API tools faq
paste
Advertisement
Guest User

DJPlaya

a guest
Aug 28th, 2013
121
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 39.32 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 28.08.2013 17:55:17 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Robin\Desktop
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16576)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 3,12 Gb Total Physical Memory | 0,57 Gb Available Physical Memory | 18,21% Memory free
  8. 6,25 Gb Paging File | 2,40 Gb Available in Paging File | 38,42% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 465,76 Gb Total Space | 109,32 Gb Free Space | 23,47% Space Free | Partition Type: NTFS
  13. Drive D: | 360,70 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  14. Drive F: | 465,66 Gb Total Space | 172,06 Gb Free Space | 36,95% Space Free | Partition Type: NTFS
  15. Drive G: | 1,92 Gb Total Space | 0,10 Gb Free Space | 5,13% Space Free | Partition Type: FAT32
  16.  
  17. Computer Name: PLAYASGAMERPC | User Name: Robin | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  19. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - [2013.08.28 17:54:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe
  24. PRC - [2013.08.21 12:09:17 | 001,384,800 | ---- | M] () -- C:\Program Files (x86)\Opera Next\16.0.1196.55\opera_crashreporter.exe
  25. PRC - [2013.08.21 12:09:16 | 041,010,016 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera Next\16.0.1196.55\opera.exe
  26. PRC - [2013.07.17 21:58:25 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  27. PRC - [2013.05.23 15:48:55 | 000,295,512 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
  28. PRC - [2013.05.23 14:56:21 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
  29. PRC - [2013.05.23 13:32:08 | 000,632,352 | ---- | M] (Disc Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
  30. PRC - [2013.04.16 03:07:06 | 000,039,056 | ---- | M] () -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
  31.  
  32.  
  33. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  34.  
  35. MOD - [2013.08.21 12:09:18 | 000,868,704 | ---- | M] () -- C:\Program Files (x86)\Opera Next\16.0.1196.55\ffmpegsumo.dll
  36. MOD - [2013.08.21 12:09:17 | 001,384,800 | ---- | M] () -- C:\Program Files (x86)\Opera Next\16.0.1196.55\opera_crashreporter.exe
  37. MOD - [2013.08.07 21:25:24 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
  38. MOD - [2013.07.15 20:20:07 | 016,166,280 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
  39. MOD - [2012.08.17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
  40.  
  41.  
  42. [color=#E56717]========== Services (SafeList) ==========[/color]
  43.  
  44. SRV:[b]64bit:[/b] - [2012.11.16 22:44:58 | 000,238,080 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  45. SRV:[b]64bit:[/b] - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  46. SRV - [2013.08.20 22:21:40 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  47. SRV - [2013.07.27 00:46:24 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  48. SRV - [2013.07.17 21:58:25 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  49. SRV - [2013.06.28 14:02:04 | 002,470,736 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
  50. SRV - [2013.06.21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  51. SRV - [2013.05.23 14:56:21 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe -- (AVP)
  52. SRV - [2013.05.23 13:32:08 | 000,632,352 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe -- (Disc Soft Bus Service)
  53. SRV - [2013.04.16 03:07:06 | 000,039,056 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
  54. SRV - [2010.10.02 19:39:06 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
  55. SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  56. SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  57.  
  58.  
  59. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  60.  
  61. DRV:[b]64bit:[/b] - [2013.07.02 21:58:01 | 000,029,696 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtscsibus.sys -- (dtscsibus)
  62. DRV:[b]64bit:[/b] - [2013.06.19 12:53:29 | 000,054,368 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
  63. DRV:[b]64bit:[/b] - [2013.05.23 15:00:23 | 000,620,128 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
  64. DRV:[b]64bit:[/b] - [2013.05.23 15:00:23 | 000,178,448 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
  65. DRV:[b]64bit:[/b] - [2013.03.27 22:51:04 | 000,842,312 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  66. DRV:[b]64bit:[/b] - [2013.03.15 16:00:06 | 000,390,352 | ---- | M] (Paragon) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uim_vimx64.sys -- (Uim_VIM)
  67. DRV:[b]64bit:[/b] - [2013.01.03 10:17:48 | 000,043,400 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)
  68. DRV:[b]64bit:[/b] - [2013.01.03 10:17:38 | 000,077,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
  69. DRV:[b]64bit:[/b] - [2013.01.03 10:17:38 | 000,061,832 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
  70. DRV:[b]64bit:[/b] - [2012.11.16 23:08:32 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
  71. DRV:[b]64bit:[/b] - [2012.11.16 23:08:32 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  72. DRV:[b]64bit:[/b] - [2012.11.16 21:39:12 | 000,359,936 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  73. DRV:[b]64bit:[/b] - [2012.10.25 12:42:02 | 000,029,528 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
  74. DRV:[b]64bit:[/b] - [2012.10.25 12:42:02 | 000,029,016 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
  75. DRV:[b]64bit:[/b] - [2012.09.17 15:05:10 | 000,123,704 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
  76. DRV:[b]64bit:[/b] - [2012.08.23 16:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  77. DRV:[b]64bit:[/b] - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  78. DRV:[b]64bit:[/b] - [2012.08.23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  79. DRV:[b]64bit:[/b] - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  80. DRV:[b]64bit:[/b] - [2012.08.02 15:09:34 | 000,028,504 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
  81. DRV:[b]64bit:[/b] - [2012.06.21 16:04:52 | 000,549,704 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SRS_AE_amd64.sys -- (SRS_AE_Service)
  82. DRV:[b]64bit:[/b] - [2012.06.19 17:28:12 | 000,458,584 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
  83. DRV:[b]64bit:[/b] - [2012.06.05 13:45:16 | 000,237,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
  84. DRV:[b]64bit:[/b] - [2012.04.21 01:19:28 | 000,077,584 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ifP60x64.sys -- (IFCoEVB)
  85. DRV:[b]64bit:[/b] - [2012.04.21 01:19:23 | 000,387,344 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ifM60x64.sys -- (IFCoEMP)
  86. DRV:[b]64bit:[/b] - [2012.03.27 16:48:00 | 000,398,112 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
  87. DRV:[b]64bit:[/b] - [2012.03.26 06:24:02 | 003,341,904 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  88. DRV:[b]64bit:[/b] - [2012.03.19 15:12:38 | 001,454,896 | ---- | M] (ShiningMorning Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vasdDev.sys -- (VASDeviceDrm)
  89. DRV:[b]64bit:[/b] - [2012.03.08 11:09:30 | 000,088,104 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxdiaga.sys -- (b06diag)
  90. DRV:[b]64bit:[/b] - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  91. DRV:[b]64bit:[/b] - [2012.03.01 03:00:15 | 000,398,144 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
  92. DRV:[b]64bit:[/b] - [2012.02.22 18:33:36 | 000,539,176 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxois.sys -- (bxois)
  93. DRV:[b]64bit:[/b] - [2012.02.22 18:06:00 | 000,178,216 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxfcoe.sys -- (bxfcoe)
  94. DRV:[b]64bit:[/b] - [2012.02.22 16:27:02 | 000,157,288 | ---- | M] (Bigfoot Networks, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\XenoVa64.sys -- (BFNVis64)
  95. DRV:[b]64bit:[/b] - [2012.02.22 16:27:02 | 000,157,288 | ---- | M] (Bigfoot Networks, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Xeno7x64.sys -- (BFN7x64)
  96. DRV:[b]64bit:[/b] - [2012.01.24 17:44:00 | 000,529,448 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  97. DRV:[b]64bit:[/b] - [2011.12.05 21:47:30 | 000,095,248 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  98. DRV:[b]64bit:[/b] - [2011.07.01 11:46:40 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
  99. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  100. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  101. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  102. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  103. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  104. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  105. DRV:[b]64bit:[/b] - [2009.11.16 16:45:24 | 000,042,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qd262x64.sys -- (ioatdma2)
  106. DRV:[b]64bit:[/b] - [2009.11.16 16:45:21 | 000,040,144 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qd162x64.sys -- (ioatdma1)
  107. DRV:[b]64bit:[/b] - [2009.07.16 11:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
  108. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  109. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  110. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  111. DRV:[b]64bit:[/b] - [2009.06.10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  112. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  113. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  114. DRV:[b]64bit:[/b] - [2009.03.18 19:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  115. DRV:[b]64bit:[/b] - [2007.04.11 23:30:04 | 000,043,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IAMTVE.sys -- (IAMTVE)
  116. DRV:[b]64bit:[/b] - [2007.04.11 23:29:58 | 000,051,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IAMTXPE.sys -- (IAMTXPE)
  117. DRV:[b]64bit:[/b] - [2007.03.13 11:20:06 | 000,262,440 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTL8187.sys -- (RTL8187)
  118. DRV:[b]64bit:[/b] - [2007.03.09 14:29:44 | 000,025,896 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtlProt.sys -- (RtlProt)
  119. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  120. DRV - [2007.03.13 11:20:06 | 000,262,440 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\rtl8187.sys -- (RTL8187)
  121. DRV - [2007.03.09 14:29:44 | 000,025,896 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\RtlProt.sys -- (RtlProt)
  122.  
  123.  
  124. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  125.  
  126.  
  127. [color=#E56717]========== Internet Explorer ==========[/color]
  128.  
  129. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  130. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  131. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  132. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{BFF78D2B-A031-46A0-9B83-A70E038FE677}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b2ie7
  133. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  134. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  135. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  136.  
  137. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
  138. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
  139. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
  140. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 34 55 0D 79 D3 56 CE 01 [binary data]
  141. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  142. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ie8
  143. IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119781&tt=gc_&babsrc=SP_ss&mntrId=4A4000241D013310
  144. IE - HKCU\..\SearchScopes\{BFF78D2B-A031-46A0-9B83-A70E038FE677}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=ie8
  145. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  146. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
  147.  
  148.  
  149. [color=#E56717]========== FireFox ==========[/color]
  150.  
  151. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
  152. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
  153. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  154. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
  155. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  156. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  157. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.2.32: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  158. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.2: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
  159. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.2: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
  160. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.2: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
  161. FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.2.32: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
  162. FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
  163.  
  164. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013.05.23 15:00:32 | 000,000,000 | ---D | M]
  165. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013.05.23 15:00:32 | 000,000,000 | ---D | M]
  166. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013.05.23 15:00:31 | 000,000,000 | ---D | M]
  167. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013.05.23 15:00:31 | 000,000,000 | ---D | M]
  168. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013.05.23 15:00:32 | 000,000,000 | ---D | M]
  169. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FCE04E1F-9378-4f39-96F6-5689A9159E45}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013.05.23 15:49:38 | 000,000,000 | ---D | M]
  170. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013.05.23 15:49:38 | 000,000,000 | ---D | M]
  171. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  172.  
  173.  
  174. O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  175. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  176. O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
  177. O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Kaspersky Lab ZAO)
  178. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  179. O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
  180. O4 - HKCU..\Run: [DAEMON Tools Ultra Agent] C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe (Disc Soft Ltd)
  181. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  182. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  183. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0
  184. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0
  185. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  186. O8:[b]64bit:[/b] - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 File not found
  187. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
  188. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
  189. O8:[b]64bit:[/b] - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
  190. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 File not found
  191. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  192. O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105 File not found
  193. O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
  194. O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
  195. O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
  196. O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000 File not found
  197. O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  198. O13[b]64bit:[/b] - gopher Prefix: missing
  199. O13 - gopher Prefix: missing
  200. O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  201. O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  202. O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
  203. O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
  204. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.69.100.110 80.69.100.102
  205. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{17D94F77-AFAB-489C-96D6-FC0CA7B1387F}: DhcpNameServer = 80.69.100.110 80.69.100.102
  206. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B665B287-8682-4DD6-B11C-BB919C81F22A}: DhcpNameServer = 80.69.100.110 80.69.100.102
  207. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  208. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  209. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  210. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  211. O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  212. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  213. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  214. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  215. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  216. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  217. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  218. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  219. O32 - HKLM CDRom: AutoRun - 1
  220. O33 - MountPoints2\{00a9f55d-c79c-11e2-a9f6-00241d013310}\Shell - "" = AutoRun
  221. O33 - MountPoints2\{00a9f55d-c79c-11e2-a9f6-00241d013310}\Shell\AutoRun\command - "" = H:\MotoCastSetup.exe -a
  222. O33 - MountPoints2\{cbcfa9fb-e33b-11e2-af92-001731e1c043}\Shell - "" = AutoRun
  223. O33 - MountPoints2\{cbcfa9fb-e33b-11e2-af92-001731e1c043}\Shell\AutoRun\command - "" = E:\Setup.exe
  224. O33 - MountPoints2\E\Shell - "" = AutoRun
  225. O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Setup.exe
  226. O33 - MountPoints2\H\Shell - "" = AutoRun
  227. O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\Setup.exe
  228. O34 - HKLM BootExecute: (autocheck autochk *)
  229. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  230. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  231. O35 - HKLM\..comfile [open] -- "%1" %*
  232. O35 - HKLM\..exefile [open] -- "%1" %*
  233. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  234. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  235. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  236. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  237. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  238. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  239. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  240.  
  241. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  242.  
  243. [2013.08.28 17:54:32 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe
  244. [2013.08.26 16:27:13 | 000,000,000 | R--D | C] -- C:\Users\Robin\Favorites
  245. [2013.08.26 14:43:47 | 000,000,000 | R--D | C] -- C:\Users\Robin\Searches
  246. [2013.08.26 00:19:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Games
  247. [2013.08.24 12:54:42 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\CrashDumps
  248. [2013.08.23 20:35:21 | 000,000,000 | ---D | C] -- C:\Users\Robin\Documents\Benutzerdefinierte Produktionsprofile 8.0
  249. [2013.08.23 17:26:45 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\TechSmith
  250. [2013.08.23 17:26:22 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\TechSmith
  251. [2013.08.23 17:24:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
  252. [2013.08.23 17:24:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\TechSmith Shared
  253. [2013.08.23 17:23:59 | 000,000,000 | ---D | C] -- C:\ProgramData\TechSmith
  254. [2013.08.23 17:23:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TechSmith
  255. [2013.08.23 14:26:54 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\Feuergrun_v3
  256. [2013.08.22 18:08:29 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\minecraftbukkit
  257. [2013.08.21 09:47:17 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\Laputa
  258. [2013.08.16 12:57:33 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\FileZilla
  259. [2013.08.16 12:57:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
  260. [2013.08.16 12:57:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
  261. [2013.08.15 23:11:15 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\.minecraft
  262. [2013.08.15 16:00:55 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
  263. [2013.08.15 16:00:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSI Afterburner
  264. [2013.08.15 11:02:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis
  265. [2013.08.15 11:02:17 | 000,000,000 | ---D | C] -- C:\Users\Robin\AppData\Local\Mirillis
  266. [2013.08.15 11:01:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
  267. [2013.08.15 11:01:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mirillis
  268. [2013.08.10 09:00:18 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
  269. [2013.08.09 16:41:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HideIPVPN
  270. [2013.08.07 14:38:47 | 000,000,000 | ---D | C] -- C:\Users\Robin\Desktop\TF2
  271. [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  272. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  273.  
  274. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  275.  
  276. [2013.08.28 17:54:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Robin\Desktop\OTL.exe
  277. [2013.08.28 17:49:30 | 000,026,352 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  278. [2013.08.28 17:49:30 | 000,026,352 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  279. [2013.08.28 17:43:31 | 000,000,264 | ---- | M] () -- C:\Windows\tasks\RtlVistaStart.job
  280. [2013.08.28 17:42:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  281. [2013.08.28 17:41:59 | 2515,886,080 | -HS- | M] () -- C:\hiberfil.sys
  282. [2013.08.26 16:28:36 | 001,621,244 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  283. [2013.08.26 16:28:36 | 000,700,168 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
  284. [2013.08.26 16:28:36 | 000,654,880 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  285. [2013.08.26 16:28:36 | 000,148,964 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
  286. [2013.08.26 16:28:36 | 000,121,752 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  287. [2013.08.26 16:21:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  288. [2013.08.24 10:52:35 | 000,002,575 | ---- | M] () -- C:\Users\Robin\Desktop\Camtasia Recorder 8.lnk
  289. [2013.08.24 10:29:38 | 000,431,920 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  290. [2013.08.20 22:21:39 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  291. [2013.08.20 22:21:39 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  292. [2013.08.17 22:22:24 | 002,284,041 | ---- | M] () -- C:\Users\Robin\Desktop\item-list-moncraft.jpg
  293. [2013.08.17 17:07:59 | 000,001,613 | ---- | M] () -- C:\Users\Robin\Desktop\1.PNG
  294. [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  295. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  296.  
  297. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  298.  
  299. [2013.08.24 10:52:35 | 000,002,575 | ---- | C] () -- C:\Users\Robin\Desktop\Camtasia Recorder 8.lnk
  300. [2013.08.23 17:10:51 | 000,098,304 | ---- | C] () -- C:\Users\Robin\Desktop\keygen.exe
  301. [2013.08.23 17:10:51 | 000,000,072 | ---- | C] () -- C:\Users\Robin\Desktop\file_id.diz
  302. [2013.08.17 22:22:23 | 002,284,041 | ---- | C] () -- C:\Users\Robin\Desktop\item-list-moncraft.jpg
  303. [2013.08.17 17:07:58 | 000,001,613 | ---- | C] () -- C:\Users\Robin\Desktop\1.PNG
  304. [2013.07.17 21:58:51 | 000,281,688 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  305. [2013.07.17 21:58:25 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  306. [2013.07.02 22:02:23 | 000,000,190 | ---- | C] () -- C:\Windows\PowerReg.dat
  307. [2013.07.02 21:58:31 | 000,000,084 | ---- | C] () -- C:\Windows\encore_launcher.ini
  308. [2013.06.15 08:51:32 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\AsIO.dll
  309. [2013.06.15 08:51:32 | 000,013,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
  310. [2013.06.14 22:20:47 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
  311. [2013.06.09 11:32:55 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll
  312. [2013.06.03 21:51:50 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
  313. [2013.06.03 21:51:50 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
  314. [2013.06.03 21:51:49 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
  315. [2013.06.02 21:22:19 | 000,000,493 | ---- | C] () -- C:\Windows\SIERRA.INI
  316. [2013.05.28 22:22:48 | 000,641,024 | ---- | C] () -- C:\Windows\SysWow64\ficvdec_x86.dll
  317. [2012.11.16 22:01:08 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  318. [2012.11.16 22:01:08 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  319. [2012.10.11 00:07:35 | 001,598,202 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  320. [2012.09.28 21:45:06 | 000,247,296 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll
  321. [2012.04.18 18:39:10 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  322. [2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  323.  
  324. [color=#E56717]========== ZeroAccess Check ==========[/color]
  325.  
  326. [2013.08.18 20:07:35 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RM6KZ3J\l
  327. [2013.08.18 20:07:17 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RM6KZ3J\installer\l
  328. [2013.08.18 22:54:01 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RM6KZ3J\shellext\l
  329. [2010.08.25 01:29:10 | 000,056,248 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\Core.u
  330. [2010.08.25 01:29:18 | 000,047,730 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\Editor.u
  331. [2010.08.25 01:29:12 | 001,771,152 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\Engine.u
  332. [2010.08.25 01:29:14 | 000,018,615 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\GameFramework.u
  333. [2010.08.25 01:29:16 | 000,149,835 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\GearboxFramework.u
  334. [2010.08.25 01:29:14 | 000,016,530 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\GFxUI.u
  335. [2010.08.25 01:29:14 | 000,000,891 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\GFxUIEditor.u
  336. [2010.08.25 01:29:18 | 000,023,355 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\IpDrv.u
  337. [2010.08.25 01:29:24 | 000,043,794 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\OnlineSubsystemGameSpy.u
  338. [2010.08.25 01:29:18 | 000,082,799 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\UnrealEd.u
  339. [2010.08.25 01:29:24 | 000,023,958 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\WillowEditor.u
  340. [2010.08.25 01:29:22 | 004,399,434 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-2690672325-1759799698-3166451401-1000\$RS1UQZR\Borderlands 2\WillowGame\CookedPC\WillowGame.u
  341. [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  342.  
  343. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  344.  
  345. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  346.  
  347. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  348.  
  349. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  350.  
  351. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  352. "" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
  353. "ThreadingModel" = Apartment
  354.  
  355. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  356. "" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
  357. "ThreadingModel" = Apartment
  358.  
  359. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  360. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  361. "ThreadingModel" = Free
  362.  
  363. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  364. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  365. "ThreadingModel" = Free
  366.  
  367. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  368. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  369. "ThreadingModel" = Both
  370.  
  371. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  372.  
  373. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!