API tools faq
paste
Advertisement
causevd

OTL

causevd
Jun 8th, 2013
6,877
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 71.59 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 6/9/2013 6:39:26 AM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\causevd\Desktop
  3. 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16580)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 5.92 Gb Total Physical Memory | 3.74 Gb Available Physical Memory | 63.25% Memory free
  8. 11.92 Gb Paging File | 9.61 Gb Available in Paging File | 80.63% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 97.31 Gb Total Space | 0.65 Gb Free Space | 0.66% Space Free | Partition Type: NTFS
  13. Drive D: | 600.98 Gb Total Space | 135.45 Gb Free Space | 22.54% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: CAFFREY | User Name: causevd | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2013/06/09 04:24:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\causevd\Desktop\OTL.exe
  22. PRC - [2013/05/31 14:08:32 | 003,587,664 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
  23. PRC - [2013/05/29 07:27:40 | 000,825,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. PRC - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  25. PRC - [2013/04/23 09:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
  26. PRC - [2013/03/15 07:53:06 | 001,266,464 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  27. PRC - [2013/03/14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  28. PRC - [2013/03/14 10:23:30 | 003,672,640 | ---- | M] (Disc Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
  29. PRC - [2012/12/12 15:44:48 | 000,268,248 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
  30. PRC - [2011/11/13 23:27:20 | 000,354,416 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
  31. PRC - [2011/11/13 23:27:18 | 000,433,264 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
  32. PRC - [2011/11/13 23:27:06 | 000,103,536 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
  33. PRC - [2011/11/13 22:55:18 | 011,839,488 | ---- | M] () -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
  34. PRC - [2011/11/13 21:49:40 | 000,079,872 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
  35. PRC - [2011/09/23 18:37:42 | 000,641,832 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
  36. PRC - [2011/03/15 17:59:32 | 000,312,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
  37.  
  38.  
  39. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  40.  
  41. MOD - [2013/05/29 07:27:38 | 000,393,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppgooglenaclpluginchrome.dll
  42. MOD - [2013/05/29 07:27:35 | 004,051,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll
  43. MOD - [2013/05/29 07:26:40 | 000,599,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\libglesv2.dll
  44. MOD - [2013/05/29 07:26:39 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\libegl.dll
  45. MOD - [2013/05/29 07:26:36 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ffmpegsumo.dll
  46. MOD - [2013/04/25 13:30:43 | 000,191,280 | ---- | M] () -- C:\Program Files (x86)\Garena Plus\ggspawn.dll
  47. MOD - [2013/03/15 07:53:06 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
  48. MOD - [2013/01/28 13:08:56 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
  49. MOD - [2013/01/28 13:08:28 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
  50. MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
  51. MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
  52.  
  53.  
  54. [color=#E56717]========== Services (SafeList) ==========[/color]
  55.  
  56. SRV:[b]64bit:[/b] - [2013/04/09 06:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  57. SRV:[b]64bit:[/b] - [2013/03/02 04:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  58. SRV:[b]64bit:[/b] - [2013/03/02 04:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  59. SRV:[b]64bit:[/b] - [2013/02/02 10:21:45 | 000,467,456 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  60. SRV:[b]64bit:[/b] - [2013/01/29 03:57:14 | 000,014,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  61. SRV:[b]64bit:[/b] - [2013/01/10 01:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  62. SRV:[b]64bit:[/b] - [2013/01/10 01:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  63. SRV:[b]64bit:[/b] - [2012/09/20 11:10:47 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  64. SRV:[b]64bit:[/b] - [2012/09/20 08:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  65. SRV:[b]64bit:[/b] - [2012/09/20 08:30:41 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  66. SRV:[b]64bit:[/b] - [2012/07/26 05:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  67. SRV:[b]64bit:[/b] - [2012/07/26 05:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  68. SRV:[b]64bit:[/b] - [2012/07/26 05:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  69. SRV:[b]64bit:[/b] - [2012/07/26 05:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  70. SRV:[b]64bit:[/b] - [2012/07/26 05:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  71. SRV:[b]64bit:[/b] - [2012/07/26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  72. SRV:[b]64bit:[/b] - [2012/07/26 05:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  73. SRV:[b]64bit:[/b] - [2012/07/26 05:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  74. SRV:[b]64bit:[/b] - [2012/07/26 05:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  75. SRV:[b]64bit:[/b] - [2012/07/26 05:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  76. SRV:[b]64bit:[/b] - [2012/07/26 05:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  77. SRV:[b]64bit:[/b] - [2012/07/26 05:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  78. SRV:[b]64bit:[/b] - [2012/07/26 05:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
  79. SRV:[b]64bit:[/b] - [2012/07/26 05:05:04 | 000,187,392 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  80. SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  81. SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  82. SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  83. SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  84. SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  85. SRV:[b]64bit:[/b] - [2012/07/26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  86. SRV - [2013/06/03 16:54:06 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  87. SRV - [2013/05/14 20:22:24 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  88. SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  89. SRV - [2013/05/11 01:40:17 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  90. SRV - [2013/05/04 01:35:30 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  91. SRV - [2013/04/23 09:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
  92. SRV - [2013/03/15 07:53:06 | 001,266,464 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  93. SRV - [2013/03/14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  94. SRV - [2012/12/14 02:42:10 | 000,277,616 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  95. SRV - [2012/07/26 05:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
  96. SRV - [2012/07/26 05:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
  97. SRV - [2011/11/13 23:27:20 | 000,354,416 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
  98. SRV - [2011/11/13 23:27:18 | 000,433,264 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
  99. SRV - [2011/11/13 22:55:18 | 011,839,488 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe -- (VMwareHostd)
  100. SRV - [2011/11/13 21:49:40 | 000,079,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
  101. SRV - [2011/09/23 18:37:42 | 000,641,832 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
  102. SRV - [2011/08/29 22:11:04 | 000,846,448 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe -- (VMUSBArbService)
  103. SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  104.  
  105.  
  106. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  107.  
  108. DRV:[b]64bit:[/b] - [2013/05/25 17:00:14 | 000,168,288 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\idmwfp.sys -- (IDMWFP)
  109. DRV:[b]64bit:[/b] - [2013/04/21 04:18:01 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\dtsoftbus01.sys -- (dtsoftbus01)
  110. DRV:[b]64bit:[/b] - [2013/04/09 07:27:43 | 000,284,424 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
  111. DRV:[b]64bit:[/b] - [2013/03/15 07:53:06 | 000,284,448 | ---- | M] (NVIDIA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\nvkflt.sys -- (nvkflt)
  112. DRV:[b]64bit:[/b] - [2013/03/15 07:53:06 | 000,030,496 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\nvpciflt.sys -- (nvpciflt)
  113. DRV:[b]64bit:[/b] - [2013/03/02 12:57:48 | 000,337,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
  114. DRV:[b]64bit:[/b] - [2013/03/02 12:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
  115. DRV:[b]64bit:[/b] - [2013/03/02 12:45:20 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
  116. DRV:[b]64bit:[/b] - [2013/03/02 12:45:19 | 000,194,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
  117. DRV:[b]64bit:[/b] - [2013/03/02 12:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
  118. DRV:[b]64bit:[/b] - [2013/02/02 13:19:44 | 000,446,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
  119. DRV:[b]64bit:[/b] - [2013/02/02 09:25:23 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  120. DRV:[b]64bit:[/b] - [2013/01/29 03:57:05 | 000,035,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
  121. DRV:[b]64bit:[/b] - [2013/01/29 01:08:22 | 000,230,904 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
  122. DRV:[b]64bit:[/b] - [2013/01/27 15:35:46 | 000,127,384 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
  123. DRV:[b]64bit:[/b] - [2013/01/10 03:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
  124. DRV:[b]64bit:[/b] - [2012/12/14 02:42:22 | 005,353,888 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)
  125. DRV:[b]64bit:[/b] - [2012/11/27 05:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
  126. DRV:[b]64bit:[/b] - [2012/11/20 06:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
  127. DRV:[b]64bit:[/b] - [2012/11/06 05:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
  128. DRV:[b]64bit:[/b] - [2012/10/12 10:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  129. DRV:[b]64bit:[/b] - [2012/10/11 09:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
  130. DRV:[b]64bit:[/b] - [2012/10/11 09:13:49 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
  131. DRV:[b]64bit:[/b] - [2012/09/20 09:55:33 | 000,212,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
  132. DRV:[b]64bit:[/b] - [2012/09/20 09:55:30 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
  133. DRV:[b]64bit:[/b] - [2012/09/20 09:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
  134. DRV:[b]64bit:[/b] - [2012/09/20 09:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
  135. DRV:[b]64bit:[/b] - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  136. DRV:[b]64bit:[/b] - [2012/07/26 07:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  137. DRV:[b]64bit:[/b] - [2012/07/26 07:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
  138. DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
  139. DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
  140. DRV:[b]64bit:[/b] - [2012/07/26 07:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
  141. DRV:[b]64bit:[/b] - [2012/07/26 07:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
  142. DRV:[b]64bit:[/b] - [2012/07/26 07:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
  143. DRV:[b]64bit:[/b] - [2012/07/26 07:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
  144. DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
  145. DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
  146. DRV:[b]64bit:[/b] - [2012/07/26 07:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
  147. DRV:[b]64bit:[/b] - [2012/07/26 07:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  148. DRV:[b]64bit:[/b] - [2012/07/26 07:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
  149. DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
  150. DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
  151. DRV:[b]64bit:[/b] - [2012/07/26 07:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
  152. DRV:[b]64bit:[/b] - [2012/07/26 07:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
  153. DRV:[b]64bit:[/b] - [2012/07/26 06:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
  154. DRV:[b]64bit:[/b] - [2012/07/26 06:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
  155. DRV:[b]64bit:[/b] - [2012/07/26 06:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
  156. DRV:[b]64bit:[/b] - [2012/07/26 05:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
  157. DRV:[b]64bit:[/b] - [2012/07/26 04:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
  158. DRV:[b]64bit:[/b] - [2012/07/26 04:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
  159. DRV:[b]64bit:[/b] - [2012/07/26 04:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
  160. DRV:[b]64bit:[/b] - [2012/07/26 04:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
  161. DRV:[b]64bit:[/b] - [2012/07/26 04:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
  162. DRV:[b]64bit:[/b] - [2012/07/26 04:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
  163. DRV:[b]64bit:[/b] - [2012/07/26 04:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
  164. DRV:[b]64bit:[/b] - [2012/07/26 04:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
  165. DRV:[b]64bit:[/b] - [2012/07/26 04:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
  166. DRV:[b]64bit:[/b] - [2012/07/26 04:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
  167. DRV:[b]64bit:[/b] - [2012/07/26 04:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
  168. DRV:[b]64bit:[/b] - [2012/07/26 04:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
  169. DRV:[b]64bit:[/b] - [2012/07/26 04:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
  170. DRV:[b]64bit:[/b] - [2012/07/26 04:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
  171. DRV:[b]64bit:[/b] - [2012/07/26 04:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
  172. DRV:[b]64bit:[/b] - [2012/07/26 04:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
  173. DRV:[b]64bit:[/b] - [2012/07/26 04:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
  174. DRV:[b]64bit:[/b] - [2012/07/26 04:25:26 | 000,203,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Vid.sys -- (Vid)
  175. DRV:[b]64bit:[/b] - [2012/07/26 04:25:22 | 000,067,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\storvsp.sys -- (storvsp)
  176. DRV:[b]64bit:[/b] - [2012/07/26 04:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
  177. DRV:[b]64bit:[/b] - [2012/07/26 04:25:12 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmbusr.sys -- (vmbusr)
  178. DRV:[b]64bit:[/b] - [2012/07/26 04:25:12 | 000,066,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpcivsp.sys -- (vpcivsp)
  179. DRV:[b]64bit:[/b] - [2012/07/26 04:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
  180. DRV:[b]64bit:[/b] - [2012/07/26 04:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
  181. DRV:[b]64bit:[/b] - [2012/07/26 04:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
  182. DRV:[b]64bit:[/b] - [2012/06/02 16:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
  183. DRV:[b]64bit:[/b] - [2012/06/02 16:31:50 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\NETwNs64.sys -- (NETwNs64)
  184. DRV:[b]64bit:[/b] - [2011/12/15 19:29:42 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tap0901.sys -- (tap0901)
  185. DRV:[b]64bit:[/b] - [2011/12/09 19:45:00 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\iBtFltCoex.sys -- (iBtFltCoex)
  186. DRV:[b]64bit:[/b] - [2011/11/15 01:13:00 | 000,327,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btmhsf.sys -- (btmhsf)
  187. DRV:[b]64bit:[/b] - [2011/11/13 23:28:16 | 000,063,088 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmx86.sys -- (vmx86)
  188. DRV:[b]64bit:[/b] - [2011/11/13 23:26:30 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmnetuserif.sys -- (VMnetuserif)
  189. DRV:[b]64bit:[/b] - [2011/11/13 21:33:56 | 000,045,680 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmnetbridge.sys -- (VMnetBridge)
  190. DRV:[b]64bit:[/b] - [2011/11/13 21:33:56 | 000,020,080 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\vmnetadapter.sys -- (VMnetAdapter)
  191. DRV:[b]64bit:[/b] - [2011/08/29 22:11:04 | 000,039,024 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\hcmon.sys -- (hcmon)
  192. DRV:[b]64bit:[/b] - [2011/08/08 14:59:12 | 000,116,336 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\vmci.sys -- (vmci)
  193. DRV:[b]64bit:[/b] - [2010/10/20 08:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
  194. DRV:[b]64bit:[/b] - [2010/07/02 10:46:58 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\qicflt.sys -- (qicflt)
  195. DRV:[b]64bit:[/b] - [2010/04/29 06:55:42 | 000,032,768 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\androidusb.sys -- (androidusb)
  196.  
  197. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  198.  
  199.  
  200. [color=#E56717]========== Internet Explorer ==========[/color]
  201.  
  202. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  203. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  204. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  205. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010006.10037&barid={B48175EA-A5D8-11E2-BE6C-B280EABFA3BB}
  206. IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
  207. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  208. IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10037&barid={B48175EA-A5D8-11E2-BE6C-B280EABFA3BB}
  209.  
  210. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=44444&tt=gc_&babsrc=HP_ss&mntrId=52CDBC77376A23E6
  211. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/
  212. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US,en;q=0.7,mk;q=0.3
  213. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 52 4D 9E A9 2F 36 CE 01 [binary data]
  214. IE - HKCU\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
  215. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  216. IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=44444&tt=gc_&babsrc=SP_ss&mntrId=52CDBC77376A23E6
  217. IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010006.10037&barid={B48175EA-A5D8-11E2-BE6C-B280EABFA3BB}
  218. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  219. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  220.  
  221. [color=#E56717]========== FireFox ==========[/color]
  222.  
  223. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
  224. FF - prefs.js..network.proxy.socks: "127.0.0.1"
  225. FF - prefs.js..network.proxy.socks_port: 8080
  226. FF - prefs.js..network.proxy.type: 0
  227. FF - prefs.js..browser.startup.homepage:
  228.  
  229.  
  230. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
  231. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
  232. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  233. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  234. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  235. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
  236. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  237. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  238. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  239. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  240. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  241. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  242. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  243. FF - HKLM\Software\MozillaPlugins\@t.garena.com/garenatalk: C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
  244. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  245. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  246. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  247.  
  248. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [2013/04/14 14:20:41 | 000,000,000 | ---D | M]
  249. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/05/11 01:40:17 | 000,000,000 | ---D | M]
  250. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  251. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\causevd\AppData\Roaming\IDM\idmmzcc5 [2013/06/07 15:04:16 | 000,000,000 | ---D | M]
  252. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\causevd\AppData\Roaming\IDM\idmmzcc5 [2013/06/07 15:04:16 | 000,000,000 | ---D | M]
  253.  
  254. [2013/04/11 16:50:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\causevd\AppData\Roaming\mozilla\Extensions
  255. [2013/06/07 15:14:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\causevd\AppData\Roaming\mozilla\Firefox\Profiles\8cukuuj3.default\Extensions
  256. [2013/05/30 23:33:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\causevd\AppData\Roaming\mozilla\Firefox\Profiles\8cukuuj3.default\Extensions\ffxtlbr@babylon.com
  257. [2013/06/07 15:14:30 | 000,446,277 | ---- | M] () (No name found) -- C:\Users\causevd\AppData\Roaming\mozilla\firefox\profiles\8cukuuj3.default\Extensions\toolbar_MYC3@apn.ask.com.xpi
  258. [2013/05/30 23:33:47 | 000,006,502 | ---- | M] () -- C:\Users\causevd\AppData\Roaming\mozilla\firefox\profiles\8cukuuj3.default\searchplugins\babylon.xml
  259. [2013/05/30 23:33:54 | 000,001,294 | ---- | M] () -- C:\Users\causevd\AppData\Roaming\mozilla\firefox\profiles\8cukuuj3.default\searchplugins\delta.xml
  260. [2013/04/15 16:28:20 | 000,004,108 | ---- | M] () -- C:\Users\causevd\AppData\Roaming\mozilla\firefox\profiles\8cukuuj3.default\searchplugins\SweetIM Search.xml
  261. [2013/04/11 16:49:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  262. [2013/05/11 01:40:17 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  263. [2013/03/27 04:17:52 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  264. [2013/03/27 04:17:52 | 000,002,086 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  265.  
  266. [color=#E56717]========== Chrome ==========[/color]
  267.  
  268. CHR - default_search_provider: Google (Enabled)
  269. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
  270. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
  271. CHR - homepage: http://www.delta-search.com/?affID=44444&tt=gc_&babsrc=HP_ss&mntrId=52CDBC77376A23E6
  272. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll
  273. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  274. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll
  275. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll
  276. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
  277. CHR - Extension: Google Docs = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  278. CHR - Extension: Google Drive = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  279. CHR - Extension: YouTube = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  280. CHR - Extension: Google Search = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  281. CHR - Extension: IDM Integration = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.14_0\
  282. CHR - Extension: Tisto = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh\2_0\
  283. CHR - Extension: DVDVideoSoft Browser Extension = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0\
  284. CHR - Extension: Gmail = C:\Users\causevd\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  285.  
  286. O1 HOSTS File: ([2012/07/26 07:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
  287. O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  288. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  289. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  290. O2:[b]64bit:[/b] - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
  291. O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  292. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  293. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  294. O2 - BHO: (DVDVideoSoft WebPageAdjuster Class) - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
  295. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
  296. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  297. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  298. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  299. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  300. O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
  301. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  302. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  303. O4 - HKLM..\Run: [vmware-tray] C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe (VMware, Inc.)
  304. O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  305. O4 - HKCU..\Run: [GarenaPlus] C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe ()
  306. O4 - HKCU..\Run: [GoogleChromeAutoLaunch_D98DCBF1B31EA991FAF11829D325CBCF] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
  307. O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  309. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  310. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  311. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  312. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  313. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  314. O8:[b]64bit:[/b] - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  315. O8:[b]64bit:[/b] - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  316. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
  317. O8:[b]64bit:[/b] - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
  318. O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  319. O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  320. O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm ()
  321. O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm ()
  322. O9:[b]64bit:[/b] - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
  323. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
  324. O9 - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
  325. O9 - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
  326. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  327. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
  328. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
  329. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  330. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
  331. O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
  332. O13[b]64bit:[/b] - gopher Prefix: missing
  333. O13 - gopher Prefix: missing
  334. O15 - HKCU\..Trusted Domains: dell.com ([]* in Trusted sites)
  335. O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.21.2)
  336. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab (Java Plug-in 1.6.0_34)
  337. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab (Java Plug-in 1.7.0_21)
  338. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  339. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{29C9396D-F655-409C-9CCA-73C07FF371D4}: DhcpNameServer = 192.168.1.1
  340. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6CC91A22-859E-44EB-8FC2-0B2CE541349F}: NameServer = 192.168.0.1
  341. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  342. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  343. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  344. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  345. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  346. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  347. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  348. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  349. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  350. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  351. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  352. O30 - LSA: Security Packages - (livessp) - File not found
  353. O32 - HKLM CDRom: AutoRun - 1
  354. O34 - HKLM BootExecute: (autocheck autochk *)
  355. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  356. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  357. O35 - HKLM\..comfile [open] -- "%1" %*
  358. O35 - HKLM\..exefile [open] -- "%1" %*
  359. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  360. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  361. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  362. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  363. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  364. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  365.  
  366. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  367.  
  368. [2013/06/09 04:37:26 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\Malwarebytes
  369. [2013/06/09 04:37:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  370. [2013/06/09 04:36:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
  371. [2013/06/09 04:24:17 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\causevd\Desktop\OTL.exe
  372. [2013/06/09 04:24:06 | 010,285,040 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\causevd\Desktop\mbam-setup-1.75.0.1300.exe
  373. [2013/06/09 04:23:18 | 002,347,384 | ---- | C] (ESET) -- C:\Users\causevd\Desktop\esetsmartinstaller_enu.exe
  374. [2013/06/09 04:22:58 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Users\causevd\Desktop\aswMBR.exe
  375. [2013/06/08 21:20:53 | 000,000,000 | ---D | C] -- C:\Users\causevd\Documents\Criterion Games
  376. [2013/06/08 21:19:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
  377. [2013/06/08 21:11:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EA Games
  378. [2013/06/08 19:08:50 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ExpressVPN
  379. [2013/06/08 19:08:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ExpressVPN
  380. [2013/06/08 02:16:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
  381. [2013/06/08 02:16:56 | 000,000,000 | ---D | C] -- C:\Program Files\Speccy
  382. [2013/06/07 18:48:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
  383. [2013/06/07 18:48:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
  384. [2013/06/07 15:04:06 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\IDM
  385. [2013/06/07 15:04:06 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
  386. [2013/06/07 15:04:05 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\DMCache
  387. [2013/06/07 15:03:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager
  388. [2013/06/05 23:06:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  389. [2013/06/05 23:06:13 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
  390. [2013/06/05 23:06:12 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
  391. [2013/06/05 23:06:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
  392. [2013/06/05 23:06:12 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
  393. [2013/06/03 18:25:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
  394. [2013/06/02 17:12:34 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\NVIDIA
  395. [2013/06/02 14:49:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Valve
  396. [2013/06/01 06:10:29 | 000,168,288 | ---- | C] (Tonec Inc.) -- C:\Windows\SysNative\drivers\idmwfp.sys
  397. [2013/06/01 01:26:00 | 000,000,000 | ---D | C] -- C:\Users\causevd\Desktop\HTML-5-Canvas-Pong-master
  398. [2013/05/30 15:24:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
  399. [2013/05/26 16:50:59 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\Geckofx
  400. [2013/05/23 00:56:28 | 000,000,000 | R--D | C] -- C:\Users\causevd\AppData\Roaming\Brother
  401. [2013/05/23 00:05:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Brother
  402. [2013/05/18 01:07:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QCM20QDriver
  403. [2013/05/18 00:33:56 | 013,648,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll
  404. [2013/05/18 00:33:55 | 014,267,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
  405. [2013/05/18 00:33:55 | 003,552,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
  406. [2013/05/18 00:33:53 | 011,878,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
  407. [2013/05/18 00:33:53 | 010,789,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll
  408. [2013/05/18 00:33:53 | 002,107,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
  409. [2013/05/18 00:33:52 | 002,767,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
  410. [2013/05/18 00:33:51 | 001,829,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
  411. [2013/05/18 00:33:51 | 001,593,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
  412. [2013/05/18 00:33:50 | 001,444,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAudDecMFT.dll
  413. [2013/05/18 00:33:48 | 010,116,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll
  414. [2013/05/18 00:33:47 | 001,113,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAudDecMFT.dll
  415. [2013/05/18 00:33:47 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
  416. [2013/05/18 00:33:47 | 000,306,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd_02_10ec.dll
  417. [2013/05/18 00:33:46 | 000,489,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll
  418. [2013/05/18 00:33:46 | 000,446,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
  419. [2013/05/18 00:33:46 | 000,373,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
  420. [2013/05/18 00:33:46 | 000,298,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rsaenh.dll
  421. [2013/05/18 00:33:45 | 008,857,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll
  422. [2013/05/18 00:33:45 | 002,303,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
  423. [2013/05/18 00:33:45 | 000,804,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RecoveryDrive.exe
  424. [2013/05/18 00:33:45 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.dll
  425. [2013/05/18 00:33:45 | 000,456,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpncore.dll
  426. [2013/05/18 00:33:45 | 000,435,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
  427. [2013/05/18 00:33:45 | 000,367,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
  428. [2013/05/18 00:33:45 | 000,253,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
  429. [2013/05/18 00:33:45 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
  430. [2013/05/18 00:33:44 | 002,035,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
  431. [2013/05/18 00:33:44 | 001,403,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
  432. [2013/05/18 00:33:44 | 001,267,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
  433. [2013/05/18 00:33:44 | 001,217,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
  434. [2013/05/18 00:33:44 | 001,093,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
  435. [2013/05/18 00:33:44 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
  436. [2013/05/18 00:33:44 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.BackgroundTransfer.dll
  437. [2013/05/18 00:33:43 | 000,659,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
  438. [2013/05/18 00:33:43 | 000,503,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
  439. [2013/05/18 00:33:43 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFMediaEngine.dll
  440. [2013/05/18 00:33:43 | 000,411,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.dll
  441. [2013/05/18 00:33:43 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
  442. [2013/05/18 00:33:43 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.BackgroundTransfer.dll
  443. [2013/05/18 00:33:43 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhengine.dll
  444. [2013/05/18 00:33:43 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmvdsitf.dll
  445. [2013/05/18 00:33:43 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEndpointBuilder.dll
  446. [2013/05/18 00:33:43 | 000,123,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
  447. [2013/05/18 00:33:42 | 000,745,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
  448. [2013/05/18 00:33:42 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
  449. [2013/05/18 00:33:42 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GenuineCenter.dll
  450. [2013/05/18 00:33:42 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
  451. [2013/05/18 00:33:42 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
  452. [2013/05/18 00:33:42 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFMediaEngine.dll
  453. [2013/05/18 00:33:42 | 000,284,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys
  454. [2013/05/18 00:33:42 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
  455. [2013/05/18 00:33:42 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iuilp.dll
  456. [2013/05/18 00:33:42 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
  457. [2013/05/18 00:33:42 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmvdsitf.dll
  458. [2013/05/18 00:33:42 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Robocopy.exe
  459. [2013/05/18 00:33:42 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Robocopy.exe
  460. [2013/05/18 00:33:42 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll
  461. [2013/05/18 00:33:42 | 000,086,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdnet.dll
  462. [2013/05/18 00:33:42 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
  463. [2013/05/18 00:33:42 | 000,077,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdvm.dll
  464. [2013/05/18 00:33:42 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fmifs.dll
  465. [2013/05/18 00:33:42 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fmifs.dll
  466. [2013/05/18 00:33:42 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll
  467. [2013/05/18 00:33:41 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll
  468. [2013/05/18 00:33:41 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll
  469. [2013/05/17 23:19:30 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\com.cam4dancer.app
  470. [2013/05/15 21:02:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  471. [2013/05/15 20:53:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
  472. [2013/05/15 20:53:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
  473. [2013/05/15 20:53:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
  474. [2013/05/15 20:45:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
  475. [2013/05/15 11:12:31 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  476. [2013/05/15 11:12:25 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
  477. [2013/05/15 11:12:25 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  478. [2013/05/15 11:12:25 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  479. [2013/05/15 11:12:25 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  480. [2013/05/15 11:12:25 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll
  481. [2013/05/15 11:12:25 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  482. [2013/05/15 11:12:25 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll
  483. [2013/05/15 11:12:11 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
  484. [2013/05/15 11:12:11 | 000,112,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
  485. [2013/05/15 11:12:03 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
  486. [2013/05/15 11:12:03 | 002,382,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
  487. [2013/05/15 11:12:00 | 006,987,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  488. [2013/05/12 16:45:37 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\Apple Computer
  489. [2013/05/12 16:45:36 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Roaming\Apple Computer
  490. [2013/05/12 16:44:55 | 000,033,240 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys
  491. [2013/05/12 16:44:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
  492. [2013/05/12 16:44:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
  493. [2013/05/12 16:43:28 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\Apple
  494. [2013/05/12 16:43:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
  495. [2013/05/12 16:43:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
  496. [2013/05/12 16:43:17 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
  497. [2013/05/12 16:43:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
  498. [2013/05/12 16:43:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
  499. [2013/05/12 16:43:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
  500. [2013/05/12 01:49:51 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\A
  501. [2013/05/12 01:48:28 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\Enhanceviews_Autowatcher
  502. [2013/05/11 10:34:58 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\DeadLine
  503. [2013/05/11 10:33:44 | 000,000,000 | ---D | C] -- C:\Users\causevd\AppData\Local\Programs
  504.  
  505. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  506.  
  507. [2013/06/09 06:22:07 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  508. [2013/06/09 06:03:07 | 000,852,442 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  509. [2013/06/09 06:03:07 | 000,712,928 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  510. [2013/06/09 06:03:07 | 000,133,824 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  511. [2013/06/09 06:01:02 | 000,000,916 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  512. [2013/06/09 04:26:20 | 002,137,247 | ---- | M] () -- C:\Users\causevd\Desktop\EnvyLoader.rar
  513. [2013/06/09 04:24:26 | 010,285,040 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\causevd\Desktop\mbam-setup-1.75.0.1300.exe
  514. [2013/06/09 04:24:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\causevd\Desktop\OTL.exe
  515. [2013/06/09 04:23:21 | 002,347,384 | ---- | M] (ESET) -- C:\Users\causevd\Desktop\esetsmartinstaller_enu.exe
  516. [2013/06/09 04:23:12 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Users\causevd\Desktop\aswMBR.exe
  517. [2013/06/09 04:22:30 | 000,890,839 | ---- | M] () -- C:\Users\causevd\Desktop\SecurityCheck.exe
  518. [2013/06/09 03:53:53 | 000,005,632 | ---- | M] () -- C:\Users\causevd\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  519. [2013/06/09 03:29:10 | 000,022,978 | ---- | M] () -- C:\Users\causevd\Desktop\National.Security.2003.720p.BluRay.x264-CtrlHD.torrent
  520. [2013/06/09 03:05:30 | 001,136,136 | ---- | M] () -- C:\Users\causevd\Desktop\program.rar
  521. [2013/06/09 01:28:05 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  522. [2013/06/09 01:27:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  523. [2013/06/08 23:33:12 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  524. [2013/06/08 23:33:09 | 786,989,055 | -HS- | M] () -- C:\hiberfil.sys
  525. [2013/06/08 21:49:50 | 013,276,800 | ---- | M] () -- C:\Users\causevd\Desktop\Bonnie Tyler - Total Eclipse of the Heart.mp3
  526. [2013/06/08 21:19:55 | 000,002,175 | ---- | M] () -- C:\Users\Public\Desktop\Need for Speed Most Wanted.lnk
  527. [2013/06/08 19:28:57 | 005,000,536 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  528. [2013/06/08 19:08:58 | 000,001,125 | ---- | M] () -- C:\Users\causevd\Desktop\ExpressVPN.lnk
  529. [2013/06/08 02:16:56 | 000,000,796 | ---- | M] () -- C:\Users\Public\Desktop\Speccy.lnk
  530. [2013/06/07 18:48:34 | 000,001,131 | ---- | M] () -- C:\Users\causevd\Desktop\EVEREST Corporate Edition.lnk
  531. [2013/06/06 21:02:29 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  532. [2013/06/05 23:06:50 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
  533. [2013/06/05 00:25:05 | 000,000,132 | ---- | M] () -- C:\Users\causevd\AppData\Roaming\Adobe PNG Format CS5 Prefs
  534. [2013/06/03 18:25:06 | 000,001,166 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
  535. [2013/05/30 15:24:14 | 000,001,150 | ---- | M] () -- C:\Users\causevd\Application Data\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk
  536. [2013/05/30 15:24:14 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\BS.Player FREE.lnk
  537. [2013/05/25 17:00:14 | 000,168,288 | ---- | M] (Tonec Inc.) -- C:\Windows\SysNative\drivers\idmwfp.sys
  538. [2013/05/21 19:33:07 | 000,045,270 | ---- | M] () -- C:\Users\causevd\AppData\Roaming\room_v3.dat
  539. [2013/05/19 21:12:21 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
  540. [2013/05/19 16:15:06 | 000,001,125 | ---- | M] () -- C:\Users\causevd\Desktop\Adobe Photoshop CS5.1 (64 Bit).lnk
  541. [2013/05/17 22:35:24 | 000,000,600 | ---- | M] () -- C:\Users\causevd\AppData\Local\PUTTY.RND
  542.  
  543. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  544.  
  545. [2013/06/09 04:26:20 | 002,137,247 | ---- | C] () -- C:\Users\causevd\Desktop\EnvyLoader.rar
  546. [2013/06/09 04:22:31 | 000,890,839 | ---- | C] () -- C:\Users\causevd\Desktop\SecurityCheck.exe
  547. [2013/06/09 03:29:09 | 000,022,978 | ---- | C] () -- C:\Users\causevd\Desktop\National.Security.2003.720p.BluRay.x264-CtrlHD.torrent
  548. [2013/06/09 03:05:30 | 001,136,136 | ---- | C] () -- C:\Users\causevd\Desktop\program.rar
  549. [2013/06/08 21:48:52 | 013,276,800 | ---- | C] () -- C:\Users\causevd\Desktop\Bonnie Tyler - Total Eclipse of the Heart.mp3
  550. [2013/06/08 21:19:55 | 000,002,175 | ---- | C] () -- C:\Users\Public\Desktop\Need for Speed Most Wanted.lnk
  551. [2013/06/08 19:08:58 | 000,001,125 | ---- | C] () -- C:\Users\causevd\Desktop\ExpressVPN.lnk
  552. [2013/06/07 18:48:34 | 000,001,131 | ---- | C] () -- C:\Users\causevd\Desktop\EVEREST Corporate Edition.lnk
  553. [2013/06/05 23:06:50 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
  554. [2013/06/03 18:25:06 | 000,001,178 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk
  555. [2013/06/03 18:25:06 | 000,001,166 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
  556. [2013/05/30 15:24:14 | 000,001,150 | ---- | C] () -- C:\Users\causevd\Application Data\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk
  557. [2013/05/30 15:24:14 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\BS.Player FREE.lnk
  558. [2013/05/19 21:12:21 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
  559. [2013/05/19 16:45:41 | 000,000,132 | ---- | C] () -- C:\Users\causevd\AppData\Roaming\Adobe PNG Format CS5 Prefs
  560. [2013/05/18 01:32:56 | 005,000,536 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
  561. [2013/05/18 00:33:41 | 000,387,688 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
  562. [2013/05/15 00:36:05 | 000,001,125 | ---- | C] () -- C:\Users\causevd\Desktop\Adobe Photoshop CS5.1 (64 Bit).lnk
  563. [2013/05/12 16:43:27 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
  564. [2013/04/20 23:56:08 | 000,000,034 | ---- | C] () -- C:\Users\causevd\AppData\Roaming\dimmy
  565. [2013/04/20 23:44:51 | 000,000,600 | ---- | C] () -- C:\Users\causevd\AppData\Local\PUTTY.RND
  566. [2013/04/12 01:03:31 | 000,005,632 | ---- | C] () -- C:\Users\causevd\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  567. [2013/04/11 00:38:56 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
  568. [2013/04/11 00:31:57 | 000,000,135 | ---- | C] () -- C:\Windows\AutoKMS.ini
  569. [2013/04/11 00:00:18 | 000,045,270 | ---- | C] () -- C:\Users\causevd\AppData\Roaming\room_v3.dat
  570. [2013/04/10 23:03:10 | 000,821,592 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  571. [2013/04/10 22:48:40 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  572. [2013/04/10 22:48:38 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  573. [2013/04/10 22:48:38 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  574. [2013/04/10 22:48:37 | 000,074,752 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  575. [2012/12/14 02:42:30 | 000,963,452 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin
  576. [2012/12/14 02:42:30 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  577. [2012/12/14 02:42:28 | 000,272,928 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin
  578. [2012/07/26 10:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  579. [2012/07/26 10:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  580. [2012/07/26 09:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  581. [2012/07/26 03:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  582. [2012/07/25 22:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
  583. [2012/07/25 22:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  584. [2012/06/02 16:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
  585.  
  586. [color=#E56717]========== ZeroAccess Check ==========[/color]
  587.  
  588. [2013/04/12 14:11:40 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  589.  
  590. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  591.  
  592. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  593.  
  594. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  595.  
  596. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  597.  
  598. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  599. "" = C:\Windows\SysNative\shell32.dll -- [2013/03/06 08:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation)
  600. "ThreadingModel" = Apartment
  601.  
  602. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  603. "" = %SystemRoot%\system32\shell32.dll -- [2013/03/06 07:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation)
  604. "ThreadingModel" = Apartment
  605.  
  606. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  607. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
  608. "ThreadingModel" = Free
  609.  
  610. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  611. "" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
  612. "ThreadingModel" = Free
  613.  
  614. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  615. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
  616. "ThreadingModel" = Both
  617.  
  618. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  619.  
  620. [color=#E56717]========== LOP Check ==========[/color]
  621.  
  622. [2013/04/15 16:17:40 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\Babylon
  623. [2013/05/30 15:28:40 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\BSplayer
  624. [2013/04/10 22:41:59 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\BSplayer Pro
  625. [2013/05/17 23:19:30 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\com.cam4dancer.app
  626. [2013/04/21 04:19:40 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\DAEMON Tools Lite
  627. [2013/06/09 01:25:56 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\DMCache
  628. [2013/04/14 14:22:37 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\DVDVideoSoft
  629. [2013/04/14 14:21:38 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\DVDVideoSoftIEHelpers
  630. [2013/06/05 22:54:28 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\GarenaPlus
  631. [2013/06/07 17:18:23 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\IDM
  632. [2013/05/03 22:11:48 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\ManyCam
  633. [2013/04/16 17:40:39 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\NetBeans
  634. [2013/05/30 23:56:35 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\PerformerSoft
  635. [2013/04/27 17:32:43 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\PowerISO
  636. [2013/06/03 18:29:19 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\TeamViewer
  637. [2013/06/09 04:10:35 | 000,000,000 | ---D | M] -- C:\Users\causevd\AppData\Roaming\uTorrent
  638.  
  639. [color=#E56717]========== Purity Check ==========[/color]
  640.  
  641.  
  642.  
  643. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!