API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 12th, 2010
114
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.40 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 12.2.2010 18:01:58 - Run 1
  2. OTL by OldTimer - Version 3.1.28.0 Folder = C:\Documents and Settings\doom\Desktop
  3. Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.6001.18702)
  5. Locale: 0000041A | Country: Croatia | Language: HRV | Date Format: d.M.yyyy
  6.  
  7. 3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 86,00% Memory free
  8. 5,00 Gb Paging File | 5,00 Gb Available in Paging File | 94,00% Paging File free
  9. Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
  12. Drive C: | 16,51 Gb Total Space | 9,08 Gb Free Space | 55,03% Space Free | Partition Type: NTFS
  13. Drive D: | 16,52 Gb Total Space | 14,15 Gb Free Space | 85,66% Space Free | Partition Type: NTFS
  14. Drive E: | 29,75 Gb Total Space | 21,48 Gb Free Space | 72,23% Space Free | Partition Type: NTFS
  15. Drive F: | 47,10 Gb Total Space | 13,68 Gb Free Space | 29,04% Space Free | Partition Type: NTFS
  16. Drive G: | 39,18 Gb Total Space | 29,33 Gb Free Space | 74,88% Space Free | Partition Type: NTFS
  17. Drive H: | 4,33 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
  18. I: Drive not present or media not loaded
  19.  
  20. Computer Name: SALONA
  21. Current User Name: doom
  22. Logged in as Administrator.
  23.  
  24. Current Boot Mode: Normal
  25. Scan Mode: Current user
  26. Company Name Whitelist: On
  27. Skip Microsoft Files: On
  28. File Age = 14 Days
  29. Output = Standard
  30. Quick Scan
  31.  
  32. [color=#E56717]========== Processes (SafeList) ==========[/color]
  33.  
  34. PRC - [2010.02.12 18:00:15 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\doom\Desktop\OTL.exe
  35. PRC - [2009.07.21 13:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avguard.exe
  36. PRC - [2009.05.13 15:48:22 | 000,108,289 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\sched.exe
  37. PRC - [2009.03.08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
  38. PRC - [2009.03.02 12:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avgnt.exe
  39. PRC - [2008.04.14 04:42:42 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wscntfy.exe
  40. PRC - [2008.04.14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
  41. PRC - [2007.10.10 19:51:56 | 000,039,792 | ---- | M] (Adobe Systems Incorporated) -- D:\Program Files\Reader 8.0\Reader\reader_sl.exe
  42. PRC - [2006.10.27 00:47:42 | 000,031,016 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  43. PRC - [2006.02.28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
  44.  
  45.  
  46. [color=#E56717]========== Modules (SafeList) ==========[/color]
  47.  
  48. MOD - [2010.02.12 18:00:15 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\doom\Desktop\OTL.exe
  49.  
  50.  
  51. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  52.  
  53. SRV - [2010.01.23 08:52:44 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  54. SRV - [2009.07.21 13:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
  55. SRV - [2009.05.13 15:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
  56. SRV - [2007.12.14 11:46:28 | 000,047,624 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\GIGABYTE\GEST\GSvr.exe -- (GEST Service)
  57. SRV - [2007.03.20 16:41:24 | 000,153,792 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe -- (Adobe Version Cue CS3)
  58. SRV - [2006.10.27 00:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
  59. SRV - [2006.10.26 19:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
  60. SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
  61. SRV - [2006.02.28 12:42:38 | 000,229,376 | ---- | M] (Apple Computer, Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
  62. SRV - [2005.08.10 23:17:28 | 000,118,272 | ---- | M] (TuneUp Software GmbH) [On_Demand | Stopped] -- D:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe -- (TUWinStylerThemeSvc)
  63.  
  64.  
  65. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  66.  
  67.  
  68. [color=#E56717]========== Internet Explorer ==========[/color]
  69.  
  70.  
  71. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  72. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  73.  
  74.  
  75.  
  76. O1 HOSTS File: ([2010.01.18 09:23:58 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
  77. O1 - Hosts: 127.0.0.1 localhost
  78. O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
  79. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  80. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Program Files\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  81. O4 - HKLM..\Run: [Adobe_ID0EYTHM] C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe (Adobe Systems Incorporated)
  82. O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
  83. O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
  84. O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10d.exe (Adobe Systems, Inc.)
  85. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
  86. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
  87. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
  88. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  89. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  90. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
  91. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
  92. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  93. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
  94. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  95. O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  96. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
  97. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
  98. O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
  99. O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1263668226390 (WUWebControl Class)
  100. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  101. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.139.105.2 83.139.104.2
  102. O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
  103. O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
  104. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  105. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  106. O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
  107. O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
  108. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  109. O32 - HKLM CDRom: AutoRun - 1
  110. O32 - AutoRun File - [2010.01.16 12:51:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
  111. O33 - MountPoints2\{a6e342d0-1413-11df-b033-001fd05a6ea7}\Shell\AutoRun\command - "" = I:\Seagate\Installer\InstallSeagateManager.exe -- File not found
  112. O33 - MountPoints2\{a6e342d0-1413-11df-b033-001fd05a6ea7}\Shell\Install\command - "" = I:\Seagate\Installer\InstallSeagateManager.exe -- File not found
  113. O34 - HKLM BootExecute: (autocheck autochk *) - File not found
  114. O35 - comfile [open] -- "%1" %*
  115. O35 - exefile [open] -- "%1" %*
  116.  
  117. NetSvcs: 6to4 - File not found
  118. NetSvcs: Ias - C:\WINDOWS\system32\ias [2010.01.16 13:38:01 | 000,000,000 | ---D | M]
  119. NetSvcs: Iprip - File not found
  120. NetSvcs: Irmon - File not found
  121. NetSvcs: NWCWorkstation - File not found
  122. NetSvcs: Nwsapagent - File not found
  123. NetSvcs: WmdmPmSp - File not found
  124.  
  125. CREATERESTOREPOINT
  126. Restore point Set: OTL Restore Point (55172488459452416)
  127.  
  128. [color=#E56717]========== Files/Folders - Created Within 14 Days ==========[/color]
  129.  
  130. [2010.02.12 18:00:03 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\doom\Desktop\OTL.exe
  131. [2010.02.11 19:06:16 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\doom\Recent
  132. [2010.02.10 11:34:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
  133. [2010.02.06 18:08:06 | 000,000,000 | ---D | C] -- C:\USBNoRisk
  134. [2010.02.06 16:20:52 | 000,096,104 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
  135. [2010.02.06 16:20:52 | 000,056,816 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
  136. [2010.02.06 16:20:52 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
  137. [2010.02.06 16:20:52 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
  138. [2010.02.06 16:20:51 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
  139. [2010.02.06 16:20:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
  140. [2010.02.06 16:18:07 | 000,015,429 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\Sacm2A.sys
  141. [2010.01.16 12:53:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
  142. [2010.01.16 12:51:05 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
  143. [2010.01.16 12:51:05 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
  144.  
  145. [color=#E56717]========== Files - Modified Within 14 Days ==========[/color]
  146.  
  147. [2010.02.12 18:00:15 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\doom\Desktop\OTL.exe
  148. [2010.02.12 17:57:58 | 000,000,470 | ---- | M] () -- C:\WINDOWS\wincmd.ini
  149. [2010.02.12 17:57:24 | 000,000,256 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
  150. [2010.02.12 17:57:11 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
  151. [2010.02.12 17:57:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  152. [2010.02.12 17:15:07 | 002,097,152 | -H-- | M] () -- C:\Documents and Settings\doom\NTUSER.DAT
  153. [2010.02.12 17:15:07 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\doom\ntuser.ini
  154. [2010.02.12 17:15:01 | 000,000,388 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
  155. [2010.02.12 17:15:00 | 003,739,146 | -H-- | M] () -- C:\Documents and Settings\doom\Local Settings\Application Data\IconCache.db
  156. [2010.02.12 16:04:59 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
  157. [2010.02.11 16:53:57 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
  158. [2010.02.11 16:47:26 | 000,000,680 | ---- | M] () -- C:\WINDOWS\AUTOLNCH.REG
  159. [2010.02.10 15:18:21 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
  160. [2010.02.10 15:06:04 | 000,021,504 | ---- | M] () -- C:\Documents and Settings\doom\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  161. [2010.02.06 16:20:59 | 000,000,651 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Avira AntiVir Control Center.lnk
  162.  
  163. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  164.  
  165. [2010.02.06 16:20:59 | 000,000,651 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Avira AntiVir Control Center.lnk
  166. [2010.02.06 16:18:08 | 000,053,693 | R--- | C] () -- C:\WINDOWS\UNDPX2A.sys
  167. [2010.02.06 16:18:07 | 000,135,168 | R--- | C] () -- C:\WINDOWS\UNDPX2A.exe
  168. [2010.01.31 18:59:41 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\doom\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  169. [2010.01.23 20:16:22 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
  170. [2010.01.23 09:01:44 | 002,463,976 | ---- | C] () -- C:\WINDOWS\System32\NPSWF32.dll
  171. [2010.01.17 17:11:34 | 000,000,470 | ---- | C] () -- C:\WINDOWS\wincmd.ini
  172. [2010.01.16 19:55:25 | 000,306,688 | ---- | C] () -- C:\WINDOWS\System32\Lffpx7.dll
  173. [2010.01.16 19:55:25 | 000,095,232 | ---- | C] () -- C:\WINDOWS\System32\Lfkodak.dll
  174.  
  175. [color=#E56717]========== LOP Check ==========[/color]
  176.  
  177. [2010.01.17 17:06:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
  178. [2010.01.17 16:58:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\doom\Application Data\ACD Systems
  179. [2010.01.17 17:06:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\doom\Application Data\TuneUp Software
  180. [2010.02.12 17:15:01 | 000,000,388 | ---- | M] () -- C:\WINDOWS\Tasks\1-Click Maintenance.job
  181. [2010.02.12 17:57:24 | 000,000,256 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job
  182.  
  183. [color=#E56717]========== Purity Check ==========[/color]
  184.  
  185.  
  186.  
  187. [color=#E56717]========== Custom Scans ==========[/color]
  188.  
  189.  
  190. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  191.  
  192.  
  193. [color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
  194. [2008.04.14 04:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
  195.  
  196. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  197. [2008.04.14 04:51:44 | 020,056,462 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
  198. [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
  199. [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
  200. [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
  201. [2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
  202. [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\atapi.sys
  203.  
  204. [color=#A23BEC]< MD5 for: EVENTLOG.DLL >[/color]
  205. [2008.04.14 04:41:54 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ERDNT\cache\eventlog.dll
  206. [2008.04.14 04:41:54 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\dllcache\eventlog.dll
  207. [2008.04.14 04:41:54 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
  208.  
  209. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  210. [2008.04.14 04:42:02 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
  211. [2008.04.14 04:42:02 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\dllcache\netlogon.dll
  212. [2008.04.14 04:42:02 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
  213.  
  214. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  215. [2008.04.14 04:42:06 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ERDNT\cache\scecli.dll
  216. [2008.04.14 04:42:06 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\dllcache\scecli.dll
  217. [2008.04.14 04:42:06 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll
  218.  
  219. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  220.  
  221. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles-ozna�iti kao na slici i klik na quick scan >[/color]
  222. < End of report >
  223.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!