API tools faq
paste
Guest User

OTL Main

a guest
Feb 18th, 2012
454
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 67.78 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2/18/2012 6:32:37 PM - Run 1
  2. OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Banksy\Downloads
  3. 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 15.92 Gb Total Physical Memory | 12.94 Gb Available Physical Memory | 81.31% Memory free
  8. 31.84 Gb Paging File | 28.15 Gb Available in Paging File | 88.43% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 931.41 Gb Total Space | 772.87 Gb Free Space | 82.98% Space Free | Partition Type: NTFS
  13. Drive D: | 59.53 Gb Total Space | 3.88 Gb Free Space | 6.53% Space Free | Partition Type: NTFS
  14. Drive E: | 931.51 Gb Total Space | 576.43 Gb Free Space | 61.88% Space Free | Partition Type: NTFS
  15. Drive F: | 1.95 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
  16. Drive G: | 100.00 Mb Total Space | 64.04 Mb Free Space | 64.04% Space Free | Partition Type: NTFS
  17.  
  18. Computer Name: BANKSY-PC | User Name: Banksy | Logged in as Administrator.
  19. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  20. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  21.  
  22. [color=#E56717]========== Processes (SafeList) ==========[/color]
  23.  
  24. PRC - [2012/02/18 18:32:03 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Banksy\Downloads\OTL.exe
  25. PRC - [2012/02/18 17:04:29 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  26. PRC - [2012/02/16 13:53:05 | 000,739,704 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
  27. PRC - [2012/02/14 09:57:26 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
  28. PRC - [2012/02/14 09:57:18 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  29. PRC - [2012/02/13 21:08:05 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
  30. PRC - [2012/01/26 09:53:00 | 002,345,792 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  31. PRC - [2012/01/26 04:17:24 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  32. PRC - [2012/01/19 06:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
  33. PRC - [2012/01/19 06:47:20 | 002,698,624 | ---- | M] (TeamViewer GmbH) -- c:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Desktop.exe
  34. PRC - [2012/01/19 06:47:19 | 011,171,712 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
  35. PRC - [2012/01/19 06:26:19 | 000,116,608 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe
  36. PRC - [2012/01/16 14:02:14 | 000,979,360 | ---- | M] (Razer USA Ltd) -- C:\Program Files (x86)\Razer\Imperator\RazerImperatorSysTray.exe
  37. PRC - [2012/01/13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  38. PRC - [2012/01/13 14:53:18 | 000,460,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  39. PRC - [2012/01/03 08:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  40. PRC - [2011/08/08 17:39:32 | 002,656,536 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  41. PRC - [2011/08/08 17:39:26 | 000,325,912 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  42. PRC - [2011/05/20 10:10:26 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  43. PRC - [2011/05/20 10:10:12 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  44. PRC - [2009/03/21 08:31:04 | 000,184,320 | ---- | M] (Y'z) -- C:\Windows\Ubuntu Skin Pack\YzShadow\YzShadow.exe
  45. PRC - [2007/09/02 06:28:52 | 000,495,616 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\RocketDock\RocketDock.exe
  46. PRC - [2007/08/17 10:40:04 | 000,159,744 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\UberIcon\UberIcon.exe
  47. PRC - [2007/07/06 06:33:22 | 002,058,752 | ---- | M] (Christian SALMON) -- C:\Windows\Ubuntu Skin Pack\Yodm3D\Yodm3D.exe
  48. PRC - [1998/05/29 00:00:00 | 000,119,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MDM.EXE
  49.  
  50.  
  51. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  52.  
  53. MOD - [2012/02/18 17:04:28 | 001,911,768 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  54. MOD - [2012/02/15 03:41:40 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e6764a2f73eea789d5c9d90de296428d\IAStorUtil.ni.dll
  55. MOD - [2012/02/15 03:36:47 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0a894f77b9aa64acbd3ce791916357d8\System.Runtime.Remoting.ni.dll
  56. MOD - [2012/02/15 03:36:34 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ff30db6905f8ec024fc808ed8779c0f3\System.Windows.Forms.ni.dll
  57. MOD - [2012/02/15 03:36:30 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\a09ee392fa90849f2e9313a1ebbe0279\System.Drawing.ni.dll
  58. MOD - [2012/02/15 03:36:24 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\585ac5899ab444221c8b41df13b194bc\WindowsBase.ni.dll
  59. MOD - [2012/02/15 03:36:21 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49f4cb0755ccc34cd35ff96dc2ef9e3\System.Xml.ni.dll
  60. MOD - [2012/02/15 03:36:19 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\15742b3597258ce67cbe219005c197e5\System.Configuration.ni.dll
  61. MOD - [2012/02/15 03:36:18 | 007,952,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\1f14b3e1ee0847f8662f513e67f92547\System.ni.dll
  62. MOD - [2012/02/14 03:35:19 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\de4309fbede94946bb53edb562f10252\IAStorCommon.ni.dll
  63. MOD - [2012/02/14 03:31:55 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll
  64. MOD - [2012/02/13 21:08:28 | 014,415,144 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
  65. MOD - [2012/02/13 21:08:28 | 000,914,216 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-52.dll
  66. MOD - [2012/02/13 21:08:28 | 000,857,896 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll
  67. MOD - [2012/02/13 21:08:28 | 000,155,432 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-52.dll
  68. MOD - [2012/02/13 21:08:28 | 000,091,432 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-50.dll
  69. MOD - [2012/02/13 20:11:53 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
  70. MOD - [2012/02/13 18:58:02 | 000,070,424 | ---- | M] () -- C:\Program Files\TortoiseSVN\bin\libsasl32.dll
  71. MOD - [2012/01/26 04:17:08 | 000,360,768 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
  72. MOD - [2009/03/21 07:49:54 | 000,040,960 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\YzShadow\Languages\English.lang
  73. MOD - [2007/09/02 06:28:52 | 000,495,616 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\RocketDock\RocketDock.exe
  74. MOD - [2007/08/17 10:40:04 | 000,159,744 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\UberIcon\UberIcon.exe
  75. MOD - [2007/03/09 22:09:02 | 000,090,112 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\UberIcon\UberIcon.dll
  76. MOD - [2006/07/17 14:45:58 | 000,057,344 | ---- | M] () -- C:\Windows\Ubuntu Skin Pack\UberIcon\Plugins\iZoom\fx.dll
  77.  
  78.  
  79. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  80.  
  81. SRV:[b]64bit:[/b] - [2012/02/07 18:12:04 | 000,097,552 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
  82. SRV:[b]64bit:[/b] - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  83. SRV - [2012/02/14 09:57:26 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
  84. SRV - [2012/02/14 09:57:18 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  85. SRV - [2012/01/26 09:53:00 | 002,345,792 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  86. SRV - [2012/01/26 04:17:24 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  87. SRV - [2012/01/19 06:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
  88. SRV - [2012/01/13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  89. SRV - [2012/01/03 08:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  90. SRV - [2011/08/08 17:39:32 | 002,656,536 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
  91. SRV - [2011/08/08 17:39:26 | 000,325,912 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
  92. SRV - [2011/08/05 00:25:50 | 000,091,984 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  93. SRV - [2011/05/20 10:10:26 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
  94. SRV - [2011/03/16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  95. SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  96. SRV - [1998/06/06 00:00:00 | 000,034,036 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\VARPC.EXE -- (Visual Studio Analyzer RPC bridge)
  97.  
  98.  
  99. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  100.  
  101. DRV:[b]64bit:[/b] - [2012/02/07 18:12:02 | 000,161,432 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
  102. DRV:[b]64bit:[/b] - [2012/01/17 07:45:56 | 000,188,224 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  103. DRV:[b]64bit:[/b] - [2011/12/14 19:46:42 | 000,222,904 | ---- | M] (QFX Software Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\keyscrambler.sys -- (KeyScrambler)
  104. DRV:[b]64bit:[/b] - [2011/12/10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  105. DRV:[b]64bit:[/b] - [2011/08/23 08:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  106. DRV:[b]64bit:[/b] - [2011/05/20 09:53:44 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  107. DRV:[b]64bit:[/b] - [2011/05/13 03:21:04 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
  108. DRV:[b]64bit:[/b] - [2011/05/13 03:21:04 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
  109. DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
  110. DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
  111. DRV:[b]64bit:[/b] - [2011/05/13 03:21:02 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
  112. DRV:[b]64bit:[/b] - [2011/03/11 01:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  113. DRV:[b]64bit:[/b] - [2011/03/11 01:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  114. DRV:[b]64bit:[/b] - [2010/10/19 16:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
  115. DRV:[b]64bit:[/b] - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  116. DRV:[b]64bit:[/b] - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  117. DRV:[b]64bit:[/b] - [2009/07/13 20:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  118. DRV:[b]64bit:[/b] - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  119. DRV:[b]64bit:[/b] - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  120. DRV:[b]64bit:[/b] - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  121. DRV:[b]64bit:[/b] - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  122. DRV:[b]64bit:[/b] - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  123. DRV:[b]64bit:[/b] - [2009/02/24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
  124. DRV - [2011/07/19 14:35:30 | 000,067,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys -- (VSPerfDrv110)
  125. DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  126. DRV - [2009/02/24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\mcdbus.sys -- (mcdbus)
  127.  
  128.  
  129. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  130.  
  131.  
  132. [color=#E56717]========== Internet Explorer ==========[/color]
  133.  
  134. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  135.  
  136. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  137. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
  138. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 43 8D D2 7F B0 EA CC 01 [binary data]
  139. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  140.  
  141. [color=#E56717]========== FireFox ==========[/color]
  142.  
  143.  
  144. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  145. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
  146. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
  147. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  148. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  149. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.0.60401.0\npctrl.dll ( Microsoft Corporation)
  150. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  151. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  152. FF - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
  153. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  154. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  155. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  156.  
  157. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/18 17:04:29 | 000,000,000 | ---D | M]
  158. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  159.  
  160. [2012/02/13 19:45:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Banksy\AppData\Roaming\Mozilla\Extensions
  161. [2012/02/18 18:13:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Banksy\AppData\Roaming\Mozilla\Firefox\Profiles\u7yi8hrr.default\extensions
  162. [2012/02/16 16:29:32 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Banksy\AppData\Roaming\Mozilla\Firefox\Profiles\u7yi8hrr.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
  163. [2012/02/18 18:13:58 | 000,000,000 | ---D | M] (KeyScrambler) -- C:\Users\Banksy\AppData\Roaming\Mozilla\Firefox\Profiles\u7yi8hrr.default\extensions\[email protected]
  164. [2012/02/18 17:04:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  165. () (No name found) -- C:\USERS\BANKSY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\U7YI8HRR.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
  166. [2012/02/18 17:04:29 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  167. [2012/02/18 17:04:27 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  168. [2012/02/18 17:04:27 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  169.  
  170. O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  171. O2:[b]64bit:[/b] - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
  172. O2 - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
  173. O2 - BHO: (Microsoft Web Test Recorder 10.0 Helper) - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
  174. O4 - HKLM..\Run: [Dolby Home Theater v4] C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Dolby Laboratories Inc.)
  175. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  176. O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
  177. O4 - HKLM..\Run: [Razer Imperator Driver] C:\Program Files (x86)\Razer\Imperator\RazerImperatorSysTray.exe (Razer USA Ltd)
  178. O4 - Startup: C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
  179. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  180. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  181. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  182. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  183. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  184. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  185. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  186. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation)
  187. O9 - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation)
  188. O13[b]64bit:[/b] - gopher Prefix: missing
  189. O13 - gopher Prefix: missing
  190. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  191. O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  192. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
  193. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  194. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  195. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4CDB3859-7A36-4480-A344-D41CDE572DB2}: DhcpNameServer = 192.168.1.1
  196. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  197. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  198. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  199. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  200. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  201. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  202. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  203. O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  204. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  205. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  206. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  207. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  208. O32 - HKLM CDRom: AutoRun - 1
  209. O32 - AutoRun File - [2011/08/24 17:15:15 | 000,000,058 | R--- | M] () - F:\autorun.inf -- [ UDF ]
  210. O33 - MountPoints2\{33f911e2-56a3-11e1-a74d-50e549bd2350}\Shell - "" = AutoRun
  211. O33 - MountPoints2\{33f911e2-56a3-11e1-a74d-50e549bd2350}\Shell\AutoRun\command - "" = F:\vs_ultimate.exe -- [2011/08/25 22:56:45 | 001,266,160 | R--- | M] (Microsoft Corporation)
  212. O34 - HKLM BootExecute: (autocheck autochk *)
  213. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  214. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  215. O35 - HKLM\..comfile [open] -- "%1" %*
  216. O35 - HKLM\..exefile [open] -- "%1" %*
  217. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  218. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  219. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  220. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  221.  
  222.  
  223. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  224. Drivers32:[b]64bit:[/b] VIDC.FPS1 - frapsv64.dll (Beepa P/L)
  225. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  226. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  227. Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
  228.  
  229. CREATERESTOREPOINT
  230. Restore point Set: OTL Restore Point
  231.  
  232. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  233.  
  234. [2012/02/18 18:13:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler
  235. [2012/02/18 18:13:51 | 000,222,904 | ---- | C] (QFX Software Corporation) -- C:\Windows\SysNative\drivers\keyscrambler.sys
  236. [2012/02/18 18:13:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KeyScrambler
  237. [2012/02/18 17:36:13 | 000,000,000 | ---D | C] -- C:\Windows\pss
  238. [2012/02/18 16:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubuntu Skin Pack
  239. [2012/02/18 16:59:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skin Pack
  240. [2012/02/18 16:58:46 | 000,000,000 | -H-D | C] -- C:\Windows\Ubuntu Skin Pack
  241. [2012/02/18 16:58:46 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\TempDIR
  242. [2012/02/18 13:49:08 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{AF2F8D55-BAD2-4973-89BE-0D9B600B7000}
  243. [2012/02/18 13:48:56 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{C3D95FEB-83C4-4A5D-BAD9-477FA55CF032}
  244. [2012/02/18 09:40:41 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\RootSocket
  245. [2012/02/18 01:48:44 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{8DD334A5-6BED-408C-B743-841A4E86E977}
  246. [2012/02/18 01:48:33 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{25C439CC-7B17-4203-8D18-4B1401D0EEFE}
  247. [2012/02/17 21:08:13 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\XR HostBooter
  248. [2012/02/17 20:55:34 | 000,000,000 | ---D | C] -- C:\ProgramData\XHEO INC
  249. [2012/02/17 20:07:26 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Expression
  250. [2012/02/17 18:34:59 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Red Gate
  251. [2012/02/17 18:33:16 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\DexScator
  252. [2012/02/17 17:36:53 | 000,000,000 | R--D | C] -- C:\Sandbox
  253. [2012/02/17 17:36:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
  254. [2012/02/17 17:36:43 | 000,000,000 | ---D | C] -- C:\Program Files\Sandboxie
  255. [2012/02/17 16:56:42 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Malwarebytes
  256. [2012/02/17 16:56:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  257. [2012/02/17 16:56:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  258. [2012/02/17 16:56:28 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  259. [2012/02/17 16:56:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  260. [2012/02/17 14:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Visual Studio
  261. [2012/02/17 14:12:42 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\PerfWatson
  262. [2012/02/17 14:09:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 Beta SDK
  263. [2012/02/17 14:09:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK
  264. [2012/02/17 14:08:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server Denali CTP3
  265. [2012/02/17 14:07:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
  266. [2012/02/17 14:06:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
  267. [2012/02/17 14:06:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IIS Express
  268. [2012/02/17 14:06:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
  269. [2012/02/17 14:06:34 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Documents\Visual Studio 11
  270. [2012/02/17 14:05:14 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\VSIXInstaller
  271. [2012/02/17 14:04:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Help Viewer
  272. [2012/02/17 14:03:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Kits
  273. [2012/02/17 14:01:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 11.0
  274. [2012/02/17 14:00:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 11
  275. [2012/02/17 14:00:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 11.0
  276. [2012/02/17 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{90FD24EA-2050-411F-8DC5-ABF062C7A96B}
  277. [2012/02/17 13:47:55 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{FA2D1B22-0DF6-45B5-8B69-31E3196358AB}
  278. [2012/02/17 13:47:54 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{BA3925EA-F275-4F4A-87E0-A1A6026427CF}
  279. [2012/02/17 13:34:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 11
  280. [2012/02/17 13:32:12 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 11
  281. [2012/02/17 13:26:16 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  282. [2012/02/17 03:29:12 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{B05C802A-041E-4FED-8471-CF3542C2E7A6}
  283. [2012/02/17 03:29:01 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{EBC6A9F6-0CB7-4024-BE72-6365583BB2F9}
  284. [2012/02/17 03:28:38 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{1F92A1B8-D5D8-4CA1-BAE1-4F7AE755F1CD}
  285. [2012/02/16 20:51:19 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\TSVNCache
  286. [2012/02/16 20:40:55 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\ApoKrypt
  287. [2012/02/16 20:37:48 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\TortoiseSVN
  288. [2012/02/16 20:34:50 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Subversion
  289. [2012/02/16 20:32:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
  290. [2012/02/16 20:32:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\TortoiseOverlays
  291. [2012/02/16 20:32:33 | 000,000,000 | ---D | C] -- C:\Program Files\TortoiseSVN
  292. [2012/02/16 20:32:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\TortoiseOverlays
  293. [2012/02/16 19:32:04 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Chronic_V4
  294. [2012/02/16 18:27:23 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\Skiazo RAT
  295. [2012/02/16 15:28:49 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{5676D985-1A59-4D19-A324-149948D4BA1B}
  296. [2012/02/16 15:28:38 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{88F06907-56AF-4703-AB61-7BBCB4087BEC}
  297. [2012/02/16 13:52:40 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
  298. [2012/02/16 11:48:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
  299. [2012/02/16 11:48:39 | 000,000,000 | ---D | C] -- C:\Program Files\Speccy
  300. [2012/02/16 11:46:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
  301. [2012/02/16 11:46:23 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\SystemRequirementsLab
  302. [2012/02/16 11:46:19 | 000,000,000 | ---D | C] -- C:\Windows\Sun
  303. [2012/02/16 11:46:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
  304. [2012/02/16 11:46:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  305. [2012/02/16 11:46:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
  306. [2012/02/16 11:15:17 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\f0rce
  307. [2012/02/16 10:47:55 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\SCT GFX Crypter
  308. [2012/02/16 08:34:40 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Web Publishing
  309. [2012/02/16 08:34:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 6.0
  310. [2012/02/16 08:34:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Web Publish
  311. [2012/02/16 08:34:26 | 000,000,000 | ---D | C] -- C:\Windows\msapps
  312. [2012/02/16 08:34:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
  313. [2012/02/16 08:29:53 | 000,000,000 | ---D | C] -- C:\Windows\Java
  314. [2012/02/16 08:21:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resource Hacker
  315. [2012/02/16 08:21:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Resource Hacker
  316. [2012/02/16 08:10:52 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\Yellow Skull (1)
  317. [2012/02/16 03:28:14 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{9CCF64DE-3D9B-4A81-97A6-F9AFD05EAAEC}
  318. [2012/02/16 03:28:04 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{82069E90-C25C-4405-B81A-913FA106ECE8}
  319. [2012/02/15 20:47:21 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\vlc
  320. [2012/02/15 20:47:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
  321. [2012/02/15 20:47:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
  322. [2012/02/15 18:39:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent
  323. [2012/02/15 18:38:52 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\uTorrent
  324. [2012/02/15 17:04:55 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\C,C++
  325. [2012/02/15 16:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
  326. [2012/02/15 16:25:08 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Adobe
  327. [2012/02/15 16:24:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
  328. [2012/02/15 16:24:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
  329. [2012/02/15 16:24:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
  330. [2012/02/15 15:27:51 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{3569BCD1-51CA-4097-9781-7E64D9251E9E}
  331. [2012/02/15 15:27:40 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{37AE03E0-7ADF-4F56-9F5A-C4713608E19D}
  332. [2012/02/14 21:33:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Nimoru
  333. [2012/02/14 20:52:33 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\RAT
  334. [2012/02/14 20:43:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenSnapr
  335. [2012/02/14 20:43:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ScreenSnapr
  336. [2012/02/14 20:40:10 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\C++
  337. [2012/02/14 20:39:14 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\codeblocks
  338. [2012/02/14 20:39:01 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
  339. [2012/02/14 20:39:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
  340. [2012/02/14 20:39:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CodeBlocks
  341. [2012/02/14 20:22:13 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\NVIDIA
  342. [2012/02/14 20:22:12 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Documents\BioWare
  343. [2012/02/14 20:07:12 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\The Witcher 2
  344. [2012/02/14 20:01:28 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{F363E51A-525E-47E2-98C5-BA7E4FACE7B3}
  345. [2012/02/14 20:01:18 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{12CB0953-2CB0-4223-9C34-8FDCFF688FA0}
  346. [2012/02/14 19:50:47 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Documents\Witcher 2
  347. [2012/02/14 19:41:16 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
  348. [2012/02/14 19:41:16 | 000,000,000 | ---D | C] -- C:\Fraps
  349. [2012/02/14 19:41:07 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\WinRAR
  350. [2012/02/14 19:40:27 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  351. [2012/02/14 19:40:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  352. [2012/02/14 19:40:25 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
  353. [2012/02/14 19:35:34 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
  354. [2012/02/14 19:35:33 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
  355. [2012/02/14 19:18:30 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\TeamViewer
  356. [2012/02/14 19:18:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
  357. [2012/02/14 19:16:58 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Chronic_V4
  358. [2012/02/14 18:29:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
  359. [2012/02/14 18:29:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Razer
  360. [2012/02/14 09:57:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
  361. [2012/02/14 09:57:45 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller
  362. [2012/02/14 08:01:05 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{EC90A3A6-ED87-4B35-9B02-3A35A1C825CC}
  363. [2012/02/14 08:00:55 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{2DBACA9B-3E8A-4BC5-82BA-3B4875DEA34D}
  364. [2012/02/14 07:14:58 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\T
  365. [2012/02/14 07:14:50 | 000,483,328 | ---- | C] (Simon Tatham) -- C:\Users\Banksy\Desktop\putty.exe
  366. [2012/02/14 06:00:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
  367. [2012/02/14 06:00:00 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Origin
  368. [2012/02/14 06:00:00 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Origin
  369. [2012/02/14 05:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
  370. [2012/02/14 05:59:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
  371. [2012/02/14 05:59:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
  372. [2012/02/14 05:59:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
  373. [2012/02/14 03:26:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
  374. [2012/02/14 03:26:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
  375. [2012/02/13 21:11:58 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  376. [2012/02/13 21:06:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
  377. [2012/02/13 21:06:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
  378. [2012/02/13 21:06:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
  379. [2012/02/13 21:04:54 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\Coding
  380. [2012/02/13 21:00:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation
  381. [2012/02/13 20:59:42 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Intel Corporation
  382. [2012/02/13 20:51:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dolby Home Theater v4
  383. [2012/02/13 20:51:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
  384. [2012/02/13 20:51:06 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
  385. [2012/02/13 20:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
  386. [2012/02/13 20:50:45 | 002,604,376 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
  387. [2012/02/13 20:50:45 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
  388. [2012/02/13 20:50:45 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
  389. [2012/02/13 20:50:45 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
  390. [2012/02/13 20:50:45 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
  391. [2012/02/13 20:50:45 | 000,220,512 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
  392. [2012/02/13 20:50:45 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
  393. [2012/02/13 20:50:45 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
  394. [2012/02/13 20:50:45 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
  395. [2012/02/13 20:50:45 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
  396. [2012/02/13 20:50:45 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
  397. [2012/02/13 20:50:45 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
  398. [2012/02/13 20:50:45 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
  399. [2012/02/13 20:50:45 | 000,078,176 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
  400. [2012/02/13 20:50:45 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
  401. [2012/02/13 20:50:44 | 003,768,152 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
  402. [2012/02/13 20:50:44 | 003,308,376 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
  403. [2012/02/13 20:50:44 | 002,132,824 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
  404. [2012/02/13 20:50:44 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
  405. [2012/02/13 20:50:44 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
  406. [2012/02/13 20:50:44 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
  407. [2012/02/13 20:50:44 | 000,527,872 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
  408. [2012/02/13 20:50:44 | 000,439,808 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
  409. [2012/02/13 20:50:44 | 000,426,328 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
  410. [2012/02/13 20:50:44 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
  411. [2012/02/13 20:50:44 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
  412. [2012/02/13 20:50:44 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
  413. [2012/02/13 20:50:44 | 000,136,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
  414. [2012/02/13 20:50:44 | 000,118,104 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
  415. [2012/02/13 20:50:44 | 000,074,072 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
  416. [2012/02/13 20:50:43 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
  417. [2012/02/13 20:50:43 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
  418. [2012/02/13 20:50:43 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
  419. [2012/02/13 20:50:43 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
  420. [2012/02/13 20:50:43 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
  421. [2012/02/13 20:50:43 | 000,515,584 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
  422. [2012/02/13 20:50:43 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
  423. [2012/02/13 20:50:43 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
  424. [2012/02/13 20:50:43 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
  425. [2012/02/13 20:50:43 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
  426. [2012/02/13 20:50:43 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
  427. [2012/02/13 20:50:43 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
  428. [2012/02/13 20:50:42 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
  429. [2012/02/13 20:50:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
  430. [2012/02/13 20:50:14 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
  431. [2012/02/13 20:50:14 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\RsFx
  432. [2012/02/13 20:49:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 9.0
  433. [2012/02/13 20:49:12 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
  434. [2012/02/13 20:47:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
  435. [2012/02/13 20:45:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server
  436. [2012/02/13 20:45:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server
  437. [2012/02/13 20:45:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Sync Framework
  438. [2012/02/13 20:44:48 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
  439. [2012/02/13 20:44:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
  440. [2012/02/13 20:44:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
  441. [2012/02/13 20:44:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services
  442. [2012/02/13 20:42:11 | 000,000,000 | ---D | C] -- C:\ProgramData\PreEmptive Solutions
  443. [2012/02/13 20:39:45 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
  444. [2012/02/13 20:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
  445. [2012/02/13 20:38:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 3 SDK
  446. [2012/02/13 20:36:27 | 000,000,000 | ---D | C] -- C:\Intel
  447. [2012/02/13 20:36:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
  448. [2012/02/13 20:36:22 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\InstallShield
  449. [2012/02/13 20:36:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft ASP.NET
  450. [2012/02/13 20:36:04 | 000,000,000 | ---D | C] -- C:\Program Files\IIS
  451. [2012/02/13 20:36:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IIS
  452. [2012/02/13 20:35:46 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Desktop\Drivers
  453. [2012/02/13 20:34:56 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Documents\Visual Studio 2008
  454. [2012/02/13 20:34:08 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Documents\Visual Studio 2010
  455. [2012/02/13 20:30:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Designer
  456. [2012/02/13 20:30:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\1033
  457. [2012/02/13 20:30:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010
  458. [2012/02/13 20:30:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 10.0
  459. [2012/02/13 20:30:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft F#
  460. [2012/02/13 20:30:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Merge Modules
  461. [2012/02/13 20:30:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HTML Help Workshop
  462. [2012/02/13 20:29:41 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Documents\My Received Files
  463. [2012/02/13 20:24:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 9.0
  464. [2012/02/13 20:22:36 | 000,000,000 | ---D | C] -- C:\Windows\symbols
  465. [2012/02/13 20:22:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\1033
  466. [2012/02/13 20:22:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 10.0
  467. [2012/02/13 20:22:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SDKs
  468. [2012/02/13 20:22:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer
  469. [2012/02/13 20:08:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
  470. [2012/02/13 20:00:02 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{60FFE211-7E33-4D9D-9F42-842B73BBB080}
  471. [2012/02/13 19:59:47 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\{BA03CA3C-CE8B-4568-ADB1-4EDA09780176}
  472. [2012/02/13 19:59:32 | 000,000,000 | ---D | C] -- C:\Users\Banksy\Tracing
  473. [2012/02/13 19:54:21 | 000,000,000 | ---D | C] -- C:\Windows\en
  474. [2012/02/13 19:53:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
  475. [2012/02/13 19:50:55 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MagicDisc
  476. [2012/02/13 19:50:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagicDisc
  477. [2012/02/13 19:50:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
  478. [2012/02/13 19:50:16 | 000,255,552 | ---- | C] (MagicISO, Inc.) -- C:\Windows\SysWow64\drivers\mcdbus.sys
  479. [2012/02/13 19:50:14 | 000,255,552 | ---- | C] (MagicISO, Inc.) -- C:\Windows\SysNative\drivers\mcdbus.sys
  480. [2012/02/13 19:50:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MagicDisc
  481. [2012/02/13 19:50:06 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
  482. [2012/02/13 19:45:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  483. [2012/02/13 19:45:40 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Mozilla
  484. [2012/02/13 19:45:40 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Mozilla
  485. [2012/02/13 19:45:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
  486. [2012/02/13 19:44:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  487. [2012/02/13 19:42:56 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Microsoft Games
  488. [2012/02/13 19:37:19 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Macromedia
  489. [2012/02/13 19:37:19 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Adobe
  490. [2012/02/13 19:37:10 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
  491. [2012/02/13 19:37:06 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
  492. [2012/02/13 19:35:20 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Windows Live
  493. [2012/02/13 19:35:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
  494. [2012/02/13 19:34:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
  495. [2012/02/13 19:32:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
  496. [2012/02/13 19:27:34 | 000,565,352 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
  497. [2012/02/13 19:27:31 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
  498. [2012/02/13 19:27:30 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
  499. [2012/02/13 19:27:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
  500. [2012/02/13 19:27:08 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
  501. [2012/02/13 19:26:45 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
  502. [2012/02/13 19:26:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
  503. [2012/02/13 19:26:17 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
  504. [2012/02/13 19:26:17 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
  505. [2012/02/13 19:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
  506. [2012/02/13 19:25:58 | 000,000,000 | ---D | C] -- C:\NVIDIA
  507. [2012/02/13 19:25:01 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
  508. [2012/02/13 19:17:07 | 000,000,000 | R--D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  509. [2012/02/13 19:17:07 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Searches
  510. [2012/02/13 19:17:07 | 000,000,000 | R--D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  511. [2012/02/13 19:17:07 | 000,000,000 | -H-D | C] -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
  512. [2012/02/13 19:16:52 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Identities
  513. [2012/02/13 19:16:48 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Contacts
  514. [2012/02/13 19:16:46 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\VirtualStore
  515. [2012/02/13 19:16:35 | 000,000,000 | --SD | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft
  516. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Videos
  517. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Saved Games
  518. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Pictures
  519. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Music
  520. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  521. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Links
  522. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Favorites
  523. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Downloads
  524. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Documents
  525. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\Desktop
  526. [2012/02/13 19:16:35 | 000,000,000 | R--D | C] -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  527. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\AppData\Local\Temporary Internet Files
  528. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Templates
  529. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Start Menu
  530. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\SendTo
  531. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Recent
  532. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\PrintHood
  533. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\NetHood
  534. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Documents\My Videos
  535. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Documents\My Pictures
  536. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Documents\My Music
  537. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\My Documents
  538. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Local Settings
  539. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\AppData\Local\History
  540. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Cookies
  541. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\Application Data
  542. [2012/02/13 19:16:35 | 000,000,000 | -HSD | C] -- C:\Users\Banksy\AppData\Local\Application Data
  543. [2012/02/13 19:16:35 | 000,000,000 | -H-D | C] -- C:\Users\Banksy\AppData
  544. [2012/02/13 19:16:35 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Temp
  545. [2012/02/13 19:16:35 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Local\Microsoft
  546. [2012/02/13 19:16:35 | 000,000,000 | ---D | C] -- C:\Users\Banksy\AppData\Roaming\Media Center Programs
  547. [2012/02/13 19:16:26 | 000,000,000 | -HSD | C] -- C:\Recovery
  548. [2012/02/13 19:09:37 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
  549. [2012/02/13 19:07:29 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
  550. [2012/02/13 19:06:48 | 000,000,000 | -HSD | C] -- C:\System Volume Information
  551. [2012/02/13 19:05:44 | 000,000,000 | ---D | C] -- C:\Windows\Panther
  552.  
  553. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  554.  
  555. [2012/02/18 18:35:25 | 000,302,592 | ---- | M] () -- C:\Users\Banksy\Desktop\qo7bfbmm.exe
  556. [2012/02/18 18:23:17 | 000,871,102 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  557. [2012/02/18 18:23:17 | 000,725,592 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  558. [2012/02/18 18:23:17 | 000,145,610 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  559. [2012/02/18 18:14:04 | 000,001,814 | ---- | M] () -- C:\Windows\Sandboxie.ini
  560. [2012/02/18 17:37:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  561. [2012/02/18 17:37:47 | 4229,779,454 | -HS- | M] () -- C:\hiberfil.sys
  562. [2012/02/18 17:37:05 | 000,001,072 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\YzShadow.lnk
  563. [2012/02/18 17:37:05 | 000,001,072 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UberIcon.lnk
  564. [2012/02/18 17:37:05 | 000,001,048 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yodm3D.lnk
  565. [2012/02/18 17:37:04 | 000,001,092 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
  566. [2012/02/18 17:37:04 | 000,001,082 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SmartFlip.lnk
  567. [2012/02/18 17:01:02 | 000,009,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  568. [2012/02/18 17:01:02 | 000,009,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  569. [2012/02/18 16:15:09 | 000,002,008 | -H-- | M] () -- C:\Users\Banksy\Documents\Default.rdp
  570. [2012/02/18 16:13:03 | 000,577,536 | ---- | M] () -- C:\Users\Banksy\Desktop\test.exe
  571. [2012/02/18 10:41:25 | 000,020,992 | ---- | M] () -- C:\Test.exe
  572. [2012/02/17 17:36:43 | 000,000,896 | ---- | M] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk
  573. [2012/02/17 13:55:16 | 000,864,826 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  574. [2012/02/16 18:48:23 | 000,198,866 | ---- | M] () -- C:\Users\Banksy\Desktop\Stable RAT.zip
  575. [2012/02/16 15:41:15 | 000,237,101 | ---- | M] () -- C:\Users\Banksy\AppData\Local\debuggee.mdmp
  576. [2012/02/16 14:24:51 | 000,000,185 | ---- | M] () -- C:\Windows\mdm.ini
  577. [2012/02/16 11:15:34 | 000,265,728 | ---- | M] () -- C:\Windows\SysWow64\MSCOMCTL.oca
  578. [2012/02/16 10:48:00 | 000,235,520 | ---- | M] () -- C:\Windows\SysWow64\wmp.oca
  579. [2012/02/16 10:47:59 | 000,035,840 | ---- | M] () -- C:\Windows\SysWow64\COMDLG32.oca
  580. [2012/02/16 08:35:11 | 000,000,535 | ---- | M] () -- C:\Windows\ODBCINST.INI
  581. [2012/02/16 08:35:11 | 000,000,288 | ---- | M] () -- C:\Windows\ODBC.INI
  582. [2012/02/15 18:39:07 | 000,000,971 | ---- | M] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
  583. [2012/02/15 03:35:09 | 000,275,760 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  584. [2012/02/14 18:30:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01005.Wdf
  585. [2012/02/14 09:57:26 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
  586. [2012/02/14 09:57:19 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  587. [2012/02/14 09:57:18 | 000,075,136 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
  588. [2012/02/14 06:09:26 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
  589. [2012/02/14 06:09:25 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
  590. [2012/02/13 19:50:56 | 000,000,993 | ---- | M] () -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
  591. [2012/02/13 19:35:00 | 000,001,441 | ---- | M] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  592. [2012/02/13 19:24:55 | 425,197,822 | ---- | M] () -- C:\Windows\MEMORY.DMP
  593. [2012/02/13 19:13:42 | 000,041,962 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
  594. [2012/02/13 19:13:42 | 000,041,962 | ---- | M] () -- C:\Windows\SysNative\license.rtf
  595. [2012/01/26 09:53:00 | 000,068,928 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
  596. [2012/01/26 09:53:00 | 000,061,248 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
  597. [2012/01/26 09:53:00 | 000,011,712 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
  598. [2012/01/26 06:35:11 | 002,477,468 | ---- | M] () -- C:\Windows\SysNative\nvcoproc.bin
  599. [2012/01/26 04:17:32 | 000,416,064 | ---- | M] () -- C:\Windows\SysWow64\nvStreaming.exe
  600.  
  601. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  602.  
  603. [2012/02/18 18:35:22 | 000,302,592 | ---- | C] () -- C:\Users\Banksy\Desktop\qo7bfbmm.exe
  604. [2012/02/18 16:59:40 | 000,001,072 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\YzShadow.lnk
  605. [2012/02/18 16:59:39 | 000,001,072 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UberIcon.lnk
  606. [2012/02/18 16:59:39 | 000,001,048 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yodm3D.lnk
  607. [2012/02/18 16:59:37 | 000,001,092 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
  608. [2012/02/18 16:59:37 | 000,001,082 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SmartFlip.lnk
  609. [2012/02/18 15:42:13 | 000,577,536 | ---- | C] () -- C:\Users\Banksy\Desktop\test.exe
  610. [2012/02/18 10:41:35 | 000,020,992 | ---- | C] () -- C:\Test.exe
  611. [2012/02/17 17:36:49 | 000,000,896 | ---- | C] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk
  612. [2012/02/17 17:36:47 | 000,001,814 | ---- | C] () -- C:\Windows\Sandboxie.ini
  613. [2012/02/17 14:06:51 | 000,002,059 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk
  614. [2012/02/16 18:48:23 | 000,198,866 | ---- | C] () -- C:\Users\Banksy\Desktop\Stable RAT.zip
  615. [2012/02/16 15:41:14 | 000,237,101 | ---- | C] () -- C:\Users\Banksy\AppData\Local\debuggee.mdmp
  616. [2012/02/16 11:15:34 | 000,265,728 | ---- | C] () -- C:\Windows\SysWow64\MSCOMCTL.oca
  617. [2012/02/16 10:48:00 | 000,235,520 | ---- | C] () -- C:\Windows\SysWow64\wmp.oca
  618. [2012/02/16 10:47:59 | 000,035,840 | ---- | C] () -- C:\Windows\SysWow64\COMDLG32.oca
  619. [2012/02/16 08:35:14 | 000,000,185 | ---- | C] () -- C:\Windows\mdm.ini
  620. [2012/02/16 08:35:11 | 000,000,535 | ---- | C] () -- C:\Windows\ODBCINST.INI
  621. [2012/02/16 08:35:11 | 000,000,288 | ---- | C] () -- C:\Windows\ODBC.INI
  622. [2012/02/16 08:29:53 | 000,007,356 | ---- | C] () -- C:\Windows\SysWow64\javasup.vxd
  623. [2012/02/16 08:29:53 | 000,006,550 | ---- | C] () -- C:\Windows\jautoexp.dat
  624. [2012/02/16 08:29:52 | 000,000,113 | ---- | C] () -- C:\Windows\SysWow64\zonedon.reg
  625. [2012/02/16 08:29:52 | 000,000,113 | ---- | C] () -- C:\Windows\SysWow64\zonedoff.reg
  626. [2012/02/15 18:39:07 | 000,000,971 | ---- | C] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
  627. [2012/02/15 16:24:36 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
  628. [2012/02/14 19:18:18 | 000,001,178 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk
  629. [2012/02/14 18:30:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01005.Wdf
  630. [2012/02/14 09:57:19 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  631. [2012/02/14 09:57:19 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  632. [2012/02/14 09:57:18 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  633. [2012/02/14 06:09:26 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
  634. [2012/02/14 06:09:25 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
  635. [2012/02/13 20:39:11 | 000,008,192 | ---- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll
  636. [2012/02/13 20:16:32 | 000,002,008 | -H-- | C] () -- C:\Users\Banksy\Documents\Default.rdp
  637. [2012/02/13 20:15:00 | 000,864,826 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  638. [2012/02/13 19:53:48 | 000,001,305 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
  639. [2012/02/13 19:53:22 | 000,001,374 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
  640. [2012/02/13 19:52:53 | 000,002,486 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
  641. [2012/02/13 19:50:56 | 000,000,993 | ---- | C] () -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
  642. [2012/02/13 19:44:55 | 000,001,146 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  643. [2012/02/13 19:35:00 | 000,001,441 | ---- | C] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  644. [2012/02/13 19:27:34 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
  645. [2012/02/13 19:27:04 | 002,477,468 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
  646. [2012/02/13 19:26:17 | 000,011,712 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
  647. [2012/02/13 19:25:30 | 000,001,447 | ---- | C] () -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  648. [2012/02/13 19:24:55 | 425,197,822 | ---- | C] () -- C:\Windows\MEMORY.DMP
  649. [2012/02/13 19:17:11 | 000,001,413 | ---- | C] () -- C:\Users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
  650. [2012/02/13 19:16:35 | 000,000,290 | ---- | C] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
  651. [2012/02/13 19:16:35 | 000,000,272 | ---- | C] () -- C:\Users\Banksy\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
  652. [2012/02/13 19:12:52 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
  653. [2012/02/13 19:12:45 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
  654. [2012/02/13 19:06:48 | 4229,779,454 | -HS- | C] () -- C:\hiberfil.sys
  655. [2012/01/26 04:17:32 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
  656. [2009/07/14 00:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  657. [2009/07/13 21:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  658. [2009/07/13 21:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  659. [2009/07/13 19:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
  660. [2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  661. [2009/07/13 16:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  662. [2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
  663. [1998/06/10 00:00:00 | 000,015,120 | ---- | C] () -- C:\Windows\SysWow64\REPUTIL.DLL
  664. [1998/05/18 00:00:00 | 000,014,017 | ---- | C] () -- C:\Windows\JAUTOEXP.INI
  665. [1998/04/24 00:00:00 | 000,000,218 | ---- | C] () -- C:\Windows\FRONTPG.INI
  666.  
  667. [color=#E56717]========== LOP Check ==========[/color]
  668.  
  669. [2012/02/16 19:32:04 | 000,000,000 | ---D | M] -- C:\Users\Banksy\AppData\Roaming\Chronic_V4
  670. [2012/02/14 06:00:38 | 000,000,000 | ---D | M] -- C:\Users\Banksy\AppData\Roaming\Origin
  671. [2012/02/16 20:34:50 | 000,000,000 | ---D | M] -- C:\Users\Banksy\AppData\Roaming\Subversion
  672. [2012/02/16 11:46:23 | 000,000,000 | ---D | M] -- C:\Users\Banksy\AppData\Roaming\SystemRequirementsLab
  673. [2012/02/14 19:34:08 | 000,000,000 | ---D | M] -- C:\Users\Banksy\AppData\Roaming\TeamViewer
  674. [2012/02/18 18:39:16 | 000,000,000 | ---D | M] -- C:\Users\Banksy\AppData\Roaming\uTorrent
  675. [2009/07/14 00:08:49 | 000,004,116 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  676.  
  677. [color=#E56717]========== Purity Check ==========[/color]
  678.  
  679.  
  680.  
  681. [color=#E56717]========== Custom Scans ==========[/color]
  682.  
  683.  
  684. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  685. [2012/02/18 17:37:47 | 4229,779,454 | -HS- | M] () -- C:\hiberfil.sys
  686. [2012/02/18 17:37:49 | 4208,050,173 | -HS- | M] () -- C:\pagefile.sys
  687. [2012/02/18 10:41:25 | 000,020,992 | ---- | M] () -- C:\Test.exe
  688. [2012/02/17 19:29:02 | 000,000,014 | ---- | M] () -- C:\test.txt
  689.  
  690. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  691.  
  692. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  693.  
  694. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  695.  
  696. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  697.  
  698. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!