API tools faq
paste
Guest User

ComboFix

a guest
Feb 19th, 2012
87
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 32.69 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-02-17.02 - Banksy 02/18/2012 22:27:50.2.4 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.16301.14146 [GMT -5:00]
  3. Running from: c:\users\Banksy\Desktop\ComboFix.exe
  4. Command switches used :: c:\users\Banksy\Desktop\CFScript.txt
  5. AV: Kaspersky Internet Security *Disabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
  6. FW: Kaspersky Internet Security *Disabled* {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
  7. SP: Kaspersky Internet Security *Disabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
  8. SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  9. .
  10. .
  11. ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  12. .
  13. .
  14. .
  15. --------------- FCopy ---------------
  16. .
  17. c:\windows\Ubuntu Skin Pack\Backup\comres.dll --> c:\windows\system32\comres.dll
  18. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe --> c:\windows\explorer.exe
  19. .
  20. ((((((((((((((((((((((((( Files Created from 2012-01-19 to 2012-02-19 )))))))))))))))))))))))))))))))
  21. .
  22. .
  23. 2012-02-19 03:32 . 2012-02-19 03:32 -------- d-----w- c:\users\Default\AppData\Local\temp
  24. 2012-02-19 02:32 . 2012-02-19 02:32 -------- d-----w- c:\program files (x86)\AMD
  25. 2012-02-19 02:30 . 2012-02-19 02:30 -------- d-----w- c:\windows\SysWow64\xlive
  26. 2012-02-19 02:30 . 2012-02-19 02:30 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE
  27. 2012-02-19 01:24 . 2012-02-19 01:24 -------- d-----w- c:\program files (x86)\Kaspersky Lab
  28. 2012-02-18 23:58 . 2012-02-18 23:58 -------- d-----w- c:\programdata\QFX Software
  29. 2012-02-18 23:53 . 2009-12-14 17:44 85048 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
  30. 2012-02-18 23:53 . 2009-12-14 17:44 66104 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
  31. 2012-02-18 23:53 . 2012-02-19 00:34 -------- dc----w- c:\windows\system32\DRVSTORE
  32. 2012-02-18 23:52 . 2012-02-19 03:34 -------- d-----w- c:\programdata\Kaspersky Lab
  33. 2012-02-18 23:13 . 2012-02-18 23:13 -------- d-----w- c:\program files (x86)\KeyScrambler
  34. 2012-02-18 23:13 . 2011-12-15 00:46 222904 ----a-w- c:\windows\system32\drivers\keyscrambler.sys
  35. 2012-02-18 21:58 . 2009-07-14 01:41 368128 ----a-w- c:\windows\system32\pnpui.dll
  36. 2012-02-18 21:58 . 2009-07-14 01:41 2484736 ----a-w- c:\windows\system32\netshell.dll
  37. 2012-02-18 21:58 . 2009-07-14 01:29 9029120 ----a-w- c:\windows\system32\mmres.dll
  38. 2012-02-18 21:58 . 2009-07-14 01:41 64512 ----a-w- c:\windows\system32\hotplug.dll
  39. 2012-02-18 21:58 . 2009-07-14 01:28 757248 ----a-w- c:\windows\system32\imagesp1.dll
  40. 2012-02-18 21:58 . 2009-07-14 01:40 727040 ----a-w- c:\windows\system32\ActionCenter.dll
  41. 2012-02-18 21:58 . 2009-07-14 01:28 13767168 ----a-w- c:\windows\system32\imageres.dll
  42. 2012-02-18 21:58 . 2009-07-14 01:16 2755072 ----a-w- c:\windows\SysWow64\themeui.dll.backup
  43. 2012-02-18 21:58 . 2009-07-14 01:41 2851328 ----a-w- c:\windows\system32\themeui.dll.backup
  44. 2012-02-18 21:58 . 2009-07-14 01:11 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll.backup
  45. 2012-02-18 21:58 . 2009-07-14 01:41 332288 ----a-w- c:\windows\system32\uxtheme.dll.backup
  46. 2012-02-18 21:58 . 2009-07-14 01:41 44544 ----a-w- c:\windows\system32\themeservice.dll.backup
  47. 2012-02-18 21:58 . 2012-02-18 22:37 -------- d--h--w- c:\windows\Ubuntu Skin Pack
  48. 2012-02-18 01:55 . 2012-02-19 00:17 -------- d-----w- c:\programdata\XHEO INC
  49. 2012-02-17 22:36 . 2012-02-17 22:36 -------- d-----r- C:\Sandbox
  50. 2012-02-17 22:36 . 2012-02-17 22:36 -------- d-----w- c:\program files\Sandboxie
  51. 2012-02-17 21:56 . 2012-02-17 21:56 -------- d-----w- c:\programdata\Malwarebytes
  52. 2012-02-17 21:56 . 2012-02-17 21:56 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
  53. 2012-02-17 21:56 . 2011-12-10 20:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
  54. 2012-02-17 19:16 . 2012-02-17 19:16 -------- d-----w- c:\programdata\Microsoft Visual Studio
  55. 2012-02-17 19:06 . 2012-02-17 19:06 -------- d-----w- c:\program files\Microsoft
  56. 2012-02-17 19:06 . 2012-02-17 19:06 -------- d-----w- c:\program files (x86)\IIS Express
  57. 2012-02-17 19:06 . 2012-02-17 19:06 -------- d-----w- c:\program files (x86)\Microsoft
  58. 2012-02-17 19:06 . 2012-02-17 19:10 2332960 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
  59. 2012-02-17 19:04 . 2012-02-17 19:04 -------- d-----w- c:\program files (x86)\Microsoft Help Viewer
  60. 2012-02-17 19:03 . 2012-02-17 19:03 -------- d-----w- c:\program files (x86)\Windows Kits
  61. 2012-02-17 18:50 . 2012-01-17 09:39 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E4E23820-08DC-4E4E-BC5E-17E2E7879E04}\mpengine.dll
  62. 2012-02-17 18:34 . 2012-02-17 18:34 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11
  63. 2012-02-17 18:32 . 2012-02-17 18:32 -------- d-----w- c:\program files\Microsoft Visual Studio 11
  64. 2012-02-17 01:32 . 2012-02-17 01:32 -------- d-----w- c:\program files (x86)\Common Files\TortoiseOverlays
  65. 2012-02-17 01:32 . 2012-02-17 01:32 -------- d-----w- c:\program files\TortoiseSVN
  66. 2012-02-17 01:32 . 2012-02-17 01:32 -------- d-----w- c:\program files\Common Files\TortoiseOverlays
  67. 2012-02-16 16:48 . 2012-02-16 16:48 -------- d-----w- c:\program files\Speccy
  68. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
  69. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\windows\Sun
  70. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\program files (x86)\Common Files\Java
  71. 2012-02-16 16:46 . 2012-02-16 16:46 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
  72. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\program files (x86)\Java
  73. 2012-02-16 16:15 . 2012-02-16 16:15 265728 ----a-w- c:\windows\SysWow64\MSCOMCTL.oca
  74. 2012-02-16 15:48 . 2012-02-16 15:48 235520 ----a-w- c:\windows\SysWow64\wmp.oca
  75. 2012-02-16 15:47 . 2012-02-16 15:47 35840 ----a-w- c:\windows\SysWow64\COMDLG32.oca
  76. 2012-02-16 13:34 . 2012-02-16 13:34 -------- d-----w- c:\program files (x86)\Web Publish
  77. 2012-02-16 13:34 . 2012-02-16 13:34 -------- d-----w- c:\windows\msapps
  78. 2012-02-16 13:21 . 2012-02-16 13:21 -------- d-----w- c:\program files (x86)\Resource Hacker
  79. 2012-02-16 01:47 . 2012-02-16 01:47 -------- d-----w- c:\program files (x86)\VideoLAN
  80. 2012-02-15 23:39 . 2012-02-17 18:44 -------- d-----w- c:\program files (x86)\uTorrent
  81. 2012-02-15 21:25 . 2012-02-15 21:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
  82. 2012-02-15 21:24 . 2012-02-15 21:24 -------- d-----w- c:\program files (x86)\Common Files\Adobe
  83. 2012-02-15 02:33 . 2012-02-16 19:25 -------- d-----w- c:\programdata\Nimoru
  84. 2012-02-15 01:43 . 2012-02-15 01:43 -------- d-----w- c:\program files (x86)\ScreenSnapr
  85. 2012-02-15 01:39 . 2012-02-15 01:39 -------- d-----w- c:\program files (x86)\CodeBlocks
  86. 2012-02-15 00:41 . 2012-02-15 00:41 -------- d-----w- C:\Fraps
  87. 2012-02-15 00:35 . 2012-02-15 00:35 -------- d-----w- c:\programdata\EA Core
  88. 2012-02-15 00:35 . 2012-02-15 01:22 -------- d-----w- c:\programdata\EA Logs
  89. 2012-02-15 00:18 . 2012-02-15 00:18 -------- d-----w- c:\program files (x86)\TeamViewer
  90. 2012-02-14 23:29 . 2012-02-14 23:29 -------- d-----w- c:\program files (x86)\Razer
  91. 2012-02-14 14:56 . 2010-05-26 16:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll
  92. 2012-02-14 11:00 . 2012-02-15 00:40 -------- d-----w- c:\program files (x86)\Origin Games
  93. 2012-02-14 10:59 . 2012-02-15 00:35 -------- d-----w- c:\programdata\Electronic Arts
  94. 2012-02-14 10:59 . 2012-02-15 00:35 -------- d-----w- c:\programdata\Origin
  95. 2012-02-14 10:59 . 2012-02-17 19:10 -------- d-----w- c:\program files (x86)\Origin
  96. 2012-02-14 08:26 . 2012-02-14 08:26 -------- d-----w- c:\windows\SysWow64\Wat
  97. 2012-02-14 08:26 . 2012-02-14 08:26 -------- d-----w- c:\windows\system32\Wat
  98. 2012-02-14 08:09 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
  99. 2012-02-14 08:09 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
  100. 2012-02-14 08:00 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
  101. 2012-02-14 02:06 . 2012-02-19 02:13 -------- d-----w- c:\program files (x86)\Steam
  102. 2012-02-14 02:06 . 2012-02-14 02:06 -------- d-----w- c:\program files (x86)\Common Files\Steam
  103. 2012-02-14 02:00 . 2012-02-14 02:00 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
  104. 2012-02-14 01:51 . 2012-02-14 01:51 -------- d-----w- c:\program files (x86)\Dolby Home Theater v4
  105. 2012-02-14 01:51 . 2009-07-22 08:17 78872 ----a-w- c:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
  106. 2012-02-14 01:51 . 2009-07-22 08:17 50200 ----a-w- c:\windows\SysWow64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
  107. 2012-02-14 01:51 . 2012-02-14 01:51 -------- d-----w- c:\windows\SysWow64\RTCOM
  108. 2012-02-14 01:51 . 2012-02-14 01:51 -------- d-----w- c:\program files\Realtek
  109. 2012-02-14 01:49 . 2012-02-14 01:49 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
  110. 2012-02-14 01:48 . 2011-05-20 14:53 557848 ----a-w- c:\windows\system32\drivers\iaStor.sys
  111. 2012-02-14 01:45 . 2012-02-17 19:08 -------- d-----w- c:\program files\Microsoft SQL Server
  112. 2012-02-14 01:45 . 2012-02-17 19:08 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
  113. 2012-02-14 01:44 . 2012-02-14 01:44 -------- d-----w- c:\program files\Microsoft Sync Framework
  114. 2012-02-14 01:44 . 2012-02-17 19:08 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
  115. 2012-02-14 01:44 . 2012-02-14 01:44 -------- d-----w- c:\program files\Microsoft Synchronization Services
  116. 2012-02-14 01:44 . 2012-02-14 01:44 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
  117. 2012-02-14 01:42 . 2012-02-14 01:42 -------- d-----w- c:\programdata\PreEmptive Solutions
  118. 2012-02-14 01:39 . 2011-04-15 21:00 53248 ----a-w- c:\windows\SysWow64\CSVer.dll
  119. 2012-02-14 01:39 . 2011-08-08 22:28 8192 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
  120. 2012-02-14 01:38 . 2012-02-14 01:38 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
  121. 2012-02-14 01:36 . 2012-02-14 01:36 -------- d-----w- C:\Intel
  122. 2012-02-14 01:36 . 2010-10-19 21:34 56344 ----a-w- c:\windows\system32\drivers\HECIx64.sys
  123. 2012-02-14 01:36 . 2012-02-14 01:50 -------- d-----w- c:\program files (x86)\Intel
  124. 2012-02-14 01:36 . 2012-02-14 01:36 -------- d-----w- c:\program files (x86)\Microsoft ASP.NET
  125. 2012-02-14 01:36 . 2012-02-17 19:06 -------- d-----w- c:\program files\IIS
  126. 2012-02-14 01:36 . 2012-02-17 19:06 -------- d-----w- c:\program files (x86)\IIS
  127. 2012-02-14 01:34 . 2012-02-15 08:14 2377696 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
  128. 2012-02-14 01:30 . 2012-02-17 19:05 -------- d-----w- c:\windows\SysWow64\1033
  129. 2012-02-14 01:30 . 2012-02-17 19:04 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
  130. 2012-02-14 01:30 . 2012-02-14 01:42 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
  131. 2012-02-14 01:30 . 2012-02-14 01:31 -------- d-----w- c:\program files (x86)\Microsoft F#
  132. 2012-02-14 01:30 . 2012-02-14 01:31 -------- d-----w- c:\program files (x86)\HTML Help Workshop
  133. 2012-02-14 01:24 . 2012-02-14 01:24 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 9.0
  134. 2012-02-14 01:22 . 2012-02-17 19:01 -------- d-----w- c:\windows\system32\1033
  135. 2012-02-14 01:22 . 2012-02-14 01:22 -------- d-----w- c:\windows\symbols
  136. 2012-02-14 01:22 . 2012-02-17 19:04 -------- d-----w- c:\program files (x86)\Microsoft SDKs
  137. 2012-02-14 01:22 . 2012-02-14 01:22 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
  138. 2012-02-14 01:22 . 2012-02-14 01:22 -------- d-----w- c:\program files\Microsoft Help Viewer
  139. 2012-02-14 01:17 . 2012-01-29 10:10 279656 ----a-w- c:\windows\system32\MpSigStub.exe
  140. 2012-02-14 01:17 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
  141. 2012-02-14 01:17 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
  142. 2012-02-14 01:15 . 2011-05-04 05:28 2228224 ----a-w- c:\windows\system32\mssrch.dll
  143. 2012-02-14 01:14 . 2010-10-16 05:17 720896 ----a-w- c:\windows\system32\odbc32.dll
  144. 2012-02-14 01:13 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
  145. 2012-02-14 01:12 . 2011-06-15 09:58 212992 ----a-w- c:\windows\system32\odbctrac.dll
  146. 2012-02-14 01:11 . 2010-09-01 05:14 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
  147. 2012-02-14 01:11 . 2010-09-01 04:23 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
  148. .
  149. .
  150. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  151. .
  152. 2012-02-18 22:36 . 2009-07-13 23:39 2755072 ----a-w- c:\windows\SysWow64\themeui.dll
  153. 2012-02-18 22:36 . 2009-07-13 23:39 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll
  154. 2012-02-18 21:58 . 2009-07-13 23:54 2851328 ----a-w- c:\windows\system32\themeui.dll
  155. 2012-02-18 21:58 . 2009-07-13 23:55 332288 ----a-w- c:\windows\system32\uxtheme.dll
  156. 2012-02-18 21:58 . 2009-07-13 23:54 44544 ----a-w- c:\windows\system32\themeservice.dll
  157. 2012-02-14 00:48 . 2011-03-28 23:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
  158. 2012-01-16 19:02 . 2012-01-16 19:02 767872 ----a-w- c:\windows\SysWow64\RzMwApi.dll
  159. .
  160. .
  161. ((((((((((((((((((((((((((((( SnapShot@2012-02-19_02.48.46 )))))))))))))))))))))))))))))))))))))))))
  162. .
  163. + 2012-02-14 00:33 . 2012-02-19 03:07 32460 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
  164. + 2009-07-14 05:10 . 2012-02-19 03:07 31108 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
  165. - 2012-02-14 00:15 . 2012-02-19 02:30 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  166. + 2012-02-14 00:15 . 2012-02-19 03:07 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  167. + 2012-02-14 00:15 . 2012-02-19 03:07 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  168. - 2012-02-14 00:15 . 2012-02-19 02:30 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  169. - 2009-07-14 04:54 . 2012-02-19 02:30 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  170. + 2009-07-14 04:54 . 2012-02-19 03:07 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  171. + 2012-02-14 00:46 . 2012-02-19 03:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  172. - 2012-02-14 00:46 . 2012-02-19 02:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  173. + 2012-02-14 00:46 . 2012-02-19 03:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  174. - 2012-02-14 00:46 . 2012-02-19 02:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  175. + 2012-02-14 00:26 . 2012-02-19 03:07 9014 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4146783975-3022033110-2106573168-1000_UserData.bin
  176. + 2012-02-19 03:33 . 2012-02-19 03:33 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  177. - 2012-02-19 02:47 . 2012-02-19 02:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  178. - 2012-02-19 02:47 . 2012-02-19 02:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  179. + 2012-02-19 03:33 . 2012-02-19 03:33 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  180. + 2009-07-14 02:36 . 2012-02-19 03:10 725592 c:\windows\system32\perfh009.dat
  181. - 2009-07-14 02:36 . 2012-02-19 02:19 725592 c:\windows\system32\perfh009.dat
  182. + 2009-07-14 02:36 . 2012-02-19 03:10 145610 c:\windows\system32\perfc009.dat
  183. - 2009-07-14 02:36 . 2012-02-19 02:19 145610 c:\windows\system32\perfc009.dat
  184. - 2009-07-14 05:12 . 2012-02-19 02:15 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
  185. + 2009-07-14 05:12 . 2012-02-19 03:07 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
  186. - 2009-07-14 05:01 . 2012-02-19 02:46 230892 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  187. + 2009-07-14 05:01 . 2012-02-19 03:33 230892 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  188. + 2012-02-14 01:18 . 2012-02-19 03:33 14307272 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4146783975-3022033110-2106573168-1000-12288.dat
  189. .
  190. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  191. .
  192. .
  193. *Note* empty entries & legit default entries are not shown
  194. REGEDIT4
  195. .
  196. [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{876d9f09-c6d6-4324-a2cc-04dd9a4de12f}]
  197. 2011-08-25 04:24 65968 ----a-w- c:\program files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
  198. .
  199. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
  200. @="{C5994560-53D9-4125-87C9-F193FC689CB2}"
  201. [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
  202. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  203. .
  204. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
  205. @="{C5994561-53D9-4125-87C9-F193FC689CB2}"
  206. [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
  207. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  208. .
  209. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
  210. @="{C5994562-53D9-4125-87C9-F193FC689CB2}"
  211. [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
  212. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  213. .
  214. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
  215. @="{C5994563-53D9-4125-87C9-F193FC689CB2}"
  216. [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
  217. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  218. .
  219. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
  220. @="{C5994564-53D9-4125-87C9-F193FC689CB2}"
  221. [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
  222. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  223. .
  224. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
  225. @="{C5994565-53D9-4125-87C9-F193FC689CB2}"
  226. [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
  227. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  228. .
  229. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
  230. @="{C5994566-53D9-4125-87C9-F193FC689CB2}"
  231. [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
  232. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  233. .
  234. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
  235. @="{C5994567-53D9-4125-87C9-F193FC689CB2}"
  236. [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
  237. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  238. .
  239. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
  240. @="{C5994568-53D9-4125-87C9-F193FC689CB2}"
  241. [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
  242. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  243. .
  244. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  245. "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
  246. "Dolby Home Theater v4"="c:\program files (x86)\Dolby Home Theater v4\pcee4.exe" [2011-06-01 506712]
  247. "Razer Imperator Driver"="c:\program files (x86)\Razer\Imperator\RazerImperatorSysTray.exe" [2012-01-16 979360]
  248. "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
  249. "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
  250. "avp"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" [2011-04-25 202296]
  251. .
  252. c:\users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  253. MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-2-13 576000]
  254. .
  255. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  256. RocketDock.lnk - c:\windows\Ubuntu Skin Pack\RocketDock\RocketDock.exe [2007-9-2 495616]
  257. .
  258. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  259. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  260. "ConsentPromptBehaviorUser"= 3 (0x3)
  261. "EnableLUA"= 0 (0x0)
  262. "EnableUIADesktopToggle"= 0 (0x0)
  263. "PromptOnSecureDesktop"= 0 (0x0)
  264. .
  265. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  266. "aux"=wdmaud.drv
  267. .
  268. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  269. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  270. .
  271. [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
  272. "DisableMonitoring"=dword:00000001
  273. .
  274. R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2011-08-05 91984]
  275. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2011-08-05 111440]
  276. R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
  277. R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
  278. R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
  279. R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
  280. R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
  281. R3 VSPerfDrv110;Performance Tools Driver 11.0;c:\program files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [2011-07-19 67920]
  282. R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
  283. R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
  284. R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [x]
  285. R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
  286. S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x]
  287. S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x]
  288. S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
  289. S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
  290. S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
  291. S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-01-26 2345792]
  292. S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-01-26 382272]
  293. S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
  294. S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-08-08 2656536]
  295. S3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [x]
  296. S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
  297. S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
  298. S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
  299. S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
  300. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
  301. .
  302. .
  303. .
  304. --------- x86-64 -----------
  305. .
  306. .
  307. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
  308. @="{C5994560-53D9-4125-87C9-F193FC689CB2}"
  309. [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
  310. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  311. .
  312. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
  313. @="{C5994561-53D9-4125-87C9-F193FC689CB2}"
  314. [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
  315. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  316. .
  317. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
  318. @="{C5994562-53D9-4125-87C9-F193FC689CB2}"
  319. [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
  320. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  321. .
  322. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
  323. @="{C5994563-53D9-4125-87C9-F193FC689CB2}"
  324. [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
  325. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  326. .
  327. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
  328. @="{C5994564-53D9-4125-87C9-F193FC689CB2}"
  329. [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
  330. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  331. .
  332. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
  333. @="{C5994565-53D9-4125-87C9-F193FC689CB2}"
  334. [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
  335. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  336. .
  337. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
  338. @="{C5994566-53D9-4125-87C9-F193FC689CB2}"
  339. [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
  340. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  341. .
  342. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
  343. @="{C5994567-53D9-4125-87C9-F193FC689CB2}"
  344. [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
  345. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  346. .
  347. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
  348. @="{C5994568-53D9-4125-87C9-F193FC689CB2}"
  349. [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
  350. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  351. .
  352. ------- Supplementary Scan -------
  353. .
  354. uLocal Page = c:\windows\system32\blank.htm
  355. mLocal Page = c:\windows\SysWOW64\blank.htm
  356. IE: Add to Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
  357. TCP: DhcpNameServer = 192.168.1.1
  358. CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\shell32.dll
  359. FF - ProfilePath - c:\users\Banksy\AppData\Roaming\Mozilla\Firefox\Profiles\u7yi8hrr.default\
  360. .
  361. .
  362. --------------------- LOCKED REGISTRY KEYS ---------------------
  363. .
  364. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  365. @Denied: (A 2) (Everyone)
  366. @="FlashBroker"
  367. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
  368. .
  369. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  370. "Enabled"=dword:00000001
  371. .
  372. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  373. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
  374. .
  375. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  376. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  377. .
  378. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  379. @Denied: (A 2) (Everyone)
  380. @="Shockwave Flash Object"
  381. .
  382. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  383. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
  384. "ThreadingModel"="Apartment"
  385. .
  386. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  387. @="0"
  388. .
  389. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  390. @="ShockwaveFlash.ShockwaveFlash.10"
  391. .
  392. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  393. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
  394. .
  395. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  396. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  397. .
  398. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  399. @="1.0"
  400. .
  401. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  402. @="ShockwaveFlash.ShockwaveFlash"
  403. .
  404. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  405. @Denied: (A 2) (Everyone)
  406. @="Macromedia Flash Factory Object"
  407. .
  408. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  409. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
  410. "ThreadingModel"="Apartment"
  411. .
  412. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  413. @="FlashFactory.FlashFactory.1"
  414. .
  415. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  416. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
  417. .
  418. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  419. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  420. .
  421. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  422. @="1.0"
  423. .
  424. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  425. @="FlashFactory.FlashFactory"
  426. .
  427. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  428. @Denied: (A 2) (Everyone)
  429. @="IFlashBroker4"
  430. .
  431. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  432. @="{00020424-0000-0000-C000-000000000046}"
  433. .
  434. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  435. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  436. "Version"="1.0"
  437. .
  438. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  439. @Denied: (A) (Users)
  440. @Denied: (A) (Everyone)
  441. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  442. "BlindDial"=dword:00000000
  443. .
  444. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  445. @Denied: (Full) (Everyone)
  446. .
  447. ------------------------ Other Running Processes ------------------------
  448. .
  449. c:\windows\SysWOW64\PnkBstrA.exe
  450. c:\windows\SysWOW64\PnkBstrB.exe
  451. c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  452. .
  453. **************************************************************************
  454. .
  455. Completion time: 2012-02-18 22:39:02 - machine was rebooted
  456. ComboFix-quarantined-files.txt 2012-02-19 03:39
  457. ComboFix2.txt 2012-02-19 02:53
  458. .
  459. Pre-Run: 825,786,376,192 bytes free
  460. Post-Run: 825,448,804,352 bytes free
  461. .
  462. - - End Of File - - 65557A1DC88488A7EAA6603102289E82
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!