API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 11th, 2012
69
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 54.06 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 11.4.2012. 23:10:41 - Run 1
  2. OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\Ivan\Desktop
  3. Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 1,50 Gb Total Physical Memory | 0,29 Gb Available Physical Memory | 19,06% Memory free
  8. 3,00 Gb Paging File | 1,34 Gb Available in Paging File | 44,84% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 48,83 Gb Total Space | 5,62 Gb Free Space | 11,52% Space Free | Partition Type: NTFS
  13. Drive D: | 87,89 Gb Total Space | 9,97 Gb Free Space | 11,35% Space Free | Partition Type: NTFS
  14. Drive E: | 96,16 Gb Total Space | 13,89 Gb Free Space | 14,44% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: IVAN-PC | User Name: Ivan | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Quick Scan
  18. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2012.04.11 23:09:03 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Ivan\Desktop\OTL.exe
  23. PRC - [2012.04.03 19:27:37 | 000,021,416 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
  24. PRC - [2012.03.28 21:22:10 | 000,549,216 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-Agent.exe
  25. PRC - [2012.03.28 21:21:58 | 000,569,696 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-Frontend.exe
  26. PRC - [2012.03.28 21:21:52 | 000,397,664 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-FileSystem.exe
  27. PRC - [2012.03.28 21:21:48 | 000,385,376 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-LogRotatorService.exe
  28. PRC - [2012.03.28 21:21:22 | 000,397,664 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-BlockDevice.exe
  29. PRC - [2012.03.28 21:21:18 | 000,397,664 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-Network.exe
  30. PRC - [2012.03.28 21:21:10 | 000,401,760 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files\BlueStacks\HD-Service.exe
  31. PRC - [2012.03.26 19:50:15 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Users\Ivan\AppData\Local\Google\Update\1.3.21.111\GoogleCrashHandler.exe
  32. PRC - [2012.03.07 01:36:32 | 003,508,624 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
  33. PRC - [2012.02.15 01:03:14 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Ivan\AppData\Roaming\Dropbox\bin\Dropbox.exe
  34. PRC - [2012.02.07 23:03:46 | 000,495,616 | ---- | M] () -- C:\Users\Ivan\AppData\Local\BlueStacks\RocketDock\RocketDock.exe
  35. PRC - [2012.02.06 12:09:40 | 000,597,504 | ---- | M] (FILSH Media GmbH) -- C:\Program Files\FILSHtray\FILSHtray.exe
  36. PRC - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
  37. PRC - [2011.09.22 12:03:30 | 000,974,944 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
  38. PRC - [2011.09.22 12:03:02 | 003,080,264 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
  39. PRC - [2011.07.15 16:39:38 | 000,128,512 | ---- | M] (SoftwareForMe Inc) -- C:\Program Files\SoftwareForMe Inc\PhoneMyPC\PhoneMyPC.exe
  40. PRC - [2011.07.15 16:39:38 | 000,031,232 | ---- | M] (SoftwareForMe Inc) -- C:\Program Files\SoftwareForMe Inc\PhoneMyPC\PhoneMyPC_Helper.exe
  41. PRC - [2011.06.24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
  42. PRC - [2011.06.15 08:19:14 | 000,307,200 | ---- | M] (PowerISO Computing, Inc.) -- C:\Program Files\POWERISO\PWRISOVM.EXE
  43. PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  44. PRC - [2010.11.20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
  45. PRC - [2010.11.20 14:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
  46. PRC - [2009.08.26 11:36:00 | 002,684,256 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
  47. PRC - [2009.07.30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
  48. PRC - [2009.07.14 03:14:46 | 000,115,200 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE
  49. PRC - [2009.06.08 14:34:00 | 000,660,808 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
  50. PRC - [2009.06.03 15:33:00 | 000,308,552 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
  51. PRC - [2009.01.26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
  52. PRC - [2008.07.24 11:24:00 | 000,083,272 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
  53. PRC - [2007.06.29 16:28:38 | 000,277,504 | ---- | M] (Portrait Displays, Inc) -- C:\Program Files\Portrait Displays\HP Display Assistant\dthtml.exe
  54. PRC - [2007.06.29 16:26:48 | 000,073,728 | ---- | M] () -- C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
  55. PRC - [2007.06.29 16:26:06 | 000,110,592 | ---- | M] (Portrait Displays Inc.) -- C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
  56. PRC - [2007.06.27 19:04:00 | 001,213,736 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
  57. PRC - [2007.06.27 19:03:40 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
  58. PRC - [2007.02.12 14:50:40 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
  59. PRC - [2006.11.29 16:11:30 | 000,258,048 | ---- | M] (SONIX) -- C:\Windows\tsnp2std.exe
  60. PRC - [2006.09.15 13:21:54 | 000,675,840 | ---- | M] (Sonix) -- C:\Windows\vsnp2std.exe
  61. PRC - [2004.02.26 09:52:00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
  62.  
  63.  
  64. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  65.  
  66. MOD - [2012.04.09 22:28:48 | 000,444,400 | ---- | M] () -- C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\ppgooglenaclpluginchrome.dll
  67. MOD - [2012.04.09 22:28:46 | 003,915,248 | ---- | M] () -- C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\pdf.dll
  68. MOD - [2012.04.09 22:27:21 | 000,122,880 | ---- | M] () -- C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\avutil-51.dll
  69. MOD - [2012.04.09 22:27:20 | 000,220,672 | ---- | M] () -- C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\avformat-53.dll
  70. MOD - [2012.04.09 22:27:19 | 001,747,456 | ---- | M] () -- C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\avcodec-53.dll
  71. MOD - [2012.04.04 23:21:09 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\888be382c48887c830026806a9587e31\System.Management.ni.dll
  72. MOD - [2012.04.04 23:18:39 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1378a1c9290882206f4d5a6561bfc5d7\System.Runtime.Remoting.ni.dll
  73. MOD - [2012.04.04 23:18:26 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\a07e3882af9ea368a54742fc19c86662\System.Xaml.ni.dll
  74. MOD - [2012.04.03 19:27:44 | 000,115,137 | ---- | M] () -- C:\Users\Ivan\AppData\Local\Temp\61e4dc9e-b0a3-4e40-99a9-4cd9049f7d99\CliSecureRT.dll
  75. MOD - [2012.04.03 19:27:37 | 000,021,416 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
  76. MOD - [2012.04.03 09:10:00 | 013,138,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f7283ec1c4b47c6b21777626a76d6611\System.Windows.Forms.ni.dll
  77. MOD - [2012.04.03 09:09:36 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\eaeaf5f980c23f6075820513748695d9\PresentationFramework.Aero.ni.dll
  78. MOD - [2012.04.03 09:09:31 | 018,019,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\54713c242f2029a417259a10b673873f\PresentationFramework.ni.dll
  79. MOD - [2012.04.03 09:09:17 | 001,653,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b798dff0ec58f4c76d96bb656d8d04bd\System.Drawing.ni.dll
  80. MOD - [2012.04.03 09:08:46 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\1084708d3872b8e64f7ec88145298b2d\System.Xml.ni.dll
  81. MOD - [2012.04.03 09:08:33 | 011,469,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b761a3b6e5c751993ff65aafd7fe42b8\PresentationCore.ni.dll
  82. MOD - [2012.04.03 09:08:04 | 007,070,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\22d54437cf1de9478f5c2c23f07eb9d6\System.Core.ni.dll
  83. MOD - [2012.04.03 09:07:47 | 003,881,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\3ed9c2f173958ae6663134d302cc4f62\WindowsBase.ni.dll
  84. MOD - [2012.04.03 09:07:35 | 009,092,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ff7c4aa829c327b186ef85cff3289bdf\System.ni.dll
  85. MOD - [2012.04.03 09:07:16 | 014,415,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\90842cf922c71c82718ba71d5801c30c\mscorlib.ni.dll
  86. MOD - [2012.03.29 23:30:28 | 000,493,056 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\HD-Agent\a84fdf32bc88db2553892676145ac6be\HD-Agent.ni.exe
  87. MOD - [2012.03.29 23:30:20 | 001,443,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\NAudio\f6f9cec6d574736dc08bc09be22abf6c\NAudio.ni.dll
  88. MOD - [2012.03.29 23:30:18 | 000,155,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\JSON\147eb15c5802e8c95eb5b3a6d04a4353\JSON.ni.dll
  89. MOD - [2012.03.29 23:30:07 | 000,624,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\HD-Frontend\3c4a61f57eaf170bf77bb384986d73c4\HD-Frontend.ni.exe
  90. MOD - [2012.02.17 19:03:48 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\cb5bd98ffa4c82327b0e4db02bb58d2d\System.Management.ni.dll
  91. MOD - [2012.02.17 11:50:52 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\075d9c27aa02085fef8983b5f5f85834\System.ServiceProcess.ni.dll
  92. MOD - [2012.02.17 11:50:10 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\42ae8760f0a74ab774e82a64368aa1f6\System.Web.ni.dll
  93. MOD - [2012.02.17 11:47:23 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6c51e152e7404188914c9fa4d8503ff9\System.Windows.Forms.ni.dll
  94. MOD - [2012.02.17 11:46:58 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ab87129c2b603f218e4aa5300c9b1bdd\System.Drawing.ni.dll
  95. MOD - [2012.02.17 11:45:37 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll
  96. MOD - [2012.02.17 11:45:24 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll
  97. MOD - [2012.02.17 11:45:22 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll
  98. MOD - [2012.02.07 23:03:46 | 000,495,616 | ---- | M] () -- C:\Users\Ivan\AppData\Local\BlueStacks\RocketDock\RocketDock.exe
  99. MOD - [2011.10.13 12:05:31 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
  100. MOD - [2011.05.28 22:04:56 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
  101. MOD - [2007.09.02 13:57:36 | 000,069,632 | ---- | M] () -- C:\Users\Ivan\AppData\Local\BlueStacks\RocketDock\RocketDock.dll
  102. MOD - [2007.06.29 16:26:54 | 000,167,936 | ---- | M] () -- C:\Program Files\Common Files\Portrait Displays\Shared\DThook.dll
  103. MOD - [2007.06.29 16:26:50 | 000,077,824 | ---- | M] () -- C:\Program Files\Common Files\Portrait Displays\Plugins\CC\gui.dll
  104. MOD - [2007.06.29 16:26:02 | 000,102,400 | ---- | M] () -- C:\Program Files\Common Files\Portrait Displays\Shared\PresetsCOM.dll
  105. MOD - [2007.06.12 12:25:48 | 000,065,536 | ---- | M] () -- C:\Program Files\Common Files\Portrait Displays\Drivers\vista.dll
  106. MOD - [2007.02.12 14:50:40 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
  107.  
  108.  
  109. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  110.  
  111. SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)
  112. SRV - [2012.03.29 12:15:21 | 000,253,600 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  113. SRV - [2012.03.28 21:21:48 | 000,385,376 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
  114. SRV - [2012.03.28 21:21:10 | 000,401,760 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Running] -- C:\Program Files\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc)
  115. SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  116. SRV - [2011.09.22 12:03:30 | 000,974,944 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
  117. SRV - [2011.07.15 16:39:38 | 000,031,232 | ---- | M] (SoftwareForMe Inc) [Auto | Running] -- C:\Program Files\SoftwareForMe Inc\PhoneMyPC\PhoneMyPC_Helper.exe -- (PhoneMyPC_Helper)
  118. SRV - [2009.07.30 21:20:00 | 000,144,752 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
  119. SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  120. SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
  121. SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  122. SRV - [2007.06.29 16:26:48 | 000,073,728 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe -- (DTSRVC)
  123. SRV - [2007.02.05 10:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
  124. SRV - [2007.02.05 10:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
  125. SRV - [2006.12.14 02:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
  126. SRV - [2006.12.14 02:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
  127. SRV - [2006.12.14 01:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
  128. SRV - [2004.02.26 09:52:00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
  129.  
  130.  
  131. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  132.  
  133. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
  134. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
  135. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
  136. DRV - [2012.03.28 21:21:36 | 000,066,912 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys -- (BstHdDrv)
  137. DRV - [2011.11.24 23:23:16 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.)
  138. DRV - [2011.11.24 23:23:12 | 000,080,184 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
  139. DRV - [2011.08.09 14:24:52 | 000,163,424 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
  140. DRV - [2011.08.04 09:20:38 | 000,147,480 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfw.sys -- (epfw)
  141. DRV - [2011.08.04 09:20:38 | 000,050,624 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\epfwwfp.sys -- (epfwwfp)
  142. DRV - [2011.08.04 09:20:38 | 000,033,656 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\EpfwLWF.sys -- (EpfwLWF)
  143. DRV - [2011.08.04 09:20:36 | 000,118,104 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
  144. DRV - [2011.07.20 01:54:06 | 000,047,104 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iBtFltCoex.sys -- (iBtFltCoex)
  145. DRV - [2011.07.19 22:12:22 | 000,225,280 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btmhsf.sys -- (btmhsf)
  146. DRV - [2011.07.17 01:22:08 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
  147. DRV - [2011.06.15 10:23:56 | 000,060,156 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
  148. DRV - [2011.06.02 07:47:22 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
  149. DRV - [2011.06.02 07:47:22 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
  150. DRV - [2011.06.02 07:47:22 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
  151. DRV - [2010.12.21 07:55:02 | 000,132,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
  152. DRV - [2010.12.21 07:55:02 | 000,104,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
  153. DRV - [2010.12.21 07:55:02 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadadb.sys -- (androidusb)
  154. DRV - [2010.12.21 07:55:02 | 000,014,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
  155. DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
  156. DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
  157. DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
  158. DRV - [2010.11.20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  159. DRV - [2010.11.20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  160. DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  161. DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
  162. DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
  163. DRV - [2009.08.28 11:49:00 | 000,169,064 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
  164. DRV - [2009.08.13 08:23:02 | 000,022,528 | ---- | M] (CSR, plc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BthAvrcp.sys -- (BthAvrcp)
  165. DRV - [2009.08.05 21:37:04 | 000,039,112 | ---- | M] (GBM Software) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GRemoteJoy.sys -- (GRemoteJoy)
  166. DRV - [2009.08.05 21:37:04 | 000,023,368 | ---- | M] (GBM Software) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GRemoteBus.sys -- (GRemoteBus)
  167. DRV - [2009.08.05 14:44:00 | 000,049,400 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
  168. DRV - [2009.08.05 12:55:00 | 000,061,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
  169. DRV - [2009.07.28 20:01:00 | 000,069,480 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
  170. DRV - [2009.07.24 11:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
  171. DRV - [2009.07.14 00:09:17 | 004,194,816 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
  172. DRV - [2009.06.19 09:57:00 | 000,079,872 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
  173. DRV - [2009.06.19 09:56:00 | 000,042,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
  174. DRV - [2009.06.17 11:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
  175. DRV - [2008.12.18 11:13:18 | 000,025,680 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\eusk2par.sys -- (eusk2par)
  176. DRV - [2008.07.22 07:42:58 | 000,051,200 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
  177. DRV - [2007.01.26 16:48:28 | 012,028,032 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2sxp.sys -- (SNP2STD) USB2.0 PC Camera (SNP2STD)
  178. DRV - [2006.11.16 18:20:48 | 000,015,920 | ---- | M] (Portrait Displays, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PdiPorts.sys -- (PdiPorts)
  179.  
  180.  
  181. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  182.  
  183.  
  184. [color=#E56717]========== Internet Explorer ==========[/color]
  185.  
  186. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
  187. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  188. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  189. IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
  190.  
  191. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  192. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  193. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = hr
  194. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 30 7F DF 93 F8 43 CC 01 [binary data]
  195. IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
  196. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  197. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  198. IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={E5DA6477-F0E5-43B2-B8E7-767BF06ED2D6}&mid=0d7a5a33a1f444628078f531fa4f0c2f-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=AVG&pr=fr&d=2011-09-29 08:45:20&v=8.0.0.34&sap=dsp&q={searchTerms}
  199. IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
  200. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  201.  
  202. [color=#E56717]========== FireFox ==========[/color]
  203.  
  204. FF - prefs.js..browser.search.defaultenginename: "Facemoods Search"
  205. FF - prefs.js..browser.search.selectedEngine: "Google"
  206. FF - prefs.js..browser.startup.homepage: "http://www.google.hr/"
  207. FF - prefs.js..keyword.URL: "http://isearch.avg.com/search?cid=%7B41f4bf9d-5fb8-48eb-9153-8ff0e0466a46%7D&mid=0d7a5a33a1f444628078f531fa4f0c2f-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&ds=AVG&v=8.0.0.34.1&lang=en&pr=pr&d=2011-09-26%2010%3A45%3A24&sap=ku&q="
  208.  
  209.  
  210. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
  211. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
  212. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  213. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Ivan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  214. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ivan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  215. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ivan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
  216.  
  217. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.26 22:07:54 | 000,000,000 | ---D | M]
  218. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.04.11 10:17:26 | 000,000,000 | ---D | M]
  219. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012.04.11 22:22:58 | 000,000,000 | ---D | M]
  220.  
  221. [2011.07.16 22:42:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Extensions
  222. [2012.04.03 01:49:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\ciuihkqf.default\extensions
  223. [2012.04.03 01:49:08 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\ciuihkqf.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  224. [2012.03.12 22:35:10 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\ciuihkqf.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
  225. [2011.07.16 23:29:14 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\ciuihkqf.default\extensions\engine@conduit.com
  226. [2012.04.07 16:50:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
  227. [2012.04.07 16:50:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
  228. () (No name found) -- C:\USERS\IVAN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\CIUIHKQF.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
  229. [2012.01.26 22:07:53 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
  230. [2012.04.07 16:50:36 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
  231. [2011.10.26 20:49:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
  232. [2011.10.02 09:42:21 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
  233. [2011.07.16 23:43:09 | 000,002,047 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchw7th.xml
  234. [2011.12.01 19:32:10 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
  235.  
  236. [color=#E56717]========== Chrome ==========[/color]
  237.  
  238. CHR - default_search_provider: Google (Enabled)
  239. CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
  240. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
  241. CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
  242. CHR - plugin: Native Client (Enabled) = C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\ppGoogleNaClPluginChrome.dll
  243. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\pdf.dll
  244. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Ivan\AppData\Local\Google\Chrome\Application\18.0.1025.152\gcswf32.dll
  245. CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
  246. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll
  247. CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
  248. CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
  249. CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
  250. CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
  251. CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
  252. CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
  253. CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Ivan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
  254. CHR - plugin: Google Update (Enabled) = C:\Users\Ivan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
  255. CHR - Extension: MB2 = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ablnpmdakdiclnimkjfcaibpgjhapkbl\2.3.3.3_0\
  256. CHR - Extension: YouTube = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
  257. CHR - Extension: Google Search = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
  258. CHR - Extension: Speed Dial = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgpdioedihjhncjafcpgbbjdpbbkikmi\2.1_0\
  259. CHR - Extension: EasyDrop = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\flogpfmjdekjoilcnmmchanikomlidie\1.3.0_0\
  260. CHR - Extension: AdBlock = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.25_0\
  261. CHR - Extension: Search YouTube\u2122 = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabhcmlfmommijjhppgpmaldhnnodggp\1.0_0\
  262. CHR - Extension: Unfriend Finder = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kddnblacojpnmjdlpnndlcamnmmkfina\38_0\
  263. CHR - Extension: Quick Translate = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kghoiamnhpiljmmndbecoikdganbnagk\1.8_0\
  264. CHR - Extension: Google = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\opdhiicppgbikdfhdfddifbnaaogmpeg\2012.3.14.59419_0\
  265. CHR - Extension: Gmail = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  266.  
  267. O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  268. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
  269. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
  270. O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
  271. O4 - HKLM..\Run: [DT HWP] C:\Program Files\Portrait Displays\HP Display Assistant\DTHtml.exe (Portrait Displays, Inc)
  272. O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
  273. O4 - HKLM..\Run: [FILSHtray] C:\Program Files\FILSHtray\FILSHtray.exe (FILSH Media GmbH)
  274. O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe ()
  275. O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
  276. O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
  277. O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript File not found
  278. O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
  279. O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
  280. O4 - HKLM..\Run: [snp2std] C:\Windows\vsnp2std.exe (Sonix)
  281. O4 - HKLM..\Run: [tsnp2std] C:\Windows\tsnp2std.exe (SONIX)
  282. O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
  283. O4 - HKCU..\Run: [BlueStacks Agent] C:\Program Files\BlueStacks\HD-Agent.exe (BlueStack Systems, Inc.)
  284. O4 - HKCU..\Run: [BlueStacks App Player] C:\Program Files\BlueStacks\HD-FrontEnd.exe (BlueStack Systems, Inc.)
  285. O4 - HKCU..\Run: [Facebook Update] C:\Users\Ivan\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  286. O4 - HKCU..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung)
  287. O4 - HKCU..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
  288. O4 - Startup: C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Ivan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
  289. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  290. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  291. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  292. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  293. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  294. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  295. O13 - gopher Prefix: missing
  296. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
  297. O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
  298. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
  299. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  300. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
  301. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5BA79120-009E-4FFB-86A2-E9F5DBCA3AB6}: DhcpNameServer = 192.168.1.254
  302. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5BA79120-009E-4FFB-86A2-E9F5DBCA3AB6}: NameServer = 8.26.56.26,156.154.70.22
  303. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  304. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  305. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  306. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  307. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  308. O32 - HKLM CDRom: AutoRun - 1
  309. O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  310. O33 - MountPoints2\{f3c2c7d5-5bb9-11e1-b19b-0009dd5053cd}\Shell - "" = AutoRun
  311. O33 - MountPoints2\{f3c2c7d5-5bb9-11e1-b19b-0009dd5053cd}\Shell\AutoRun\command - "" = WindowsUI\Autorun.exe
  312. O33 - MountPoints2\H\Shell - "" = AutoRun
  313. O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe
  314. O34 - HKLM BootExecute: (autocheck autochk *)
  315. O35 - HKLM\..comfile [open] -- "%1" %*
  316. O35 - HKLM\..exefile [open] -- "%1" %*
  317. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  318. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  319.  
  320. NetSvcs: FastUserSwitchingCompatibility - File not found
  321. NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
  322. NetSvcs: Nla - File not found
  323. NetSvcs: Ntmssvc - File not found
  324. NetSvcs: NWCWorkstation - File not found
  325. NetSvcs: Nwsapagent - File not found
  326. NetSvcs: SRService - File not found
  327. NetSvcs: WmdmPmSp - File not found
  328. NetSvcs: LogonHours - File not found
  329. NetSvcs: PCAudit - File not found
  330. NetSvcs: helpsvc - File not found
  331. NetSvcs: uploadmgr - File not found
  332.  
  333. Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
  334. Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  335. Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
  336. Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
  337.  
  338. CREATERESTOREPOINT
  339. Restore point Set: OTL Restore Point
  340.  
  341. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  342.  
  343. [2012.04.11 23:09:03 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Users\Ivan\Desktop\OTL.exe
  344. [2012.04.11 22:24:35 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Roaming\ESET
  345. [2012.04.11 22:24:35 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Local\ESET
  346. [2012.04.11 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
  347. [2012.04.11 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
  348. [2012.04.11 21:47:10 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
  349. [2012.04.11 21:47:00 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  350. [2012.04.10 21:51:20 | 000,000,000 | ---D | C] -- C:\Users\Ivan\Desktop\New folder (3)
  351. [2012.04.09 17:12:37 | 000,000,000 | ---D | C] -- C:\Users\Ivan\Desktop\101MSDCF
  352. [2012.04.09 14:59:33 | 000,000,000 | ---D | C] -- C:\Users\Ivan\Desktop\los santos
  353. [2012.04.07 16:51:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
  354. [2012.04.05 13:25:55 | 000,000,000 | R--D | C] -- C:\Users\Ivan\Dropbox
  355. [2012.04.05 13:24:09 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
  356. [2012.04.05 13:21:25 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Roaming\Dropbox
  357. [2012.03.29 23:26:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
  358. [2012.03.29 23:26:57 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacks
  359. [2012.03.29 23:26:57 | 000,000,000 | ---D | C] -- C:\Program Files\BlueStacks
  360. [2012.03.29 23:22:11 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Local\BlueStacksSetup
  361. [2012.03.29 23:22:11 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Local\BlueStacks
  362. [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  363.  
  364. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  365.  
  366. [2012.04.11 23:15:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  367. [2012.04.11 23:10:24 | 000,631,624 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  368. [2012.04.11 23:10:24 | 000,113,004 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  369. [2012.04.11 23:09:03 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Ivan\Desktop\OTL.exe
  370. [2012.04.11 23:03:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  371. [2012.04.11 23:03:35 | 1207,066,624 | -HS- | M] () -- C:\hiberfil.sys
  372. [2012.04.11 22:55:04 | 000,000,954 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2469409868-2115416668-3130279776-1001UA.job
  373. [2012.04.11 22:01:25 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2469409868-2115416668-3130279776-1001UA.job
  374. [2012.04.11 21:40:09 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
  375. [2012.04.10 21:28:19 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2469409868-2115416668-3130279776-1001Core.job
  376. [2012.04.09 19:57:22 | 000,028,544 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  377. [2012.04.09 19:57:22 | 000,028,544 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  378. [2012.04.09 15:59:02 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2469409868-2115416668-3130279776-1001Core.job
  379. [2012.04.05 13:24:36 | 000,001,017 | ---- | M] () -- C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
  380. [2012.03.15 11:38:05 | 000,433,696 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
  381. [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  382.  
  383. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  384.  
  385. [2012.04.05 13:24:36 | 000,001,017 | ---- | C] () -- C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
  386. [2012.03.29 11:24:12 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  387. [2011.12.10 14:17:31 | 000,000,272 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
  388. [2011.11.14 23:23:25 | 000,007,605 | ---- | C] () -- C:\Users\Ivan\AppData\Local\Resmon.ResmonCfg
  389. [2011.10.30 11:09:40 | 000,214,520 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
  390. [2011.10.30 11:09:22 | 000,075,064 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
  391. [2011.09.27 14:55:53 | 000,000,020 | ---- | C] () -- C:\Windows\Ulead32.ini
  392. [2011.09.10 16:47:43 | 000,532,480 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Sony.dll
  393. [2011.08.02 01:18:15 | 000,005,632 | ---- | C] () -- C:\Users\Ivan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  394. [2011.07.24 23:29:59 | 000,000,032 | ---- | C] () -- C:\ProgramData\droidcam-settings
  395. [2011.07.18 20:51:03 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
  396. [2011.07.18 20:49:47 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
  397. [2011.07.18 18:23:09 | 000,020,480 | ---- | C] () -- C:\Windows\FixCamera.exe
  398. [2011.07.18 18:22:57 | 000,025,472 | ---- | C] () -- C:\Windows\System32\drivers\sncamd.sys
  399. [2011.07.18 18:22:57 | 000,015,497 | ---- | C] () -- C:\Windows\snp2std.ini
  400. [2011.07.18 18:22:56 | 012,028,032 | ---- | C] () -- C:\Windows\System32\drivers\snp2sxp.sys
  401. [2011.07.18 18:22:56 | 000,151,552 | ---- | C] ( ) -- C:\Windows\System32\rsnp2std.dll
  402. [2011.07.18 18:22:54 | 000,077,824 | ---- | C] ( ) -- C:\Windows\System32\csnp2std.dll
  403. [2011.07.16 22:22:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  404. [2011.07.16 22:22:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
  405. [2011.06.07 11:13:38 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
  406. [2011.06.07 11:13:38 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
  407. [2011.06.07 11:13:38 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
  408. [2011.06.07 11:13:38 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
  409. [2011.06.07 11:13:38 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
  410.  
  411. [color=#E56717]========== LOP Check ==========[/color]
  412.  
  413. [2011.08.02 20:16:49 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Audacity
  414. [2012.02.04 12:15:54 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Babylon
  415. [2011.11.14 23:06:24 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\BSplayer PRO
  416. [2011.09.18 18:46:12 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\DAEMON Tools Pro
  417. [2011.11.14 22:27:17 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\DisplayTune
  418. [2012.04.11 23:04:31 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Dropbox
  419. [2012.04.11 22:24:35 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\ESET
  420. [2011.09.26 21:51:59 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\GBM Software
  421. [2011.09.20 15:27:31 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\GetRightToGo
  422. [2011.07.29 16:39:40 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\IrfanView
  423. [2011.09.20 15:22:59 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\MAGIX
  424. [2012.04.11 10:34:41 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\MyPhoneExplorer
  425. [2012.01.25 21:48:03 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\OpenCandy
  426. [2011.12.16 15:22:38 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\PhotoScape
  427. [2012.03.10 22:47:19 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Samsung
  428. [2011.10.15 16:15:46 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\SystemRequirementsLab
  429. [2012.02.06 18:26:49 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Systweak
  430. [2011.08.09 21:48:15 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\TeamViewer
  431. [2011.10.28 00:06:37 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Toshiba
  432. [2011.09.27 15:31:25 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Ulead Systems
  433. [2012.04.09 21:06:24 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\uTorrent
  434. [2012.04.09 15:59:02 | 000,000,902 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2469409868-2115416668-3130279776-1001Core.job
  435. [2012.04.11 22:01:25 | 000,000,924 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2469409868-2115416668-3130279776-1001UA.job
  436. [2012.01.03 23:32:10 | 000,032,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  437.  
  438. [color=#E56717]========== Purity Check ==========[/color]
  439.  
  440.  
  441.  
  442. [color=#E56717]========== Custom Scans ==========[/color]
  443.  
  444. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  445. [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
  446. [2010.11.20 14:40:07 | 000,383,786 | RHS- | M] () -- C:\bootmgr
  447. [2011.07.17 08:19:32 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  448. [2009.06.10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
  449. [2011.12.04 17:02:46 | 000,000,043 | ---- | M] () -- C:\END
  450. [2009.08.02 09:59:51 | 000,171,136 | ---- | M] () -- C:\grldr.bak
  451. [2012.04.11 23:03:35 | 1207,066,624 | -HS- | M] () -- C:\hiberfil.sys
  452. [2012.04.11 23:03:37 | 1609,424,896 | -HS- | M] () -- C:\pagefile.sys
  453. [2011.11.14 22:25:23 | 000,000,173 | ---- | M] () -- C:\pdisdk.log
  454. [2012.02.22 14:45:44 | 000,921,624 | ---- | M] () -- C:\snp2sxp-001.raw
  455. [2012.02.04 12:16:21 | 000,000,237 | ---- | M] () -- C:\user.js
  456.  
  457. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  458. [2009.07.14 06:52:25 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
  459. [2009.07.14 06:52:25 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
  460. [2009.07.14 06:52:25 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
  461. [2009.07.14 06:52:25 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
  462.  
  463. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  464.  
  465. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  466. [2009.06.10 23:31:19 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
  467.  
  468. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  469.  
  470. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  471.  
  472. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  473. [2009.07.14 03:15:35 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
  474. [2006.10.26 19:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll
  475. [2010.11.20 14:21:36 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\winprint.dll
  476.  
  477. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  478.  
  479. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  480.  
  481. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  482.  
  483. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  484.  
  485. [color=#A23BEC]< %systemroot%\*.png >[/color]
  486.  
  487. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  488.  
  489. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  490.  
  491. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  492.  
  493. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  494.  
  495. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  496.  
  497. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  498. [2009.07.14 06:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
  499.  
  500. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  501.  
  502. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  503.  
  504. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  505.  
  506. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  507.  
  508. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  509.  
  510. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  511.  
  512. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  513.  
  514. [color=#A23BEC]< %systemroot%\*.config >[/color]
  515.  
  516. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  517.  
  518. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  519. [2011.07.16 22:40:15 | 000,000,221 | -HS- | M] () -- C:\Users\Ivan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  520.  
  521. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  522. [2012.04.11 23:09:03 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Ivan\Desktop\OTL.exe
  523.  
  524. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  525.  
  526. [color=#A23BEC]< %systemroot%\*.src >[/color]
  527. [2004.12.09 17:23:46 | 000,013,022 | ---- | M] () -- C:\Windows\snp2std.src
  528.  
  529. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  530.  
  531. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  532.  
  533. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  534.  
  535. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  536.  
  537. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  538.  
  539. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  540.  
  541. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  542.  
  543. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  544.  
  545. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  546.  
  547. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  548.  
  549. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  550.  
  551. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  552.  
  553. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  554.  
  555. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  556.  
  557. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  558.  
  559. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  560. [2009.06.10 23:20:04 | 000,000,802 | ---- | M] () -- C:\Windows\ADDINS\FXSEXT.ecf
  561.  
  562. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  563.  
  564. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  565.  
  566. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  567.  
  568. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  569. [2011.12.27 17:59:02 | 000,008,192 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.chk
  570. [2011.12.27 17:59:02 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edb.log
  571. [2011.07.29 20:28:23 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00001.jrs
  572. [2011.07.29 20:28:24 | 001,048,576 | ---- | M] () -- C:\Windows\SECURITY\Database\edbres00002.jrs
  573. [2011.12.27 17:59:02 | 001,056,768 | ---- | M] () -- C:\Windows\SECURITY\Database\tmp.edb
  574.  
  575. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  576.  
  577. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  578.  
  579. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  580.  
  581. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  582.  
  583. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  584.  
  585. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  586.  
  587. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  588. [2012.02.17 11:44:35 | 000,000,402 | -HS- | M] () -- C:\Users\Ivan\Favorites\desktop.ini
  589.  
  590. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  591. [2009.07.14 03:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\mofcomp.exe
  592. [2009.07.14 03:14:35 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\scrcons.exe
  593. [2009.07.14 03:14:43 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\unsecapp.exe
  594. [2009.07.14 03:14:44 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\wbemtest.exe
  595. [2009.07.14 03:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WinMgmt.exe
  596. [2009.07.14 03:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIADAP.exe
  597. [2009.07.14 03:14:46 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiApSrv.exe
  598. [2009.07.14 03:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIC.exe
  599. [2010.11.20 14:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiPrvSE.exe
  600.  
  601. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  602.  
  603. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  604. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-04-10 08:47:02
  605.  
  606. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!