API tools faq
paste
Advertisement
Guest User

OTL.Txt

a guest
Apr 20th, 2012
216
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 52.81 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 4/20/2012 1:34:21 PM - Run 1
  2. OTL by OldTimer - Version 3.2.40.0 Folder = C:\Users\Daniel\Desktop
  3. 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 4.00 Gb Total Physical Memory | 2.48 Gb Available Physical Memory | 61.89% Memory free
  8. 8.00 Gb Paging File | 6.48 Gb Available in Paging File | 81.00% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 297.99 Gb Total Space | 66.67 Gb Free Space | 22.37% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
  16. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2012/04/20 13:33:07 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe
  21. PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  22. PRC - [2012/04/04 15:56:38 | 000,981,680 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  23. PRC - [2012/03/17 17:16:40 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  24. PRC - [2012/03/06 19:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  25. PRC - [2012/03/06 19:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  26. PRC - [2009/07/16 11:07:54 | 000,178,744 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
  27. PRC - [2009/07/13 21:14:45 | 000,020,480 | ---- | M] () -- \\.\globalroot\systemroot\svchost.exe
  28. PRC - [2009/07/13 21:14:45 | 000,020,480 | ---- | M] () -- \\.\globalroot\systemroot\svchost.exe
  29. PRC - [2009/07/13 21:14:45 | 000,020,480 | ---- | M] () -- \\.\globalroot\systemroot\svchost.exe
  30. PRC - [2009/06/19 11:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
  31. PRC - [2009/06/15 18:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
  32. PRC - [2008/12/22 18:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
  33. PRC - [2008/08/13 22:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
  34. PRC - [2007/08/08 01:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe
  35.  
  36.  
  37. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  38.  
  39. MOD - [2012/04/13 14:39:34 | 008,797,344 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll
  40. MOD - [2012/03/17 17:16:39 | 001,969,080 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  41.  
  42.  
  43. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  44.  
  45. SRV:[b]64bit:[/b] - [2012/03/06 19:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  46. SRV:[b]64bit:[/b] - [2011/08/11 19:38:04 | 000,140,672 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)
  47. SRV:[b]64bit:[/b] - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  48. SRV:[b]64bit:[/b] - [2007/08/08 01:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
  49. SRV - [2012/04/13 14:39:34 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  50. SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  51. SRV - [2011/03/16 11:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  52. SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  53. SRV - [2009/06/15 18:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
  54. SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  55.  
  56.  
  57. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  58.  
  59. DRV:[b]64bit:[/b] - [2012/04/04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  60. DRV:[b]64bit:[/b] - [2012/03/06 19:04:06 | 000,819,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  61. DRV:[b]64bit:[/b] - [2012/03/06 19:04:04 | 000,337,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  62. DRV:[b]64bit:[/b] - [2012/03/06 19:02:20 | 000,053,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  63. DRV:[b]64bit:[/b] - [2012/03/06 19:01:57 | 000,059,224 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  64. DRV:[b]64bit:[/b] - [2012/03/06 19:01:52 | 000,069,976 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  65. DRV:[b]64bit:[/b] - [2012/03/06 19:01:32 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  66. DRV:[b]64bit:[/b] - [2012/03/01 02:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  67. DRV:[b]64bit:[/b] - [2011/12/27 00:00:36 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  68. DRV:[b]64bit:[/b] - [2011/09/29 03:04:22 | 000,027,136 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ManyCam_x64.sys -- (ManyCam)
  69. DRV:[b]64bit:[/b] - [2011/07/22 12:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
  70. DRV:[b]64bit:[/b] - [2011/07/12 17:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
  71. DRV:[b]64bit:[/b] - [2011/03/11 02:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  72. DRV:[b]64bit:[/b] - [2011/03/11 02:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  73. DRV:[b]64bit:[/b] - [2010/06/02 00:33:42 | 000,035,840 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS -- (BVRPMPR5a64)
  74. DRV:[b]64bit:[/b] - [2009/07/30 22:58:42 | 000,236,544 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  75. DRV:[b]64bit:[/b] - [2009/07/20 05:48:32 | 000,274,480 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  76. DRV:[b]64bit:[/b] - [2009/07/20 05:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
  77. DRV:[b]64bit:[/b] - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  78. DRV:[b]64bit:[/b] - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  79. DRV:[b]64bit:[/b] - [2009/07/13 21:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  80. DRV:[b]64bit:[/b] - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  81. DRV:[b]64bit:[/b] - [2009/07/13 21:18:06 | 000,281,088 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BrSerIb.sys -- (BrSerIb) Brother MFC Serial Interface Driver(WDM)
  82. DRV:[b]64bit:[/b] - [2009/07/13 19:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  83. DRV:[b]64bit:[/b] - [2009/07/09 04:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
  84. DRV:[b]64bit:[/b] - [2009/06/25 18:04:20 | 000,067,584 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimmpx64.sys -- (rimmptsk)
  85. DRV:[b]64bit:[/b] - [2009/06/25 17:38:52 | 000,057,856 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpx64.sys -- (rismxdp)
  86. DRV:[b]64bit:[/b] - [2009/06/25 17:13:44 | 000,055,296 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspx64.sys -- (rimsptsk)
  87. DRV:[b]64bit:[/b] - [2009/06/19 22:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  88. DRV:[b]64bit:[/b] - [2009/06/10 16:41:10 | 000,015,360 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BrUsbSIb.sys -- (BrUsbSIb) Brother MFC Serial USB Driver(WDM)
  89. DRV:[b]64bit:[/b] - [2009/06/10 16:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
  90. DRV:[b]64bit:[/b] - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  91. DRV:[b]64bit:[/b] - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  92. DRV:[b]64bit:[/b] - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  93. DRV:[b]64bit:[/b] - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  94. DRV:[b]64bit:[/b] - [2009/05/20 04:11:06 | 001,799,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
  95. DRV:[b]64bit:[/b] - [2009/05/13 20:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (netw5v64) Intel(R)
  96. DRV:[b]64bit:[/b] - [2009/05/12 21:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
  97. DRV:[b]64bit:[/b] - [2009/03/09 17:58:00 | 000,060,416 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\itecir.sys -- (itecir)
  98. DRV:[b]64bit:[/b] - [2007/07/24 12:11:32 | 000,014,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
  99. DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  100.  
  101.  
  102. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  103.  
  104.  
  105. [color=#E56717]========== Internet Explorer ==========[/color]
  106.  
  107. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  108. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  109. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  110. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  111. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  112.  
  113.  
  114. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  115.  
  116. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  117.  
  118.  
  119.  
  120. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
  121. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  122. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
  123. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 74 92 B5 C9 45 C4 CC 01 [binary data]
  124. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  125. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  126. IE - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  127.  
  128. [color=#E56717]========== FireFox ==========[/color]
  129.  
  130. FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
  131. FF - user.js - File not found
  132.  
  133. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_233.dll File not found
  134. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
  135. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  136. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  137. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll ()
  138. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  139. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
  140. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  141. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  142. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  143. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
  144. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  145. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  146. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  147. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  148. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  149. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  150. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  151. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Daniel\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  152. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Daniel\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  153.  
  154. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/03/23 21:05:11 | 000,000,000 | ---D | M]
  155. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/17 17:16:40 | 000,000,000 | ---D | M]
  156. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  157.  
  158. [2011/12/27 04:46:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Extensions
  159. [2012/04/14 15:26:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8n2ltqff.default\extensions
  160. [2012/03/16 14:27:12 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8n2ltqff.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
  161. [2012/02/07 13:25:53 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8n2ltqff.default\extensions\toolbar@ask.com
  162. [2011/12/27 04:46:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  163. [2012/03/17 17:16:40 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  164. [2012/02/18 00:35:17 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  165. [2012/02/18 00:35:17 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  166.  
  167. [color=#E56717]========== Chrome ==========[/color]
  168.  
  169. CHR - default_search_provider: Google (Enabled)
  170. CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
  171. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
  172. CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
  173. CHR - plugin: Native Client (Enabled) = C:\Users\Daniel\AppData\Local\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll
  174. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Daniel\AppData\Local\Google\Chrome\Application\17.0.963.56\pdf.dll
  175. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Daniel\AppData\Local\Google\Chrome\Application\17.0.963.56\gcswf32.dll
  176. CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  177. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
  178. CHR - plugin: Default Plug-in (Enabled) = default_plugin
  179. CHR - Extension: Ask Toolbar = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaodnbkkemkkaekocofmphoadofkdh\7.14.1.20074_0\
  180. CHR - Extension: avast! WebRep = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\
  181.  
  182. O1 HOSTS File: ([2011/12/27 18:46:19 | 000,000,922 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  183. O1 - Hosts: 127.0.0.1 activate.adobe.com
  184. O1 - Hosts: 127.0.0.1 practivate.adobe.com
  185. O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  186. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
  187. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
  188. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  189. O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
  190. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  191. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  192. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  193. O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
  194. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  195. O3 - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
  196. O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
  197. O4 - HKLM..\Run: [] File not found
  198. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  199. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  200. O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll (Malwarebytes Corporation)
  201. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  202. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  203. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  204. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  205. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  206. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  207. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  208. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  209. O7 - HKU\S-1-5-21-1736859652-330371924-3159893786-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  210. O9 - Extra Button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files (x86)\Paltalk Messenger\paltalk.exe (AVM Software Inc.)
  211. O13[b]64bit:[/b] - gopher Prefix: missing
  212. O13 - gopher Prefix: missing
  213. O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
  214. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
  215. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
  216. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
  217. O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
  218. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
  219. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  220. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{08309801-BE97-47C8-AC04-38062C8D6533}: DhcpNameServer = 192.168.0.1
  221. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{26FAD549-136C-4FA4-A06C-7BC40BCC2214}: DhcpNameServer = 192.168.0.1
  222. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  223. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  224. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  225. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  226. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  227. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  228. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  229. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  230. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  231. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  232. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  233. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  234. O32 - HKLM CDRom: AutoRun - 1
  235. O34 - HKLM BootExecute: (autocheck autochk *)
  236. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  237. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  238. O35 - HKLM\..comfile [open] -- "%1" %*
  239. O35 - HKLM\..exefile [open] -- "%1" %*
  240. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  241. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  242. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  243. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  244.  
  245.  
  246. CREATERESTOREPOINT
  247. Restore point Set: OTL Restore Point
  248.  
  249. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  250.  
  251. [2012/04/20 13:32:54 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe
  252. [2012/04/19 21:17:35 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
  253. [2012/04/19 20:27:50 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{A7016F7D-5CA5-4F8D-80B0-C363B877E326}
  254. [2012/04/19 20:27:35 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{E8B724CE-65B6-4B7F-8277-51210FC7C430}
  255. [2012/04/18 09:47:05 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{AECFA475-A624-45EB-A86B-44774184F7C4}
  256. [2012/04/18 09:46:49 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{824A1DD8-BEF2-4808-8B99-28568E0A33E3}
  257. [2012/04/17 21:10:20 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{2DC0D1FD-4D68-484F-BD47-32D3DBC2B2A1}
  258. [2012/04/17 21:09:09 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{47158080-9241-448F-ACF3-CC6E4FC79F70}
  259. [2012/04/16 22:20:05 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{09665328-A4A7-4F6E-80D4-5FC8B4AC5AC6}
  260. [2012/04/16 22:19:43 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{AA0EFCAE-ADC0-40C6-869E-62C2C54200FE}
  261. [2012/04/16 01:07:18 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{0871AA22-54D5-4BB5-BF13-DF746B6A1CFD}
  262. [2012/04/16 01:07:02 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{49538276-8833-41FC-A1CA-6120F61C0EEE}
  263. [2012/04/15 13:06:35 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{53BBD39A-501F-4A70-9B5F-791BCC4D9161}
  264. [2012/04/15 13:06:16 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{965EBAF0-FA85-4E25-BAB2-56E82E09CF1D}
  265. [2012/04/14 15:52:01 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{1BF7E438-25B2-41E3-A92D-FB4E72BCA9B8}
  266. [2012/04/14 15:51:46 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{69328850-15BA-45DF-A4B3-32F5081E079B}
  267. [2012/04/14 15:08:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  268. [2012/04/14 15:08:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
  269. [2012/04/14 03:51:30 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{F309D711-DFBD-4771-B851-36B14999B900}
  270. [2012/04/14 03:51:18 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{CC3F622A-5EAA-4612-A3C7-FF7C1A1715C4}
  271. [2012/04/13 23:27:04 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\Outlook Files
  272. [2012/04/13 21:59:52 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
  273. [2012/04/13 21:57:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
  274. [2012/04/13 20:48:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
  275. [2012/04/13 15:50:45 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{6EA61FC4-C3C6-4FA4-B681-D3A24B3F0B41}
  276. [2012/04/13 15:50:33 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{88E07161-8D9C-4D79-B560-50EBF16BF20A}
  277. [2012/04/13 03:50:05 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{26B74804-2CCF-4D19-96C0-05CFFDEC0BA5}
  278. [2012/04/13 03:49:52 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{51DE56D8-09A1-4531-923C-4230C5DB9D9B}
  279. [2012/04/13 02:08:48 | 000,000,000 | ---D | C] -- C:\Windows\en
  280. [2012/04/13 02:05:42 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
  281. [2012/04/13 01:49:02 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{B860DBC0-3486-4C94-9DCA-F59DCB27AD52}
  282. [2012/04/12 13:48:47 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{AE96E8EB-0C8F-416E-9C47-F7F4D3567C9D}
  283. [2012/04/11 23:59:43 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{140DB069-C462-4A8C-B7FF-BCCC30B8987E}
  284. [2012/04/11 11:59:30 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{7D442E1B-2241-4D42-9115-2D2DA830C2B3}
  285. [2012/04/10 23:59:18 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{5C1870E2-32F5-4CF4-BD6B-CA7E642BC0C9}
  286. [2012/04/10 11:58:53 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{76B8E997-F534-40B0-96B0-881A6F371E84}
  287. [2012/04/09 22:46:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
  288. [2012/04/09 22:46:39 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
  289. [2012/04/09 20:23:12 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Malwarebytes
  290. [2012/04/09 20:23:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  291. [2012/04/09 20:23:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  292. [2012/04/09 20:23:03 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  293. [2012/04/09 20:23:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  294. [2012/04/09 16:16:42 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{8D968446-636D-4366-9233-5F55679E1234}
  295. [2012/04/09 04:16:29 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{B287907C-AC14-42DE-A36C-7EBDF03C5B06}
  296. [2012/04/08 16:16:16 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{17C5C36D-E622-4EE7-B543-70C82B799BCB}
  297. [2012/04/08 04:15:49 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{2D0BA92E-EA86-4E60-9229-38F2AFBB076C}
  298. [2012/04/07 16:15:24 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{9746FA0D-0AE1-43DA-8240-38AAE3275CDC}
  299. [2012/04/07 15:49:48 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\VistaWin7x64
  300. [2012/04/07 04:14:57 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{C9C78163-2422-43A5-8F08-A9D812355FCE}
  301. [2012/04/06 14:10:51 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{CE4FC75D-27D4-4DBC-BC62-AE79B99724D7}
  302. [2012/04/05 19:51:19 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{BBB78A29-3F3D-4E08-83B5-B862A8B0E7B5}
  303. [2012/04/05 01:26:56 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{202E6AFE-D8FC-4996-AF23-9ABE17B0E760}
  304. [2012/04/04 13:26:30 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{E96E046B-8B6C-4F73-BCA6-907CFFB13013}
  305. [2012/04/03 20:38:33 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{B325CEC5-B6AA-4A56-9B79-6F8F2BEF1B63}
  306. [2012/04/03 00:14:08 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{D667FEB1-0861-44C3-827E-116A231F4824}
  307. [2012/04/02 12:13:43 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{86170320-0121-4176-98DF-663F2BE9EFE6}
  308. [2012/04/02 00:32:38 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe
  309. [2012/04/01 23:51:53 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{EE006B61-BA36-427B-8C25-4B319BE5EE96}
  310. [2012/04/01 11:51:40 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{22B1012A-CB35-420E-B2E0-721218C18123}
  311. [2012/03/31 14:35:19 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{3F8E6185-97CD-4814-89C0-94CDE984F29D}
  312. [2012/03/30 23:56:38 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{D2555697-B9D2-4327-A523-FAA4434C3636}
  313. [2012/03/30 22:24:18 | 000,000,000 | ---D | C] -- C:\Program Files\Java
  314. [2012/03/30 11:56:25 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{CDF8E890-0ABF-475C-831E-BA4906A2A8F8}
  315. [2012/03/29 20:20:49 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{7E4335F5-9D22-418D-97A4-C438C224C312}
  316. [2012/03/28 22:35:49 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{4CD5532C-D643-4FFD-A5EB-E94D4E0C0D3E}
  317. [2012/03/27 20:23:15 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{677CF54E-EA4B-4445-8A1C-7E6F6F56710B}
  318. [2012/03/27 20:23:03 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{D42E361B-DF29-421A-91AA-B490512F4DFF}
  319. [2012/03/26 23:33:42 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{875A8C64-B3EC-453F-9292-EE3F74F15625}
  320. [2012/03/26 23:33:29 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{79A05FBF-1081-4E08-9E2C-BFC35611A24F}
  321. [2012/03/26 02:01:45 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{E30CD463-07DF-461B-9569-A9E0AB575ECA}
  322. [2012/03/26 02:01:32 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{D1AC1D9B-EF6A-4CAC-894D-A06631832677}
  323. [2012/03/25 14:01:16 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{3D59DC0E-0755-481F-AD78-653A1D8B1291}
  324. [2012/03/25 14:01:03 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{868FF53F-EA87-47EC-A2D1-F490226A2D5F}
  325. [2012/03/24 13:47:54 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{BE37997A-98F2-40A0-97FF-E558175E5B7B}
  326. [2012/03/24 13:47:42 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{FB26FE48-0FBD-4C30-9496-DA19106F1337}
  327. [2012/03/24 00:11:24 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{7A81062B-C020-4763-8364-7E9A79C33A9D}
  328. [2012/03/24 00:11:12 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{4B0D4462-DF90-4E47-9E87-092FF7BA6D5E}
  329. [2012/03/23 21:05:11 | 000,053,080 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
  330. [2012/03/23 12:10:43 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{D0C7BB4B-C03B-49CA-B0D1-FCA8075C3298}
  331. [2012/03/23 12:10:26 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{7C6D1978-7596-49E0-8DE8-B2F5D9C096DC}
  332. [2012/03/22 21:45:24 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{AAA13879-6915-41C5-9BA6-B0419C161796}
  333. [2012/03/22 21:45:08 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{834AF86E-CF88-4B75-9EA7-2294DD33DAB1}
  334. [2012/03/21 14:12:04 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{B4148B45-73FA-447D-B6CE-D4A0D5A8746F}
  335. [2012/03/21 14:11:47 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\{FD2727B4-8428-4D59-8BB8-5C4EC6A6E90C}
  336. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  337. [1 C:\Users\Daniel\Desktop\*.tmp files -> C:\Users\Daniel\Desktop\*.tmp -> ]
  338.  
  339. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  340.  
  341. [2012/04/20 13:39:10 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  342. [2012/04/20 13:33:07 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe
  343. [2012/04/20 13:18:15 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  344. [2012/04/20 13:18:03 | 000,000,202 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
  345. [2012/04/20 13:17:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  346. [2012/04/20 13:17:32 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys
  347. [2012/04/19 22:04:01 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  348. [2012/04/19 21:58:01 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1736859652-330371924-3159893786-1000UA.job
  349. [2012/04/19 03:03:00 | 000,000,202 | ---- | M] () -- C:\Windows\tasks\AutoKMSDaily.job
  350. [2012/04/19 00:05:46 | 000,000,860 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1736859652-330371924-3159893786-1000Core.job
  351. [2012/04/14 20:03:28 | 000,782,922 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  352. [2012/04/14 20:03:28 | 000,663,260 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  353. [2012/04/14 20:03:28 | 000,122,096 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  354. [2012/04/13 22:00:05 | 000,001,131 | ---- | M] () -- C:\Users\Daniel\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
  355. [2012/04/13 21:12:30 | 000,009,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  356. [2012/04/13 21:12:30 | 000,009,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  357. [2012/04/13 13:08:16 | 004,972,840 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  358. [2012/04/13 12:49:44 | 000,777,138 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  359. [2012/04/11 03:02:50 | 000,002,324 | ---- | M] () -- C:\Windows\epplauncher.mif
  360. [2012/04/09 23:09:43 | 000,439,195 | ---- | M] () -- C:\Users\Daniel\Documents\puma_demo_07to09_acs.pdf
  361. [2012/04/09 23:09:39 | 000,656,765 | ---- | M] () -- C:\Users\Daniel\Documents\puma_socio_07to09_acs.pdf
  362. [2012/04/09 23:09:21 | 000,633,283 | ---- | M] () -- C:\Users\Daniel\Documents\puma_econ_07to09_acs.pdf
  363. [2012/04/09 23:09:17 | 000,603,355 | ---- | M] () -- C:\Users\Daniel\Documents\puma_housing_07to09_acs.pdf
  364. [2012/04/04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  365. [2012/03/29 02:38:48 | 000,000,162 | -H-- | M] () -- C:\Users\Daniel\Documents\~$A Format.dotx
  366. [2012/03/25 20:40:40 | 000,020,578 | ---- | M] () -- C:\Users\Daniel\Documents\MLA Format.dotx
  367. [2012/03/23 21:05:11 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  368. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  369. [1 C:\Users\Daniel\Desktop\*.tmp files -> C:\Users\Daniel\Desktop\*.tmp -> ]
  370.  
  371. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  372.  
  373. [2012/04/13 22:00:05 | 000,001,131 | ---- | C] () -- C:\Users\Daniel\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk
  374. [2012/04/13 13:09:03 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  375. [2012/04/11 03:02:50 | 000,002,324 | ---- | C] () -- C:\Windows\epplauncher.mif
  376. [2012/04/09 23:09:39 | 000,439,195 | ---- | C] () -- C:\Users\Daniel\Documents\puma_demo_07to09_acs.pdf
  377. [2012/04/09 23:09:26 | 000,656,765 | ---- | C] () -- C:\Users\Daniel\Documents\puma_socio_07to09_acs.pdf
  378. [2012/04/09 23:09:14 | 000,633,283 | ---- | C] () -- C:\Users\Daniel\Documents\puma_econ_07to09_acs.pdf
  379. [2012/04/09 23:09:00 | 000,603,355 | ---- | C] () -- C:\Users\Daniel\Documents\puma_housing_07to09_acs.pdf
  380. [2012/03/29 02:27:17 | 000,000,162 | -H-- | C] () -- C:\Users\Daniel\Documents\~$A Format.dotx
  381. [2012/03/25 20:40:40 | 000,020,578 | ---- | C] () -- C:\Users\Daniel\Documents\MLA Format.dotx
  382. [2011/12/27 01:05:26 | 000,777,138 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  383. [2011/12/26 23:01:57 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini
  384. [2011/12/26 22:54:19 | 000,146,432 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
  385. [2011/12/26 22:54:19 | 000,072,704 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
  386.  
  387. [color=#E56717]========== LOP Check ==========[/color]
  388.  
  389. [2012/02/10 01:17:28 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\.minecraft
  390. [2012/04/10 20:58:51 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Audacity
  391. [2012/01/30 16:53:34 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DAEMON Tools Lite
  392. [2011/12/27 04:53:54 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Dev-Cpp
  393. [2012/01/04 16:20:06 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Foxit Software
  394. [2012/02/07 13:25:37 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ManyCam
  395. [2012/04/15 20:22:09 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\MediaMonkey
  396. [2012/03/27 21:56:09 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Notepad++
  397. [2012/02/06 21:54:02 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Paltalk
  398. [2011/12/30 20:34:05 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\SystemRequirementsLab
  399. [2012/04/18 11:02:37 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\uTorrent
  400. [2012/02/24 16:08:38 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Windows Live Writer
  401. [2012/01/05 18:17:30 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Wing 101 4
  402. [2012/04/20 13:18:03 | 000,000,202 | ---- | M] () -- C:\Windows\Tasks\AutoKMS.job
  403. [2012/04/19 03:03:00 | 000,000,202 | ---- | M] () -- C:\Windows\Tasks\AutoKMSDaily.job
  404. [2012/02/22 15:20:22 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  405.  
  406. [color=#E56717]========== Purity Check ==========[/color]
  407.  
  408.  
  409.  
  410. [color=#E56717]========== Custom Scans ==========[/color]
  411.  
  412. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  413.  
  414. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  415. [2011/02/26 02:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe
  416. [2011/02/26 02:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
  417. [2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  418. [2009/07/13 21:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
  419. [2011/02/26 01:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
  420. [2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
  421. [2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe
  422. [2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
  423. [2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  424. [2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  425. [2010/11/20 08:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  426. [2010/11/20 08:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\b93979e36bf69a9dc5964746ed3a3765\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  427. [2009/08/03 02:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
  428. [2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  429. [2009/10/31 02:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
  430. [2009/08/03 01:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
  431. [2010/11/20 09:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  432. [2009/10/31 02:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
  433. [2009/08/03 01:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
  434. [2009/07/13 21:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
  435. [2009/10/31 02:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
  436. [2011/02/26 02:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
  437. [2009/08/03 02:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
  438.  
  439. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  440. [2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
  441. [2009/07/13 21:14:45 | 000,020,480 | ---- | M] (Microsoft Corporation) MD5=2CEFF13ACE25A40BD8D97654944297CD -- C:\Windows\svchost.exe
  442. [2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
  443. [2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
  444. [2009/07/13 21:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
  445. [2009/07/13 21:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
  446.  
  447. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  448. [2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  449. [2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\b93979e36bf69a9dc5964746ed3a3765\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  450. [2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
  451. [2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
  452. [2009/07/13 21:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
  453. [2009/07/13 21:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
  454. [2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  455. [2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\b93979e36bf69a9dc5964746ed3a3765\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  456.  
  457. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  458. [2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
  459. [2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  460. [2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\b93979e36bf69a9dc5964746ed3a3765\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  461. [2009/07/13 21:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
  462. [2009/10/28 03:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
  463. [2009/10/28 02:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
  464. [2009/10/28 02:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
  465.  
  466. [color=#A23BEC]< C:\Windows\assembly\tmp\U\*.* /s >[/color]
  467.  
  468. [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color]
  469.  
  470. [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color]
  471.  
  472. [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color]
  473.  
  474. [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color]
  475.  
  476. [color=#A23BEC]< type c:\diskreport.txt /c >[/color]
  477. Microsoft DiskPart version 6.1.7600
  478. Copyright (C) 1999-2008 Microsoft Corporation.
  479. On computer: DANIEL-PC
  480. Volume ### Ltr Label Fs Type Size Status Info
  481. ---------- --- ----------- ----- ---------- ------- --------- --------
  482. Volume 0 D DVD-ROM 0 B No Media
  483. Volume 1 E DVD-ROM 0 B No Media
  484. Volume 2 System Rese NTFS Partition 100 MB Healthy System
  485. Volume 3 C NTFS Partition 297 GB Healthy Boot
  486.  
  487. [color=#A23BEC]< >[/color]
  488.  
  489. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!