API tools faq
paste
Advertisement
Guest User

OTL.TXT

a guest
Nov 22nd, 2012
450
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 81.66 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 11/22/2012 4:00:08 PM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\franco.lr\Downloads
  3. Enterprise Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 1.97 Gb Total Physical Memory | 0.81 Gb Available Physical Memory | 41.12% Memory free
  8. 3.95 Gb Paging File | 2.41 Gb Available in Paging File | 61.05% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 148.75 Gb Total Space | 81.48 Gb Free Space | 54.77% Space Free | Partition Type: NTFS
  13. Drive E: | 931.84 Gb Total Space | 810.40 Gb Free Space | 86.97% Space Free | Partition Type: NTFS
  14. Drive F: | 931.17 Gb Total Space | 872.93 Gb Free Space | 93.75% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: MXJ85006R5-W7 | User Name: franco.lr | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user
  18. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - C:\Users\franco.lr\Downloads\OTL.exe (OldTimer Tools)
  23. PRC - C:\Program Files\Marimba\.marimba\workspace\ch.57\data\sum.exe (BMC Software)
  24. PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
  25. PRC - C:\Program Files\Xerox\Xerox Print Agent\PrintClientMessenger.exe (Xerox Corporation)
  26. PRC - C:\Program Files\Xerox\Xerox Print Agent\AgentApplication.exe (Xerox Corporation)
  27. PRC - C:\Program Files\Xerox\Xerox Print Agent\PlatformFiles\AgentService.exe (Xerox Corporation)
  28. PRC - C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (http://tortoisesvn.net)
  29. PRC - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
  30. PRC - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
  31. PRC - C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ESET)
  32. PRC - C:\Program Files\iReport\iReport Client\iReport.exe ()
  33. PRC - C:\Program Files\Marimba\Castanet Tuner\lib\minituner.exe (BMC Software, Inc.)
  34. PRC - C:\Program Files\Marimba\Castanet Tuner\Tuner.exe (BMC Software, Inc.)
  35. PRC - C:\Windows\explorer.exe (Microsoft Corporation)
  36. PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
  37. PRC - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
  38. PRC - C:\Program Files\eSupport\eSupport.exe (Hewlett-Packard)
  39. PRC - C:\Windows\System32\AEADISRV.EXE (Andrea Electronics Corporation)
  40. PRC - C:\AppServ\Apache2.2\bin\httpd.exe (Apache Software Foundation)
  41.  
  42.  
  43. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  44.  
  45. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll ()
  46. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\pdf.dll ()
  47. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\libglesv2.dll ()
  48. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\libegl.dll ()
  49. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\avutil-51.dll ()
  50. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\avformat-54.dll ()
  51. MOD - C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\avcodec-54.dll ()
  52. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SQLEditors\6d0643b006aac1d90b3626599644ef98\SQLEditors.ni.dll ()
  53. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2b757346ad58cf550a6066d076b38ed0\Microsoft.SqlServer.SqlParser.ni.dll ()
  54. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\RadLangSvc\59b3e52abcd5502265f8ac05b9c52141\RadLangSvc.ni.dll ()
  55. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\ObjectExplorerRepli#\7041ed5f469b7ae5ebe57d11ca8eddb5\ObjectExplorerReplication.ni.dll ()
  56. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f8c8eca998f75d5f7b3ba830c58df49d\Microsoft.SqlServer.Management.SqlStudio.Migration.ni.dll ()
  57. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0afe318a0f9e9edfc24c1e71416716cf\Microsoft.SqlServer.Management.SqlStudio.Explorer.ni.dll ()
  58. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8093f7967808de52ac3a05ca9c9a80d7\Microsoft.SqlServer.Management.SqlStudio.ni.dll ()
  59. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\813e3cbed70247c7f8b35659c0ab4636\Microsoft.SqlServer.Management.Scripting.ni.dll ()
  60. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SqlManagerUI\36c58d68cda5f720ca06ce790a8dde30\SqlManagerUI.ni.dll ()
  61. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\205c4bfb343d20169f4e1ea1f59b598f\Microsoft.SqlServer.Types.ni.dll ()
  62. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\ObjectExplorer\e251e7d795b9e0486d68563b36cd7837\ObjectExplorer.ni.dll ()
  63. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2f305a7cea0d1c3eca3c4cd73c793685\Microsoft.SqlServer.Management.Reports.ni.dll ()
  64. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\AppIDPackage\d0cc09de4c01ef3f8e8468d7e8bdc4fb\AppIDPackage.ni.dll ()
  65. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fd6c8fea96c4f6f0b7205da02e939156\Microsoft.SqlServer.SqlTools.VSIntegration.ni.dll ()
  66. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\afef6d7e9feabedc8ebcf00390efe289\Microsoft.SqlServer.Management.SDK.SqlStudio.ni.dll ()
  67. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\650f100bb6d91ece272392e4f5c402d4\Microsoft.SqlServer.Management.UserSettings.ni.dll ()
  68. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3fafb6a18f737ad75cb03fa7fb5079e2\Microsoft.SqlServer.Management.RegisteredServers.ni.dll ()
  69. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\39681826e21e039d590d9edfe25da50e\Microsoft.SqlServer.Management.Controls.ni.dll ()
  70. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\ConnectionDlg\fde0241c5677ed5173fbf675fe372e03\ConnectionDlg.ni.dll ()
  71. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\21e1622d9e5321dbb9844d72129a99c4\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll ()
  72. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SqlWorkbench.Interf#\751c994dd73c4e3f89ad8877fbf58a69\SqlWorkbench.Interfaces.ni.dll ()
  73. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SqlMgmt\e5f2840e12f75b734f5daa3683c680f6\SqlMgmt.ni.dll ()
  74. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1fa1d800a03e3d5dcde9117019aa5b9f\Microsoft.SqlServer.SString.ni.dll ()
  75. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\47b6fca009f90c7ee97899e49bd7c61c\Microsoft.SqlServer.SqlTDiagM.ni.dll ()
  76. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ec6e4a4681407bd82193397e9df9b56d\Microsoft.SqlServer.Dmf.ni.dll ()
  77. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\77b4b7194b5c711ec8df3338c5172d91\Microsoft.SqlServer.SqlEnum.ni.dll ()
  78. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\427380ddeacfb16f11fb404d6465922d\Microsoft.SqlServer.Smo.ni.dll ()
  79. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\262086e3e34d6e3ca6c2956cfeefb749\Microsoft.SqlServer.Management.Sdk.Sfc.ni.dll ()
  80. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\052d20cd83fa7eed005b1b79125e6f4f\Microsoft.SqlServer.RegSvrEnum.ni.dll ()
  81. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6e498d4b076ce92fc546df1bc42f5927\Microsoft.SqlServer.GridControl.ni.dll ()
  82. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\7dc5949be3dbbc9a0e2917e85d5d70da\Microsoft.SqlServer.DataStorage.ni.dll ()
  83. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9f58257b3d3eefa80050123c54b760be\Microsoft.SqlServer.SqlClrProvider.ni.dll ()
  84. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\038e682b0a0b762c8aae2ed9d5ead010\Microsoft.SqlServer.ConnectionInfo.ni.dll ()
  85. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5181f608c3a5dbf9a9131640188d9319\Microsoft.SqlServer.BatchParserClient.ni.dll ()
  86. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d9ace980a7380c6d7c67ff5bae5e4e27\Microsoft.SqlServer.BatchParser.ni.dll ()
  87. MOD - C:\Windows\assembly\GAC_32\Microsoft.SqlServer.BatchParser\10.0.0.0__89845dcd8080cc91\Microsoft.SqlServer.BatchParser.dll ()
  88. MOD - C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Diagnostics.ServiceModelSink\3.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Diagnostics.ServiceModelSink.dll ()
  89. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll ()
  90. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cde034f96e68824998addc8c82bc6cdf\Microsoft.VisualStudio.Package.LanguageService.ni.dll ()
  91. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2938b3b867d7f6e3d3ca41a02d9458f1\Microsoft.VisualStudio.Shell.Design.ni.dll ()
  92. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\0b1b9ede0e557076c1364a8cd72b836a\Microsoft.DataWarehouse.SQM.ni.dll ()
  93. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\e6b2e00bc371974d249ac9ae0c025d36\Microsoft.DataWarehouse.ni.dll ()
  94. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5be1e0a8ced500e782ccdabf40f5ce6f\Microsoft.VisualStudio.Shell.ni.dll ()
  95. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\968ade5bc7149e8f72b1d5c43b4cf96b\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll ()
  96. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\912a0776c2bfd35ff76bd0b8ba977ed4\System.Drawing.Design.ni.dll ()
  97. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c144f89b1f8f292d6940a1b2f8ffbec\System.Design.ni.dll ()
  98. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll ()
  99. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()
  100. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()
  101. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll ()
  102. MOD - C:\Program Files\Xerox\Xerox Print Agent\printclientsrv.dll ()
  103. MOD - C:\Program Files\Xerox\Xerox Print Agent\Win32LibDLL.dll ()
  104. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ed560b26f2f86b3f07b7f6d384f92275\System.ServiceModel.Web.ni.dll ()
  105. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll ()
  106. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9e7bf69d97febe4ed1a288c787e5d9ca\SMDiagnostics.ni.dll ()
  107. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\107779ca2708d2b31b2e1560e47f6d15\System.ServiceModel.ni.dll ()
  108. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\054ff376d0135cd54d6d9c85d1322284\Microsoft.SqlServer.Instapi.ni.dll ()
  109. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fda69a3df4aea8f490d5d59d46bcb655\Microsoft.SqlServer.Sqm.ni.dll ()
  110. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\9b2f17fb61b7197f2a04108f5d1a1cc6\System.Management.ni.dll ()
  111. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5288ab86c56e7e057a09ecd5b94f3754\Microsoft.VisualStudio.Designer.Interfaces.ni.dll ()
  112. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b4aecfc620b744418184955f3507b407\Microsoft.VisualStudio.TextManager.Interop.8.0.ni.dll ()
  113. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3fafab158cba7086597acc523d7b43e0\Microsoft.VisualStudio.Shell.Interop.8.0.ni.dll ()
  114. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6ecdcc88a9ad194bc7d25a645193055f\Microsoft.VisualStudio.TextManager.Interop.ni.dll ()
  115. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3794482a337599544aef6bbf59858b49\Microsoft.VisualStudio.Shell.Interop.ni.dll ()
  116. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\17b86b45a22276e02a2f11d03ef27204\Microsoft.VisualStudio.OLE.Interop.ni.dll ()
  117. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\EnvDTE\5b8667c6746bd6dff357a27fe2d5aa3a\EnvDTE.ni.dll ()
  118. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll ()
  119. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.ni.dll ()
  120. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\80fae9f16f80075535e72458ef293f7a\System.Transactions.ni.dll ()
  121. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll ()
  122. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll ()
  123. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()
  124. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()
  125. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()
  126. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()
  127. MOD - C:\Program Files\TortoiseSVN\bin\libsasl32.dll ()
  128. MOD - C:\Program Files\FileZilla FTP Client\fzshellext.dll ()
  129. MOD - C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Design\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.dll ()
  130. MOD - C:\Windows\assembly\GAC_MSIL\Microsoft.VisualStudio\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.dll ()
  131. MOD - C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll ()
  132. MOD - C:\Program Files\eSupport\eSupport.XmlSerializers.dll ()
  133. MOD - C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll ()
  134.  
  135.  
  136. [color=#E56717]========== Services (SafeList) ==========[/color]
  137.  
  138. SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
  139. SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
  140. SRV - (MBAMScheduler) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
  141. SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
  142. SRV - (XrxXgsPrintAgent) -- C:\Program Files\Xerox\Xerox Print Agent\PlatformFiles\AgentService.exe (Xerox Corporation)
  143. SRV - (KMService) -- C:\Windows\System32\srvany.exe ()
  144. SRV - (LMIMaint) -- C:\Program Files\LogMeIn\x86\ramaint.exe (LogMeIn, Inc.)
  145. SRV - (LMIGuardianSvc) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
  146. SRV - (ekrn) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe (ESET)
  147. SRV - (LogMeIn) -- C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
  148. SRV - (iReport) -- C:\Program Files\iReport\iReport Client\iReport.exe ()
  149. SRV - (workspace) -- C:\Program Files\Marimba\Castanet Tuner\Tuner.exe (BMC Software, Inc.)
  150. SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
  151. SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
  152. SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
  153. SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
  154. SRV - (msvsmon90) -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe (Microsoft Corporation)
  155. SRV - (JobTrigger) -- C:\Windows\System32\JobTrigger.exe (Hewlett Packard)
  156. SRV - (AEADIFilters) -- C:\Windows\System32\AEADISRV.EXE (Andrea Electronics Corporation)
  157. SRV - (mysql) -- C:\AppServ\MySQL\bin\mysqld-nt.exe ()
  158. SRV - (Apache2.2) -- C:\AppServ\Apache2.2\bin\httpd.exe (Apache Software Foundation)
  159. SRV - (aaLogger) -- C:\Program Files\Common Files\ArchestrA\aaLogger.exe (Invensys Systems, Inc.)
  160.  
  161.  
  162. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  163.  
  164. DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
  165. DRV - (mbr) -- C:\ComboFix\mbr.sys File not found
  166. DRV - (catchme) -- C:\Users\franco.lr\AppData\Local\Temp\catchme.sys File not found
  167. DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
  168. DRV - (Mandiant_Tools) -- C:\ProgramData\Application Data\iReport\mktools.sys ()
  169. DRV - (LMIRfsClientNP) -- C:\Windows\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
  170. DRV - (LMIRfsDriver) -- C:\Windows\System32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
  171. DRV - (LMIInfo) -- C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
  172. DRV - (eamonm) -- C:\Windows\System32\drivers\eamonm.sys (ESET)
  173. DRV - (epfw) -- C:\Windows\System32\drivers\epfw.sys (ESET)
  174. DRV - (epfwwfp) -- C:\Windows\System32\drivers\epfwwfp.sys (ESET)
  175. DRV - (EpfwLWF) -- C:\Windows\System32\drivers\EpfwLWF.sys (ESET)
  176. DRV - (ehdrv) -- C:\Windows\System32\drivers\ehdrv.sys (ESET)
  177. DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
  178. DRV - (MQAC) -- C:\Windows\System32\drivers\mqac.sys (Microsoft Corporation)
  179. DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
  180. DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
  181. DRV - (tsusbhub) -- C:\Windows\System32\drivers\tsusbhub.sys (Microsoft Corporation)
  182. DRV - (Synth3dVsc) -- C:\Windows\System32\drivers\Synth3dVsc.sys (Microsoft Corporation)
  183. DRV - (dmvsc) -- C:\Windows\System32\drivers\dmvsc.sys (Microsoft Corporation)
  184. DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
  185. DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
  186. DRV - (terminpt) -- C:\Windows\System32\drivers\terminpt.sys (Microsoft Corporation)
  187. DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
  188. DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
  189. DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
  190. DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
  191. DRV - (VSPerfDrv100) -- C:\Program Files\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\VSPerfDrv100.sys (Microsoft Corporation)
  192. DRV - (Serial) -- C:\Windows\System32\drivers\serial.sys (Brother Industries Ltd.)
  193. DRV - (TPM) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)
  194. DRV - (e1express) -- C:\Windows\System32\drivers\e1e6232.sys (Intel Corporation)
  195. DRV - (RsFx0103) -- C:\Windows\System32\drivers\RsFx0103.sys (Microsoft Corporation)
  196. DRV - (RsFx0102) -- C:\Windows\System32\drivers\RsFx0102.sys (Microsoft Corporation)
  197. DRV - (HECI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
  198. DRV - (Sentinel) -- C:\Windows\System32\drivers\sentinel.sys (SafeNet, Inc.)
  199.  
  200.  
  201. [color=#E56717]========== Standard Registry (All) ==========[/color]
  202.  
  203.  
  204. [color=#E56717]========== Internet Explorer ==========[/color]
  205.  
  206. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  207. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  208. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  209. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  210. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  211. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  212. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  213. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  214. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
  215. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
  216. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  217. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  218. IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  219.  
  220. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  221. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  222. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://valp-page.la.pg.com/reportes_sys/asp/index1.asp?tipo=maple
  223. IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
  224. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  225. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  226. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
  227. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = autoproxy.pg.com:8080
  228.  
  229.  
  230. [color=#E56717]========== FireFox ==========[/color]
  231.  
  232. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
  233. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: c:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  234. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
  235. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
  236. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
  237. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: c:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  238. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  239. FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
  240. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  241. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  242. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\franco.lr\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  243. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\franco.lr\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
  244. FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\franco.lr\AppData\Local\Facebook\Messenger\2.1.4651.0\npFbDesktopPlugin.dll (Facebook, Inc.)
  245.  
  246. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012/11/21 13:56:54 | 000,000,000 | ---D | M]
  247.  
  248. [2012/02/28 14:46:04 | 000,032,048 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
  249. [2012/07/30 15:52:13 | 000,103,904 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
  250.  
  251. [color=#E56717]========== Chrome ==========[/color]
  252.  
  253. CHR - homepage: http://www.google.com
  254. CHR - default_search_provider: Google (Enabled)
  255. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
  256. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter},
  257. CHR - homepage: http://www.google.com
  258. CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
  259. CHR - plugin: Native Client (Enabled) = C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll
  260. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\pdf.dll
  261. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\franco.lr\AppData\Local\Google\Chrome\Application\23.0.1271.64\gcswf32.dll
  262. CHR - plugin: Shockwave Flash (Disabled) = C:\Users\franco.lr\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
  263. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll
  264. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
  265. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
  266. CHR - plugin: Microsoft Office 2010 (Enabled) = c:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
  267. CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
  268. CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
  269. CHR - plugin: Java(TM) Platform SE 7 U2 (Enabled) = C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll
  270. CHR - plugin: Java Deployment Toolkit 7.0.20.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll
  271. CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
  272. CHR - plugin: Facebook Desktop (Enabled) = C:\Users\franco.lr\AppData\Local\Facebook\Messenger\2.0.4517.0\npFbDesktopPlugin.dll
  273. CHR - plugin: Google Update (Enabled) = C:\Users\franco.lr\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
  274. CHR - plugin: Shockwave for Director (Enabled) = c:\Windows\system32\Adobe\Director\np32dsw.dll
  275. CHR - Extension: Classic = C:\Users\franco.lr\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkacjpbfdknhflllbcmjibkdeoafencn\1.1_0\
  276.  
  277. O1 HOSTS File: ([2012/11/22 13:58:02 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  278. O1 - Hosts: 127.0.0.1 localhost
  279. O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
  280. O2 - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Lync\OCHelper.dll (Microsoft Corporation)
  281. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
  282. O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  283. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  284. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
  285. O2 - BHO: (Aplicación auxiliar de la Grabadora de prueba web de Microsoft 10.0) - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
  286. O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
  287. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  288. O4 - HKLM..\Run: [Communicator] C:\Program Files\Microsoft Lync\communicator.exe (Microsoft Corporation)
  289. O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
  290. O4 - HKLM..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe (Google)
  291. O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
  292. O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
  293. O4 - HKCU..\Run: [Facebook Update] C:\Users\franco.lr\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  294. O4 - HKCU..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
  295. O4 - Startup: C:\Users\franco.lr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
  296. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  297. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  298. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
  299. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  300. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  301. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  302. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  303. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  304. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  305. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  306. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  307. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  309. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  310. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  311. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  312. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  313. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  314. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  315. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  316. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
  317. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
  318. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  319. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  320. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  321. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  322. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  323. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  324. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  325. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  326. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowCpl = 1
  327. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  328. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  329. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 2 = Windows Update
  330. O8 - Extra context menu item: &Enviar a OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  331. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
  332. O8 - Extra context menu item: E&xportar a Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
  333. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - c:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  334. O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - c:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  335. O9 - Extra Button: Lync add-on - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Lync\OCHelper.dll (Microsoft Corporation)
  336. O9 - Extra 'Tools' menuitem : Lync add-on - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Lync\OCHelper.dll (Microsoft Corporation)
  337. O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - c:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  338. O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - c:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  339. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
  340. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
  341. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
  342. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
  343. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  344. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
  345. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  346. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  347. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  348. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  349. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  350. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  351. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  352. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  353. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  354. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  355. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  356. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  357. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  358. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  359. O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  360. O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  361. O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  362. O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  363. O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  364. O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  365. O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  366. O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
  367. O15 - HKLM\..Trusted Domains: archer-tech.com ([]http in Trusted sites)
  368. O15 - HKLM\..Trusted Domains: archer-tech.com ([]https in Trusted sites)
  369. O15 - HKLM\..Trusted Domains: bechtle.com ([]http in Trusted sites)
  370. O15 - HKLM\..Trusted Domains: bechtle.com ([]https in Trusted sites)
  371. O15 - HKLM\..Trusted Domains: benefitsweb.com ([]http in Trusted sites)
  372. O15 - HKLM\..Trusted Domains: benefitsweb.com ([]https in Trusted sites)
  373. O15 - HKLM\..Trusted Domains: box.com ([]http in Trusted sites)
  374. O15 - HKLM\..Trusted Domains: box.com ([]https in Trusted sites)
  375. O15 - HKLM\..Trusted Domains: box.net ([]http in Trusted sites)
  376. O15 - HKLM\..Trusted Domains: box.net ([]https in Trusted sites)
  377. O15 - HKLM\..Trusted Domains: boxcloud.com ([]http in Trusted sites)
  378. O15 - HKLM\..Trusted Domains: boxcloud.com ([]https in Trusted sites)
  379. O15 - HKLM\..Trusted Domains: buckandhickman.com ([]http in Trusted sites)
  380. O15 - HKLM\..Trusted Domains: buckandhickman.com ([]https in Trusted sites)
  381. O15 - HKLM\..Trusted Domains: cexp.com ([]http in Trusted sites)
  382. O15 - HKLM\..Trusted Domains: cexp.com ([]https in Trusted sites)
  383. O15 - HKLM\..Trusted Domains: conrad.de ([]http in Trusted sites)
  384. O15 - HKLM\..Trusted Domains: conrad.de ([]https in Trusted sites)
  385. O15 - HKLM\..Trusted Domains: corporateexpress.co.uk ([]http in Trusted sites)
  386. O15 - HKLM\..Trusted Domains: corporateexpress.co.uk ([]https in Trusted sites)
  387. O15 - HKLM\..Trusted Domains: corporateexpress.fr ([]http in Trusted sites)
  388. O15 - HKLM\..Trusted Domains: corporateexpress.fr ([]https in Trusted sites)
  389. O15 - HKLM\..Trusted Domains: dataswetsconnect.com ([]http in Trusted sites)
  390. O15 - HKLM\..Trusted Domains: dataswetsconnect.com ([]https in Trusted sites)
  391. O15 - HKLM\..Trusted Domains: editorialcontentexchange.com ([]http in Trusted sites)
  392. O15 - HKLM\..Trusted Domains: editorialcontentexchange.com ([]https in Trusted sites)
  393. O15 - HKLM\..Trusted Domains: egencia.ca ([]http in Trusted sites)
  394. O15 - HKLM\..Trusted Domains: egencia.ca ([]https in Trusted sites)
  395. O15 - HKLM\..Trusted Domains: egencia.com ([]http in Trusted sites)
  396. O15 - HKLM\..Trusted Domains: egencia.com ([]https in Trusted sites)
  397. O15 - HKLM\..Trusted Domains: ehowe.com ([]http in Trusted sites)
  398. O15 - HKLM\..Trusted Domains: ehowe.com ([]https in Trusted sites)
  399. O15 - HKLM\..Trusted Domains: elateral.com ([]http in Trusted sites)
  400. O15 - HKLM\..Trusted Domains: elateral.com ([]https in Trusted sites)
  401. O15 - HKLM\..Trusted Domains: electrocomponents.com ([]http in Trusted sites)
  402. O15 - HKLM\..Trusted Domains: electrocomponents.com ([]https in Trusted sites)
  403. O15 - HKLM\..Trusted Domains: erelief.to ([]http in Trusted sites)
  404. O15 - HKLM\..Trusted Domains: erelief.to ([]https in Trusted sites)
  405. O15 - HKLM\..Trusted Domains: eway.ca ([]http in Trusted sites)
  406. O15 - HKLM\..Trusted Domains: eway.ca ([]https in Trusted sites)
  407. O15 - HKLM\..Trusted Domains: festo.com ([]http in Trusted sites)
  408. O15 - HKLM\..Trusted Domains: festo.com ([]https in Trusted sites)
  409. O15 - HKLM\..Trusted Domains: fieldglass.net ([]http in Trusted sites)
  410. O15 - HKLM\..Trusted Domains: fieldglass.net ([]https in Trusted sites)
  411. O15 - HKLM\..Trusted Domains: gaerner.de ([]http in Trusted sites)
  412. O15 - HKLM\..Trusted Domains: gaerner.de ([]https in Trusted sites)
  413. O15 - HKLM\..Trusted Domains: gillette.com ([]* in Local intranet)
  414. O15 - HKLM\..Trusted Domains: globoforce.com ([]http in Trusted sites)
  415. O15 - HKLM\..Trusted Domains: globoforce.com ([]https in Trusted sites)
  416. O15 - HKLM\..Trusted Domains: globoforce.net ([]http in Trusted sites)
  417. O15 - HKLM\..Trusted Domains: globoforce.net ([]https in Trusted sites)
  418. O15 - HKLM\..Trusted Domains: grainger.com ([]http in Trusted sites)
  419. O15 - HKLM\..Trusted Domains: grainger.com ([]https in Trusted sites)
  420. O15 - HKLM\..Trusted Domains: greenham.com ([]http in Trusted sites)
  421. O15 - HKLM\..Trusted Domains: greenham.com ([]https in Trusted sites)
  422. O15 - HKLM\..Trusted Domains: hoffmann-group.com ([]http in Trusted sites)
  423. O15 - HKLM\..Trusted Domains: hoffmann-group.com ([]https in Trusted sites)
  424. O15 - HKLM\..Trusted Domains: hubspan.net ([]http in Trusted sites)
  425. O15 - HKLM\..Trusted Domains: hubspan.net ([]https in Trusted sites)
  426. O15 - HKLM\..Trusted Domains: iesa.co.uk ([]http in Trusted sites)
  427. O15 - HKLM\..Trusted Domains: iesa.co.uk ([]https in Trusted sites)
  428. O15 - HKLM\..Trusted Domains: imes.be ([]http in Trusted sites)
  429. O15 - HKLM\..Trusted Domains: imes.be ([]https in Trusted sites)
  430. O15 - HKLM\..Trusted Domains: inxpo.com ([]http in Trusted sites)
  431. O15 - HKLM\..Trusted Domains: inxpo.com ([]https in Trusted sites)
  432. O15 - HKLM\..Trusted Domains: joneslanglasalle.com ([]http in Trusted sites)
  433. O15 - HKLM\..Trusted Domains: joneslanglasalle.com ([]https in Trusted sites)
  434. O15 - HKLM\..Trusted Domains: kroschke.com ([]http in Trusted sites)
  435. O15 - HKLM\..Trusted Domains: kroschke.com ([]https in Trusted sites)
  436. O15 - HKLM\..Trusted Domains: lyreco.com ([]http in Trusted sites)
  437. O15 - HKLM\..Trusted Domains: lyreco.com ([]https in Trusted sites)
  438. O15 - HKLM\..Trusted Domains: merck.de ([]http in Trusted sites)
  439. O15 - HKLM\..Trusted Domains: merck.de ([]https in Trusted sites)
  440. O15 - HKLM\..Trusted Domains: motionmro.com ([]http in Trusted sites)
  441. O15 - HKLM\..Trusted Domains: motionmro.com ([]https in Trusted sites)
  442. O15 - HKLM\..Trusted Domains: mymro.com ([]http in Trusted sites)
  443. O15 - HKLM\..Trusted Domains: mymro.com ([]https in Trusted sites)
  444. O15 - HKLM\..Trusted Domains: net-library.de ([]http in Trusted sites)
  445. O15 - HKLM\..Trusted Domains: net-library.de ([]https in Trusted sites)
  446. O15 - HKLM\..Trusted Domains: nielsen.com ([]http in Trusted sites)
  447. O15 - HKLM\..Trusted Domains: nielsen.com ([]https in Trusted sites)
  448. O15 - HKLM\..Trusted Domains: officedepot.co.uk ([]http in Trusted sites)
  449. O15 - HKLM\..Trusted Domains: officedepot.co.uk ([]https in Trusted sites)
  450. O15 - HKLM\..Trusted Domains: overtoom.nl ([]http in Trusted sites)
  451. O15 - HKLM\..Trusted Domains: overtoom.nl ([]https in Trusted sites)
  452. O15 - HKLM\..Trusted Domains: pg.com ([]* in Local intranet)
  453. O15 - HKLM\..Trusted Domains: pg.com ([esupport] http in Trusted sites)
  454. O15 - HKLM\..Trusted Domains: pg.com ([esupport] https in Trusted sites)
  455. O15 - HKLM\..Trusted Domains: pomeroy.com ([]http in Trusted sites)
  456. O15 - HKLM\..Trusted Domains: pomeroy.com ([]https in Trusted sites)
  457. O15 - HKLM\..Trusted Domains: quickbase.com ([pg] http in Trusted sites)
  458. O15 - HKLM\..Trusted Domains: quickbase.com ([pg] https in Trusted sites)
  459. O15 - HKLM\..Trusted Domains: routeco.com ([]http in Trusted sites)
  460. O15 - HKLM\..Trusted Domains: routeco.com ([]https in Trusted sites)
  461. O15 - HKLM\..Trusted Domains: sap-ag.de ([]http in Trusted sites)
  462. O15 - HKLM\..Trusted Domains: sap-ag.de ([]https in Trusted sites)
  463. O15 - HKLM\..Trusted Domains: schweitzer-online.de ([]http in Trusted sites)
  464. O15 - HKLM\..Trusted Domains: schweitzer-online.de ([]https in Trusted sites)
  465. O15 - HKLM\..Trusted Domains: sigmaaldrich.com ([]http in Trusted sites)
  466. O15 - HKLM\..Trusted Domains: sigmaaldrich.com ([]https in Trusted sites)
  467. O15 - HKLM\..Trusted Domains: smartforce.com ([]http in Trusted sites)
  468. O15 - HKLM\..Trusted Domains: smartforce.com ([]https in Trusted sites)
  469. O15 - HKLM\..Trusted Domains: spigit.com ([pg] http in Trusted sites)
  470. O15 - HKLM\..Trusted Domains: spigit.com ([pg] https in Trusted sites)
  471. O15 - HKLM\..Trusted Domains: staplesadvantage.fr ([]http in Trusted sites)
  472. O15 - HKLM\..Trusted Domains: staplesadvantage.fr ([]https in Trusted sites)
  473. O15 - HKLM\..Trusted Domains: swets.nl ([]http in Trusted sites)
  474. O15 - HKLM\..Trusted Domains: swets.nl ([]https in Trusted sites)
  475. O15 - HKLM\..Trusted Domains: symphonyplm.com ([]http in Trusted sites)
  476. O15 - HKLM\..Trusted Domains: symphonyplm.com ([]https in Trusted sites)
  477. O15 - HKLM\..Trusted Domains: tanomail.com ([]http in Trusted sites)
  478. O15 - HKLM\..Trusted Domains: tanomail.com ([]https in Trusted sites)
  479. O15 - HKLM\..Trusted Domains: thepsc.com ([pg] http in Trusted sites)
  480. O15 - HKLM\..Trusted Domains: thepsc.com ([pg] https in Trusted sites)
  481. O15 - HKLM\..Trusted Domains: totalinformation.com ([]http in Trusted sites)
  482. O15 - HKLM\..Trusted Domains: totalinformation.com ([]https in Trusted sites)
  483. O15 - HKLM\..Trusted Domains: vwr.com ([]http in Trusted sites)
  484. O15 - HKLM\..Trusted Domains: vwr.com ([]https in Trusted sites)
  485. O15 - HKLM\..Trusted Domains: vwrsp.com ([]http in Trusted sites)
  486. O15 - HKLM\..Trusted Domains: vwrsp.com ([]https in Trusted sites)
  487. O15 - HKLM\..Trusted Domains: webex.com ([]http in Trusted sites)
  488. O15 - HKLM\..Trusted Domains: webex.com ([]https in Trusted sites)
  489. O15 - HKLM\..Trusted Domains: webexeu.com ([]http in Trusted sites)
  490. O15 - HKLM\..Trusted Domains: webexeu.com ([]https in Trusted sites)
  491. O15 - HKLM\..Trusted Domains: wella.com ([]* in Local intranet)
  492. O15 - HKCU\..Trusted Domains: archer-tech.com ([]http in Trusted sites)
  493. O15 - HKCU\..Trusted Domains: archer-tech.com ([]https in Trusted sites)
  494. O15 - HKCU\..Trusted Domains: bechtle.com ([]http in Trusted sites)
  495. O15 - HKCU\..Trusted Domains: bechtle.com ([]https in Trusted sites)
  496. O15 - HKCU\..Trusted Domains: benefitsweb.com ([]http in Trusted sites)
  497. O15 - HKCU\..Trusted Domains: benefitsweb.com ([]https in Trusted sites)
  498. O15 - HKCU\..Trusted Domains: box.com ([]http in Trusted sites)
  499. O15 - HKCU\..Trusted Domains: box.com ([]https in Trusted sites)
  500. O15 - HKCU\..Trusted Domains: box.net ([]http in Trusted sites)
  501. O15 - HKCU\..Trusted Domains: box.net ([]https in Trusted sites)
  502. O15 - HKCU\..Trusted Domains: boxcloud.com ([]http in Trusted sites)
  503. O15 - HKCU\..Trusted Domains: boxcloud.com ([]https in Trusted sites)
  504. O15 - HKCU\..Trusted Domains: buckandhickman.com ([]http in Trusted sites)
  505. O15 - HKCU\..Trusted Domains: buckandhickman.com ([]https in Trusted sites)
  506. O15 - HKCU\..Trusted Domains: cexp.com ([]http in Trusted sites)
  507. O15 - HKCU\..Trusted Domains: cexp.com ([]https in Trusted sites)
  508. O15 - HKCU\..Trusted Domains: conrad.de ([]http in Trusted sites)
  509. O15 - HKCU\..Trusted Domains: conrad.de ([]https in Trusted sites)
  510. O15 - HKCU\..Trusted Domains: corporateexpress.co.uk ([]http in Trusted sites)
  511. O15 - HKCU\..Trusted Domains: corporateexpress.co.uk ([]https in Trusted sites)
  512. O15 - HKCU\..Trusted Domains: corporateexpress.fr ([]http in Trusted sites)
  513. O15 - HKCU\..Trusted Domains: corporateexpress.fr ([]https in Trusted sites)
  514. O15 - HKCU\..Trusted Domains: dataswetsconnect.com ([]http in Trusted sites)
  515. O15 - HKCU\..Trusted Domains: dataswetsconnect.com ([]https in Trusted sites)
  516. O15 - HKCU\..Trusted Domains: editorialcontentexchange.com ([]http in Trusted sites)
  517. O15 - HKCU\..Trusted Domains: editorialcontentexchange.com ([]https in Trusted sites)
  518. O15 - HKCU\..Trusted Domains: egencia.ca ([]http in Trusted sites)
  519. O15 - HKCU\..Trusted Domains: egencia.ca ([]https in Trusted sites)
  520. O15 - HKCU\..Trusted Domains: egencia.com ([]http in Trusted sites)
  521. O15 - HKCU\..Trusted Domains: egencia.com ([]https in Trusted sites)
  522. O15 - HKCU\..Trusted Domains: ehowe.com ([]http in Trusted sites)
  523. O15 - HKCU\..Trusted Domains: ehowe.com ([]https in Trusted sites)
  524. O15 - HKCU\..Trusted Domains: elateral.com ([]http in Trusted sites)
  525. O15 - HKCU\..Trusted Domains: elateral.com ([]https in Trusted sites)
  526. O15 - HKCU\..Trusted Domains: electrocomponents.com ([]http in Trusted sites)
  527. O15 - HKCU\..Trusted Domains: electrocomponents.com ([]https in Trusted sites)
  528. O15 - HKCU\..Trusted Domains: erelief.to ([]http in Trusted sites)
  529. O15 - HKCU\..Trusted Domains: erelief.to ([]https in Trusted sites)
  530. O15 - HKCU\..Trusted Domains: eway.ca ([]http in Trusted sites)
  531. O15 - HKCU\..Trusted Domains: eway.ca ([]https in Trusted sites)
  532. O15 - HKCU\..Trusted Domains: festo.com ([]http in Trusted sites)
  533. O15 - HKCU\..Trusted Domains: festo.com ([]https in Trusted sites)
  534. O15 - HKCU\..Trusted Domains: fieldglass.net ([]http in Trusted sites)
  535. O15 - HKCU\..Trusted Domains: fieldglass.net ([]https in Trusted sites)
  536. O15 - HKCU\..Trusted Domains: gaerner.de ([]http in Trusted sites)
  537. O15 - HKCU\..Trusted Domains: gaerner.de ([]https in Trusted sites)
  538. O15 - HKCU\..Trusted Domains: gillette.com ([]* in Local intranet)
  539. O15 - HKCU\..Trusted Domains: globoforce.com ([]http in Trusted sites)
  540. O15 - HKCU\..Trusted Domains: globoforce.com ([]https in Trusted sites)
  541. O15 - HKCU\..Trusted Domains: globoforce.net ([]http in Trusted sites)
  542. O15 - HKCU\..Trusted Domains: globoforce.net ([]https in Trusted sites)
  543. O15 - HKCU\..Trusted Domains: grainger.com ([]http in Trusted sites)
  544. O15 - HKCU\..Trusted Domains: grainger.com ([]https in Trusted sites)
  545. O15 - HKCU\..Trusted Domains: greenham.com ([]http in Trusted sites)
  546. O15 - HKCU\..Trusted Domains: greenham.com ([]https in Trusted sites)
  547. O15 - HKCU\..Trusted Domains: hoffmann-group.com ([]http in Trusted sites)
  548. O15 - HKCU\..Trusted Domains: hoffmann-group.com ([]https in Trusted sites)
  549. O15 - HKCU\..Trusted Domains: hubspan.net ([]http in Trusted sites)
  550. O15 - HKCU\..Trusted Domains: hubspan.net ([]https in Trusted sites)
  551. O15 - HKCU\..Trusted Domains: iesa.co.uk ([]http in Trusted sites)
  552. O15 - HKCU\..Trusted Domains: iesa.co.uk ([]https in Trusted sites)
  553. O15 - HKCU\..Trusted Domains: imes.be ([]http in Trusted sites)
  554. O15 - HKCU\..Trusted Domains: imes.be ([]https in Trusted sites)
  555. O15 - HKCU\..Trusted Domains: inxpo.com ([]http in Trusted sites)
  556. O15 - HKCU\..Trusted Domains: inxpo.com ([]https in Trusted sites)
  557. O15 - HKCU\..Trusted Domains: joneslanglasalle.com ([]http in Trusted sites)
  558. O15 - HKCU\..Trusted Domains: joneslanglasalle.com ([]https in Trusted sites)
  559. O15 - HKCU\..Trusted Domains: kroschke.com ([]http in Trusted sites)
  560. O15 - HKCU\..Trusted Domains: kroschke.com ([]https in Trusted sites)
  561. O15 - HKCU\..Trusted Domains: lyreco.com ([]http in Trusted sites)
  562. O15 - HKCU\..Trusted Domains: lyreco.com ([]https in Trusted sites)
  563. O15 - HKCU\..Trusted Domains: merck.de ([]http in Trusted sites)
  564. O15 - HKCU\..Trusted Domains: merck.de ([]https in Trusted sites)
  565. O15 - HKCU\..Trusted Domains: motionmro.com ([]http in Trusted sites)
  566. O15 - HKCU\..Trusted Domains: motionmro.com ([]https in Trusted sites)
  567. O15 - HKCU\..Trusted Domains: mymro.com ([]http in Trusted sites)
  568. O15 - HKCU\..Trusted Domains: mymro.com ([]https in Trusted sites)
  569. O15 - HKCU\..Trusted Domains: net-library.de ([]http in Trusted sites)
  570. O15 - HKCU\..Trusted Domains: net-library.de ([]https in Trusted sites)
  571. O15 - HKCU\..Trusted Domains: nielsen.com ([]http in Trusted sites)
  572. O15 - HKCU\..Trusted Domains: nielsen.com ([]https in Trusted sites)
  573. O15 - HKCU\..Trusted Domains: officedepot.co.uk ([]http in Trusted sites)
  574. O15 - HKCU\..Trusted Domains: officedepot.co.uk ([]https in Trusted sites)
  575. O15 - HKCU\..Trusted Domains: overtoom.nl ([]http in Trusted sites)
  576. O15 - HKCU\..Trusted Domains: overtoom.nl ([]https in Trusted sites)
  577. O15 - HKCU\..Trusted Domains: pg.com ([]* in Local intranet)
  578. O15 - HKCU\..Trusted Domains: pg.com ([esupport] http in Trusted sites)
  579. O15 - HKCU\..Trusted Domains: pg.com ([esupport] https in Trusted sites)
  580. O15 - HKCU\..Trusted Domains: pomeroy.com ([]http in Trusted sites)
  581. O15 - HKCU\..Trusted Domains: pomeroy.com ([]https in Trusted sites)
  582. O15 - HKCU\..Trusted Domains: quickbase.com ([pg] http in Trusted sites)
  583. O15 - HKCU\..Trusted Domains: quickbase.com ([pg] https in Trusted sites)
  584. O15 - HKCU\..Trusted Domains: routeco.com ([]http in Trusted sites)
  585. O15 - HKCU\..Trusted Domains: routeco.com ([]https in Trusted sites)
  586. O15 - HKCU\..Trusted Domains: sap-ag.de ([]http in Trusted sites)
  587. O15 - HKCU\..Trusted Domains: sap-ag.de ([]https in Trusted sites)
  588. O15 - HKCU\..Trusted Domains: schweitzer-online.de ([]http in Trusted sites)
  589. O15 - HKCU\..Trusted Domains: schweitzer-online.de ([]https in Trusted sites)
  590. O15 - HKCU\..Trusted Domains: sigmaaldrich.com ([]http in Trusted sites)
  591. O15 - HKCU\..Trusted Domains: sigmaaldrich.com ([]https in Trusted sites)
  592. O15 - HKCU\..Trusted Domains: smartforce.com ([]http in Trusted sites)
  593. O15 - HKCU\..Trusted Domains: smartforce.com ([]https in Trusted sites)
  594. O15 - HKCU\..Trusted Domains: smartforce.com ([www] http in Trusted sites)
  595. O15 - HKCU\..Trusted Domains: spigit.com ([pg] http in Trusted sites)
  596. O15 - HKCU\..Trusted Domains: spigit.com ([pg] https in Trusted sites)
  597. O15 - HKCU\..Trusted Domains: staplesadvantage.fr ([]http in Trusted sites)
  598. O15 - HKCU\..Trusted Domains: staplesadvantage.fr ([]https in Trusted sites)
  599. O15 - HKCU\..Trusted Domains: swets.nl ([]http in Trusted sites)
  600. O15 - HKCU\..Trusted Domains: swets.nl ([]https in Trusted sites)
  601. O15 - HKCU\..Trusted Domains: symphonyplm.com ([]http in Trusted sites)
  602. O15 - HKCU\..Trusted Domains: symphonyplm.com ([]https in Trusted sites)
  603. O15 - HKCU\..Trusted Domains: tanomail.com ([]http in Trusted sites)
  604. O15 - HKCU\..Trusted Domains: tanomail.com ([]https in Trusted sites)
  605. O15 - HKCU\..Trusted Domains: thepsc.com ([pg] http in Trusted sites)
  606. O15 - HKCU\..Trusted Domains: thepsc.com ([pg] https in Trusted sites)
  607. O15 - HKCU\..Trusted Domains: totalinformation.com ([]http in Trusted sites)
  608. O15 - HKCU\..Trusted Domains: totalinformation.com ([]https in Trusted sites)
  609. O15 - HKCU\..Trusted Domains: vwr.com ([]http in Trusted sites)
  610. O15 - HKCU\..Trusted Domains: vwr.com ([]https in Trusted sites)
  611. O15 - HKCU\..Trusted Domains: vwrsp.com ([]http in Trusted sites)
  612. O15 - HKCU\..Trusted Domains: vwrsp.com ([]https in Trusted sites)
  613. O15 - HKCU\..Trusted Domains: webex.com ([]http in Trusted sites)
  614. O15 - HKCU\..Trusted Domains: webex.com ([]https in Trusted sites)
  615. O15 - HKCU\..Trusted Domains: webexeu.com ([]http in Trusted sites)
  616. O15 - HKCU\..Trusted Domains: webexeu.com ([]https in Trusted sites)
  617. O15 - HKCU\..Trusted Domains: wella.com ([]* in Local intranet)
  618. O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764} http://fpdownload.macromedia.com/get/shockwave/cabs/authorware/awswaxd.cab (Macromedia Authorware Shockwave Control)
  619. O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} http://esupport.pg.com/PGWeb/Customer/cabs/HPISDataManager.CAB (Hewlett-Packard Online Support Services)
  620. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 10.4.1)
  621. O16 - DPF: {C3CBFE35-9BE8-11D1-B31B-006008948294} http://www.timevision.com/codebase30/OrgPubX.cab (OrgPublisher PluginX)
  622. O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
  623. O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
  624. O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
  625. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 10.4.1)
  626. O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class)
  627. O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://webaccess.pg.com/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
  628. O16 - DPF: iLO 2 Remote Console Applet https://155.127.71.110/dvc.cab (Reg Error: Key error.)
  629. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.44.120.10 143.26.128.29 192.44.212.206
  630. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = na.pg.com
  631. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{07281DCB-B4EF-40C8-A88F-B7278CFA3362}: DhcpNameServer = 192.44.120.10 143.26.128.29 192.44.212.206
  632. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
  633. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  634. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
  635. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  636. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  637. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  638. O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  639. O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  640. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  641. O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  642. O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  643. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
  644. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
  645. O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
  646. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  647. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
  648. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
  649. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
  650. O18 - Protocol\Handler\msdaipp - No CLSID value found
  651. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  652. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  653. O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
  654. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
  655. O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
  656. O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
  657. O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
  658. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
  659. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  660. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
  661. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
  662. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
  663. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
  664. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
  665. O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - c:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
  666. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  667. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  668. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  669. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  670. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
  671. O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
  672. O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
  673. O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
  674. O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
  675. O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
  676. O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
  677. O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
  678. O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corp.)
  679. O31 - SafeBoot: AlternateShell - cmd.exe
  680. O32 - HKLM CDRom: AutoRun - 1
  681. O32 - AutoRun File - [2009/06/10 15:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  682. O34 - HKLM BootExecute: (autocheck autochk *)
  683. O35 - HKLM\..comfile [open] -- "%1" %*
  684. O35 - HKLM\..exefile [open] -- "%1" %*
  685. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  686. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  687. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  688. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  689. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  690.  
  691. NetSvcs: FastUserSwitchingCompatibility - File not found
  692. NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
  693. NetSvcs: Nla - File not found
  694. NetSvcs: Ntmssvc - File not found
  695. NetSvcs: NWCWorkstation - File not found
  696. NetSvcs: Nwsapagent - File not found
  697. NetSvcs: SRService - File not found
  698. NetSvcs: WmdmPmSp - File not found
  699. NetSvcs: LogonHours - File not found
  700. NetSvcs: PCAudit - File not found
  701. NetSvcs: helpsvc - File not found
  702. NetSvcs: uploadmgr - File not found
  703.  
  704. MsConfig - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  705. MsConfig - StartUpReg: [b]RIMBBLaunchAgent.exe[/b] - hkey= - key= - C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
  706. MsConfig - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
  707. MsConfig - State: "startup" - 2
  708. MsConfig - State: "services" - 2
  709.  
  710. CREATERESTOREPOINT
  711. Restore point Set: OTL Restore Point
  712.  
  713. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  714.  
  715. [2012/11/22 14:44:32 | 000,000,000 | ---D | C] -- C:\Windows\temp
  716. [2012/11/22 14:42:46 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
  717. [2012/11/22 13:41:27 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
  718. [2012/11/22 13:41:27 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
  719. [2012/11/22 13:41:27 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
  720. [2012/11/22 13:40:45 | 000,000,000 | ---D | C] -- C:\Qoobox
  721. [2012/11/22 13:39:57 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
  722. [2012/11/22 13:37:31 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Roaming\GlarySoft
  723. [2012/11/22 13:18:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities
  724. [2012/11/22 13:18:29 | 000,000,000 | ---D | C] -- C:\Program Files\Glary Utilities
  725. [2012/11/22 13:16:07 | 006,622,392 | ---- | C] (Glarysoft Ltd ) -- C:\Users\franco.lr\Desktop\gusetup_slim.exe
  726. [2012/11/21 13:56:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
  727. [2012/11/21 13:56:39 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
  728. [2012/11/21 13:56:39 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
  729. [2012/11/21 13:13:47 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\{ABD90256-4BA0-482B-A0C1-C343BEBFAC63}
  730. [2012/11/21 09:00:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maple 3.3.1
  731. [2012/11/20 08:19:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebEx
  732. [2012/11/16 15:59:41 | 000,000,000 | ---D | C] -- C:\Program Files\Xerox
  733. [2012/11/15 11:07:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
  734. [2012/11/15 11:07:09 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  735. [2012/11/08 12:36:44 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\{AB49415B-83FC-4B9C-8664-67CC7220999C}
  736. [2012/11/07 09:58:00 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\{8E79092B-45FE-4C17-93EC-E0CB7CC55253}
  737. [2012/11/06 10:39:58 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\{F1ADF7FD-40A7-457F-B531-116A01C67AC3}
  738. [2012/10/27 13:39:33 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  739. [2012/10/26 15:29:12 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\{4759DAF4-3553-442D-A86B-DE6808D3B802}
  740. [2012/10/26 11:39:56 | 000,000,000 | ---D | C] -- C:\Program Files\NuGet 1.2
  741. [2012/10/25 15:26:13 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\{6A0BC24B-F804-4A29-8271-B161E05F27E5}
  742. [2012/10/25 14:09:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WCF RIA Services V1.0 SP1
  743. [2012/10/25 14:08:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK - Español
  744. [2012/10/25 14:07:06 | 000,000,000 | ---D | C] -- C:\ProgramData\VS
  745. [2012/10/25 13:57:27 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
  746. [2012/10/25 11:56:01 | 000,000,000 | ---D | C] -- C:\Users\franco.lr\AppData\Local\Xerox
  747. [2012/10/25 11:51:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Xerox
  748. [2012/10/25 11:51:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Xerox Logging
  749. [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  750.  
  751. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  752.  
  753. [2012/11/22 16:01:45 | 014,417,920 | -HS- | M] () -- C:\Users\franco.lr\NTUSER.DAT
  754. [2012/11/22 15:47:01 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  755. [2012/11/22 15:40:12 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1573535808-330910908-1264475144-88728UA.job
  756. [2012/11/22 15:12:53 | 000,014,912 | ---- | M] () -- C:\Users\franco.lr\Desktop\Cedula-Lado2.pdf
  757. [2012/11/22 15:12:17 | 000,032,965 | ---- | M] () -- C:\Users\franco.lr\Desktop\Cedula-Lado.pdf
  758. [2012/11/22 15:06:42 | 000,000,658 | ---- | M] () -- C:\Windows\win.ini
  759. [2012/11/22 15:03:06 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1573535808-330910908-1264475144-88728UA.job
  760. [2012/11/22 14:41:13 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini
  761. [2012/11/22 13:58:02 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
  762. [2012/11/22 13:39:11 | 000,002,010 | -H-- | M] () -- C:\Users\franco.lr\Documents\Default.rdp
  763. [2012/11/22 13:18:47 | 000,000,320 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
  764. [2012/11/22 13:18:42 | 000,000,996 | ---- | M] () -- C:\Users\franco.lr\Desktop\Glary Utilities.lnk
  765. [2012/11/22 13:16:42 | 006,622,392 | ---- | M] (Glarysoft Ltd ) -- C:\Users\franco.lr\Desktop\gusetup_slim.exe
  766. [2012/11/22 11:27:23 | 000,012,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  767. [2012/11/22 11:27:23 | 000,012,048 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  768. [2012/11/22 11:19:39 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
  769. [2012/11/22 11:19:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  770. [2012/11/22 11:19:27 | 1589,612,544 | -HS- | M] () -- C:\hiberfil.sys
  771. [2012/11/22 11:17:47 | 002,179,548 | -H-- | M] () -- C:\Users\franco.lr\AppData\Local\IconCache.db
  772. [2012/11/21 21:40:00 | 000,000,872 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1573535808-330910908-1264475144-88728Core.job
  773. [2012/11/21 18:02:00 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1573535808-330910908-1264475144-88728Core.job
  774. [2012/11/21 13:51:29 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
  775. [2012/11/21 13:43:48 | 003,796,272 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
  776. [2012/11/21 11:55:47 | 000,004,700 | ---- | M] () -- C:\Windows\gridconfig.ini
  777. [2012/11/21 11:50:48 | 000,000,542 | ---- | M] () -- C:\Windows\MAPLE.INI
  778. [2012/11/21 11:43:41 | 001,026,148 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
  779. [2012/11/21 11:43:41 | 000,825,030 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  780. [2012/11/21 11:43:41 | 000,188,160 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  781. [2012/11/21 11:41:50 | 000,035,328 | ---- | M] () -- C:\Users\franco.lr\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  782. [2012/11/21 09:05:43 | 000,118,288 | ---- | M] () -- C:\Users\franco.lr\AppData\Local\GDIPFONTCACHEV1.DAT
  783. [2012/11/20 11:00:36 | 000,038,072 | ---- | M] () -- C:\Users\franco.lr\Desktop\CV.pdf
  784. [2012/11/19 15:54:44 | 000,315,477 | ---- | M] () -- C:\Users\franco.lr\Desktop\IMG-20121119-00400.jpg
  785. [2012/11/16 15:55:34 | 000,009,871 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  786. [2012/11/16 15:55:28 | 000,000,888 | RHS- | M] () -- C:\Users\franco.lr\ntuser.pol
  787. [2012/11/15 11:15:40 | 000,223,922 | ---- | M] () -- C:\Users\Public\Documents\cc_20121115_111526.reg
  788. [2012/11/01 15:01:22 | 000,096,601 | ---- | M] () -- C:\Windows\net.exe
  789. [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  790.  
  791. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  792.  
  793. [2012/11/22 15:12:53 | 000,014,912 | ---- | C] () -- C:\Users\franco.lr\Desktop\Cedula-Lado2.pdf
  794. [2012/11/22 15:12:17 | 000,032,965 | ---- | C] () -- C:\Users\franco.lr\Desktop\Cedula-Lado.pdf
  795. [2012/11/22 13:41:27 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
  796. [2012/11/22 13:41:27 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
  797. [2012/11/22 13:41:27 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
  798. [2012/11/22 13:41:27 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
  799. [2012/11/22 13:41:27 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
  800. [2012/11/22 13:18:47 | 000,000,320 | ---- | C] () -- C:\Windows\tasks\GlaryInitialize.job
  801. [2012/11/22 13:18:42 | 000,000,996 | ---- | C] () -- C:\Users\franco.lr\Desktop\Glary Utilities.lnk
  802. [2012/11/21 13:03:41 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
  803. [2012/11/21 11:43:33 | 000,315,477 | ---- | C] () -- C:\Users\franco.lr\Desktop\IMG-20121119-00400.jpg
  804. [2012/11/20 11:00:34 | 000,038,072 | ---- | C] () -- C:\Users\franco.lr\Desktop\CV.pdf
  805. [2012/11/16 15:59:51 | 000,395,776 | ---- | C] () -- C:\Windows\System32\XRXCWWJT_usbmon.dll
  806. [2012/11/16 15:59:51 | 000,379,904 | ---- | C] () -- C:\Windows\System32\XRXCWWJT_localspl.dll
  807. [2012/11/15 11:15:29 | 000,223,922 | ---- | C] () -- C:\Users\Public\Documents\cc_20121115_111526.reg
  808. [2012/11/01 15:07:40 | 000,096,601 | ---- | C] () -- C:\Windows\net.exe
  809. [2012/10/25 13:57:30 | 000,002,067 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk
  810. [2012/10/25 11:51:40 | 000,379,904 | ---- | C] () -- C:\Windows\System32\XRXCWWJT_tcpmon.dll
  811. [2012/10/04 15:45:39 | 000,000,218 | ---- | C] () -- C:\Users\franco.lr\.recently-used.xbel
  812. [2012/07/12 02:16:07 | 002,179,548 | -H-- | C] () -- C:\Users\franco.lr\AppData\Local\IconCache.db
  813. [2012/06/29 09:57:22 | 000,379,904 | ---- | C] () -- C:\Windows\System32\xportmon2.dll
  814. [2012/06/29 09:56:34 | 000,395,776 | ---- | C] () -- C:\Windows\System32\xportmonNT.dll
  815. [2012/06/29 09:56:08 | 000,378,368 | ---- | C] () -- C:\Windows\System32\xportmon.dll
  816. [2012/05/03 11:47:55 | 000,035,328 | ---- | C] () -- C:\Users\franco.lr\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  817. [2012/04/10 12:05:31 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{4ef6ed7d-8262-11e1-af4c-00237d12e41f}.TMContainer00000000000000000002.regtrans-ms
  818. [2012/04/10 12:05:31 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{4ef6ed7d-8262-11e1-af4c-00237d12e41f}.TMContainer00000000000000000001.regtrans-ms
  819. [2012/04/10 12:05:30 | 000,065,536 | -HS- | C] () -- C:\ProgramData\ntuser.dat{4ef6ed7d-8262-11e1-af4c-00237d12e41f}.TM.blf
  820. [2012/04/09 16:03:09 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{4ef6eb9b-8262-11e1-af4c-00237d12e41f}.TMContainer00000000000000000002.regtrans-ms
  821. [2012/04/09 16:03:09 | 000,524,288 | -HS- | C] () -- C:\ProgramData\ntuser.dat{4ef6eb9b-8262-11e1-af4c-00237d12e41f}.TMContainer00000000000000000001.regtrans-ms
  822. [2012/04/09 16:03:09 | 000,262,144 | ---- | C] () -- C:\ProgramData\ntuser.dat
  823. [2012/04/09 16:03:09 | 000,065,536 | -HS- | C] () -- C:\ProgramData\ntuser.dat{4ef6eb9b-8262-11e1-af4c-00237d12e41f}.TM.blf
  824. [2011/11/29 09:23:29 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe
  825. [2011/11/28 13:38:18 | 000,009,841 | ---- | C] () -- C:\Windows\System32\msw8n0o6e.dll
  826. [2011/11/16 09:50:11 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
  827. [2011/11/08 16:31:25 | 000,111,296 | ---- | C] () -- C:\Windows\System32\GDIPFONTCACHEV1.DAT
  828. [2011/11/03 14:41:08 | 000,000,023 | ---- | C] () -- C:\Windows\ODBCINST.INI
  829. [2011/11/01 16:33:13 | 000,004,700 | ---- | C] () -- C:\Windows\gridconfig.ini
  830. [2011/11/01 12:46:36 | 000,000,000 | ---- | C] () -- C:\Windows\HPMProp.INI
  831. [2011/11/01 12:39:39 | 000,000,888 | RHS- | C] () -- C:\Users\franco.lr\ntuser.pol
  832. [2011/11/01 12:39:33 | 000,524,288 | -HS- | C] () -- C:\Users\franco.lr\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
  833. [2011/11/01 12:39:33 | 000,000,020 | -HS- | C] () -- C:\Users\franco.lr\ntuser.ini
  834. [2011/11/01 12:39:32 | 014,417,920 | -HS- | C] () -- C:\Users\franco.lr\NTUSER.DAT
  835. [2011/11/01 12:39:32 | 000,524,288 | -HS- | C] () -- C:\Users\franco.lr\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
  836. [2011/11/01 12:39:32 | 000,118,288 | ---- | C] () -- C:\Users\franco.lr\AppData\Local\GDIPFONTCACHEV1.DAT
  837. [2011/11/01 12:39:32 | 000,065,536 | -HS- | C] () -- C:\Users\franco.lr\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
  838. [2011/11/01 12:39:30 | 000,009,871 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  839. [2011/11/01 12:19:52 | 000,000,780 | ---- | C] () -- C:\Windows\ODBC.INI
  840. [2011/11/01 12:13:12 | 000,000,542 | ---- | C] () -- C:\Windows\MAPLE.INI
  841. [2011/03/09 11:23:04 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
  842. [2011/03/09 11:22:58 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
  843. [2011/03/09 11:22:44 | 000,053,600 | ---- | C] () -- C:\Windows\System32\dosx.exe
  844.  
  845. [color=#E56717]========== ZeroAccess Check ==========[/color]
  846.  
  847. [2009/07/13 22:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  848.  
  849. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  850.  
  851. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  852.  
  853. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  854. "" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 22:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  855. "ThreadingModel" = Apartment
  856.  
  857. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  858. "" = %systemroot%\system32\wbem\fastprox.dll -- [2011/03/09 11:22:46 | 000,606,208 | ---- | M] (Microsoft Corporation)
  859. "ThreadingModel" = Free
  860.  
  861. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  862. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 19:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  863. "ThreadingModel" = Both
  864.  
  865. [color=#E56717]========== LOP Check ==========[/color]
  866.  
  867. [2012/11/14 13:10:13 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\.purple
  868. [2011/11/28 14:07:12 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\ArchestrA
  869. [2012/05/03 12:02:44 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Blackberry Desktop
  870. [2012/04/09 13:29:15 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\BPK
  871. [2011/11/22 15:05:43 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
  872. [2012/07/23 10:51:54 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\ESET
  873. [2012/11/20 13:13:44 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\FileZilla
  874. [2012/11/22 13:37:31 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\GlarySoft
  875. [2012/10/04 13:28:31 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\gtk-2.0
  876. [2012/07/26 15:57:49 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Juniper Networks
  877. [2011/11/03 14:48:01 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\MySQL
  878. [2011/11/03 10:58:57 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Notepad++
  879. [2011/12/09 14:46:52 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\OpenOffice.org
  880. [2011/11/16 09:50:14 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\pdfforge
  881. [2012/05/03 11:47:05 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Research In Motion
  882. [2012/06/04 12:09:22 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Subversion
  883. [2012/03/30 10:40:50 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Teeworlds
  884. [2012/09/04 13:49:33 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\webex
  885. [2011/11/10 13:33:49 | 000,000,000 | ---D | M] -- C:\Users\franco.lr\AppData\Roaming\Xerox
  886.  
  887. [color=#E56717]========== Purity Check ==========[/color]
  888.  
  889.  
  890.  
  891. [color=#E56717]========== Custom Scans ==========[/color]
  892.  
  893. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  894. [2011/11/09 11:14:15 | 000,001,024 | ---- | M] () -- C:\.rnd
  895. [2009/06/10 15:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
  896. [2012/11/22 14:43:27 | 000,018,001 | ---- | M] () -- C:\ComboFix.txt
  897. [2009/06/10 15:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
  898. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1028.txt
  899. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1031.txt
  900. [2007/11/07 07:00:40 | 000,010,134 | ---- | M] () -- C:\eula.1033.txt
  901. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1036.txt
  902. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1040.txt
  903. [2007/11/07 07:00:40 | 000,000,118 | ---- | M] () -- C:\eula.1041.txt
  904. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.1042.txt
  905. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.2052.txt
  906. [2007/11/07 07:00:40 | 000,017,734 | ---- | M] () -- C:\eula.3082.txt
  907. [2007/11/07 07:00:40 | 000,001,110 | ---- | M] () -- C:\globdata.ini
  908. [2012/11/22 11:19:27 | 1589,612,544 | -HS- | M] () -- C:\hiberfil.sys
  909. [2007/11/07 07:00:40 | 000,000,843 | ---- | M] () -- C:\install.ini
  910. [2012/11/16 16:03:01 | 000,007,855 | ---- | M] () -- C:\Install.log
  911. [2007/11/07 07:03:18 | 000,076,304 | ---- | M] (Microsoft Corporation) -- C:\install.res.1028.dll
  912. [2007/11/07 07:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.1031.dll
  913. [2007/11/07 07:03:18 | 000,091,152 | ---- | M] (Microsoft Corporation) -- C:\install.res.1033.dll
  914. [2007/11/07 07:03:18 | 000,097,296 | ---- | M] (Microsoft Corporation) -- C:\install.res.1036.dll
  915. [2007/11/07 07:03:18 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll
  916. [2007/11/07 07:03:18 | 000,081,424 | ---- | M] (Microsoft Corporation) -- C:\install.res.1041.dll
  917. [2007/11/07 07:03:18 | 000,079,888 | ---- | M] (Microsoft Corporation) -- C:\install.res.1042.dll
  918. [2007/11/07 07:03:18 | 000,075,792 | ---- | M] (Microsoft Corporation) -- C:\install.res.2052.dll
  919. [2007/11/07 07:03:18 | 000,096,272 | ---- | M] (Microsoft Corporation) -- C:\install.res.3082.dll
  920. [2012/06/25 14:01:58 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
  921. [2012/06/25 14:01:58 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
  922. [2012/11/22 11:19:33 | 2119,487,488 | -HS- | M] () -- C:\pagefile.sys
  923. [2007/11/07 07:00:40 | 000,005,686 | ---- | M] () -- C:\vcredist.bmp
  924. [2007/11/07 07:09:22 | 001,442,522 | ---- | M] () -- C:\VC_RED.cab
  925. [2007/11/07 07:12:28 | 000,232,960 | ---- | M] () -- C:\VC_RED.MSI
  926.  
  927. [color=#E56717]========== Alternate Data Streams ==========[/color]
  928.  
  929. @Alternate Data Stream - 254 bytes -> C:\ProgramData\TEMP:8927A071
  930.  
  931. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!