API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 6th, 2013
54
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 49.64 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 06.07.2013 18:42:02 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\DOMINIC\Desktop
  3. Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000407 | Country: Kroatien | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 1011,87 Mb Total Physical Memory | 85,15 Mb Available Physical Memory | 8,42% Memory free
  8. 2,41 Gb Paging File | 0,67 Gb Available in Paging File | 27,77% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 211,78 Gb Total Space | 20,90 Gb Free Space | 9,87% Space Free | Partition Type: NTFS
  13. Drive D: | 16,94 Gb Total Space | 1,80 Gb Free Space | 10,63% Space Free | Partition Type: NTFS
  14. Drive E: | 3,96 Gb Total Space | 1,10 Gb Free Space | 27,83% Space Free | Partition Type: FAT32
  15. Drive H: | 7,45 Gb Total Space | 3,36 Gb Free Space | 45,07% Space Free | Partition Type: FAT32
  16.  
  17. Computer Name: DOMINIC-HP | User Name: DOMINIC | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: Current user | Quick Scan
  19. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - [2013.07.06 18:36:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DOMINIC\Desktop\OTL.exe
  24. PRC - [2013.07.04 02:15:43 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
  25. PRC - [2013.07.01 22:11:32 | 002,236,080 | ---- | M] () -- C:\Programme\AVG Secure Search\vprot.exe
  26. PRC - [2013.07.01 22:11:32 | 001,598,128 | ---- | M] (AVG Secure Search) -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
  27. PRC - [2013.07.01 22:11:32 | 000,152,240 | ---- | M] () -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\loggingserver.exe
  28. PRC - [2013.06.03 11:57:49 | 003,085,264 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
  29. PRC - [2013.05.28 15:05:16 | 000,163,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe
  30. PRC - [2013.04.17 13:27:24 | 001,851,088 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Programme\Common Files\COMODO\GeekBuddyRSP.exe
  31. PRC - [2013.04.17 11:57:08 | 000,207,560 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Programme\Comodo\GeekBuddy\unit_manager.exe
  32. PRC - [2013.04.17 11:57:08 | 000,194,760 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Programme\Comodo\GeekBuddy\unit.exe
  33. PRC - [2013.04.17 11:57:08 | 000,070,344 | ---- | M] (Comodo Security Solutions Inc.) -- C:\Programme\Common Files\COMODO\launcher_service.exe
  34. PRC - [2012.11.08 11:25:12 | 020,225,656 | ---- | M] (ReviverSoft LLC) -- C:\Programme\ReviverSoft\Registry Reviver\RegistryReviver.exe
  35. PRC - [2012.09.25 03:31:38 | 000,201,824 | ---- | M] () -- C:\Programme\WinArchiver\WAService.exe
  36. PRC - [2012.09.25 03:31:36 | 000,480,352 | ---- | M] (Power Software Ltd) -- C:\Programme\WinArchiver\WAHELPER.EXE
  37. PRC - [2012.08.24 09:57:08 | 000,336,992 | ---- | M] (Power Software Ltd) -- C:\Programme\PowerISO\PWRISOVM.EXE
  38. PRC - [2012.08.20 19:37:58 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
  39. PRC - [2012.07.11 23:39:46 | 000,138,096 | ---- | M] (Facebook Inc.) -- C:\Users\DOMINIC\AppData\Local\Facebook\Update\FacebookUpdate.exe
  40. PRC - [2012.03.11 22:13:22 | 001,983,232 | ---- | M] (COMODO) -- C:\Programme\Comodo\COMODO Internet Security\cmdagent.exe
  41. PRC - [2012.03.11 22:13:02 | 006,749,512 | ---- | M] (COMODO) -- C:\Programme\Comodo\COMODO Internet Security\cfp.exe
  42. PRC - [2012.01.04 15:22:40 | 000,822,624 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
  43. PRC - [2011.10.01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe
  44. PRC - [2011.10.01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe
  45. PRC - [2011.09.05 10:04:54 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
  46. PRC - [2011.08.17 13:17:08 | 009,675,056 | ---- | M] () -- C:\Programme\TK8 StickyNotes\TK8StickyNotes.exe
  47. PRC - [2011.03.28 21:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
  48. PRC - [2011.03.28 21:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
  49. PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  50. PRC - [2011.02.23 01:16:42 | 000,274,514 | ---- | M] (IDT, Inc.) -- C:\Programme\IDT\WDM\stacsv.exe
  51. PRC - [2011.02.23 01:14:48 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Programme\IDT\WDM\AEstSrv.exe
  52. PRC - [2010.11.20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
  53. PRC - [2010.11.20 23:29:06 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
  54. PRC - [2010.11.09 15:20:34 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
  55. PRC - [2010.10.11 02:48:00 | 000,246,840 | ---- | M] (Hewlett-Packard Company) -- C:\Programme\Hewlett-Packard\HP Client Services\HPClientServices.exe
  56.  
  57.  
  58. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  59.  
  60. MOD - [2013.07.04 02:15:40 | 003,285,912 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
  61. MOD - [2013.07.01 22:11:32 | 002,236,080 | ---- | M] () -- C:\Programme\AVG Secure Search\vprot.exe
  62. MOD - [2013.07.01 22:11:32 | 000,521,392 | ---- | M] () -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\log4cplusU.dll
  63. MOD - [2013.07.01 22:11:32 | 000,145,072 | ---- | M] () -- C:\Programme\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\SiteSafety.dll
  64. MOD - [2013.06.03 11:57:49 | 003,085,264 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
  65. MOD - [2013.06.03 11:57:01 | 002,521,552 | ---- | M] () -- c:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
  66. MOD - [2013.04.30 03:29:48 | 001,297,176 | ---- | M] () -- C:\Users\DOMINIC\AppData\Local\Pokki\ocdeskband_0.dll
  67. MOD - [2012.02.20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll
  68. MOD - [2012.02.20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll
  69. MOD - [2011.08.17 13:17:08 | 009,675,056 | ---- | M] () -- C:\Programme\TK8 StickyNotes\TK8StickyNotes.exe
  70.  
  71.  
  72. [color=#E56717]========== Services (SafeList) ==========[/color]
  73.  
  74. SRV - File not found [Auto | Stopped] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
  75. SRV - [2013.07.04 02:15:41 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  76. SRV - [2013.07.01 22:11:32 | 001,598,128 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe -- (vToolbarUpdater15.3.0)
  77. SRV - [2013.06.03 11:57:49 | 003,085,264 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
  78. SRV - [2013.05.28 15:05:16 | 000,163,328 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  79. SRV - [2013.04.17 13:27:24 | 001,851,088 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Running] -- C:\Programme\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP)
  80. SRV - [2013.04.17 11:57:08 | 000,070,344 | ---- | M] (Comodo Security Solutions Inc.) [Auto | Running] -- C:\Programme\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher)
  81. SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
  82. SRV - [2012.09.25 03:31:38 | 000,201,824 | ---- | M] () [Auto | Running] -- C:\Programme\WinArchiver\WAService.exe -- (WinArchiver Service)
  83. SRV - [2012.07.04 14:05:56 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  84. SRV - [2012.05.29 13:09:52 | 001,528,672 | ---- | M] (TuneUp Software) [Auto | Stopped] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
  85. SRV - [2012.05.29 13:09:50 | 000,029,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
  86. SRV - [2012.03.11 22:13:22 | 001,983,232 | ---- | M] (COMODO) [Auto | Running] -- C:\Programme\Comodo\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
  87. SRV - [2012.01.04 15:22:40 | 000,822,624 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE -- (cvhsvc)
  88. SRV - [2011.10.01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
  89. SRV - [2011.10.01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
  90. SRV - [2011.09.05 10:04:54 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  91. SRV - [2011.03.28 21:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
  92. SRV - [2011.02.23 01:16:42 | 000,274,514 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Programme\IDT\WDM\stacsv.exe -- (STacSV)
  93. SRV - [2011.02.23 01:14:48 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Programme\IDT\WDM\AEstSrv.exe -- (AESTFilters)
  94. SRV - [2011.02.15 15:48:52 | 001,071,160 | ---- | M] (Hewlett-Packard Development Company L.P.) [On_Demand | Stopped] -- C:\Programme\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe -- (hpCMSrv)
  95. SRV - [2011.01.12 18:00:42 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Programme\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  96. SRV - [2010.11.20 23:29:49 | 001,121,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
  97. SRV - [2010.11.09 15:20:34 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Programme\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
  98. SRV - [2010.10.12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Programme\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  99. SRV - [2010.10.11 02:48:00 | 000,246,840 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Programme\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc)
  100. SRV - [2010.09.22 16:33:04 | 000,051,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  101. SRV - [2010.01.09 21:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
  102. SRV - [2010.01.09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
  103. SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
  104.  
  105.  
  106. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  107.  
  108. DRV - [2013.07.01 22:11:32 | 000,037,664 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
  109. DRV - [2013.05.07 09:00:16 | 000,035,064 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | System | Running] -- C:\Windows\System32\drivers\CFRMD.sys -- (CFRMD)
  110. DRV - [2012.09.25 03:31:42 | 000,121,528 | ---- | M] (Power Software Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\waemu.sys -- (waemu)
  111. DRV - [2012.08.24 09:57:00 | 000,113,104 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
  112. DRV - [2012.03.11 22:13:38 | 000,039,640 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\cmdhlp.sys -- (cmdHlp)
  113. DRV - [2012.03.11 22:13:36 | 000,491,816 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmdGuard.sys -- (cmdGuard)
  114. DRV - [2012.03.11 22:13:36 | 000,019,600 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
  115. DRV - [2012.02.03 20:27:48 | 000,082,400 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\Windows\System32\drivers\inspect.sys -- (inspect)
  116. DRV - [2012.02.01 14:24:02 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
  117. DRV - [2011.10.01 09:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
  118. DRV - [2011.10.01 09:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
  119. DRV - [2011.10.01 09:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
  120. DRV - [2011.10.01 09:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
  121. DRV - [2011.04.22 23:42:24 | 001,035,368 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rtl8192ce.sys -- (RTL8192Ce)
  122. DRV - [2011.02.23 01:17:10 | 000,435,200 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
  123. DRV - [2010.11.20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  124. DRV - [2010.11.20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  125. DRV - [2010.11.20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
  126. DRV - [2010.08.28 02:40:28 | 000,031,232 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AmUStor.sys -- (AmUStor)
  127. DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
  128.  
  129.  
  130. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  131.  
  132.  
  133. [color=#E56717]========== Internet Explorer ==========[/color]
  134.  
  135. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPMTDF
  136. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPMTDF
  137. IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
  138. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPMTDF&pc=HPMTDF&src=IE-SearchBox
  139. IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
  140. IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=113&systemid=406&sr=0&q={searchTerms}
  141. IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
  142. IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
  143.  
  144. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page =
  145. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPMTDF
  146. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={1E02883B-F403-4811-A360-8B924A8BCC3E}&mid=91930c5681ff47d0afe94dc7dfa25d1b-933a7ef082bff408368e75184affe04ecae5db9a&lang=de&ds=st011&pr=sa&d=2012-10-08 17:01:45&v=12.2.5.34&sap=hp
  147. IE - HKCU\..\URLSearchHook: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programme\YouTube Downloader Toolbar\IE\4.9\youtubedownloaderToolbarIE.dll (Spigot, Inc.)
  148. IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
  149. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPMTDF&pc=HPMTDF&src=IE-SearchBox
  150. IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
  151. IE - HKCU\..\SearchScopes\{545F35A8-4C0C-4CD3-844D-616D32CBAB69}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
  152. IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={1E02883B-F403-4811-A360-8B924A8BCC3E}&mid=91930c5681ff47d0afe94dc7dfa25d1b-933a7ef082bff408368e75184affe04ecae5db9a&lang=de&ds=st011&pr=sa&d=2012-10-08 17:01:45&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms}
  153. IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=113&systemid=406&sr=0&q={searchTerms}
  154. IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
  155. IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
  156. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  157. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  158.  
  159. [color=#E56717]========== FireFox ==========[/color]
  160.  
  161. FF - prefs.js..browser.search.order.1: ""
  162. FF - prefs.js..browser.search.selectedEngine: ""
  163. FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.9
  164. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
  165.  
  166.  
  167. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
  168. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  169. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  170. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
  171. FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll ()
  172. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
  173. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
  174. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  175. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
  176. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  177. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  178. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  179. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  180. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  181. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  182. FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
  183. FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
  184. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  185. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  186. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\DOMINIC\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  187.  
  188. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\15.3.0.11 [2013.07.01 22:12:08 | 000,000,000 | ---D | M]
  189. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
  190. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  191. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
  192. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  193.  
  194. [2012.01.29 21:43:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOMINIC\AppData\Roaming\mozilla\Extensions
  195. [2013.05.23 21:50:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOMINIC\AppData\Roaming\mozilla\Firefox\Profiles\c9e50pc5.default\extensions
  196. [2013.05.04 23:31:32 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\DOMINIC\AppData\Roaming\mozilla\Firefox\Profiles\c9e50pc5.default\extensions\ffxtlbr@delta.com
  197. [2013.05.09 19:34:01 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\DOMINIC\AppData\Roaming\mozilla\firefox\profiles\c9e50pc5.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  198. [2013.05.23 21:50:59 | 000,269,448 | ---- | M] () (No name found) -- C:\Users\DOMINIC\AppData\Roaming\mozilla\firefox\profiles\c9e50pc5.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
  199. [2013.05.04 23:32:29 | 000,006,506 | ---- | M] () -- C:\Users\DOMINIC\AppData\Roaming\mozilla\firefox\profiles\c9e50pc5.default\searchplugins\babylon.xml
  200. [2013.05.04 23:32:29 | 000,006,506 | ---- | M] () -- C:\Users\DOMINIC\AppData\Roaming\mozilla\firefox\profiles\c9e50pc5.default\searchplugins\BrowserProtect.xml
  201. [2013.05.04 23:31:43 | 000,001,294 | ---- | M] () -- C:\Users\DOMINIC\AppData\Roaming\mozilla\firefox\profiles\c9e50pc5.default\searchplugins\delta.xml
  202. [2013.05.20 20:05:21 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
  203. [2013.03.09 01:11:03 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
  204. [2013.05.20 20:05:20 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
  205. [2013.07.04 02:15:50 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  206. [2013.02.19 00:10:42 | 000,003,716 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
  207. [2013.05.04 23:31:10 | 000,006,503 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
  208. [2012.01.29 17:47:05 | 000,002,519 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
  209.  
  210. [color=#E56717]========== Chrome ==========[/color]
  211.  
  212. CHR - Extension: No name found = C:\Users\DOMINIC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
  213. CHR - Extension: No name found = C:\Users\DOMINIC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
  214. CHR - Extension: No name found = C:\Users\DOMINIC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\
  215. CHR - Extension: No name found = C:\Users\DOMINIC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\.bak
  216. CHR - Extension: No name found = C:\Users\DOMINIC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
  217.  
  218. O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  219. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
  220. O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  221. O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll (AVG Secure Search)
  222. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  223. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  224. O2 - BHO: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programme\YouTube Downloader Toolbar\IE\4.9\youtubedownloaderToolbarIE.dll (Spigot, Inc.)
  225. O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll (AVG Secure Search)
  226. O3 - HKLM\..\Toolbar: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programme\YouTube Downloader Toolbar\IE\4.9\youtubedownloaderToolbarIE.dll (Spigot, Inc.)
  227. O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
  228. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
  229. O4 - HKLM..\Run: [] File not found
  230. O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  231. O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
  232. O4 - HKLM..\Run: [gbrspcontrol] C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe (Comodo Security Solutions, Inc.)
  233. O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (Power Software Ltd)
  234. O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
  235. O4 - HKLM..\Run: [WAHELPER.EXE] C:\Program Files\WinArchiver\WAHELPER.EXE (Power Software Ltd)
  236. O4 - HKCU..\Run: [Facebook Update] C:\Users\DOMINIC\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  237. O4 - HKCU..\Run: [Pokki] "%LOCALAPPDATA%\Pokki\Engine\pokki.exe" File not found
  238. O4 - HKCU..\Run: [TK8 StickyNotes] C:\Program Files\TK8 StickyNotes\TK8StickyNotes.exe ()
  239. O4 - HKLM..\RunOnce: [*CA] File not found
  240. O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil32_11_5_502_146_Plugin.exe (Adobe Systems Incorporated)
  241. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  242. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  243. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
  244. O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  245. O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  246. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  247. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  248. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
  249. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  250. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  251. O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
  252. O13 - gopher Prefix: missing
  253. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 10.25.2)
  254. O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  255. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 10.25.2)
  256. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  257. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{074650C7-E2BB-47C2-A277-B911A5F1E5D5}: DhcpNameServer = 192.168.1.1
  258. O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
  259. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  260. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  261. O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
  262. O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
  263. O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
  264. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  265. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  266. O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programme\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll (AVG Secure Search)
  267. O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
  268. O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
  269. O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
  270. O20 - AppInit_DLLs: (c:\progra~2\browse~1\261339~1.144\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
  271. O20 - AppInit_DLLs: (c:\windows\system32\guard32.dll) - C:\Windows\System32\guard32.dll (COMODO)
  272. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  273. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  274. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  275. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  276. O32 - HKLM CDRom: AutoRun - 1
  277. O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  278. O32 - AutoRun File - [2011.08.04 18:13:52 | 000,000,110 | -H-- | M] () - H:\autorun.inf -- [ FAT32 ]
  279. O33 - MountPoints2\{465380a4-a33c-11e1-bf7e-9c8e9946b4e8}\Shell - "" = AutoRun
  280. O33 - MountPoints2\{465380a4-a33c-11e1-bf7e-9c8e9946b4e8}\Shell\AutoRun\command - "" = I:\iStudio.exe
  281. O33 - MountPoints2\{bcb5b990-df13-11e1-8d43-9c8e9946b4e8}\Shell - "" = AutoRun
  282. O33 - MountPoints2\{bcb5b990-df13-11e1-8d43-9c8e9946b4e8}\Shell\AutoRun\command - "" = F:\Startme.exe
  283. O33 - MountPoints2\F\Shell - "" = AutoRun
  284. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\Setup.exe
  285. O33 - MountPoints2\F\Shell\dxsetup\command - "" = F:\directx\dxsetup.exe
  286. O33 - MountPoints2\F\Shell\setup\command - "" = F:\setup.exe
  287. O33 - MountPoints2\G\Shell - "" = AutoRun
  288. O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
  289. O34 - HKLM BootExecute: (autocheck autochk *)
  290. O35 - HKLM\..comfile [open] -- "%1" %*
  291. O35 - HKLM\..exefile [open] -- "%1" %*
  292. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  293. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  294. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  295. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  296. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  297.  
  298. NetSvcs: FastUserSwitchingCompatibility - File not found
  299. NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
  300. NetSvcs: Nla - File not found
  301. NetSvcs: Ntmssvc - File not found
  302. NetSvcs: NWCWorkstation - File not found
  303. NetSvcs: Nwsapagent - File not found
  304. NetSvcs: SRService - File not found
  305. NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
  306. NetSvcs: WmdmPmSp - File not found
  307. NetSvcs: LogonHours - File not found
  308. NetSvcs: PCAudit - File not found
  309. NetSvcs: helpsvc - File not found
  310. NetSvcs: uploadmgr - File not found
  311.  
  312. CREATERESTOREPOINT
  313. Restore point Set: OTL Restore Point
  314.  
  315. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  316.  
  317. [2013.07.06 18:35:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\DOMINIC\Desktop\OTL.exe
  318. [2013.07.04 02:05:11 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{A8149DC6-368B-4AFD-BC53-B7CB091DE74D}
  319. [2013.07.03 01:59:28 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\Desktop\Maturalac - PRAG
  320. [2013.07.02 15:33:10 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{7B9FB146-FCB0-41D8-BED5-5C37827607C6}
  321. [2013.07.01 22:18:22 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{8DD08E2C-BA18-4A86-9DED-1B4545A68C51}
  322. [2013.06.24 17:41:29 | 000,000,000 | ---D | C] -- C:\ProgramData\YTD Video Downloader
  323. [2013.06.24 17:41:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
  324. [2013.06.24 17:23:24 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{B1CD16DB-A1EB-4828-931F-D7C159526A00}
  325. [2013.06.20 15:34:34 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{42A75F4E-2483-4204-AF47-B75B0428C6E0}
  326. [2013.06.20 13:15:03 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Roaming\BabSolution
  327. [2013.06.19 22:08:49 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{E7979C88-724E-47F0-9FE1-673B50EC359D}
  328. [2013.06.18 16:38:44 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\Desktop\Neuer Ordner
  329. [2013.06.18 14:11:36 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\Desktop\Skice za graf kod škole
  330. [2013.06.17 11:49:07 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Roaming\File Scout
  331. [2013.06.13 02:58:55 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{079EE316-4A7A-4FD8-8C8E-03D02CB4F005}
  332. [2013.06.12 22:09:52 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\Desktop\Dexter
  333. [2013.06.10 19:23:34 | 000,000,000 | ---D | C] -- C:\Users\DOMINIC\AppData\Local\{56B1C21B-50A4-481B-8707-E171DA868AD6}
  334. [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  335.  
  336. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  337.  
  338. [2013.07.06 19:14:21 | 000,000,938 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  339. [2013.07.06 19:09:26 | 001,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
  340. [2013.07.06 18:57:30 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  341. [2013.07.06 18:36:13 | 000,000,636 | ---- | M] () -- C:\Windows\tasks\OpenCandyHelper65128E29CA534A9BB6A649A1EBA877EC.job
  342. [2013.07.06 18:36:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DOMINIC\Desktop\OTL.exe
  343. [2013.07.06 18:18:36 | 000,000,986 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1948954817-2543299581-3314940062-1000UA.job
  344. [2013.07.06 18:09:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  345. [2013.07.06 10:46:44 | 000,000,934 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  346. [2013.07.06 02:10:54 | 000,000,964 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1948954817-2543299581-3314940062-1000Core.job
  347. [2013.07.04 02:18:36 | 000,000,636 | ---- | M] () -- C:\Windows\tasks\OpenCandyHelperRun2A31F41BE96443869A77E4E554E660E6.job
  348. [2013.07.04 02:18:36 | 000,000,320 | ---- | M] () -- C:\Windows\tasks\Start Registry Reviver for DOMINIC-HP@DOMINIC(logon).job
  349. [2013.07.04 02:14:21 | 000,016,480 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  350. [2013.07.04 02:14:21 | 000,016,480 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  351. [2013.07.04 02:03:33 | 000,000,350 | ---- | M] () -- C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
  352. [2013.07.01 23:34:31 | 000,644,280 | ---- | M] () -- C:\Windows\System32\perfh007.dat
  353. [2013.07.01 23:34:31 | 000,616,452 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  354. [2013.07.01 23:34:31 | 000,129,726 | ---- | M] () -- C:\Windows\System32\perfc007.dat
  355. [2013.07.01 23:34:31 | 000,106,574 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  356. [2013.07.01 22:12:12 | 000,003,718 | ---- | M] () -- C:\Program Files\Mozilla Firefoxavg-secure-search.xml
  357. [2013.07.01 22:11:32 | 000,037,664 | ---- | M] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
  358. [2013.06.24 17:41:11 | 000,001,008 | ---- | M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk
  359. [2013.06.08 20:36:30 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForDOMINIC.job
  360. [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  361.  
  362. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  363.  
  364. [2013.06.24 17:41:11 | 000,001,008 | ---- | C] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk
  365. [2013.05.22 15:43:14 | 000,003,718 | ---- | C] () -- C:\Program Files\Mozilla Firefoxavg-secure-search.xml
  366. [2013.03.07 23:25:53 | 000,012,800 | ---- | C] () -- C:\Users\DOMINIC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  367. [2012.12.04 20:07:09 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
  368. [2012.10.14 12:52:44 | 000,000,532 | ---- | C] () -- C:\Windows\eReg.dat
  369. [2012.03.14 18:18:27 | 001,474,832 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
  370. [2011.10.09 18:09:10 | 000,000,017 | ---- | C] () -- C:\Windows\System32\shortcut_ex.dat
  371.  
  372. [color=#E56717]========== ZeroAccess Check ==========[/color]
  373.  
  374. [2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  375.  
  376. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  377.  
  378. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  379.  
  380. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  381. "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  382. "ThreadingModel" = Apartment
  383.  
  384. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  385. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 23:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
  386. "ThreadingModel" = Free
  387.  
  388. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  389. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  390. "ThreadingModel" = Both
  391.  
  392. [color=#E56717]========== LOP Check ==========[/color]
  393.  
  394. [2011.09.12 21:08:56 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\3M
  395. [2011.11.22 01:07:29 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Artweaver Free
  396. [2013.06.20 13:15:03 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\BabSolution
  397. [2013.05.04 23:30:21 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Babylon
  398. [2012.11.24 18:24:52 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
  399. [2013.05.04 23:31:20 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Delta
  400. [2013.06.17 11:49:20 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\File Scout
  401. [2011.09.12 21:05:28 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\GetRightToGo
  402. [2012.02.11 17:59:02 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\NesterSoft
  403. [2013.05.04 23:15:00 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\OpenCandy
  404. [2011.08.20 19:19:59 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\PlayFirst
  405. [2012.10.08 17:03:36 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\PowerISO
  406. [2011.08.15 17:30:55 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Skip-Bo
  407. [2012.11.05 00:31:47 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\SoftGrid Client
  408. [2013.01.19 14:55:08 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Sports Interactive
  409. [2012.03.08 11:44:23 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Tific
  410. [2011.09.13 14:03:28 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\TK8 Software
  411. [2011.10.07 23:05:38 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\TP
  412. [2012.03.14 15:39:52 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\TuneUp Software
  413. [2013.07.02 15:28:19 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\uTorrent
  414. [2012.03.14 14:39:35 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Wiehk
  415. [2012.10.08 18:00:51 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\WinArchiver
  416. [2011.09.28 17:36:03 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Windows Live Writer
  417. [2012.03.07 22:08:42 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\Wyly
  418. [2012.02.21 21:27:37 | 000,000,000 | ---D | M] -- C:\Users\DOMINIC\AppData\Roaming\xqtyag3gttsvsvstdcrgjmqmuyobflmm2
  419.  
  420. [color=#E56717]========== Purity Check ==========[/color]
  421.  
  422.  
  423.  
  424. [color=#E56717]========== Custom Scans ==========[/color]
  425.  
  426. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  427.  
  428. [color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
  429. [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
  430. [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
  431. [2009.07.14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
  432.  
  433. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  434. [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
  435. [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
  436. [2009.07.14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
  437.  
  438. [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
  439. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
  440. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
  441.  
  442. [color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
  443. [2011.01.12 17:44:08 | 000,355,352 | ---- | M] (Intel Corporation) MD5=F989555F1662581032CCE1578A8FF28E -- C:\Windows\System32\drivers\iaStor.sys
  444. [2011.01.12 17:44:08 | 000,355,352 | ---- | M] (Intel Corporation) MD5=F989555F1662581032CCE1578A8FF28E -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_x86_neutral_33713d1b28fa2f6d\iaStor.sys
  445.  
  446. [color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
  447. [2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
  448. [2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
  449. [2011.03.11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
  450. [2011.03.11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
  451. [2010.11.20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
  452. [2010.11.20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
  453.  
  454. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  455. [2010.11.20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
  456. [2010.11.20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
  457.  
  458. [color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
  459. [2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
  460. [2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
  461. [2011.03.11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
  462. [2011.03.11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
  463. [2010.11.20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
  464. [2010.11.20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
  465.  
  466. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  467. [2010.11.20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
  468. [2010.11.20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
  469.  
  470. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  471.  
  472. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  473. [2 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
  474.  
  475. [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
  476. [C:\Windows\$NtUninstallKB57241$] -> Error: Cannot create file handle -> Unknown point type
  477.  
  478. [color=#E56717]========== Alternate Data Streams ==========[/color]
  479.  
  480. @Alternate Data Stream - 836 bytes -> C:\ProgramData\TEMP:35E5AF34
  481.  
  482. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!