Don't like ads? PRO users don't see any ads ;-)
Public Pastes

Untitled

By: spaski on Apr 26th, 2012  |  syntax: None  |  size: 27.93 KB  |  hits: 41  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. OTL logfile created on: 4/27/2012 2:22:26 AM - Run 1
  2. OTL by OldTimer - Version 3.2.42.1     Folder = C:\Users\spaski\Desktop
  3.  Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 3.00 Gb Total Physical Memory | 2.01 Gb Available Physical Memory | 66.95% Memory free
  8. 6.00 Gb Paging File | 4.87 Gb Available in Paging File | 81.19% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 97.56 Gb Total Space | 85.70 Gb Free Space | 87.84% Space Free | Partition Type: NTFS
  13. Drive D: | 658.07 Gb Total Space | 4.06 Gb Free Space | 0.62% Space Free | Partition Type: NTFS
  14. Drive E: | 175.78 Gb Total Space | 3.21 Gb Free Space | 1.83% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: SPASKI-PC | User Name: spaski | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Quick Scan
  18. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2012/04/27 02:17:30 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\spaski\Desktop\OTL.exe
  23. PRC - [2012/03/07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  24. PRC - [2012/03/07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  25. PRC - [2012/03/07 01:15:13 | 000,134,920 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
  26. PRC - [2010/11/20 23:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  27. PRC - [2010/11/20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
  28. PRC - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
  29. PRC - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
  30. PRC - [2009/10/07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
  31. PRC - [2009/07/16 15:35:42 | 005,458,704 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe
  32.  
  33.  
  34. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  35.  
  36. MOD - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
  37. MOD - [2009/10/14 13:36:34 | 000,181,592 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LvApi11\LvApi11.dll
  38. MOD - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
  39. MOD - [2009/07/16 15:36:20 | 000,138,000 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\plugins\imageformats\qjpeg4.dll
  40. MOD - [2009/07/16 15:36:16 | 000,035,088 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\plugins\imageformats\qico4.dll
  41. MOD - [2009/07/16 15:36:16 | 000,028,944 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\plugins\imageformats\qgif4.dll
  42. MOD - [2009/07/16 15:35:30 | 000,027,408 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\SDL.dll
  43. MOD - [2009/07/16 15:35:20 | 000,363,792 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\qtxml4.dll
  44. MOD - [2009/07/16 15:35:08 | 011,311,888 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtWebKit4.dll
  45. MOD - [2009/07/16 15:34:56 | 000,199,952 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\qtsql4.dll
  46. MOD - [2009/07/16 15:34:46 | 000,475,408 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtOpenGL4.dll
  47. MOD - [2009/07/16 15:34:34 | 000,968,976 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtNetwork4.dll
  48. MOD - [2009/07/16 15:34:22 | 007,704,336 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtGui4.dll
  49. MOD - [2009/07/16 15:34:22 | 002,140,944 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtCore4.dll
  50. MOD - [2009/07/16 15:34:12 | 000,291,600 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\phonon4.dll
  51.  
  52.  
  53. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  54.  
  55. SRV - [2012/03/07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  56. SRV - [2012/03/07 01:15:13 | 000,134,920 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
  57. SRV - [2009/10/07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
  58. SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  59. SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
  60. SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  61.  
  62.  
  63. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  64.  
  65. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
  66. DRV - [2012/03/07 01:04:25 | 000,112,984 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswFW.sys -- (aswFW)
  67. DRV - [2012/03/07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
  68. DRV - [2012/03/07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
  69. DRV - [2012/03/07 01:03:23 | 000,196,440 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis2.sys -- (aswNdis2)
  70. DRV - [2012/03/07 01:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
  71. DRV - [2012/03/07 01:02:14 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
  72. DRV - [2012/03/07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
  73. DRV - [2012/03/07 01:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
  74. DRV - [2012/03/07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
  75. DRV - [2011/05/10 13:40:58 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis.sys -- (aswNdis)
  76. DRV - [2010/11/20 23:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  77. DRV - [2010/11/20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  78. DRV - [2010/11/20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
  79. DRV - [2010/11/20 23:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
  80. DRV - [2010/11/20 23:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  81. DRV - [2010/11/20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
  82. DRV - [2010/11/20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
  83. DRV - [2010/11/20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
  84. DRV - [2010/11/20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
  85. DRV - [2010/11/20 23:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
  86. DRV - [2010/11/20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
  87. DRV - [2010/11/20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
  88. DRV - [2009/10/07 08:49:40 | 006,756,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC) QuickCam for Notebooks Deluxe(UVC)
  89. DRV - [2009/10/07 01:46:36 | 000,025,752 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
  90. DRV - [2009/07/14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
  91. DRV - [2009/06/10 23:19:48 | 009,853,248 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
  92.  
  93.  
  94. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  95.  
  96.  
  97. [color=#E56717]========== Internet Explorer ==========[/color]
  98.  
  99. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  100. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  101.  
  102. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  103. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
  104. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9E 6C B5 3B 01 24 CD 01  [binary data]
  105. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  106. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  107. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  108.  
  109.  
  110.  
  111.  
  112. O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  113. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  114. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  115. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  116. O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
  117. O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\vid.exe (Logitech Inc.)
  118. O4 - Startup: C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe (Leader Technologies/Logitech)
  119. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  120. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  121. O13 - gopher Prefix: missing
  122. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.16.1
  123. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FA40EF71-0693-482F-BFA4-4975B8269BD9}: DhcpNameServer = 192.168.16.1
  124. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  125. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  126. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  127. O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
  128. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  129. O32 - HKLM CDRom: AutoRun - 1
  130. O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  131. O34 - HKLM BootExecute: (autocheck autochk *)
  132. O35 - HKLM\..comfile [open] -- "%1" %*
  133. O35 - HKLM\..exefile [open] -- "%1" %*
  134. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  135. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  136. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  137. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  138. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  139.  
  140. NetSvcs: FastUserSwitchingCompatibility -  File not found
  141. NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
  142. NetSvcs: Nla -  File not found
  143. NetSvcs: Ntmssvc -  File not found
  144. NetSvcs: NWCWorkstation -  File not found
  145. NetSvcs: Nwsapagent -  File not found
  146. NetSvcs: SRService -  File not found
  147. NetSvcs: WmdmPmSp -  File not found
  148. NetSvcs: LogonHours -  File not found
  149. NetSvcs: PCAudit -  File not found
  150. NetSvcs: helpsvc -  File not found
  151. NetSvcs: uploadmgr -  File not found
  152.  
  153. CREATERESTOREPOINT
  154. Restore point Set: OTL Restore Point
  155.  
  156. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  157.  
  158. [2012/04/27 09:26:53 | 000,000,000 | ---D | C] -- C:\Windows\Panther
  159. [2012/04/27 08:28:15 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
  160. [2012/04/27 08:27:46 | 000,000,000 | -HSD | C] -- C:\System Volume Information
  161. [2012/04/27 02:17:17 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\spaski\Desktop\OTL.exe
  162. [2012/04/27 01:18:50 | 000,250,168 | ---- | C] (Doctor Web, Ltd.) -- C:\te94decrypt.exe
  163. [2012/04/27 01:18:11 | 000,250,168 | ---- | C] (Doctor Web, Ltd.) -- C:\Users\spaski\Desktop\te94decrypt.exe
  164. [2012/04/26 23:59:36 | 000,044,376 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
  165. [2012/04/26 23:59:36 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
  166. [2012/04/26 23:56:35 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\LogiShrd
  167. [2012/04/26 23:56:23 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Roaming\Leadertech
  168. [2012/04/26 23:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
  169. [2012/04/26 23:56:17 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
  170. [2012/04/26 23:56:17 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
  171. [2012/04/26 23:49:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security
  172. [2012/04/26 23:49:52 | 000,337,880 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
  173. [2012/04/26 23:49:52 | 000,020,696 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
  174. [2012/04/26 23:49:50 | 000,112,984 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFW.sys
  175. [2012/04/26 23:49:45 | 000,196,440 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswNdis2.sys
  176. [2012/04/26 23:49:44 | 000,612,184 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
  177. [2012/04/26 23:49:44 | 000,053,848 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
  178. [2012/04/26 23:49:44 | 000,025,432 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
  179. [2012/04/26 23:49:43 | 000,057,688 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
  180. [2012/04/26 23:49:14 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
  181. [2012/04/26 23:49:10 | 000,201,352 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
  182. [2012/04/26 23:49:10 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  183. [2012/04/26 23:49:10 | 000,012,112 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswNdis.sys
  184. [2012/04/26 23:49:01 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
  185. [2012/04/26 23:49:01 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
  186. [2012/04/26 23:47:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd
  187. [2012/04/26 23:46:11 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  188. [2012/04/26 23:46:11 | 000,000,000 | R--D | C] -- C:\Users\spaski\Searches
  189. [2012/04/26 23:46:11 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  190. [2012/04/26 23:46:11 | 000,000,000 | -H-D | C] -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
  191. [2012/04/26 23:46:03 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Roaming\Identities
  192. [2012/04/26 23:46:02 | 000,000,000 | R--D | C] -- C:\Users\spaski\Contacts
  193. [2012/04/26 23:45:58 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\VirtualStore
  194. [2012/04/26 23:45:57 | 000,000,000 | -HSD | C] -- C:\Users\spaski\AppData\Local\Temporary Internet Files
  195. [2012/04/26 23:45:56 | 000,000,000 | --SD | C] -- C:\Users\spaski\AppData\Roaming\Microsoft
  196. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Videos
  197. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Saved Games
  198. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Pictures
  199. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Music
  200. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  201. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Links
  202. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Favorites
  203. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Downloads
  204. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Documents
  205. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Desktop
  206. [2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  207. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Templates
  208. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Start Menu
  209. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\SendTo
  210. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Recent
  211. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\PrintHood
  212. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\NetHood
  213. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Documents\My Videos
  214. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Documents\My Pictures
  215. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Documents\My Music
  216. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\My Documents
  217. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Local Settings
  218. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\AppData\Local\History
  219. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Cookies
  220. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Application Data
  221. [2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\AppData\Local\Application Data
  222. [2012/04/26 23:45:56 | 000,000,000 | -H-D | C] -- C:\Users\spaski\AppData
  223. [2012/04/26 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\Temp
  224. [2012/04/26 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\Microsoft
  225. [2012/04/26 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Roaming\Media Center Programs
  226. [2012/04/26 23:45:46 | 000,000,000 | -HSD | C] -- C:\Recovery
  227. [2012/04/26 23:45:44 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
  228.  
  229. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  230.  
  231. [2012/04/27 08:30:45 | 000,116,385 | ---- | M] () -- C:\Windows\System32\license.rtf
  232. [2012/04/27 08:28:01 | 000,266,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
  233. [2012/04/27 02:17:30 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\spaski\Desktop\OTL.exe
  234. [2012/04/27 01:55:26 | 000,002,566 | ---- | M] () -- C:\Users\spaski\Documents\s.pfx
  235. [2012/04/27 01:55:02 | 000,615,122 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  236. [2012/04/27 01:55:02 | 000,103,496 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  237. [2012/04/27 01:50:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  238. [2012/04/27 01:50:32 | 000,000,000 | ---- | M] () -- C:\Windows\System32\drivers\lvuvc.hs
  239. [2012/04/27 01:50:28 | 2415,271,936 | -HS- | M] () -- C:\hiberfil.sys
  240. [2012/04/27 01:18:26 | 000,250,168 | ---- | M] (Doctor Web, Ltd.) -- C:\Users\spaski\Desktop\te94decrypt.exe
  241. [2012/04/27 01:18:26 | 000,250,168 | ---- | M] (Doctor Web, Ltd.) -- C:\te94decrypt.exe
  242. [2012/04/27 01:06:36 | 000,001,407 | ---- | M] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  243. [2012/04/27 00:23:56 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
  244. [2012/04/27 00:21:44 | 000,016,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  245. [2012/04/27 00:21:44 | 000,016,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  246. [2012/04/26 23:56:32 | 000,001,023 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Vid.lnk
  247. [2012/04/26 23:56:23 | 000,001,182 | ---- | M] () -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
  248. [2012/04/26 23:56:19 | 000,002,083 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Webcam Software.lnk
  249. [2012/04/26 23:49:53 | 000,001,994 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
  250.  
  251. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  252.  
  253. [2012/04/27 08:30:40 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
  254. [2012/04/27 08:30:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
  255. [2012/04/27 08:27:46 | 2415,271,936 | -HS- | C] () -- C:\hiberfil.sys
  256. [2012/04/27 01:55:18 | 000,002,566 | ---- | C] () -- C:\Users\spaski\Documents\s.pfx
  257. [2012/04/27 01:06:36 | 000,001,407 | ---- | C] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  258. [2012/04/26 23:56:32 | 000,001,023 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Vid.lnk
  259. [2012/04/26 23:56:23 | 000,001,182 | ---- | C] () -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
  260. [2012/04/26 23:56:19 | 000,002,083 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Webcam Software.lnk
  261. [2012/04/26 23:49:53 | 000,001,994 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
  262. [2012/04/26 23:47:39 | 000,000,000 | ---- | C] () -- C:\Windows\System32\drivers\lvuvc.hs
  263. [2012/04/26 23:46:12 | 000,001,413 | ---- | C] () -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  264. [2012/04/26 23:45:56 | 000,000,290 | ---- | C] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
  265. [2012/04/26 23:45:56 | 000,000,272 | ---- | C] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
  266. [2010/11/20 23:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
  267. [2010/11/20 23:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
  268.  
  269. [color=#E56717]========== LOP Check ==========[/color]
  270.  
  271. [2012/04/26 23:56:23 | 000,000,000 | ---D | M] -- C:\Users\spaski\AppData\Roaming\Leadertech
  272. [2009/07/14 06:53:46 | 000,003,642 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  273.  
  274. [color=#E56717]========== Purity Check ==========[/color]
  275.  
  276.  
  277.  
  278. [color=#E56717]========== Custom Scans ==========[/color]
  279.  
  280. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  281. [2012/04/27 01:18:26 | 000,250,168 | ---- | M] (Doctor Web, Ltd.) -- C:\te94decrypt.exe
  282.  
  283. [color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
  284. [2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
  285. [2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
  286. [2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
  287.  
  288. [color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
  289. [2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
  290. [2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
  291. [2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
  292.  
  293. [color=#A23BEC]< MD5 for: CNGAUDIT.DLL  >[/color]
  294. [2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
  295. [2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
  296.  
  297. [color=#A23BEC]< MD5 for: IASTORV.SYS  >[/color]
  298. [2010/11/20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys
  299. [2010/11/20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
  300. [2010/11/20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
  301.  
  302. [color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
  303. [2010/11/20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
  304. [2010/11/20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
  305.  
  306. [color=#A23BEC]< MD5 for: NVSTOR.SYS  >[/color]
  307. [2010/11/20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys
  308. [2010/11/20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
  309. [2010/11/20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
  310.  
  311. [color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
  312. [2010/11/20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
  313. [2010/11/20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
  314.  
  315. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  316.  
  317. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  318.  
  319. < End of report >
create a new version of this paste RAW Paste Data