API tools faq
paste
Advertisement
Guest User

OTL Report

a guest
Jul 7th, 2012
252
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 104.24 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 7/7/2012 4:23:57 PM - Run 1
  2. OTL by OldTimer - Version 3.2.53.1 Folder = C:\Users\Alex\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 6.00 Gb Total Physical Memory | 3.31 Gb Available Physical Memory | 55.18% Memory free
  8. 12.00 Gb Paging File | 8.99 Gb Available in Paging File | 74.90% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 922.57 Gb Total Space | 467.89 Gb Free Space | 50.72% Space Free | Partition Type: NTFS
  13. Drive E: | 15.02 Gb Total Space | 14.68 Gb Free Space | 97.71% Space Free | Partition Type: FAT32
  14. Drive I: | 298.09 Gb Total Space | 63.85 Gb Free Space | 21.42% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: ALEX-PC | User Name: Alex | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2012/07/06 19:34:31 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
  23. PRC - [2012/07/03 09:21:30 | 004,273,976 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
  24. PRC - [2012/07/03 09:21:29 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
  25. PRC - [2012/06/23 02:59:34 | 001,535,176 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
  26. PRC - [2012/06/20 19:02:30 | 012,163,848 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
  27. PRC - [2012/06/16 14:12:25 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  28. PRC - [2012/06/06 22:15:36 | 003,491,264 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
  29. PRC - [2012/06/01 16:17:16 | 013,806,592 | ---- | M] (Google Inc.) -- C:\Users\Alex\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
  30. PRC - [2012/05/30 10:18:07 | 004,331,392 | ---- | M] (AOL Inc.) -- C:\Program Files (x86)\AIM\aim.exe
  31. PRC - [2012/05/07 17:54:24 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  32. PRC - [2012/05/05 15:28:58 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.21.111\GoogleCrashHandler.exe
  33. PRC - [2012/04/29 10:48:18 | 004,495,872 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\Messenger Plus! for Skype.exe
  34. PRC - [2012/04/29 10:43:41 | 000,119,296 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
  35. PRC - [2012/04/16 11:51:46 | 000,066,992 | ---- | M] (Raptr, Inc) -- C:\Program Files (x86)\Raptr\raptr.exe
  36. PRC - [2012/04/16 11:51:46 | 000,043,952 | ---- | M] (Raptr, Inc) -- C:\Program Files (x86)\Raptr\raptr_im.exe
  37. PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  38. PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  39. PRC - [2012/03/20 16:05:58 | 000,019,272 | ---- | M] (Smartbar) -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.exe
  40. PRC - [2012/02/27 14:43:07 | 000,801,792 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
  41. PRC - [2012/02/25 19:41:37 | 000,107,000 | ---- | M] (Siber Systems) -- C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
  42. PRC - [2011/12/06 14:00:14 | 000,784,240 | ---- | M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
  43. PRC - [2011/12/06 14:00:14 | 000,214,896 | ---- | M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
  44. PRC - [2011/01/07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  45. PRC - [2010/12/07 03:32:02 | 002,228,008 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
  46. PRC - [2010/07/06 08:03:00 | 000,173,352 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
  47. PRC - [2010/03/09 04:28:26 | 011,989,960 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe
  48. PRC - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
  49. PRC - [2009/12/29 14:35:38 | 000,140,520 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
  50. PRC - [2009/06/09 07:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
  51. PRC - [2009/01/26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
  52. PRC - [2006/04/18 03:00:00 | 000,102,400 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
  53.  
  54.  
  55. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  56.  
  57. MOD - [2012/07/07 16:21:09 | 000,086,016 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\_elementtree.pyd
  58. MOD - [2012/07/07 16:21:08 | 000,571,392 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\pysqlite2._sqlite.pyd
  59. MOD - [2012/07/07 16:21:08 | 000,096,256 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32api.pyd
  60. MOD - [2012/07/07 16:21:08 | 000,040,448 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\_socket.pyd
  61. MOD - [2012/07/07 16:21:07 | 000,263,168 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32com.shell.shell.pyd
  62. MOD - [2012/07/07 16:21:07 | 000,070,656 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._html2.pyd
  63. MOD - [2012/07/07 16:21:06 | 000,792,576 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._gdi_.pyd
  64. MOD - [2012/07/07 16:21:06 | 000,153,088 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\pyexpat.pyd
  65. MOD - [2012/07/07 16:21:06 | 000,011,776 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32crypt.pyd
  66. MOD - [2012/07/07 16:21:05 | 001,018,368 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\windows._cacheinvalidation.pyd
  67. MOD - [2012/07/07 16:21:03 | 000,354,304 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\pythoncom26.dll
  68. MOD - [2012/07/07 16:21:03 | 000,073,728 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\_ctypes.pyd
  69. MOD - [2012/07/07 16:21:01 | 000,731,136 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._misc_.pyd
  70. MOD - [2012/07/07 16:21:00 | 000,110,592 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\PyWinTypes26.dll
  71. MOD - [2012/07/07 16:20:59 | 000,645,120 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\_ssl.pyd
  72. MOD - [2012/07/07 16:20:57 | 000,036,352 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32process.pyd
  73. MOD - [2012/07/07 16:20:57 | 000,022,528 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32pdh.pyd
  74. MOD - [2012/07/07 16:20:56 | 001,169,408 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._core_.pyd
  75. MOD - [2012/07/07 16:20:56 | 000,807,424 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._windows_.pyd
  76. MOD - [2012/07/07 16:20:56 | 000,311,808 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\_hashlib.pyd
  77. MOD - [2012/07/07 16:20:55 | 000,121,856 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._wizard.pyd
  78. MOD - [2012/07/07 16:20:55 | 000,111,104 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32file.pyd
  79. MOD - [2012/07/07 16:20:54 | 000,039,424 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32inet.pyd
  80. MOD - [2012/07/07 16:20:53 | 001,056,256 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\wx._controls_.pyd
  81. MOD - [2012/07/07 16:20:52 | 000,017,920 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\win32event.pyd
  82. MOD - [2012/07/07 16:20:51 | 000,585,728 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\unicodedata.pyd
  83. MOD - [2012/07/07 16:20:49 | 000,011,776 | ---- | M] () -- C:\Users\Alex\AppData\Local\Temp\_MEI16522\select.pyd
  84. MOD - [2012/06/23 02:59:33 | 009,459,912 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
  85. MOD - [2012/06/16 14:12:24 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  86. MOD - [2012/06/13 14:23:19 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\a434580a5940ac406740714ff238829b\System.Web.Services.ni.dll
  87. MOD - [2012/06/13 14:22:56 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
  88. MOD - [2012/06/13 14:22:50 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
  89. MOD - [2012/06/01 16:06:02 | 000,344,064 | ---- | M] () -- C:\Users\Alex\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll
  90. MOD - [2012/06/01 16:05:48 | 000,346,624 | ---- | M] () -- C:\Users\Alex\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll
  91. MOD - [2012/06/01 16:04:48 | 000,198,656 | ---- | M] () -- C:\Users\Alex\AppData\Local\Programs\Google\MusicManager\libaacdec.dll
  92. MOD - [2012/06/01 16:04:46 | 000,364,032 | ---- | M] () -- C:\Users\Alex\AppData\Local\Programs\Google\MusicManager\libid3tag.dll
  93. MOD - [2012/05/30 10:11:47 | 000,176,128 | ---- | M] () -- C:\Program Files (x86)\AIM\nssckbi.dll
  94. MOD - [2012/05/11 18:07:02 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\626d0ac2f4ada682d7ca6c4ebf821469\CustomMarshalers.ni.dll
  95. MOD - [2012/05/11 15:28:27 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
  96. MOD - [2012/05/11 15:28:24 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
  97. MOD - [2012/05/11 15:28:23 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
  98. MOD - [2012/05/11 15:28:18 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
  99. MOD - [2012/04/10 17:35:53 | 000,390,656 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\lame_enc.dll
  100. MOD - [2012/04/10 17:35:43 | 000,370,688 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\libsndfile.dll
  101. MOD - [2012/04/10 17:33:41 | 008,499,712 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\QtGui4.dll
  102. MOD - [2012/04/10 17:30:56 | 000,200,704 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\imageformats\qjpeg4.dll
  103. MOD - [2012/04/10 17:30:47 | 000,026,624 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\imageformats\qgif4.dll
  104. MOD - [2012/04/10 17:30:40 | 000,863,744 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\QtNetwork4.dll
  105. MOD - [2012/04/10 17:26:08 | 002,347,520 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\QtCore4.dll
  106. MOD - [2012/03/31 15:13:13 | 008,013,664 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
  107. MOD - [2012/03/31 15:13:12 | 000,144,712 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
  108. MOD - [2012/03/20 16:06:46 | 000,015,688 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
  109. MOD - [2012/03/20 16:06:42 | 000,024,392 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
  110. MOD - [2012/03/20 16:06:42 | 000,018,760 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
  111. MOD - [2012/03/20 16:06:38 | 000,012,616 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
  112. MOD - [2012/03/20 16:06:34 | 000,067,400 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
  113. MOD - [2012/03/20 16:06:32 | 000,331,080 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.FilesManager.dll
  114. MOD - [2012/03/20 16:06:30 | 000,034,120 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
  115. MOD - [2012/03/20 16:06:26 | 000,077,640 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
  116. MOD - [2012/03/20 16:06:26 | 000,015,176 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
  117. MOD - [2012/03/20 16:06:18 | 000,017,736 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
  118. MOD - [2012/03/20 16:06:16 | 000,053,064 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
  119. MOD - [2012/03/20 16:06:10 | 000,011,080 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
  120. MOD - [2012/03/20 16:06:08 | 000,026,952 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
  121. MOD - [2012/03/20 16:06:08 | 000,011,592 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
  122. MOD - [2012/03/20 16:06:06 | 000,012,616 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
  123. MOD - [2012/03/20 16:06:02 | 001,105,736 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
  124. MOD - [2012/03/20 16:06:02 | 000,080,200 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
  125. MOD - [2012/03/20 16:06:00 | 000,541,512 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
  126. MOD - [2012/03/20 16:05:04 | 000,046,408 | ---- | M] () -- C:\Users\Alex\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
  127. MOD - [2012/03/08 20:11:36 | 000,070,424 | ---- | M] () -- C:\Program Files\TortoiseSVN\bin\libsasl32.dll
  128. MOD - [2012/02/17 10:53:28 | 000,494,592 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
  129. MOD - [2012/02/17 10:53:24 | 001,661,952 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
  130. MOD - [2012/02/17 10:53:20 | 000,313,856 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
  131. MOD - [2012/02/17 10:53:06 | 005,809,664 | ---- | M] () -- C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
  132. MOD - [2012/02/17 10:52:26 | 000,067,584 | ---- | M] () -- C:\Program Files (x86)\Raptr\sip.pyd
  133. MOD - [2011/12/06 14:00:14 | 000,784,240 | ---- | M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
  134. MOD - [2011/11/20 19:20:46 | 001,949,696 | ---- | M] () -- C:\Program Files (x86)\Raptr\libtorrent.pyd
  135. MOD - [2011/10/24 11:49:56 | 002,717,595 | ---- | M] () -- C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
  136. MOD - [2011/09/08 16:47:40 | 001,183,699 | ---- | M] () -- C:\Program Files (x86)\Raptr\liboscar.dll
  137. MOD - [2011/09/08 16:47:36 | 001,640,221 | ---- | M] () -- C:\Program Files (x86)\Raptr\libjabber.dll
  138. MOD - [2011/09/08 16:47:32 | 001,052,194 | ---- | M] () -- C:\Program Files (x86)\Raptr\libymsg.dll
  139. MOD - [2011/09/08 16:47:22 | 000,495,680 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libaim.dll
  140. MOD - [2011/09/08 16:47:22 | 000,483,306 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libicq.dll
  141. MOD - [2011/09/08 16:47:16 | 000,655,356 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libirc.dll
  142. MOD - [2011/09/08 16:47:16 | 000,603,326 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
  143. MOD - [2011/09/08 16:47:14 | 000,497,782 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
  144. MOD - [2011/09/08 16:47:14 | 000,474,199 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\ssl.dll
  145. MOD - [2011/09/08 16:47:10 | 001,306,387 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libmsn.dll
  146. MOD - [2011/09/08 16:47:04 | 000,565,461 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
  147. MOD - [2011/09/08 16:46:56 | 000,506,276 | ---- | M] () -- C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
  148. MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
  149. MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
  150. MOD - [2011/02/15 11:17:28 | 001,213,633 | ---- | M] () -- C:\Program Files (x86)\Raptr\libxml2-2.dll
  151. MOD - [2011/02/15 11:17:28 | 000,417,501 | ---- | M] () -- C:\Program Files (x86)\Raptr\sqlite3.dll
  152. MOD - [2011/01/07 19:48:38 | 000,235,624 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
  153. MOD - [2010/11/22 16:06:22 | 000,055,808 | ---- | M] () -- C:\Program Files (x86)\Raptr\zlib1.dll
  154. MOD - [2010/11/22 15:57:34 | 000,167,936 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32gui.pyd
  155. MOD - [2010/11/22 15:57:34 | 000,111,104 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32file.pyd
  156. MOD - [2010/11/22 15:57:34 | 000,096,256 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32api.pyd
  157. MOD - [2010/11/22 15:57:34 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32process.pyd
  158. MOD - [2010/11/22 15:57:18 | 000,141,312 | ---- | M] () -- C:\Program Files (x86)\Raptr\gobject._gobject.pyd
  159. MOD - [2010/11/22 15:57:06 | 000,263,168 | ---- | M] () -- C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
  160. MOD - [2010/11/22 15:56:56 | 000,354,304 | ---- | M] () -- C:\Program Files (x86)\Raptr\pythoncom26.dll
  161. MOD - [2010/11/22 15:56:56 | 000,110,592 | ---- | M] () -- C:\Program Files (x86)\Raptr\pywintypes26.dll
  162. MOD - [2010/11/22 15:56:26 | 000,324,608 | ---- | M] () -- C:\Program Files (x86)\Raptr\PIL._imaging.pyd
  163. MOD - [2010/11/22 15:56:02 | 000,805,376 | ---- | M] () -- C:\Program Files (x86)\Raptr\_ssl.pyd
  164. MOD - [2010/11/22 15:56:02 | 000,583,680 | ---- | M] () -- C:\Program Files (x86)\Raptr\unicodedata.pyd
  165. MOD - [2010/11/22 15:56:02 | 000,356,864 | ---- | M] () -- C:\Program Files (x86)\Raptr\_hashlib.pyd
  166. MOD - [2010/11/22 15:56:02 | 000,127,488 | ---- | M] () -- C:\Program Files (x86)\Raptr\pyexpat.pyd
  167. MOD - [2010/11/22 15:56:02 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\Raptr\_ctypes.pyd
  168. MOD - [2010/11/22 15:56:02 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\Raptr\_sqlite3.pyd
  169. MOD - [2010/11/22 15:56:02 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Raptr\_socket.pyd
  170. MOD - [2010/11/22 15:56:02 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\Raptr\winsound.pyd
  171. MOD - [2010/11/20 05:19:56 | 000,232,448 | ---- | M] () -- \\?\globalroot\systemroot\syswow64\mswsock.DLL
  172. MOD - [2010/11/20 05:19:56 | 000,232,448 | ---- | M] () -- \\.\globalroot\systemroot\syswow64\mswsock.dll
  173. MOD - [2010/11/04 18:57:39 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
  174. MOD - [2010/03/09 04:28:12 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Symlib.dll
  175. MOD - [2010/03/09 04:28:10 | 002,748,416 | ---- | M] () -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\libmysqld.dll
  176.  
  177.  
  178. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  179.  
  180. SRV:[b]64bit:[/b] - [2012/07/03 09:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
  181. SRV:[b]64bit:[/b] - [2011/04/20 02:04:20 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  182. SRV:[b]64bit:[/b] - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  183. SRV:[b]64bit:[/b] - [2009/06/09 07:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
  184. SRV:[b]64bit:[/b] - [2007/11/07 09:11:22 | 004,466,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
  185. SRV - [2012/06/23 02:59:34 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  186. SRV - [2012/06/19 00:31:22 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  187. SRV - [2012/06/16 14:12:24 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  188. SRV - [2012/06/05 15:17:44 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  189. SRV - [2012/05/11 15:43:56 | 000,096,768 | ---- | M] (Freemake) [Auto | Stopped] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
  190. SRV - [2012/05/07 17:54:24 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  191. SRV - [2012/04/29 10:43:41 | 000,119,296 | ---- | M] (Yuna Software) [Auto | Running] -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe -- (MsgPlusService)
  192. SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  193. SRV - [2011/12/06 14:00:14 | 000,214,896 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe -- (MotoHelper)
  194. SRV - [2011/01/07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  195. SRV - [2010/12/07 03:32:02 | 002,228,008 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
  196. SRV - [2010/07/06 08:03:00 | 000,173,352 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
  197. SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  198. SRV - [2010/02/24 09:43:00 | 003,461,116 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
  199. SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  200. SRV - [2009/06/10 14:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  201. SRV - [2007/12/16 20:00:00 | 000,163,840 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
  202. SRV - [2006/04/18 03:00:00 | 000,102,400 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
  203.  
  204.  
  205. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  206.  
  207. DRV:[b]64bit:[/b] - [2012/07/03 09:21:52 | 000,958,400 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  208. DRV:[b]64bit:[/b] - [2012/07/03 09:21:52 | 000,355,856 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  209. DRV:[b]64bit:[/b] - [2012/07/03 09:21:52 | 000,071,064 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  210. DRV:[b]64bit:[/b] - [2012/07/03 09:21:52 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  211. DRV:[b]64bit:[/b] - [2012/07/03 09:21:52 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  212. DRV:[b]64bit:[/b] - [2012/07/03 09:21:51 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  213. DRV:[b]64bit:[/b] - [2012/04/23 04:26:26 | 000,154,272 | ---- | M] (Tonec Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
  214. DRV:[b]64bit:[/b] - [2012/04/04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  215. DRV:[b]64bit:[/b] - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
  216. DRV:[b]64bit:[/b] - [2012/02/29 23:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  217. DRV:[b]64bit:[/b] - [2011/05/10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  218. DRV:[b]64bit:[/b] - [2011/04/20 02:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
  219. DRV:[b]64bit:[/b] - [2011/04/20 02:44:50 | 009,319,936 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  220. DRV:[b]64bit:[/b] - [2011/04/20 01:22:34 | 000,306,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  221. DRV:[b]64bit:[/b] - [2011/04/04 14:55:54 | 000,021,504 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgp.sys -- (motccgp)
  222. DRV:[b]64bit:[/b] - [2011/03/31 14:53:40 | 000,030,208 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motmodem.sys -- (motmodem)
  223. DRV:[b]64bit:[/b] - [2011/03/10 23:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  224. DRV:[b]64bit:[/b] - [2011/03/10 23:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  225. DRV:[b]64bit:[/b] - [2010/11/20 15:53:05 | 000,026,424 | --S- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DRIVER_BIN64 -- (DRIVER_B)
  226. DRV:[b]64bit:[/b] - [2010/11/20 06:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  227. DRV:[b]64bit:[/b] - [2010/11/20 04:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  228. DRV:[b]64bit:[/b] - [2010/11/11 16:10:49 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  229. DRV:[b]64bit:[/b] - [2010/06/25 15:32:34 | 000,144,656 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  230. DRV:[b]64bit:[/b] - [2010/06/09 16:01:10 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
  231. DRV:[b]64bit:[/b] - [2010/04/01 14:44:06 | 000,026,624 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Motousbnet.sys -- (Motousbnet)
  232. DRV:[b]64bit:[/b] - [2010/02/03 16:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  233. DRV:[b]64bit:[/b] - [2009/10/24 01:49:46 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  234. DRV:[b]64bit:[/b] - [2009/09/30 23:34:30 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
  235. DRV:[b]64bit:[/b] - [2009/08/21 01:52:09 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  236. DRV:[b]64bit:[/b] - [2009/08/06 05:43:58 | 000,320,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)
  237. DRV:[b]64bit:[/b] - [2009/07/13 18:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  238. DRV:[b]64bit:[/b] - [2009/07/13 18:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  239. DRV:[b]64bit:[/b] - [2009/07/13 18:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  240. DRV:[b]64bit:[/b] - [2009/07/10 13:06:50 | 000,031,744 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motoandroid.sys -- (motandroidusb)
  241. DRV:[b]64bit:[/b] - [2009/06/10 13:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  242. DRV:[b]64bit:[/b] - [2009/06/10 13:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  243. DRV:[b]64bit:[/b] - [2009/06/10 13:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  244. DRV:[b]64bit:[/b] - [2009/06/10 13:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  245. DRV:[b]64bit:[/b] - [2009/05/18 11:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  246. DRV:[b]64bit:[/b] - [2009/05/05 11:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)
  247. DRV:[b]64bit:[/b] - [2009/01/29 17:18:12 | 000,009,216 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motccgpfl.sys -- (motccgpfl)
  248. DRV:[b]64bit:[/b] - [2009/01/29 17:11:38 | 000,006,144 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motfilt.sys -- (BTCFilterService)
  249. DRV:[b]64bit:[/b] - [2007/11/02 15:52:02 | 000,008,576 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\motswch.sys -- (MotoSwitchService)
  250. DRV:[b]64bit:[/b] - [2006/11/01 09:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
  251. DRV - [2009/07/13 18:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  252. DRV - [2005/01/02 14:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
  253.  
  254.  
  255. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  256.  
  257.  
  258. [color=#E56717]========== Internet Explorer ==========[/color]
  259.  
  260. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {515466BC-E83E-4025-A951-3E95E9D31DCB}
  261. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{515466BC-E83E-4025-A951-3E95E9D31DCB}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
  262. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  263. IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
  264. IE - HKLM\..\SearchScopes\{446ED73C-0D5E-4091-B8A2-19ED80C084DB}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
  265. IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2304157
  266.  
  267.  
  268. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  269.  
  270. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  271.  
  272.  
  273.  
  274. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
  275. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.plusnetwork.com/?sp=lintbie&q={searchTerms}&dp=MessengerPlus
  276. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.plusnetwork.com/?sp=lintbie&q={searchTerms}&dp=MessengerPlus
  277. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.plusnetwork.com/?sp=blatbf
  278. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://g.msn.com/USCON/1
  279. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.plusnetwork.com/?sp=lintbie&q={searchTerms}&dp=MessengerPlus
  280. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.plusnetwork.com/?sp=lintbie&q={searchTerms}&dp=MessengerPlus
  281. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\URLSearchHook: - No CLSID value found
  282. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\URLSearchHook: {f78bf7a8-cf12-4de7-a6da-c463d1b539a7} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Helper.dll ()
  283. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes,DefaultScope = {FA92B756-5341-4B91-AFEF-D7F2A655A670}
  284. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://www.plusnetwork.com/?sp=lintbie&q={searchTerms}&dp=MessengerPlus
  285. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes\{1B5F91F3-A39D-4433-ADC3-887427000473}: "URL" = http://ws.infospace.com/playsushi_tbar/ws/redir?_iceUrl=true& user_id=%userid&tool_id=60231&qkw={searchTerms}
  286. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes\{66D5E31B-4556-C309-8E9A-C2BE01B8E9EF}: "URL" = http://gpy.startnow.com/s/?q={searchTerms}&src=defsearch&provider=bing&provider_name=bing&provider_code=Z103&partner_id=260&product_id=670&affiliate_id=&channel=145517&toolbar_id=200&toolbar_version=2.1.0&install_country=US&install_date=20110719&user_guid=5400DA4F1C554B14AD01701EF19AA18E&machine_id=d082a2dcf5cfa0c91a0be45cf82b54ed&browser=IE&os=win&os_version=6.1-x64-SP1&iesrc={referrer:source}
  287. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2304157
  288. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes\{B0F6A9E6-A20E-2078-1826-6C700C6E8C1D}: "URL" = http://www.bing.com/search?q={searchTerms}&pc=Z045&form=ZGAIDF
  289. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\SearchScopes\{FA92B756-5341-4B91-AFEF-D7F2A655A670}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
  290. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  291. IE - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 192.168.*.*;*.local
  292.  
  293. [color=#E56717]========== FireFox ==========[/color]
  294.  
  295.  
  296.  
  297. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
  298. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
  299. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
  300. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  301. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
  302. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  303. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  304. FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
  305. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  306. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
  307. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  308. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
  309. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  310. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  311. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  312. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  313. FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll File not found
  314. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  315. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  316. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  317. FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
  318. FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.1.13: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
  319. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  320. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  321. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  322. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  323. FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Alex\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
  324. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Alex\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  325. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Alex\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  326. FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  327.  
  328. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012/07/06 19:33:53 | 000,000,000 | ---D | M]
  329. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/01/13 13:37:53 | 000,000,000 | ---D | M]
  330. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2012/02/25 19:42:13 | 000,000,000 | ---D | M]
  331. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/06/16 14:12:25 | 000,000,000 | ---D | M]
  332. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/06/28 01:03:33 | 000,000,000 | ---D | M]
  333. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\Alex\AppData\Roaming\IDM\idmmzcc5 [2012/06/19 14:15:20 | 000,000,000 | ---D | M]
  334. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{6c4b3bf5-26fe-4373-8571-4e39446b7fd0}: C:\Program Files (x86)\getdislike\getdislike [2011/07/13 05:56:10 | 000,009,216 | ---- | M] (GetDislike)
  335. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/06/16 14:12:25 | 000,000,000 | ---D | M]
  336. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/06/28 01:03:33 | 000,000,000 | ---D | M]
  337. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Users\Alex\AppData\Roaming\IDM\idmmzcc5 [2012/06/19 14:15:20 | 000,000,000 | ---D | M]
  338.  
  339. [2010/05/21 18:40:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\Mozilla\Extensions
  340. [2012/04/04 22:14:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\09paqtss.default\extensions
  341. [2012/07/03 17:24:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\4hs1y2ri.default\extensions
  342. [2012/03/30 09:32:26 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\4hs1y2ri.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  343. [2011/10/01 18:47:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qeasak5u.Rewards1\extensions
  344. [2011/10/01 18:47:13 | 000,000,000 | ---D | M] (Browser Companion Helper) -- C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\qeasak5u.Rewards1\extensions\[email protected]
  345. [2012/01/07 15:31:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  346. [2011/07/17 20:20:09 | 000,000,000 | ---D | M] ("GetDislike.com") -- C:\Program Files (x86)\Mozilla Firefox\extensions\{6c4b3bf5-26fe-4373-8571-4e39446b7fd0}
  347. [2012/06/16 14:12:25 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  348. [2012/01/03 18:02:22 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
  349. [2012/02/10 19:12:22 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  350. [2011/05/05 21:46:34 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml.old
  351. [2011/01/24 19:44:06 | 000,002,280 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\search.xml
  352. [2012/02/10 19:12:22 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  353.  
  354. [color=#E56717]========== Chrome ==========[/color]
  355.  
  356. CHR - default_search_provider: Messenger Plus Smartbar Search (Enabled)
  357. CHR - default_search_provider: search_url = http://www.plusnetwork.com/?sp=ctb&q={searchTerms}&dp=MessengerPlus
  358. CHR - default_search_provider: suggest_url =
  359.  
  360. O1 HOSTS File: ([2011/09/21 20:05:41 | 000,002,775 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  361. O1 - Hosts: 127.0.0.1 activate.adobe.com
  362. O1 - Hosts: 127.0.0.1 practivate.adobe.com
  363. O1 - Hosts: 127.0.0.1 ereg.adobe.com
  364. O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
  365. O1 - Hosts: 127.0.0.1 wip3.adobe.com
  366. O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
  367. O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
  368. O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
  369. O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
  370. O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
  371. O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
  372. O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
  373. O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
  374. O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
  375. O1 - Hosts: 127.0.0.1 adobe.activate.com
  376. O1 - Hosts: 127.0.0.1 adobeereg.com
  377. O1 - Hosts: 127.0.0.1 www.adobeereg.com
  378. O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
  379. O1 - Hosts: 127.0.0.1 125.252.224.90
  380. O1 - Hosts: 127.0.0.1 125.252.224.91
  381. O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
  382. O1 - Hosts: 127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
  383. O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
  384. O1 - Hosts: 127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
  385. O1 - Hosts: 127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
  386. O1 - Hosts: 2 more lines...
  387. O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  388. O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
  389. O2:[b]64bit:[/b] - BHO: (RoboForm Toolbar Helper) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  390. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
  391. O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  392. O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
  393. O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
  394. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
  395. O2 - BHO: (RoboForm Toolbar Helper) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  396. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
  397. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
  398. O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  399. O2 - BHO: (Dogpile Bundle Toolbar BHO) - {BFE4B5CB-63F7-4A51-9266-6167655D5B4F} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Toolbar.dll ()
  400. O2 - BHO: (Somoto Toolbar) - {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll File not found
  401. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
  402. O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
  403. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
  404. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (&RoboForm Toolbar) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  405. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  406. O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
  407. O3 - HKLM\..\Toolbar: (&RoboForm Toolbar) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  408. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
  409. O3 - HKLM\..\Toolbar: (Somoto Toolbar) - {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll File not found
  410. O3 - HKLM\..\Toolbar: (Dogpile Bundle Toolbar) - {C80BDEB2-8735-44C6-BD55-A1CCD555667A} - C:\Program Files (x86)\Dogpile Bundle Toolbar\Toolbar.dll ()
  411. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  412. O3 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
  413. O3:[b]64bit:[/b] - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\Toolbar\WebBrowser: (&RoboForm Toolbar) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  414. O3 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000\..\Toolbar\WebBrowser: (&RoboForm Toolbar) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  415. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  416. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  417. O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
  418. O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
  419. O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
  420. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  421. O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
  422. O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
  423. O4 - HKLM..\Run: [Browser companion helper] C:\Program Files (x86)\BrowserCompanion\BCHelper.exe (Blabbers Communications LTD)
  424. O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
  425. O4 - HKLM..\Run: [MessengerPlusForSkypeService] C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (Yuna Software)
  426. O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
  427. O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
  428. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  429. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  430. O4 - HKLM..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" File not found
  431. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  432. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  433. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [AdobeBridge] C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe (Adobe Systems, Inc.)
  434. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [Aim] C:\Program Files (x86)\AIM\aim.exe (AOL Inc.)
  435. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [Akamai NetSession Interface] "C:\Users\Alex\AppData\Local\Akamai\netsession_win.exe" File not found
  436. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [Browser Infrastructure Helper] C:\Users\Alex\AppData\Local\Smartbar\Application\Smartbar.exe (Smartbar)
  437. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [DW6] "C:\Program Files (x86)\The Weather Channel FW\Desktop\DesktopWeather.exe" File not found
  438. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [EPSON WorkForce 1100 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFEA.EXE /FU "C:\Users\Alex\AppData\Local\Temp\E_S1E71.tmp" /EF "HKCU" File not found
  439. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)
  440. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
  441. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [MusicManager] C:\Users\Alex\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Google Inc.)
  442. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [NCsoft Launcher] C:\Program Files (x86)\NCSoft\Launcher\NCLauncher.exe /Minimized File not found
  443. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [Raptr] C:\Program Files (x86)\Raptr\raptrstub.exe (Raptr, Inc)
  444. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [RoboForm] C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
  445. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
  446. O4 - HKU\S-1-5-21-3406553104-2448252221-398841783-1000..\Run: [XNeat Windows Manager] C:\Program Files (x86)\XNeat Windows Manager\xnViewer.exe /h File not found
  447. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  448. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  449. O4 - Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
  450. O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
  451. O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
  452. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
  453. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  454. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  455. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  456. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  457. O8:[b]64bit:[/b] - Extra context menu item: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
  458. O8:[b]64bit:[/b] - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  459. O8:[b]64bit:[/b] - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  460. O8:[b]64bit:[/b] - Extra context menu item: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
  461. O8:[b]64bit:[/b] - Extra context menu item: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
  462. O8:[b]64bit:[/b] - Extra context menu item: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
  463. O8 - Extra context menu item: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
  464. O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  465. O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  466. O8 - Extra context menu item: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
  467. O8 - Extra context menu item: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
  468. O8 - Extra context menu item: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
  469. O9:[b]64bit:[/b] - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  470. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  471. O9:[b]64bit:[/b] - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  472. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  473. O9:[b]64bit:[/b] - Extra Button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  474. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Show RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform-x64.dll (Siber Systems Inc.)
  475. O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  476. O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  477. O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  478. O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  479. O9 - Extra Button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  480. O9 - Extra 'Tools' menuitem : Show RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
  481. O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  482. O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  483. O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
  484. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  485. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - mmswsock.dll File not found
  486. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - mmswsock.dll File not found
  487. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - mmswsock.dll File not found
  488. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
  489. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
  490. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
  491. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
  492. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - mmswsock.dll File not found
  493. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - mmswsock.dll File not found
  494. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - mmswsock.dll File not found
  495. O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  496. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  497. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  498. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  499. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  500. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  501. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  502. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  503. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  504. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  505. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
  506. O13[b]64bit:[/b] - gopher Prefix: missing
  507. O13 - gopher Prefix: missing
  508. O16:[b]64bit:[/b] - DPF: {362C56AA-6E4F-40C7-A0B5-85501DBDAD77} http://i.dell.com/images/global/js/scanner/SysProExe.cab (Reg Error: Key error.)
  509. O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.1)
  510. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
  511. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
  512. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
  513. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.5.1)
  514. O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
  515. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.5.1)
  516. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  517. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6B11E9DC-60AD-4DC3-962B-1E73BFF29EAF}: DhcpNameServer = 192.168.1.1
  518. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  519. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  520. O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
  521. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  522. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  523. O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
  524. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  525. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  526. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  527. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  528. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  529. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  530. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  531. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  532. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  533. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  534. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  535. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  536. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  537. O32 - HKLM CDRom: AutoRun - 1
  538. O32 - AutoRun File - [2010/01/25 00:09:13 | 000,000,000 | -H-D | M] - I:\AUTORUN -- [ NTFS ]
  539. O32 - AutoRun File - [2004/01/22 16:47:32 | 000,000,038 | RH-- | M] () - I:\autorun.inf -- [ NTFS ]
  540. O33 - MountPoints2\J\Shell - "" = AutoRun
  541. O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\setup.exe -a
  542. O34 - HKLM BootExecute: (autocheck autochk *)
  543. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  544. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  545. O35 - HKLM\..comfile [open] -- "%1" %*
  546. O35 - HKLM\..exefile [open] -- "%1" %*
  547. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  548. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  549. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  550. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  551. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  552. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  553. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  554.  
  555.  
  556. CREATERESTOREPOINT
  557. Restore point Set: OTL Restore Point
  558.  
  559. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  560.  
  561. [2012/07/07 16:01:18 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Malwarebytes
  562. [2012/07/07 16:01:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  563. [2012/07/07 16:01:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  564. [2012/07/07 16:01:02 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  565. [2012/07/07 16:01:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  566. [2012/07/06 19:34:21 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
  567. [2012/07/05 23:24:29 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\data
  568. [2012/07/05 23:24:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword
  569. [2012/07/05 23:21:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kill3rCombo
  570. [2012/07/02 18:03:38 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\Chris Mayhew - Fade
  571. [2012/07/02 17:44:05 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\Rick Lax
  572. [2012/07/01 21:04:39 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{82535045-3168-4BC0-BAF4-EF62761D5B46}
  573. [2012/07/01 21:04:27 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{DD29CC71-F88D-4395-93B4-7F23DC602376}
  574. [2012/06/29 17:13:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  575. [2012/06/29 17:13:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle
  576. [2012/06/29 17:13:11 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll
  577. [2012/06/29 17:13:11 | 000,227,720 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
  578. [2012/06/28 12:39:49 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\RLENG
  579. [2012/06/28 02:15:54 | 000,000,000 | ---D | C] -- C:\ILLUSION
  580. [2012/06/28 00:20:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
  581. [2012/06/28 00:20:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
  582. [2012/06/28 00:20:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
  583. [2012/06/26 23:54:55 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fighting Girl Li
  584. [2012/06/22 00:13:27 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\Super_Smash_Bros_Brawl_[NTSC]_(Wii)_[Ingles]_[wWw.EstrenosWii.CoM]
  585. [2012/06/22 00:08:17 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\Dolphin Emulator
  586. [2012/06/21 22:05:46 | 000,000,000 | ---D | C] -- C:\Users\Alex\.swt
  587. [2012/06/21 22:05:02 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\AdventureCraft
  588. [2012/06/21 19:15:38 | 002,206,720 | ---- | C] (Python Software Foundation) -- C:\Users\Alex\Desktop\python27.dll
  589. [2012/06/21 19:15:29 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\MCEdit-0.1.1.win32
  590. [2012/06/21 16:27:07 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  591. [2012/06/21 16:27:07 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  592. [2012/06/21 16:27:07 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  593. [2012/06/21 16:26:54 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  594. [2012/06/21 16:26:54 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  595. [2012/06/21 16:26:54 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  596. [2012/06/21 16:26:40 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  597. [2012/06/21 16:26:40 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  598. [2012/06/20 10:12:10 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\Highlight3d
  599. [2012/06/16 14:20:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  600. [2012/06/16 14:20:06 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
  601. [2012/06/16 14:20:06 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
  602. [2012/06/13 14:39:24 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\Macromedia
  603. [2012/06/13 14:19:49 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{4CADFA51-FCBB-4B71-983B-4C8D6EDDC705}
  604. [2012/06/13 14:19:32 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{0B0439CE-8205-49E7-8C06-AA30F44C1FA1}
  605. [2012/06/13 03:01:05 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  606. [2012/06/13 03:01:05 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  607. [2012/06/13 03:01:03 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  608. [2012/06/13 03:01:03 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  609. [2012/06/13 03:00:57 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  610. [2012/06/13 03:00:56 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  611. [2012/06/13 03:00:56 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  612. [2012/06/13 03:00:56 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  613. [2012/06/13 03:00:53 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  614. [2012/06/13 03:00:53 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  615. [2012/06/13 03:00:52 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  616. [2012/06/13 03:00:51 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  617. [2012/06/13 03:00:51 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  618. [2012/06/12 18:13:02 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
  619. [2012/06/12 18:13:02 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
  620. [2012/06/12 18:13:02 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
  621. [2012/06/12 18:12:50 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  622. [2012/06/12 18:12:47 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  623. [2012/06/12 18:12:47 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  624. [2012/06/12 18:12:35 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
  625. [2012/06/12 18:12:28 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  626. [2012/06/12 18:12:26 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  627. [2012/06/12 13:14:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIM
  628. [2012/06/12 13:14:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Software Update Utility
  629. [2012/06/12 13:13:27 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{C79D4BA1-8B90-43C1-8B74-0673D4FD2A42}
  630. [2012/06/12 13:11:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{E41EE848-78BE-4343-96A0-9E9645621A8B}
  631. [2012/06/11 13:08:11 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{5593A964-C85B-4C52-B83E-5A84DA269B55}
  632. [2012/06/11 13:05:33 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{6C48E930-3E95-4C68-A2DA-600338E2740F}
  633. [2012/06/10 15:54:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  634. [2012/06/10 15:54:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
  635. [2012/06/10 14:46:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bastion
  636. [2012/06/10 14:46:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bastion
  637. [2012/06/10 13:30:33 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\LoneSurvivor
  638. [2012/06/10 13:30:24 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\LoneSurvivor
  639. [2012/06/10 13:03:40 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{A27A0DB5-C61A-4DA8-8CDC-D0DA3D2B2816}
  640. [2012/06/10 13:01:47 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{84295ACC-8BED-426B-861B-1FDAB36CE9A8}
  641. [2012/06/09 11:10:27 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{578ADD99-2B8D-48F8-A066-F66C8C2A4F42}
  642. [2012/06/09 11:07:35 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{F0D00606-8619-45B7-821C-81CCDD776A75}
  643. [2012/06/08 10:04:12 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\INVedit
  644. [2012/06/08 08:46:53 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{C1636070-D042-48F7-B6E3-34512652D8CD}
  645. [2012/06/08 08:44:43 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{A8CE7C85-3B07-4707-A615-8D63DA3867B2}
  646. [642 C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\U\*.tmp files -> C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\U\*.tmp -> ]
  647. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  648. [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  649.  
  650. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  651.  
  652. [2012/07/07 16:27:28 | 000,014,560 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  653. [2012/07/07 16:27:28 | 000,014,560 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  654. [2012/07/07 16:18:37 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  655. [2012/07/07 16:17:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  656. [2012/07/07 16:17:23 | 536,063,999 | -HS- | M] () -- C:\hiberfil.sys
  657. [2012/07/07 16:01:05 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  658. [2012/07/07 15:59:02 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  659. [2012/07/07 15:41:00 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3406553104-2448252221-398841783-1000UA.job
  660. [2012/07/07 15:34:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  661. [2012/07/07 12:53:19 | 000,007,598 | ---- | M] () -- C:\Users\Alex\AppData\Local\Resmon.ResmonCfg
  662. [2012/07/07 12:41:00 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3406553104-2448252221-398841783-1000Core.job
  663. [2012/07/06 19:34:31 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe
  664. [2012/07/06 19:33:54 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  665. [2012/07/05 23:24:19 | 000,001,145 | ---- | M] () -- C:\Users\Public\Desktop\Elsword.lnk
  666. [2012/07/05 00:10:23 | 000,034,003 | -HS- | M] () -- C:\Users\Alex\Desktop\Folder.jpg
  667. [2012/07/05 00:10:23 | 000,034,003 | -HS- | M] () -- C:\Users\Alex\Desktop\AlbumArt_{CC76ADB7-3DEE-4A51-B8DE-0B8B644090BB}_Large.jpg
  668. [2012/07/05 00:10:23 | 000,005,953 | -HS- | M] () -- C:\Users\Alex\Desktop\AlbumArtSmall.jpg
  669. [2012/07/05 00:10:23 | 000,005,953 | -HS- | M] () -- C:\Users\Alex\Desktop\AlbumArt_{CC76ADB7-3DEE-4A51-B8DE-0B8B644090BB}_Small.jpg
  670. [2012/07/03 09:21:52 | 000,958,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  671. [2012/07/03 09:21:52 | 000,355,856 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  672. [2012/07/03 09:21:52 | 000,071,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  673. [2012/07/03 09:21:52 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
  674. [2012/07/03 09:21:52 | 000,054,072 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
  675. [2012/07/03 09:21:51 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
  676. [2012/07/03 09:21:32 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  677. [2012/07/03 09:21:28 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
  678. [2012/07/03 09:21:18 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  679. [2012/06/30 22:41:01 | 000,002,394 | ---- | M] () -- C:\Users\Alex\Documents\mcedit.ini
  680. [2012/06/30 21:01:42 | 005,723,081 | ---- | M] () -- C:\Users\Alex\Desktop\Maroon_5_-_Payphone_(Ft._Wiz_Khalifa).mp3
  681. [2012/06/29 21:16:50 | 000,872,838 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  682. [2012/06/29 21:16:50 | 000,726,452 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  683. [2012/06/29 21:16:50 | 000,146,470 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  684. [2012/06/29 17:12:51 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
  685. [2012/06/29 17:12:50 | 000,174,064 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
  686. [2012/06/28 21:24:32 | 000,005,692 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\wklnhst.dat
  687. [2012/06/28 20:35:37 | 000,000,845 | ---- | M] () -- C:\Users\Alex\Desktop\Minecraft - More RAM.lnk
  688. [2012/06/28 04:02:57 | 1472,397,312 | ---- | M] () -- C:\Users\Alex\Desktop\RLENG.iso
  689. [2012/06/28 01:03:34 | 000,000,960 | ---- | M] () -- C:\Windows\wininit.ini
  690. [2012/06/28 00:20:47 | 000,001,284 | ---- | M] () -- C:\Users\Alex\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
  691. [2012/06/23 02:59:34 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  692. [2012/06/23 02:59:33 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  693. [2012/06/22 00:57:17 | 000,281,288 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
  694. [2012/06/22 00:57:17 | 000,281,288 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
  695. [2012/06/20 01:49:21 | 000,008,704 | ---- | M] () -- C:\Users\Alex\Documents\resume.wps
  696. [2012/06/18 16:53:18 | 001,069,568 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Jungle.exe
  697. [2012/06/18 16:50:15 | 000,000,005 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\version.ini
  698. [2012/06/16 14:20:38 | 000,001,785 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
  699. [2012/06/13 14:15:59 | 004,886,496 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  700. [2012/06/12 13:14:27 | 000,001,097 | -H-- | M] () -- C:\IPH.PH
  701. [2012/06/12 13:14:18 | 000,001,937 | ---- | M] () -- C:\Users\Alex\Application Data\Microsoft\Internet Explorer\Quick Launch\AIM.lnk
  702. [2012/06/12 13:14:18 | 000,001,913 | ---- | M] () -- C:\Users\Public\Desktop\AIM.lnk
  703. [2012/06/11 22:19:42 | 000,281,288 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  704. [2012/06/10 14:46:38 | 000,001,855 | ---- | M] () -- C:\Users\Public\Desktop\Bastion.lnk
  705. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  706. [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  707.  
  708. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  709.  
  710. [2012/07/07 16:21:58 | 000,232,960 | ---- | C] () -- C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\U\00000008.@
  711. [2012/07/07 16:01:05 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  712. [2012/07/07 12:55:30 | 000,002,048 | ---- | C] () -- C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\U\00000004.@
  713. [2012/07/05 23:24:19 | 000,001,145 | ---- | C] () -- C:\Users\Public\Desktop\Elsword.lnk
  714. [2012/07/05 00:10:23 | 000,034,003 | -HS- | C] () -- C:\Users\Alex\Desktop\AlbumArt_{CC76ADB7-3DEE-4A51-B8DE-0B8B644090BB}_Large.jpg
  715. [2012/07/05 00:10:23 | 000,005,953 | -HS- | C] () -- C:\Users\Alex\Desktop\AlbumArt_{CC76ADB7-3DEE-4A51-B8DE-0B8B644090BB}_Small.jpg
  716. [2012/07/04 23:54:52 | 000,034,003 | -HS- | C] () -- C:\Users\Alex\Desktop\Folder.jpg
  717. [2012/07/04 23:54:52 | 000,005,953 | -HS- | C] () -- C:\Users\Alex\Desktop\AlbumArtSmall.jpg
  718. [2012/06/30 21:01:32 | 005,723,081 | ---- | C] () -- C:\Users\Alex\Desktop\Maroon_5_-_Payphone_(Ft._Wiz_Khalifa).mp3
  719. [2012/06/28 20:34:55 | 000,000,845 | ---- | C] () -- C:\Users\Alex\Desktop\Minecraft - More RAM.lnk
  720. [2012/06/28 03:44:59 | 1472,397,312 | ---- | C] () -- C:\Users\Alex\Desktop\RLENG.iso
  721. [2012/06/28 01:03:31 | 000,000,960 | ---- | C] () -- C:\Windows\wininit.ini
  722. [2012/06/28 00:20:47 | 000,001,284 | ---- | C] () -- C:\Users\Alex\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
  723. [2012/06/26 23:55:57 | 000,000,804 | ---- | C] () -- C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\L\00000004.@
  724. [2012/06/26 23:55:51 | 000,016,896 | ---- | C] () -- C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\U\80000000.@
  725. [2012/06/26 23:55:48 | 000,001,632 | ---- | C] () -- C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\U\000000cb.@
  726. [2012/06/21 19:15:40 | 000,055,296 | ---- | C] () -- C:\Users\Alex\Desktop\mcedit.exe
  727. [2012/06/18 16:52:50 | 001,069,568 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\Jungle.exe
  728. [2012/06/16 14:20:38 | 000,001,785 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
  729. [2012/06/15 15:56:55 | 000,000,005 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\version.ini
  730. [2012/06/12 13:14:18 | 000,001,913 | ---- | C] () -- C:\Users\Public\Desktop\AIM.lnk
  731. [2012/06/10 14:46:38 | 000,001,855 | ---- | C] () -- C:\Users\Public\Desktop\Bastion.lnk
  732. [2012/04/06 21:10:14 | 000,000,232 | ---- | C] () -- C:\Windows\ODBCINST.INI
  733. [2012/02/25 23:09:27 | 000,083,411 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\icarus-dxdiag.xml
  734. [2012/01/11 21:19:36 | 000,281,288 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  735. [2012/01/11 21:19:32 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  736. [2012/01/10 13:28:02 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{8774461b-5966-5ff0-8b07-d6ca78e21e54}\@
  737. [2011/12/09 22:51:08 | 000,000,036 | ---- | C] () -- C:\Users\Alex\.org.eclipse.epp.usagedata.recording.userId
  738. [2011/11/21 16:13:33 | 000,000,132 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\Adobe PNG Format CS5 Prefs
  739. [2011/11/14 23:44:23 | 269,190,608 | ---- | C] () -- C:\Users\Alex\Princess Lover! OVA - 02 (704x396 h264 HQ) [112A823D].mkv
  740. [2011/11/07 02:09:35 | 287,116,376 | ---- | C] () -- C:\Users\Alex\Princess_Lover_OVA_-_Part_1_[HQ].mkv
  741. [2011/10/10 16:35:35 | 000,000,000 | ---- | C] () -- C:\Users\Alex\format
  742. [2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
  743. [2011/09/12 14:39:06 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  744. [2011/07/27 22:17:59 | 006,904,040 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe
  745. [2011/07/14 22:10:01 | 000,000,634 | ---- | C] () -- C:\Users\Alex\SciTE.session
  746. [2011/06/14 23:32:09 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
  747. [2011/04/24 22:34:57 | 232,835,404 | ---- | C] () -- C:\Users\Alex\Binkan Athlete - 01.mp4
  748. [2011/04/21 20:47:52 | 000,001,700 | ---- | C] () -- C:\Windows\Sandboxie.ini
  749. [2011/03/29 15:44:59 | 000,000,117 | ---- | C] () -- C:\Users\Alex\jagex_runescape_preferences2.dat
  750. [2011/03/29 15:43:15 | 000,000,034 | ---- | C] () -- C:\Users\Alex\jagex_runescape_preferences.dat
  751. [2011/03/17 17:51:46 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  752. [2011/03/06 20:49:40 | 000,007,598 | ---- | C] () -- C:\Users\Alex\AppData\Local\Resmon.ResmonCfg
  753. [2011/03/06 18:05:26 | 000,000,268 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
  754. [2011/01/23 00:18:11 | 000,053,248 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\chrtmp
  755. [2011/01/18 19:44:19 | 000,000,080 | ---- | C] () -- C:\Windows\EPWF1100.ini
  756. [2010/12/03 01:12:39 | 000,216,302 | ---- | C] () -- C:\Users\Alex\Peaceful Nature.rns
  757. [2010/10/28 21:13:17 | 000,199,416 | ---- | C] () -- C:\Users\Alex\Reason.rns
  758. [2010/09/16 16:59:34 | 000,000,192 | ---- | C] () -- C:\Users\Alex\.jupload.properties
  759. [2010/09/14 20:05:20 | 000,073,220 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
  760. [2010/09/14 20:05:20 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
  761. [2010/09/14 20:05:20 | 000,029,114 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
  762. [2010/09/14 20:05:20 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
  763. [2010/09/14 20:05:20 | 000,021,021 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
  764. [2010/09/14 20:05:20 | 000,015,670 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
  765. [2010/09/14 20:05:20 | 000,013,280 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
  766. [2010/09/14 20:05:20 | 000,010,673 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
  767. [2010/09/14 20:05:20 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
  768. [2010/09/14 20:05:20 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
  769. [2010/09/14 20:05:20 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
  770. [2010/09/14 20:05:20 | 000,001,137 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
  771. [2010/09/14 20:05:20 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
  772. [2010/09/14 20:05:20 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
  773. [2010/09/14 20:05:20 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
  774. [2010/09/14 20:05:20 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
  775. [2010/09/14 20:05:01 | 000,000,083 | ---- | C] () -- C:\Windows\EPSPR260.ini
  776. [2010/08/03 17:46:42 | 000,029,696 | ---- | C] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  777. [2010/07/09 13:30:37 | 000,889,932 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  778. [2010/06/09 13:32:26 | 000,001,628 | ---- | C] () -- C:\Users\Alex\AppData\Local\dsp_edcast_v3_1.cfg
  779. [2010/06/09 13:32:17 | 000,002,022 | ---- | C] () -- C:\Users\Alex\AppData\Local\dsp_edcast_v3_0.cfg
  780. [2010/05/21 19:27:47 | 000,005,692 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\wklnhst.dat
  781. [2010/05/21 18:51:24 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  782. [2005/09/28 17:52:03 | 000,159,550 | -H-- | C] () -- C:\Users\Alex\AppData\Roaming\Alexlog.dat
  783.  
  784. [color=#E56717]========== Custom Scans ==========[/color]
  785.  
  786. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  787. [2007/11/07 08:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
  788. [2010/07/30 19:14:08 | 000,205,312 | ---- | M] () -- C:\KEYGEN.EXE
  789.  
  790. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  791. [2010/05/19 10:43:48 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
  792. [2011/02/25 23:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
  793. [2011/02/25 22:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  794. [2009/07/13 18:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
  795. [2011/02/25 22:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
  796. [2010/05/19 10:43:52 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
  797. [2011/02/25 22:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
  798. [2011/02/24 23:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
  799. [2011/02/24 23:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  800. [2011/02/25 23:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  801. [2010/11/20 05:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  802. [2010/05/19 10:43:48 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
  803. [2010/05/19 10:43:49 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
  804. [2011/02/24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
  805. [2011/02/24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  806. [2010/05/19 10:43:52 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
  807. [2010/05/19 10:43:49 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
  808. [2010/11/20 06:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  809. [2010/05/19 10:43:52 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
  810. [2010/05/19 10:43:49 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
  811. [2009/07/13 18:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
  812. [2010/05/19 10:43:52 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
  813. [2010/05/19 10:43:48 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
  814. [2011/02/25 23:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
  815. [2010/05/19 10:43:49 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
  816. [2010/05/19 10:43:48 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe
  817.  
  818. [color=#A23BEC]< MD5 for: SERVICES >[/color]
  819. [2009/06/10 14:00:26 | 000,017,463 | ---- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services
  820.  
  821. [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
  822. [2009/07/13 18:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
  823. [2009/07/13 18:39:37 | 000,329,216 | ---- | M] (Microsoft Corporation) MD5=50BEA589F7D7958BDD2528A8F69D05CC -- C:\Windows\SysNative\services.exe
  824.  
  825. [color=#A23BEC]< MD5 for: SERVICES.EXE.MUI >[/color]
  826. [2009/07/13 19:25:40 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\SysNative\en-US\services.exe.mui
  827. [2009/07/13 19:25:40 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui
  828.  
  829. [color=#A23BEC]< MD5 for: SERVICES.H >[/color]
  830. [2011/07/13 12:09:02 | 000,001,043 | ---- | M] () MD5=EFA6260E75D8055649F88462E3E9E929 -- C:\xampp\mysql\include\mysql\services.h
  831.  
  832. [color=#A23BEC]< MD5 for: SERVICES.LNK >[/color]
  833. [2009/07/13 21:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
  834. [2009/07/13 21:54:05 | 000,001,288 | ---- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
  835.  
  836. [color=#A23BEC]< MD5 for: SERVICES.MOF >[/color]
  837. [2009/06/10 13:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof
  838. [2009/06/10 13:44:06 | 000,002,866 | ---- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof
  839.  
  840. [color=#A23BEC]< MD5 for: SERVICES.MSC >[/color]
  841. [2009/07/13 19:23:30 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\en-US\services.msc
  842. [2009/06/10 13:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\services.msc
  843. [2009/07/13 19:08:50 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\en-US\services.msc
  844. [2009/06/10 14:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\services.msc
  845. [2009/07/13 19:23:30 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
  846. [2009/06/10 13:38:36 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
  847. [2009/07/13 19:08:50 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
  848. [2009/06/10 14:21:09 | 000,092,745 | ---- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc
  849.  
  850. [color=#A23BEC]< MD5 for: SERVICES.PTXML >[/color]
  851. [2009/07/13 13:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml
  852. [2009/07/13 13:16:17 | 000,001,061 | ---- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml
  853.  
  854. [color=#A23BEC]< MD5 for: SERVICES.SBS >[/color]
  855. [2011/03/01 00:58:46 | 000,034,818 | ---- | M] () MD5=62AFD4B2025CE6D4706B36F4C4808F9B -- C:\Program Files (x86)\Spybot - Search & Destroy\Includes\Services.sbs
  856.  
  857. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  858. [2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
  859. [2009/07/13 18:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
  860. [2009/07/13 18:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
  861. [2009/07/13 18:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
  862. [2009/07/13 18:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
  863.  
  864. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  865. [2010/11/20 05:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
  866. [2010/11/20 05:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  867. [2009/07/13 18:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
  868. [2009/07/13 18:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
  869. [2010/11/20 06:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
  870. [2010/11/20 06:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  871.  
  872. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  873. [2012/04/04 15:56:38 | 000,199,240 | ---- | M] () MD5=097D0E812D7A9A3101CE46CB2BE0474D -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
  874. [2010/11/20 06:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
  875. [2010/11/20 06:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  876. [2009/07/13 18:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
  877. [2010/05/19 10:43:52 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
  878. [2010/05/19 10:43:52 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
  879.  
  880. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK /s >[/color]
  881. [HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General]
  882. "UniqueID" = {F3A4675F-A020-42DB-A01B-0763B19194F0}
  883. "ComputerName" = ALEX-PC
  884. "VolumeSerialNumber" = -1362296602
  885. "ActiveLatchSet" = 11
  886. "FirstProtocol" = 0
  887. "SetTime" = 75805387
  888. [HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace]
  889. "LocalBase" = C:\Users\Alex\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML -- [2012/06/19 14:19:36 | 000,010,277 | ---- | M] ()
  890. "DTDFile" = C:\Users\Alex\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.DTD -- [2010/05/21 17:41:45 | 000,000,498 | ---- | M] ()
  891. "LocalDelta" = C:\Users\Alex\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNSD.XML
  892. "RemoteDelta" = C:\Users\Alex\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNSR.XML
  893. [HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\NATCache]
  894. "AddressHash" = 1553178013
  895. "HighDateTime" = 30232102
  896. "LowDateTime" = -1913523488
  897. "Result" = 1
  898. [HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\NATPortMappings]
  899.  
  900. [color=#E56717]========== Alternate Data Streams ==========[/color]
  901.  
  902. @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:DA990ED8
  903. @Alternate Data Stream - 1017 bytes -> C:\Users\Alex\AppData\Local\ObrgFa9wf:dY1vOTWOueMhDKid2OQEglIR2hU
  904.  
  905. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!