeMovieService] C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (CyberLink Corp.)
  330. O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
  331. O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
  332. O4 - HKLM..\Run: [EgisTecPMMUpdate] C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (Egis Technology Inc.)
  333. O4 - HKLM..\Run: [EgisUpdate] C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Egis Technology Inc.)
  334. O4 - HKLM..\Run: [Hotkey Utility] C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe ()
  335. O4 - HKLM..\Run: [LifeCam] C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
  336. O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
  337. O4 - HKLM..\Run: [SuiteTray] C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.)
  338. O4 - HKLM..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
  339. O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Dominic\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
  340. O4 - HKCU..\Run: [Clownfish] C:\Program Files (x86)\Clownfish\Clownfish.exe (Bogdan Sharkov)
  341. O4 - HKCU..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
  342. O4 - HKCU..\Run: [uTorrent] D:\U Torrent\uTorrent.exe (BitTorrent Inc.)
  343. O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
  344. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  345. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  346. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  347. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  348. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  349. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  350. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  351. O8:[b]64bit:[/b] - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
  352. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
  353. O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
  354. O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
  355. O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
  356. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
  357. O13[b]64bit:[/b] - gopher Prefix: missing
  358. O13 - gopher Prefix: missing
  359. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  360. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1F129AB7-6965-44B5-B7AF-EC4C5F374D39}: DhcpNameServer = 192.168.1.1
  361. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{29634B0F-385F-4804-9ED5-F602F1D55810}: DhcpNameServer = 7.254.254.254
  362. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2C8BEA90-AC95-4327-B4BC-FE2F0B31ED38}: DhcpNameServer = 192.168.1.1
  363. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1A2BBF1-DF83-4633-A2CA-49128CFDE4AA}: DhcpNameServer = 192.168.1.1
  364. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  365. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  366. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  367. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  368. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  369. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  370. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  371. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  372. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  373. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  374. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  375. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  376. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  377. O32 - HKLM CDRom: AutoRun - 1
  378. O33 - MountPoints2\{ed6bf029-b648-11e1-9e50-f80f4121a580}\Shell - "" = AutoRun
  379. O33 - MountPoints2\{ed6bf029-b648-11e1-9e50-f80f4121a580}\Shell\AutoRun\command - "" = K:\Start.exe
  380. O34 - HKLM BootExecute: (autocheck autochk *)
  381. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  382. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  383. O35 - HKLM\..comfile [open] -- "%1" %*
  384. O35 - HKLM\..exefile [open] -- "%1" %*
  385. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  386. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  387. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  388. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  389. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  390. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  391. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  392.  
  393. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  394.  
  395. [2013/07/23 14:09:18 | 000,000,000 | ---D | C] -- C:\Users\Dominic\AppData\Roaming\Malwarebytes
  396. [2013/07/23 14:09:09 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  397. [2013/07/23 14:09:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  398. [2013/07/23 14:09:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  399. [2013/07/23 14:09:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  400. [2013/07/21 10:51:15 | 000,021,712 | ---- | C] (Phoenix Technologies) -- C:\Windows\SysWow64\drivers\DrvAgent64.SYS
  401. [2013/07/21 10:51:15 | 000,000,000 | ---D | C] -- C:\Users\Dominic\AppData\Local\eSupport.com
  402. [2013/07/18 08:54:06 | 000,000,000 | ---D | C] -- C:\Users\Dominic\AppData\Local\Aeria Games
  403. [2013/07/18 08:53:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Aeria Games
  404. [2013/07/18 08:50:04 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\AI_RecycleBin
  405. [2013/07/18 08:50:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AeriaGames
  406. [2013/07/18 08:50:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Aeria Games
  407. [2013/07/18 08:50:02 | 000,000,000 | ---D | C] -- C:\Users\Dominic\AppData\Roaming\Aeria Games & Entertainment
  408. [2013/07/18 08:21:53 | 000,000,000 | ---D | C] -- C:\AeriaGames
  409. [2013/07/13 08:13:32 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
  410. [2013/07/11 07:12:27 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  411. [2013/07/11 07:12:27 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  412. [2013/07/11 07:12:27 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  413. [2013/07/11 07:12:27 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  414. [2013/07/11 07:12:27 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  415. [2013/07/11 07:12:27 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  416. [2013/07/11 07:12:27 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  417. [2013/07/11 07:12:27 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  418. [2013/07/11 07:12:27 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  419. [2013/07/11 07:12:26 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  420. [2013/07/11 07:12:26 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  421. [2013/07/11 07:12:26 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  422. [2013/07/11 07:12:25 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  423. [2013/07/10 15:31:30 | 001,887,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
  424. [2013/07/10 15:31:30 | 001,620,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
  425. [2013/07/10 15:31:30 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
  426. [2013/07/10 15:31:30 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
  427. [2013/07/10 15:31:14 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
  428. [2013/07/03 08:33:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
  429. [2013/07/03 08:33:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
  430. [2013/06/26 22:36:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  431. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  432.  
  433. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  434.  
  435. [2013/07/23 14:11:24 | 000,025,552 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  436. [2013/07/23 14:11:24 | 000,025,552 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  437. [2013/07/23 14:10:33 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  438. [2013/07/23 14:10:33 | 000,698,514 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
  439. [2013/07/23 14:10:33 | 000,652,496 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  440. [2013/07/23 14:10:33 | 000,148,570 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
  441. [2013/07/23 14:10:33 | 000,121,428 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  442. [2013/07/23 14:09:10 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  443. [2013/07/23 14:04:19 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  444. [2013/07/23 14:04:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  445. [2013/07/23 14:04:10 | 4280,786,942 | -HS- | M] () -- C:\hiberfil.sys
  446. [2013/07/23 13:59:20 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  447. [2013/07/22 07:59:43 | 000,418,432 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  448. [2013/07/21 13:57:18 | 000,008,192 | ---- | M] () -- C:\wubildr.mbr
  449. [2013/07/21 12:14:02 | 000,135,595 | ---- | M] () -- C:\wubildr
  450. [2013/07/21 10:51:15 | 000,021,712 | ---- | M] (Phoenix Technologies) -- C:\Windows\SysWow64\drivers\DrvAgent64.SYS
  451. [2013/07/18 08:52:37 | 000,000,850 | ---- | M] () -- C:\Users\Dominic\Desktop\ScarletBlade-DE.lnk
  452. [2013/07/18 08:50:03 | 000,002,032 | ---- | M] () -- C:\Users\Public\Desktop\Aeria Ignite.lnk
  453. [2013/07/17 16:24:34 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  454. [2013/07/17 16:24:34 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  455. [2013/07/13 14:05:27 | 000,002,187 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  456. [2013/07/11 18:20:09 | 000,291,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
  457. [2013/07/11 18:20:09 | 000,291,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
  458. [2013/07/10 22:51:26 | 000,291,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  459. [2013/07/10 22:08:53 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
  460. [2013/07/03 08:33:51 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
  461. [2013/06/27 14:07:54 | 000,083,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
  462. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  463.  
  464. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  465.  
  466. [2013/07/23 14:09:10 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  467. [2013/07/21 13:57:18 | 000,008,192 | ---- | C] () -- C:\wubildr.mbr
  468. [2013/07/21 12:14:02 | 000,135,595 | ---- | C] () -- C:\wubildr
  469. [2013/07/18 08:52:37 | 000,000,850 | ---- | C] () -- C:\Users\Dominic\Desktop\ScarletBlade-DE.lnk
  470. [2013/07/18 08:50:03 | 000,002,032 | ---- | C] () -- C:\Users\Public\Desktop\Aeria Ignite.lnk
  471. [2013/02/28 17:40:33 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
  472. [2012/11/25 19:52:40 | 000,007,598 | ---- | C] () -- C:\Users\Dominic\AppData\Local\Resmon.ResmonCfg
  473. [2012/10/19 12:31:14 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
  474. [2012/09/14 20:52:41 | 000,000,857 | ---- | C] () -- C:\Windows\client.config.ini
  475. [2012/06/16 18:41:54 | 000,291,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  476. [2012/06/16 18:41:53 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  477. [2012/01/29 23:33:09 | 001,593,186 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  478. [2012/01/28 15:54:54 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  479. [2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
  480.  
  481. [color=#E56717]========== ZeroAccess Check ==========[/color]
  482.  
  483. [2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  484.  
  485. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  486.  
  487. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  488.  
  489. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  490.  
  491. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  492.  
  493. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  494. "" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
  495. "ThreadingModel" = Apartment
  496.  
  497. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  498. "" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
  499. "ThreadingModel" = Apartment
  500.  
  501. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  502. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  503. "ThreadingModel" = Free
  504.  
  505. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  506. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  507. "ThreadingModel" = Free
  508.  
  509. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  510. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  511. "ThreadingModel" = Both
  512.  
  513. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  514.  
  515. [color=#E56717]========== LOP Check ==========[/color]
  516.  
  517. [2013/07/18 08:50:02 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Aeria Games & Entertainment
  518. [2013/05/09 07:20:01 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Awesomium
  519. [2012/10/17 19:02:16 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Fatshark
  520. [2012/09/12 16:09:06 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\FOG Downloader
  521. [2012/09/12 19:05:21 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\gamigoGr
  522. [2012/09/12 18:43:29 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\GetRightToGo
  523. [2013/06/05 18:40:39 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\GoforFiles
  524. [2012/09/14 20:47:44 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Kalydo
  525. [2012/09/12 18:43:40 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\launcher
  526. [2013/03/19 22:34:54 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\ManyCam
  527. [2012/09/12 18:43:40 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Martial Empires Launcher
  528. [2012/09/12 18:49:48 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Martial EmpiresLauncher
  529. [2012/12/24 00:58:47 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien
  530. [2012/10/20 22:46:45 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Mount&Blade
  531. [2012/02/05 14:12:40 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Mount&Blade Warband
  532. [2012/10/08 22:06:43 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Mount&Blade With Fire and Sword
  533. [2012/01/14 12:34:37 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\OEM
  534. [2012/11/24 17:02:45 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Origin
  535. [2012/09/12 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Repair DE
  536. [2012/09/12 18:56:40 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\rtool
  537. [2012/11/20 21:11:24 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Sony Online Entertainment
  538. [2013/07/21 19:43:28 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\TeamViewer
  539. [2012/01/31 07:34:54 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\The Creative Assembly
  540. [2013/07/21 13:09:34 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\TS3Client
  541. [2013/04/24 09:22:38 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\TuneUp Software
  542. [2012/04/02 21:41:08 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\Tunngle
  543. [2013/07/23 14:14:26 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\uTorrent
  544. [2012/11/09 14:34:12 | 000,000,000 | ---D | M] -- C:\Users\Dominic\AppData\Roaming\WildTangent
  545.  
  546. [color=#E56717]========== Purity Check ==========[/color]
  547.  
  548.  
  549.  
  550. [color=#E56717]========== Alternate Data Streams ==========[/color]
  551.  
  552. @Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:CB0AACC9
  553.  
  554. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!