API tools faq
paste
Advertisement
Guest User

OTL

a guest
Aug 7th, 2013
50
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 100.59 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 8/8/2013 10:04:41 AM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\NeoX12\Desktop
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16635)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 3.90 Gb Total Physical Memory | 1.64 Gb Available Physical Memory | 41.96% Memory free
  8. 7.90 Gb Paging File | 4.33 Gb Available in Paging File | 54.86% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 195.31 Gb Total Space | 115.06 Gb Free Space | 58.91% Space Free | Partition Type: NTFS
  13. Drive D: | 27.32 Gb Total Space | 3.24 Gb Free Space | 11.86% Space Free | Partition Type: NTFS
  14. Drive G: | 708.10 Gb Total Space | 125.05 Gb Free Space | 17.66% Space Free | Partition Type: NTFS
  15. Drive V: | 400.00 Gb Total Space | 153.86 Gb Free Space | 38.46% Space Free | Partition Type: NTFS
  16.  
  17. Computer Name: SIS | User Name: NeoX12 | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  19. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - [2013/08/08 10:04:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\NeoX12\Desktop\OTL.exe
  24. PRC - [2013/07/24 08:50:04 | 000,070,352 | ---- | M] (Comodo Security Solutions Inc.) -- C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
  25. PRC - [2013/07/14 10:29:48 | 000,508,048 | ---- | M] (QFX Software Corporation) -- C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
  26. PRC - [2013/07/12 16:44:36 | 000,217,992 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
  27. PRC - [2013/06/21 07:04:14 | 000,831,272 | ---- | M] (AnchorFree Inc.) -- C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
  28. PRC - [2013/06/21 06:51:32 | 000,548,136 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
  29. PRC - [2013/06/21 06:48:00 | 001,642,280 | ---- | M] (AnchorFree Inc.) -- C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe
  30. PRC - [2013/06/15 19:14:38 | 003,573,624 | R--- | M] (Tonec Inc.) -- G:\Internet Download Manager\IDMan.exe
  31. PRC - [2013/06/02 23:59:01 | 001,516,496 | ---- | M] (TrueCrypt Foundation) -- C:\Program Files\TrueCrypt\TrueCrypt.exe
  32. PRC - [2013/05/30 08:47:44 | 001,851,088 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
  33. PRC - [2013/05/29 18:19:04 | 002,094,216 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
  34. PRC - [2013/05/09 14:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- G:\Avast\AvastUI.exe
  35. PRC - [2013/05/09 14:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- G:\Avast\AvastSvc.exe
  36. PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  37. PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  38. PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
  39. PRC - [2013/02/07 09:20:20 | 001,641,768 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
  40. PRC - [2013/02/07 09:20:08 | 003,695,912 | ---- | M] (AuthenTec Inc.) -- C:\Program Files (x86)\HP SimplePass\TouchControl.exe
  41. PRC - [2013/02/07 09:19:54 | 004,073,768 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
  42. PRC - [2012/12/12 19:44:48 | 000,268,248 | ---- | M] (Tonec Inc.) -- G:\Internet Download Manager\IEMonitor.exe
  43. PRC - [2012/11/05 16:14:34 | 001,343,904 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
  44. PRC - [2012/11/01 02:35:20 | 000,357,016 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
  45. PRC - [2012/11/01 02:34:52 | 000,435,864 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
  46. PRC - [2012/11/01 01:57:50 | 013,234,176 | ---- | M] () -- G:\Genius Keyboard Drivers\vmware-hostd.exe
  47. PRC - [2012/11/01 00:48:42 | 000,079,872 | ---- | M] (VMware, Inc.) -- G:\Genius Keyboard Drivers\vmware-authd.exe
  48. PRC - [2012/10/13 03:16:50 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
  49. PRC - [2012/10/12 15:33:10 | 001,026,432 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
  50. PRC - [2012/09/29 00:42:26 | 000,014,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  51. PRC - [2012/09/27 04:46:36 | 001,612,552 | ---- | M] (IVT Corporation) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
  52. PRC - [2012/09/24 21:59:16 | 000,490,880 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
  53. PRC - [2012/09/20 07:36:42 | 000,371,976 | ---- | M] (IVT Corporation) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
  54. PRC - [2012/09/08 07:33:08 | 000,581,024 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
  55. PRC - [2012/09/08 07:33:08 | 000,035,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
  56. PRC - [2012/07/18 07:10:32 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  57. PRC - [2012/07/18 07:10:30 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  58. PRC - [2012/07/18 07:10:16 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  59. PRC - [2012/06/08 09:34:06 | 000,111,120 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
  60. PRC - [2010/06/25 10:01:04 | 000,798,720 | ---- | M] () -- C:\Program Files\QUBEE WCM\QUBEE WCM.exe
  61. PRC - [2010/05/27 15:00:28 | 000,090,112 | ---- | M] (Green Packet Inc.) -- C:\Program Files\QUBEE WCM\GPCommonService.exe
  62. PRC - [2010/05/07 09:55:46 | 000,075,776 | ---- | M] (MediaTek Inc.) -- C:\Program Files\QUBEE WCM\WiMAX\WmMMgr.exe
  63. PRC - [2009/12/10 11:16:10 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
  64.  
  65.  
  66. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  67.  
  68. MOD - [2013/07/11 21:57:47 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\7c997aecab8a83df524e081283d66bc6\System.ServiceModel.Internals.ni.dll
  69. MOD - [2013/07/11 21:57:47 | 000,121,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\de1d908e04221344949ab6da55aa4aba\SMDiagnostics.ni.dll
  70. MOD - [2013/07/10 16:26:31 | 007,566,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a78b71db2984a6ec1cf110e4118603f3\System.Xml.ni.dll
  71. MOD - [2013/07/10 16:26:24 | 012,698,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\cae4b27345e2bab9e11b8c9c8ca3fe83\System.Windows.Forms.ni.dll
  72. MOD - [2013/07/10 16:25:57 | 002,786,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\63c905a4148011c72921a8b986ab8526\System.Runtime.Serialization.ni.dll
  73. MOD - [2013/07/10 16:21:50 | 001,631,744 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\6a84c818148c37e1585c0422cae02fb0\System.Drawing.ni.dll
  74. MOD - [2013/07/10 16:21:42 | 000,964,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5f9957f3dee5c7bc9f1bef69a923cf9d\System.Configuration.ni.dll
  75. MOD - [2013/07/10 16:21:15 | 006,998,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2753f437d6e45747bcf7077d338fd8a3\System.Core.ni.dll
  76. MOD - [2013/07/10 16:21:09 | 009,937,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\9823be5b56f36a3be7905df81b9c3683\System.ni.dll
  77. MOD - [2013/07/10 16:21:03 | 000,197,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\1fc03f9a739f1ac6b62134debfafd32b\CustomMarshalers.ni.dll
  78. MOD - [2013/07/10 16:21:02 | 016,547,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\5e3a9f3d64adfb3c69b49d37368bf454\mscorlib.ni.dll
  79. MOD - [2013/06/21 06:46:22 | 000,749,352 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\af_proxy.dll
  80. MOD - [2013/02/07 09:19:54 | 004,073,768 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
  81. MOD - [2012/09/20 07:36:54 | 000,018,696 | ---- | M] () -- C:\Windows\SysWOW64\SCChangeMonitor.dll
  82. MOD - [2012/09/20 07:36:48 | 000,026,888 | ---- | M] () -- C:\Windows\SysWOW64\BsTrace.dll
  83. MOD - [2012/09/20 07:36:46 | 000,352,008 | ---- | M] () -- C:\Windows\SysWOW64\BsExtendFunc.dll
  84. MOD - [2012/09/20 07:36:46 | 000,070,408 | ---- | M] () -- C:\Windows\SysWOW64\BsProfileFunc.dll
  85. MOD - [2012/06/09 00:34:06 | 000,016,400 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
  86. MOD - [2012/06/08 09:34:06 | 000,627,216 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
  87. MOD - [2010/06/25 10:01:04 | 000,798,720 | ---- | M] () -- C:\Program Files\QUBEE WCM\QUBEE WCM.exe
  88. MOD - [2010/06/16 12:23:56 | 000,172,032 | ---- | M] () -- C:\Program Files\QUBEE WCM\Plugins\P1UpdateMgrPlugin.dll
  89. MOD - [2010/06/15 10:33:18 | 000,106,496 | ---- | M] () -- C:\Program Files\QUBEE WCM\WiMAX\MTKWimaxSDK.dll
  90. MOD - [2010/05/27 16:05:20 | 000,159,744 | ---- | M] () -- C:\Program Files\QUBEE WCM\WiMAX\gpwimaxformtk.dll
  91. MOD - [2010/05/27 15:42:36 | 000,376,832 | ---- | M] () -- C:\Program Files\QUBEE WCM\ConnectionManager.dll
  92. MOD - [2010/05/27 14:32:14 | 000,023,040 | ---- | M] () -- C:\Program Files\QUBEE WCM\gplib.dll
  93. MOD - [2010/03/16 12:27:56 | 000,017,920 | ---- | M] () -- C:\Program Files\QUBEE WCM\GPSingleInstance.dll
  94. MOD - [2010/02/22 20:44:40 | 000,027,648 | ---- | M] () -- C:\Program Files\QUBEE WCM\imageformats\qico4.dll
  95. MOD - [2010/02/22 20:44:34 | 000,290,816 | ---- | M] () -- C:\Program Files\QUBEE WCM\imageformats\qtiff4.dll
  96. MOD - [2010/02/22 20:44:04 | 000,233,472 | ---- | M] () -- C:\Program Files\QUBEE WCM\imageformats\qmng4.dll
  97. MOD - [2010/02/22 20:43:46 | 000,022,016 | ---- | M] () -- C:\Program Files\QUBEE WCM\imageformats\qgif4.dll
  98. MOD - [2010/02/22 20:43:40 | 000,135,168 | ---- | M] () -- C:\Program Files\QUBEE WCM\imageformats\qjpeg4.dll
  99. MOD - [2009/12/10 12:13:46 | 008,314,880 | ---- | M] () -- C:\Program Files\QUBEE WCM\QtGui4.dll
  100. MOD - [2009/12/10 12:01:40 | 000,966,656 | ---- | M] () -- C:\Program Files\QUBEE WCM\QtNetwork4.dll
  101. MOD - [2009/12/10 12:00:28 | 000,364,544 | ---- | M] () -- C:\Program Files\QUBEE WCM\QtXml4.dll
  102. MOD - [2009/12/10 12:00:20 | 002,240,512 | ---- | M] () -- C:\Program Files\QUBEE WCM\QtCore4.dll
  103. MOD - [2009/09/15 18:20:50 | 000,177,152 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madbasic_.bpl
  104. MOD - [2009/09/15 18:20:50 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\maddisAsm_.bpl
  105. MOD - [2009/09/15 18:20:46 | 000,342,528 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\madexcept_.bpl
  106.  
  107.  
  108. [color=#E56717]========== Services (SafeList) ==========[/color]
  109.  
  110. SRV:[b]64bit:[/b] - [2013/07/10 03:12:52 | 000,327,680 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
  111. SRV:[b]64bit:[/b] - [2013/06/01 15:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  112. SRV:[b]64bit:[/b] - [2013/05/24 02:12:02 | 000,143,120 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)
  113. SRV:[b]64bit:[/b] - [2013/05/04 12:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  114. SRV:[b]64bit:[/b] - [2013/05/04 12:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  115. SRV:[b]64bit:[/b] - [2013/04/09 10:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  116. SRV:[b]64bit:[/b] - [2013/03/22 12:13:52 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  117. SRV:[b]64bit:[/b] - [2013/03/02 08:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  118. SRV:[b]64bit:[/b] - [2013/03/02 08:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  119. SRV:[b]64bit:[/b] - [2013/01/29 07:57:14 | 000,014,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  120. SRV:[b]64bit:[/b] - [2013/01/10 05:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  121. SRV:[b]64bit:[/b] - [2013/01/10 05:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  122. SRV:[b]64bit:[/b] - [2013/01/07 23:31:42 | 000,401,856 | ---- | M] (AuthenTec, Inc.) [On_Demand | Running] -- C:\Program Files\Common Files\AuthenTec\TrueService.exe -- (TrueService)
  123. SRV:[b]64bit:[/b] - [2012/12/02 03:32:29 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  124. SRV:[b]64bit:[/b] - [2012/12/02 03:32:07 | 002,367,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  125. SRV:[b]64bit:[/b] - [2012/09/24 13:40:56 | 000,031,040 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
  126. SRV:[b]64bit:[/b] - [2012/09/18 16:38:00 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  127. SRV:[b]64bit:[/b] - [2012/09/11 23:14:40 | 000,390,672 | ---- | M] () [Auto | Running] -- C:\Program Files\Cyberlink\Shared files\RichVideo64.exe -- (RichVideo64)
  128. SRV:[b]64bit:[/b] - [2012/09/06 14:47:02 | 000,028,160 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\valWBFPolicyService.exe -- (valWBFPolicyService)
  129. SRV:[b]64bit:[/b] - [2012/07/26 09:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  130. SRV:[b]64bit:[/b] - [2012/07/26 09:07:42 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  131. SRV:[b]64bit:[/b] - [2012/07/26 09:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  132. SRV:[b]64bit:[/b] - [2012/07/26 09:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  133. SRV:[b]64bit:[/b] - [2012/07/26 09:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  134. SRV:[b]64bit:[/b] - [2012/07/26 09:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  135. SRV:[b]64bit:[/b] - [2012/07/26 09:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  136. SRV:[b]64bit:[/b] - [2012/07/26 09:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  137. SRV:[b]64bit:[/b] - [2012/07/26 09:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  138. SRV:[b]64bit:[/b] - [2012/07/26 09:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  139. SRV:[b]64bit:[/b] - [2012/07/26 09:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
  140. SRV:[b]64bit:[/b] - [2012/07/26 06:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  141. SRV:[b]64bit:[/b] - [2012/07/26 06:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  142. SRV:[b]64bit:[/b] - [2012/07/26 06:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  143. SRV:[b]64bit:[/b] - [2012/07/26 06:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  144. SRV:[b]64bit:[/b] - [2012/07/26 06:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  145. SRV:[b]64bit:[/b] - [2012/07/26 06:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  146. SRV:[b]64bit:[/b] - [2012/05/30 13:11:34 | 000,149,544 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
  147. SRV:[b]64bit:[/b] - [2012/04/21 03:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  148. SRV:[b]64bit:[/b] - [2010/05/31 14:20:50 | 000,110,592 | ---- | M] (Green Packet Inc.) [Auto | Running] -- C:\Program Files\QUBEE WCM\GPCommonServicex64.exe -- (GPCommonService(64)
  149. SRV:[b]64bit:[/b] - [2010/05/27 15:00:28 | 000,090,112 | ---- | M] (Green Packet Inc.) [Auto | Running] -- C:\Program Files\QUBEE WCM\GPCommonService.exe -- (GPCommonService)
  150. SRV - [2013/07/24 08:50:04 | 000,070,352 | ---- | M] (Comodo Security Solutions Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher)
  151. SRV - [2013/06/21 07:11:32 | 000,078,512 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Hotspot Shield\bin\HSSTrayService.exe -- (HssTrayService)
  152. SRV - [2013/06/21 07:04:14 | 000,831,272 | ---- | M] (AnchorFree Inc.) [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe -- (hshld)
  153. SRV - [2013/06/21 06:51:32 | 000,548,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -- (HssWd)
  154. SRV - [2013/06/18 20:21:21 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  155. SRV - [2013/05/30 08:47:44 | 001,851,088 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP)
  156. SRV - [2013/05/29 18:19:04 | 002,094,216 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater)
  157. SRV - [2013/05/09 14:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- G:\Avast\AvastSvc.exe -- (avast! Antivirus)
  158. SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  159. SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  160. SRV - [2013/03/22 12:13:52 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
  161. SRV - [2013/02/07 09:20:20 | 001,641,768 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe -- (FPLService)
  162. SRV - [2012/11/01 02:35:20 | 000,357,016 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
  163. SRV - [2012/11/01 02:34:52 | 000,435,864 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
  164. SRV - [2012/11/01 01:57:50 | 013,234,176 | ---- | M] () [Auto | Running] -- G:\Genius Keyboard Drivers\vmware-hostd.exe -- (VMwareHostd)
  165. SRV - [2012/11/01 00:48:42 | 000,079,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- G:\Genius Keyboard Drivers\vmware-authd.exe -- (VMAuthdService)
  166. SRV - [2012/10/13 07:22:08 | 000,035,744 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe -- (HPConnectedRemote)
  167. SRV - [2012/10/12 15:33:10 | 001,026,432 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe -- (AdvancedSystemCareService6)
  168. SRV - [2012/10/11 17:15:30 | 000,918,680 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe -- (VMUSBArbService)
  169. SRV - [2012/09/29 00:42:26 | 000,014,904 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  170. SRV - [2012/09/28 01:55:16 | 000,086,528 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service)
  171. SRV - [2012/09/27 04:46:36 | 001,612,552 | ---- | M] (IVT Corporation) [Auto | Running] -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe -- (BlueSoleilCS)
  172. SRV - [2012/09/20 07:37:04 | 000,146,184 | ---- | M] (IVT Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe -- (BsHelpCS)
  173. SRV - [2012/09/08 07:33:08 | 000,035,232 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)
  174. SRV - [2012/09/05 05:21:40 | 000,277,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  175. SRV - [2012/07/26 09:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
  176. SRV - [2012/07/26 09:18:41 | 000,408,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
  177. SRV - [2012/07/26 09:17:52 | 000,060,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
  178. SRV - [2012/07/18 07:10:32 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  179. SRV - [2012/07/18 07:10:30 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  180. SRV - [2012/07/18 07:10:16 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
  181. SRV - [2010/10/12 23:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  182. SRV - [2009/12/10 11:16:10 | 000,212,256 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe -- (RalinkRegistryWriter64)
  183. SRV - [2009/12/10 11:16:10 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe -- (RalinkRegistryWriter)
  184.  
  185.  
  186. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  187.  
  188. DRV:[b]64bit:[/b] - [2013/07/10 03:12:53 | 000,543,744 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\stwrt64.sys -- (STHDA)
  189. DRV:[b]64bit:[/b] - [2013/07/10 02:54:40 | 000,495,856 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\SynTP.sys -- (SynTP)
  190. DRV:[b]64bit:[/b] - [2013/07/10 02:54:30 | 000,033,008 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Smb_driver_Intel.sys -- (SmbDrvI)
  191. DRV:[b]64bit:[/b] - [2013/07/07 11:07:28 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  192. DRV:[b]64bit:[/b] - [2013/07/07 11:07:28 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  193. DRV:[b]64bit:[/b] - [2013/07/07 11:07:28 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  194. DRV:[b]64bit:[/b] - [2013/06/21 07:07:16 | 000,046,792 | ---- | M] (AnchorFree Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\hssdrv6.sys -- (HssDRV6)
  195. DRV:[b]64bit:[/b] - [2013/06/04 09:15:02 | 000,103,448 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssudbus.sys -- (dg_ssudbus)
  196. DRV:[b]64bit:[/b] - [2013/06/02 23:59:01 | 000,231,376 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\truecrypt.sys -- (truecrypt)
  197. DRV:[b]64bit:[/b] - [2013/06/01 17:54:16 | 000,194,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
  198. DRV:[b]64bit:[/b] - [2013/06/01 17:29:35 | 000,337,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
  199. DRV:[b]64bit:[/b] - [2013/06/01 17:29:35 | 000,213,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
  200. DRV:[b]64bit:[/b] - [2013/06/01 09:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Unknown (0) | Disabled | Unknown] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  201. DRV:[b]64bit:[/b] - [2013/05/31 20:53:12 | 000,222,200 | ---- | M] (QFX Software Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\keyscrambler.sys -- (KeyScrambler)
  202. DRV:[b]64bit:[/b] - [2013/05/09 14:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\aswRdr2.sys -- (aswRdr)
  203. DRV:[b]64bit:[/b] - [2013/05/09 14:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  204. DRV:[b]64bit:[/b] - [2013/05/09 14:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  205. DRV:[b]64bit:[/b] - [2013/05/09 14:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\aswMonFlt.sys -- (aswMonFlt)
  206. DRV:[b]64bit:[/b] - [2013/05/09 14:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  207. DRV:[b]64bit:[/b] - [2013/05/04 13:34:17 | 000,446,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
  208. DRV:[b]64bit:[/b] - [2013/05/04 13:34:15 | 000,284,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
  209. DRV:[b]64bit:[/b] - [2013/04/25 01:27:42 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\taphss6.sys -- (taphss6)
  210. DRV:[b]64bit:[/b] - [2013/04/15 07:02:04 | 002,482,960 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\netr28x.sys -- (netr28x)
  211. DRV:[b]64bit:[/b] - [2013/04/12 11:41:28 | 000,131,856 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  212. DRV:[b]64bit:[/b] - [2013/04/05 17:32:40 | 000,166,576 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\idmwfp.sys -- (IDMWFP)
  213. DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mbam.sys -- (MBAMProtector)
  214. DRV:[b]64bit:[/b] - [2013/03/22 12:13:52 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
  215. DRV:[b]64bit:[/b] - [2013/03/22 12:10:04 | 000,058,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
  216. DRV:[b]64bit:[/b] - [2013/03/22 12:10:04 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
  217. DRV:[b]64bit:[/b] - [2013/03/22 12:01:25 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  218. DRV:[b]64bit:[/b] - [2013/03/02 16:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
  219. DRV:[b]64bit:[/b] - [2013/03/02 16:45:20 | 000,148,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
  220. DRV:[b]64bit:[/b] - [2013/03/02 16:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
  221. DRV:[b]64bit:[/b] - [2013/01/29 07:57:05 | 000,035,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
  222. DRV:[b]64bit:[/b] - [2013/01/29 05:08:22 | 000,230,904 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
  223. DRV:[b]64bit:[/b] - [2013/01/25 22:44:20 | 000,058,360 | ---- | M] (NetFilterSDK.com) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\networx.sys -- (networx)
  224. DRV:[b]64bit:[/b] - [2013/01/11 19:02:34 | 000,064,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
  225. DRV:[b]64bit:[/b] - [2013/01/10 07:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
  226. DRV:[b]64bit:[/b] - [2012/12/02 03:32:05 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
  227. DRV:[b]64bit:[/b] - [2012/12/02 03:32:05 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
  228. DRV:[b]64bit:[/b] - [2012/12/02 03:32:05 | 000,120,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
  229. DRV:[b]64bit:[/b] - [2012/11/27 09:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Unknown (0) | Disabled | Unknown] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
  230. DRV:[b]64bit:[/b] - [2012/11/20 10:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
  231. DRV:[b]64bit:[/b] - [2012/11/01 02:34:54 | 000,067,224 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmx86.sys -- (vmx86)
  232. DRV:[b]64bit:[/b] - [2012/11/01 02:34:32 | 000,030,360 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmnetuserif.sys -- (VMnetuserif)
  233. DRV:[b]64bit:[/b] - [2012/11/01 02:34:10 | 000,045,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\vmnetbridge.sys -- (VMnetBridge)
  234. DRV:[b]64bit:[/b] - [2012/11/01 02:34:08 | 000,020,120 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\vmnetadapter.sys -- (VMnetAdapter)
  235. DRV:[b]64bit:[/b] - [2012/11/01 02:34:04 | 000,032,920 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\VMkbd.sys -- (vmkbd)
  236. DRV:[b]64bit:[/b] - [2012/10/24 14:17:14 | 000,070,296 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\vsock.sys -- (vsock)
  237. DRV:[b]64bit:[/b] - [2012/10/24 14:17:10 | 000,085,104 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\vmci.sys -- (vmci)
  238. DRV:[b]64bit:[/b] - [2012/10/11 17:15:32 | 000,052,376 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\hcmon.sys -- (hcmon)
  239. DRV:[b]64bit:[/b] - [2012/10/11 17:15:06 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmusb.sys -- (vmusb)
  240. DRV:[b]64bit:[/b] - [2012/10/03 05:44:02 | 000,692,832 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rtbth.sys -- (rtbth)
  241. DRV:[b]64bit:[/b] - [2012/10/02 23:58:14 | 000,048,608 | ---- | M] (Ralink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IvtUrbBtFlt.sys -- (btUrbFilterDrv)
  242. DRV:[b]64bit:[/b] - [2012/09/29 15:37:04 | 000,650,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA)
  243. DRV:[b]64bit:[/b] - [2012/09/24 13:40:56 | 000,043,840 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Accelerometer.sys -- (Accelerometer)
  244. DRV:[b]64bit:[/b] - [2012/09/24 13:40:56 | 000,031,040 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\hpdskflt.sys -- (hpdskflt)
  245. DRV:[b]64bit:[/b] - [2012/09/18 18:15:48 | 010,316,800 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmdag.sys -- (amdkmdag)
  246. DRV:[b]64bit:[/b] - [2012/09/18 16:12:42 | 000,370,688 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\atikmpag.sys -- (amdkmdap)
  247. DRV:[b]64bit:[/b] - [2012/09/05 05:21:24 | 009,004,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdpmd64.sys -- (intelkmd)
  248. DRV:[b]64bit:[/b] - [2012/09/05 05:21:24 | 009,004,384 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)
  249. DRV:[b]64bit:[/b] - [2012/08/31 22:40:24 | 000,020,800 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WirelessButtonDriver64.sys -- (WirelessButtonDriver)
  250. DRV:[b]64bit:[/b] - [2012/08/25 07:38:26 | 000,041,272 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\Smb_driver_AMDASF.sys -- (SmbDrv)
  251. DRV:[b]64bit:[/b] - [2012/07/31 14:04:12 | 000,690,832 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
  252. DRV:[b]64bit:[/b] - [2012/07/31 07:31:30 | 000,294,544 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\RtsBaStor.sys -- (RSBASTOR)
  253. DRV:[b]64bit:[/b] - [2012/07/26 11:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  254. DRV:[b]64bit:[/b] - [2012/07/26 11:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
  255. DRV:[b]64bit:[/b] - [2012/07/26 11:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
  256. DRV:[b]64bit:[/b] - [2012/07/26 11:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
  257. DRV:[b]64bit:[/b] - [2012/07/26 11:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
  258. DRV:[b]64bit:[/b] - [2012/07/26 11:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
  259. DRV:[b]64bit:[/b] - [2012/07/26 11:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
  260. DRV:[b]64bit:[/b] - [2012/07/26 11:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
  261. DRV:[b]64bit:[/b] - [2012/07/26 11:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
  262. DRV:[b]64bit:[/b] - [2012/07/26 11:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
  263. DRV:[b]64bit:[/b] - [2012/07/26 11:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
  264. DRV:[b]64bit:[/b] - [2012/07/26 11:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  265. DRV:[b]64bit:[/b] - [2012/07/26 11:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
  266. DRV:[b]64bit:[/b] - [2012/07/26 11:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
  267. DRV:[b]64bit:[/b] - [2012/07/26 11:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
  268. DRV:[b]64bit:[/b] - [2012/07/26 11:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
  269. DRV:[b]64bit:[/b] - [2012/07/26 11:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
  270. DRV:[b]64bit:[/b] - [2012/07/26 10:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
  271. DRV:[b]64bit:[/b] - [2012/07/26 10:54:34 | 000,096,496 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
  272. DRV:[b]64bit:[/b] - [2012/07/26 10:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
  273. DRV:[b]64bit:[/b] - [2012/07/26 09:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
  274. DRV:[b]64bit:[/b] - [2012/07/26 08:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
  275. DRV:[b]64bit:[/b] - [2012/07/26 08:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
  276. DRV:[b]64bit:[/b] - [2012/07/26 08:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
  277. DRV:[b]64bit:[/b] - [2012/07/26 08:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
  278. DRV:[b]64bit:[/b] - [2012/07/26 08:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
  279. DRV:[b]64bit:[/b] - [2012/07/26 08:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
  280. DRV:[b]64bit:[/b] - [2012/07/26 08:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
  281. DRV:[b]64bit:[/b] - [2012/07/26 08:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
  282. DRV:[b]64bit:[/b] - [2012/07/26 08:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
  283. DRV:[b]64bit:[/b] - [2012/07/26 08:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
  284. DRV:[b]64bit:[/b] - [2012/07/26 08:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
  285. DRV:[b]64bit:[/b] - [2012/07/26 08:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
  286. DRV:[b]64bit:[/b] - [2012/07/26 08:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
  287. DRV:[b]64bit:[/b] - [2012/07/26 08:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
  288. DRV:[b]64bit:[/b] - [2012/07/26 08:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Unknown (0) | Disabled | Unknown] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
  289. DRV:[b]64bit:[/b] - [2012/07/26 08:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
  290. DRV:[b]64bit:[/b] - [2012/07/26 08:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
  291. DRV:[b]64bit:[/b] - [2012/07/26 08:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
  292. DRV:[b]64bit:[/b] - [2012/07/26 08:25:02 | 000,202,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\BthLEEnum.sys -- (BthLEEnum)
  293. DRV:[b]64bit:[/b] - [2012/07/26 08:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
  294. DRV:[b]64bit:[/b] - [2012/07/26 08:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
  295. DRV:[b]64bit:[/b] - [2012/07/26 08:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
  296. DRV:[b]64bit:[/b] - [2012/07/20 06:47:40 | 000,056,904 | ---- | M] (Ralink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\BtL2caScoIf.sys -- (BthL2caScoIfSrv)
  297. DRV:[b]64bit:[/b] - [2012/07/10 10:19:26 | 000,035,496 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\amdkmpfd.sys -- (amdkmpfd)
  298. DRV:[b]64bit:[/b] - [2012/06/25 23:24:50 | 000,092,536 | ---- | M] (CyberLink) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\CLVirtualDrive.sys -- (CLVirtualDrive)
  299. DRV:[b]64bit:[/b] - [2012/06/19 21:40:52 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IntcDAud.sys -- (IntcDAud)
  300. DRV:[b]64bit:[/b] - [2012/06/16 00:22:02 | 000,023,136 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\BtAudioBus.sys -- (BtAudioBusSrv)
  301. DRV:[b]64bit:[/b] - [2012/06/02 20:31:47 | 011,400,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NETwNe64.sys -- (NETwNe64)
  302. DRV:[b]64bit:[/b] - [2012/05/30 13:10:50 | 000,016,168 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\TurboB.sys -- (TurboB)
  303. DRV:[b]64bit:[/b] - [2011/07/22 22:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
  304. DRV:[b]64bit:[/b] - [2011/07/13 03:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
  305. DRV:[b]64bit:[/b] - [2010/10/06 20:32:50 | 001,510,240 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\netr28ux.sys -- (netr28ux)
  306. DRV:[b]64bit:[/b] - [2010/05/06 11:27:24 | 000,018,432 | ---- | M] (MediaTek Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\mtkwmptv_x64.sys -- (MTKWMPROT)
  307. DRV:[b]64bit:[/b] - [2010/05/06 11:27:14 | 000,153,600 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\mt7118vu_x64.sys -- (MT7118VU)
  308. DRV - [2013/06/17 16:51:31 | 000,022,912 | ---- | M] (AMD) [Kernel | On_Demand | Stopped] -- C:\Users\NeoX12\AppData\Local\Temp\getbus.sys -- (getbus)
  309.  
  310.  
  311. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  312.  
  313.  
  314. [color=#E56717]========== Internet Explorer ==========[/color]
  315.  
  316. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
  317. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPNTDFJS
  318. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  319. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
  320. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
  321. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  322. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPNTDFJS
  323. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  324. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
  325.  
  326. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDFJS
  327. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=HPNTDFJS
  328. IE - HKCU\..\SearchScopes,DefaultScope = {3420F484-E627-4C38-B8B4-C269EEADF2DA}
  329. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
  330. IE - HKCU\..\SearchScopes\{3420F484-E627-4C38-B8B4-C269EEADF2DA}: "URL" = http://search.us.com/serp?guid={E8FDBADB-36C8-4FD5-97B3-32E1C7F14ECA}&action=default_search&serpv=5&k={searchTerms}
  331. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  332.  
  333. [color=#E56717]========== FireFox ==========[/color]
  334.  
  335. FF - prefs.js..extensions.enabledAddons: mozilla_cc%40internetdownloadmanager.com:7.3.41
  336. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
  337.  
  338.  
  339. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
  340. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  341. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
  342. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
  343. FF - HKLM\Software\MozillaPlugins\@authentec.com/ffwloplugin: C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)
  344. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  345. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  346. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  347. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  348. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: G:\MS Office 2010\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  349. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: G:\MS Office 2010\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  350. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3503.0728: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  351. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  352. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  353. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  354. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  355. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  356. FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\NeoX12\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
  357.  
  358. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: G:\Avast\WebRep\FF [2013/07/07 11:06:35 | 000,000,000 | ---D | M]
  359. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  360. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  361. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\NeoX12\AppData\Roaming\IDM\idmmzcc5 [2013/08/05 17:56:29 | 000,000,000 | ---D | M]
  362. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\NeoX12\AppData\Roaming\IDM\idmmzcc5 [2013/08/05 17:56:29 | 000,000,000 | ---D | M]
  363.  
  364. [2013/07/09 20:59:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\NeoX12\AppData\Roaming\Mozilla\Extensions
  365. [2013/07/09 21:00:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\NeoX12\AppData\Roaming\Mozilla\Firefox\Profiles\jwe2pvxd.default\extensions
  366. [2013/07/09 21:00:34 | 000,000,000 | ---D | M] (Ant Video Downloader) -- C:\Users\NeoX12\AppData\Roaming\Mozilla\Firefox\Profiles\jwe2pvxd.default\extensions\anttoolbar@ant.com
  367. [2013/08/08 10:04:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  368. [2013/07/09 20:56:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  369. [2013/08/05 17:56:29 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\NEOX12\APPDATA\ROAMING\IDM\IDMMZCC5
  370.  
  371. [color=#E56717]========== Chrome ==========[/color]
  372.  
  373. CHR - default_search_provider: Google (Enabled)
  374. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
  375. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
  376. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll
  377. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  378. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll
  379. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll
  380. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll
  381. CHR - plugin: Simple Pass (Enabled) = C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll
  382. CHR - plugin: Intelu00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
  383. CHR - plugin: Intelu00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
  384. CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
  385. CHR - plugin: Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  386. CHR - plugin: Shockwave for Director (Enabled) = C:\windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll
  387. CHR - Extension: HP Product Detection Plugin = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\1.0.28.1_0\
  388. CHR - Extension: Google Drive = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  389. CHR - Extension: MafiaShare = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcnkbiihbkkichaoimipaokbeejalbla\1.0.0.0_0\
  390. CHR - Extension: YouTube = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  391. CHR - Extension: DoNotTrackMe = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.620_0\
  392. CHR - Extension: Website Logon = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\fegekclkdhbnfdcmomlpegkkndgnmfmo\6.0.100_0\
  393. CHR - Extension: HTTPS Everywhere = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2013.7.10_0\
  394. CHR - Extension: AdBlock = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0\
  395. CHR - Extension: Website Logon = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmbkhknacohfhbmmpnmbkgdffdbildof\6.0.100_0\
  396. CHR - Extension: IDM Integration = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.15.12.2_0\
  397. CHR - Extension: RoboForm Lite = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\kidhjpmgjfbkmcfpfakmdddddgfbhahj\4.6.7_0\
  398. CHR - Extension: Enhance Views = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\llgnkbjfcnjfgkgciddcohamdeendcoo\1.4_0\
  399. CHR - Extension: Gmail = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  400. CHR - Extension: Canvas Rider = C:\Users\NeoX12\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk\0.71_0\
  401.  
  402. O1 HOSTS File: ([2012/07/26 11:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
  403. O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - G:\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  404. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - G:\Avast\aswWebRepIE64.dll (AVAST Software)
  405. O2:[b]64bit:[/b] - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll (AnchorFree Inc.)
  406. O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - G:\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  407. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  408. O2 - BHO: (no name) - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - No CLSID value found.
  409. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - G:\Avast\aswWebRepIE.dll (AVAST Software)
  410. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - G:\MS Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation)
  411. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  412. O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
  413. O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
  414. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - G:\Avast\aswWebRepIE64.dll (AVAST Software)
  415. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - G:\Avast\aswWebRepIE.dll (AVAST Software)
  416. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
  417. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  418. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  419. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  420. O4:[b]64bit:[/b] - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
  421. O4:[b]64bit:[/b] - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
  422. O4:[b]64bit:[/b] - HKLM..\Run: [NetWorx] C:\Program Files\NetWorx\networx.exe (SoftPerfect Research)
  423. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  424. O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
  425. O4 - HKLM..\Run: [] File not found
  426. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  427. O4 - HKLM..\Run: [avast] G:\Avast\avastUI.exe (AVAST Software)
  428. O4 - HKLM..\Run: [BtTray] C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (IVT Corporation)
  429. O4 - HKLM..\Run: [CLVirtualDrive] C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe (CyberLink Corp.)
  430. O4 - HKLM..\Run: [gbrspcontrol] C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (Comodo Security Solutions, Inc.)
  431. O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.)
  432. O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
  433. O4 - HKLM..\Run: [KeyScrambler] C:\Program Files (x86)\KeyScrambler\keyscrambler.exe (QFX Software Corporation)
  434. O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
  435. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  436. O4 - HKLM..\Run: [vmware-tray.exe] G:\Genius Keyboard Drivers\vmware-tray.exe (VMware, Inc.)
  437. O4 - HKCU..\Run: [AdobeBridge] File not found
  438. O4 - HKCU..\Run: [Advanced SystemCare 6] C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe (IObit)
  439. O4 - HKCU..\Run: [Facebook Update] C:\Users\NeoX12\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  440. O4 - HKCU..\Run: [IDMan] G:\Internet Download Manager\IDMan.exe (Tonec Inc.)
  441. O4 - HKCU..\Run: [QUBEE WCM] C:\Program Files\QUBEE WCM\QUBEE WCM.exe ()
  442. O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
  443. O4 - HKCU..\Run: [Tiny download manager] C:\Users\NeoX12\AppData\Local\DM\TinyDM.exe (http://www.tinydm.com/)
  444. O4 - Startup: C:\Users\NeoX12\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\NeoX12\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
  445. O4 - Startup: C:\Users\NeoX12\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.6.lnk = File not found
  446. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  447. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  448. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  449. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  450. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  451. O8:[b]64bit:[/b] - Extra context menu item: Download all links with IDM - G:\Internet Download Manager\IEGetAll.htm ()
  452. O8:[b]64bit:[/b] - Extra context menu item: Download with IDM - G:\Internet Download Manager\IEExt.htm ()
  453. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - G:\MS Office 2010\Office14\EXCEL.EXE (Microsoft Corporation)
  454. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - G:\MS Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
  455. O8 - Extra context menu item: Download all links with IDM - G:\Internet Download Manager\IEGetAll.htm ()
  456. O8 - Extra context menu item: Download with IDM - G:\Internet Download Manager\IEExt.htm ()
  457. O8 - Extra context menu item: E&xport to Microsoft Excel - G:\MS Office 2010\Office14\EXCEL.EXE (Microsoft Corporation)
  458. O8 - Extra context menu item: Se&nd to OneNote - G:\MS Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
  459. O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
  460. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
  461. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\MS Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
  462. O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\MS Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
  463. O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - G:\MS Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  464. O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - G:\MS Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  465. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  466. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
  467. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
  468. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  469. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
  470. O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
  471. O13[b]64bit:[/b] - gopher Prefix: missing
  472. O13 - gopher Prefix: missing
  473. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 180.234.0.193 180.234.0.197
  474. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{09701B57-FF70-4380-881B-57C567B8776D}: DhcpNameServer = 180.234.0.193 180.234.0.197
  475. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3CE75C2C-490B-4F9F-8C4B-418F259746ED}: DhcpNameServer = 192.168.3.1 192.168.1.1
  476. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{41BE774C-7CF9-420D-96A1-979BA4A1B5D4}: DhcpNameServer = 180.234.0.193 180.234.0.197
  477. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  478. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  479. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  480. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll (Skype Technologies)
  481. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  482. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  483. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  484. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  485. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  486. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  487. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  488. O30 - LSA: Security Packages - (livessp) - File not found
  489. O32 - HKLM CDRom: AutoRun - 1
  490. O33 - MountPoints2\{86540f82-d4fc-11e2-be83-6c3be584be4c}\Shell - "" = AutoRun
  491. O33 - MountPoints2\{86540f82-d4fc-11e2-be83-6c3be584be4c}\Shell\AutoRun\command - "" = "I:\QUBEEWCM.exe"
  492. O33 - MountPoints2\{9461333c-d2af-11e2-be81-6c3be584be4c}\Shell - "" = AutoRun
  493. O33 - MountPoints2\{9461333c-d2af-11e2-be81-6c3be584be4c}\Shell\AutoRun\command - "" = "H:\QUBEEWCM.exe"
  494. O33 - MountPoints2\{adbc965a-cb90-11e2-be74-005056c00008}\Shell - "" = AutoRun
  495. O33 - MountPoints2\{adbc965a-cb90-11e2-be74-005056c00008}\Shell\AutoRun\command - "" = "F:\setup.exe"
  496. O34 - HKLM BootExecute: (autocheck autochk *)
  497. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  498. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  499. O35 - HKLM\..comfile [open] -- "%1" %*
  500. O35 - HKLM\..exefile [open] -- "%1" %*
  501. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  502. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  503. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  504. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  505. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  506. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  507.  
  508. NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
  509. NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
  510. NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
  511. NetSvcs:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
  512.  
  513. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  514. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  515. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  516. Drivers32: VIDC.VMnc - C:\Windows\SysWow64\vmnc.dll (VMware, Inc.)
  517. Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
  518. Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
  519.  
  520. CREATERESTOREPOINT
  521. Restore point Set: OTL Restore Point
  522.  
  523. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  524.  
  525. [2013/08/08 10:04:03 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\NeoX12\Desktop\OTL.exe
  526. [2013/08/08 00:17:55 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\Desktop\websiteprntscrn
  527. [2013/08/05 22:23:55 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\Desktop\Pinterest
  528. [2013/08/05 22:22:43 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\NeoX12\Desktop\dds.scr
  529. [2013/08/05 21:10:30 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\Desktop\The Real Book of Real Estate
  530. [2013/08/04 21:05:30 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\SUPERAntiSpyware.com
  531. [2013/08/04 21:04:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
  532. [2013/08/04 21:04:20 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
  533. [2013/08/04 21:04:20 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
  534. [2013/08/03 23:53:53 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\QFX Software
  535. [2013/08/03 23:53:53 | 000,000,000 | ---D | C] -- C:\ProgramData\QFX Software
  536. [2013/08/03 23:53:46 | 000,222,200 | ---- | C] (QFX Software Corporation) -- C:\Windows\SysNative\drivers\keyscrambler.sys
  537. [2013/08/03 23:53:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler
  538. [2013/08/03 23:53:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KeyScrambler
  539. [2013/08/03 23:00:02 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\Desktop\New folder - Copy
  540. [2013/08/02 18:13:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\COMODO
  541. [2013/08/02 16:56:33 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Hotspot Shield
  542. [2013/08/02 16:02:20 | 000,000,000 | ---D | C] -- C:\ProgramData\COMODO
  543. [2013/08/02 16:01:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
  544. [2013/08/02 16:01:35 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\Comodo
  545. [2013/08/02 16:01:31 | 000,056,072 | ---- | C] (COMODO CA Limited) -- C:\Windows\SysNative\certsentry.dll
  546. [2013/08/02 16:01:31 | 000,047,368 | ---- | C] (COMODO CA Limited) -- C:\Windows\SysWow64\certsentry.dll
  547. [2013/08/02 16:01:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Comodo
  548. [2013/07/29 23:20:26 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\Malwarebytes
  549. [2013/07/29 23:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  550. [2013/07/29 23:20:11 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  551. [2013/07/29 23:20:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  552. [2013/07/29 23:20:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  553. [2013/07/27 01:21:35 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
  554. [2013/07/27 01:21:30 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\IObit
  555. [2013/07/27 01:21:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 6
  556. [2013/07/27 01:21:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
  557. [2013/07/26 12:02:02 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CyberLink
  558. [2013/07/26 01:04:15 | 000,000,000 | R--D | C] -- C:\Users\NeoX12\Dropbox
  559. [2013/07/26 00:45:59 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
  560. [2013/07/26 00:42:56 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\Dropbox
  561. [2013/07/25 23:52:37 | 032,966,136 | ---- | C] (Dropbox, Inc.) -- C:\Users\NeoX12\Desktop\Dropbox 2.0.26.exe
  562. [2013/07/22 22:21:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
  563. [2013/07/22 22:21:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
  564. [2013/07/22 22:15:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
  565. [2013/07/22 22:14:52 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
  566. [2013/07/22 22:14:51 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
  567. [2013/07/22 22:14:51 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
  568. [2013/07/22 22:14:50 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
  569. [2013/07/22 22:12:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
  570. [2013/07/22 14:58:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
  571. [2013/07/22 14:58:16 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler
  572. [2013/07/22 14:53:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
  573. [2013/07/22 14:53:35 | 000,000,000 | ---D | C] -- C:\Free 3GP Video Converter
  574. [2013/07/22 14:53:29 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\DVDVideoSoft
  575. [2013/07/22 14:53:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
  576. [2013/07/22 14:53:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
  577. [2013/07/22 14:33:54 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\HandBrake
  578. [2013/07/22 14:33:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake
  579. [2013/07/21 21:27:15 | 000,058,360 | ---- | C] (NetFilterSDK.com) -- C:\Windows\SysNative\drivers\networx.sys
  580. [2013/07/21 21:27:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetWorx
  581. [2013/07/21 21:27:14 | 000,000,000 | ---D | C] -- C:\ProgramData\SoftPerfect
  582. [2013/07/21 21:27:14 | 000,000,000 | ---D | C] -- C:\Program Files\NetWorx
  583. [2013/07/18 23:12:01 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\gtk-2.0
  584. [2013/07/18 20:10:47 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\GameRanger
  585. [2013/07/18 19:41:25 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\PunkBuster
  586. [2013/07/18 19:38:00 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\TS3Client
  587. [2013/07/16 13:15:43 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\Documents\Electronic Arts
  588. [2013/07/16 13:08:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft WSE
  589. [2013/07/16 13:08:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
  590. [2013/07/14 14:30:31 | 000,000,000 | R--D | C] -- C:\Users\NeoX12\SkyDrive
  591. [2013/07/14 10:29:50 | 000,105,616 | ---- | C] (QFX Software Corporation) -- C:\Windows\SysNative\KeyScramblerLogon.dll
  592. [2013/07/12 19:34:46 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\ivtMobCache
  593. [2013/07/11 21:28:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
  594. [2013/07/10 22:20:41 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\A
  595. [2013/07/10 22:20:35 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\Geckofx
  596. [2013/07/10 22:14:15 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\Enhanceviews_Autowatcher
  597. [2013/07/10 15:29:44 | 002,219,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
  598. [2013/07/10 15:29:43 | 006,987,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  599. [2013/07/10 15:29:43 | 002,391,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
  600. [2013/07/10 15:29:43 | 002,106,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
  601. [2013/07/10 15:29:43 | 001,842,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
  602. [2013/07/10 15:29:42 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
  603. [2013/07/10 15:29:39 | 001,527,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll
  604. [2013/07/10 15:29:38 | 001,453,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll
  605. [2013/07/10 15:29:38 | 001,403,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
  606. [2013/07/10 15:29:38 | 001,271,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
  607. [2013/07/10 15:29:38 | 001,217,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
  608. [2013/07/10 15:29:38 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
  609. [2013/07/10 15:29:37 | 001,093,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
  610. [2013/07/10 15:29:37 | 001,048,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfasfsrcsnk.dll
  611. [2013/07/10 15:29:37 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfasfsrcsnk.dll
  612. [2013/07/10 15:29:37 | 000,583,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
  613. [2013/07/10 15:29:37 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
  614. [2013/07/10 15:29:37 | 000,337,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS
  615. [2013/07/10 15:29:37 | 000,213,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS
  616. [2013/07/10 15:29:37 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceSetupManager.dll
  617. [2013/07/10 15:29:37 | 000,194,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys
  618. [2013/07/10 15:29:37 | 000,125,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys
  619. [2013/07/10 15:29:37 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll
  620. [2013/07/10 15:29:37 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeParserTask.exe
  621. [2013/07/10 15:29:36 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
  622. [2013/07/10 15:29:36 | 000,037,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys
  623. [2013/07/10 04:08:38 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
  624. [2013/07/10 04:08:37 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
  625. [2013/07/10 04:06:46 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
  626. [2013/07/10 04:05:52 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  627. [2013/07/10 04:05:46 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  628. [2013/07/10 04:05:44 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  629. [2013/07/10 04:05:43 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  630. [2013/07/10 04:05:43 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  631. [2013/07/10 04:03:58 | 002,842,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
  632. [2013/07/10 04:03:58 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
  633. [2013/07/10 03:14:34 | 002,189,312 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapo64.dll
  634. [2013/07/10 03:14:34 | 000,672,256 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll
  635. [2013/07/10 03:14:34 | 000,543,744 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\drivers\stwrt64.sys
  636. [2013/07/10 03:14:34 | 000,499,200 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stcplx64.dll
  637. [2013/07/10 03:14:34 | 000,256,000 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\st646433.dll
  638. [2013/07/10 03:13:51 | 000,000,000 | ---D | C] -- C:\Program Files\IDT
  639. [2013/07/10 02:55:18 | 000,192,240 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\SynTPCo18.dll
  640. [2013/07/10 02:55:18 | 000,151,280 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynTPCom.dll
  641. [2013/07/10 02:55:17 | 000,495,856 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\SynTP.sys
  642. [2013/07/10 02:55:17 | 000,264,432 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\SynTPAPI.dll
  643. [2013/07/10 02:55:07 | 001,060,080 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\SynCOM.dll
  644. [2013/07/10 02:55:07 | 000,544,496 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynCom.dll
  645. [2013/07/10 02:54:57 | 000,033,008 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys
  646. [2013/07/09 21:29:17 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\Macromedia
  647. [2013/07/09 20:56:25 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\Mozilla
  648. [2013/07/09 20:56:24 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Roaming\Mozilla
  649. [2013/07/09 20:56:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
  650. [2013/07/09 20:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
  651. [2013/07/09 20:56:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  652. [2013/07/09 19:18:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
  653. [2013/07/09 19:17:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  654. [2013/07/09 19:15:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
  655. [2013/07/09 19:15:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
  656. [2013/07/09 19:14:52 | 000,000,000 | ---D | C] -- C:\Users\NeoX12\AppData\Local\Microsoft Help
  657. [2013/07/09 19:14:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
  658. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  659.  
  660. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  661.  
  662. [2013/08/08 10:04:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\NeoX12\Desktop\OTL.exe
  663. [2013/08/08 09:49:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  664. [2013/08/08 08:42:24 | 000,000,950 | ---- | M] () -- C:\Windows\SysWow64\bscs.ini
  665. [2013/08/08 08:39:30 | 000,000,178 | ---- | M] () -- C:\Windows\SysWow64\0_default.pf
  666. [2013/08/08 08:39:21 | 000,003,620 | ---- | M] () -- C:\Windows\SysWow64\LOCALSERVICE.INI
  667. [2013/08/08 08:39:15 | 000,000,043 | ---- | M] () -- C:\Windows\SysWow64\LOCALDEVICE.INI
  668. [2013/08/08 08:39:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  669. [2013/08/08 02:24:08 | 000,000,168 | ---- | M] () -- C:\Windows\SysWow64\REMOTEDEVICE.INI
  670. [2013/08/08 02:22:20 | 000,035,842 | ---- | M] () -- C:\Users\NeoX12\Desktop\923352_587075731332843_380666374_n.jpg
  671. [2013/08/08 02:21:51 | 000,038,884 | ---- | M] () -- C:\Users\NeoX12\Desktop\7a38d12ec4959ade27a663889fa23723 (1).jpg
  672. [2013/08/08 02:21:25 | 000,037,772 | ---- | M] () -- C:\Users\NeoX12\Desktop\7a38d12ec4959ade27a663889fa23723.jpg
  673. [2013/08/08 02:02:03 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1322676194-1508500306-2087189484-1001UA.job
  674. [2013/08/08 01:12:32 | 003,477,863 | ---- | M] () -- C:\Users\NeoX12\Desktop\sentimp.rar
  675. [2013/08/08 00:50:51 | 003,512,668 | ---- | M] () -- C:\Users\NeoX12\Desktop\sentimp.png
  676. [2013/08/08 00:17:30 | 000,407,032 | ---- | M] () -- C:\Users\NeoX12\Desktop\websiteprntscrn.rar
  677. [2013/08/07 23:04:44 | 000,053,096 | ---- | M] () -- C:\Users\NeoX12\Desktop\About Is.png
  678. [2013/08/07 23:02:01 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1322676194-1508500306-2087189484-1001Core.job
  679. [2013/08/05 22:24:26 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\NeoX12\Desktop\dds.scr
  680. [2013/08/05 20:24:36 | 000,010,861 | ---- | M] () -- C:\Users\NeoX12\Desktop\cares.png
  681. [2013/08/05 19:57:02 | 000,063,622 | ---- | M] () -- C:\Users\NeoX12\Desktop\Mandarina by Cristina Otero.jpg
  682. [2013/08/05 17:49:20 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  683. [2013/08/05 17:42:29 | 000,947,206 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  684. [2013/08/05 17:42:29 | 000,787,616 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  685. [2013/08/05 17:42:29 | 000,160,114 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  686. [2013/08/05 17:32:17 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  687. [2013/08/05 13:58:30 | 3348,959,232 | -HS- | M] () -- C:\hiberfil.sys
  688. [2013/08/04 21:04:24 | 000,001,808 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
  689. [2013/08/04 01:22:17 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  690. [2013/08/03 23:00:41 | 000,000,069 | ---- | M] () -- C:\Users\NeoX12\Desktop\samia.rar
  691. [2013/08/03 22:09:02 | 000,006,079 | ---- | M] () -- C:\Users\NeoX12\Desktop\farez.png
  692. [2013/08/02 18:14:58 | 000,001,250 | ---- | M] () -- C:\Users\NeoX12\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
  693. [2013/08/02 18:13:39 | 000,002,043 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
  694. [2013/08/02 17:48:04 | 880,453,675 | ---- | M] () -- C:\Windows\MEMORY.DMP
  695. [2013/08/02 16:01:31 | 000,056,072 | ---- | M] (COMODO CA Limited) -- C:\Windows\SysNative\certsentry.dll
  696. [2013/08/02 16:01:31 | 000,047,368 | ---- | M] (COMODO CA Limited) -- C:\Windows\SysWow64\certsentry.dll
  697. [2013/08/02 15:57:39 | 000,036,044 | ---- | M] () -- C:\Users\NeoX12\Desktop\i3KLRCY.jpg
  698. [2013/08/01 23:47:23 | 000,028,225 | ---- | M] () -- C:\Users\NeoX12\Desktop\625447_10201486740108000_2026219108_n.jpg
  699. [2013/07/31 16:58:33 | 006,411,025 | ---- | M] () -- C:\Users\NeoX12\Desktop\unnamed--61e6c10b2f.jpg
  700. [2013/07/31 16:51:25 | 000,019,558 | ---- | M] () -- C:\Users\NeoX12\Desktop\576.jpg
  701. [2013/07/30 02:03:16 | 000,681,612 | ---- | M] () -- C:\Users\NeoX12\Desktop\Google Plus.png
  702. [2013/07/30 02:02:08 | 000,054,666 | ---- | M] () -- C:\Users\NeoX12\Desktop\1017289_10201602257445349_885844170_n.jpg
  703. [2013/07/30 01:50:06 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01007.Wdf
  704. [2013/07/30 01:01:21 | 000,148,013 | ---- | M] () -- C:\Users\NeoX12\Desktop\av_lp700-4_gal2_1920x1080.jpg
  705. [2013/07/29 23:20:12 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  706. [2013/07/29 22:42:49 | 000,553,476 | ---- | M] () -- C:\Users\NeoX12\Desktop\Untitled.png
  707. [2013/07/29 02:12:04 | 005,053,328 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  708. [2013/07/28 01:15:13 | 017,016,416 | ---- | M] () -- C:\Users\NeoX12\Desktop\Nike- Take It To The Next Level - [Directors Cut].mp4
  709. [2013/07/27 21:05:19 | 000,020,765 | ---- | M] () -- C:\Users\NeoX12\Desktop\2145253.png
  710. [2013/07/27 01:21:31 | 000,001,276 | ---- | M] () -- C:\Users\Public\Desktop\Uninstaller.lnk
  711. [2013/07/27 01:21:31 | 000,001,225 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
  712. [2013/07/26 00:05:40 | 032,966,136 | ---- | M] (Dropbox, Inc.) -- C:\Users\NeoX12\Desktop\Dropbox 2.0.26.exe
  713. [2013/07/22 14:41:14 | 000,000,161 | ---- | M] () -- C:\Windows\AutoKMS.ini
  714. [2013/07/21 20:28:02 | 000,000,751 | ---- | M] () -- C:\Users\NeoX12\AppData\Local\recently-used.xbel
  715. [2013/07/21 13:57:36 | 000,203,909 | ---- | M] () -- C:\Users\NeoX12\Desktop\Salary Certificate_3.pdf
  716. [2013/07/21 01:02:47 | 000,345,790 | ---- | M] () -- C:\Users\NeoX12\Desktop\yVqoQyA.jpg
  717. [2013/07/18 20:11:13 | 000,001,046 | ---- | M] () -- C:\Users\NeoX12\Application Data\Microsoft\Internet Explorer\Quick Launch\GameRanger.lnk
  718. [2013/07/15 22:28:17 | 003,343,087 | ---- | M] () -- C:\Users\NeoX12\Desktop\Guy - The Art of the Start.pdf
  719. [2013/07/14 10:29:50 | 000,105,616 | ---- | M] (QFX Software Corporation) -- C:\Windows\SysNative\KeyScramblerLogon.dll
  720. [2013/07/13 21:18:56 | 000,810,983 | ---- | M] () -- C:\Users\NeoX12\Desktop\photos for website.rar
  721. [2013/07/12 19:36:29 | 000,001,098 | ---- | M] () -- C:\Windows\SysWow64\SHORTCUT.INI
  722. [2013/07/12 19:32:35 | 000,535,053 | ---- | M] () -- C:\Users\NeoX12\Desktop\Barcode Reader Pro v1.8.1 apkmania.com.apk
  723. [2013/07/11 23:39:34 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForNeoX12.job
  724. [2013/07/10 03:12:53 | 006,102,016 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stlang64.dll
  725. [2013/07/10 03:12:53 | 001,664,000 | ---- | M] (IDT, Inc.) -- C:\Windows\sttray64.exe
  726. [2013/07/10 03:12:53 | 000,543,744 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\drivers\stwrt64.sys
  727. [2013/07/10 03:12:53 | 000,499,200 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stcplx64.dll
  728. [2013/07/10 03:12:52 | 002,189,312 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stapo64.dll
  729. [2013/07/10 03:12:52 | 000,672,256 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll
  730. [2013/07/10 03:12:52 | 000,464,384 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\slapoi64.dll
  731. [2013/07/10 03:12:52 | 000,256,000 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\st646433.dll
  732. [2013/07/10 03:12:52 | 000,049,523 | ---- | M] () -- C:\Windows\SysNative\Roadster.xml
  733. [2013/07/10 03:12:51 | 008,013,312 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNHP.dll
  734. [2013/07/10 03:12:51 | 008,003,072 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNGUI.exe
  735. [2013/07/10 03:12:51 | 002,216,448 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNX.dll
  736. [2013/07/10 03:12:51 | 001,821,184 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNC64.cpl
  737. [2013/07/10 03:12:51 | 000,253,952 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNJ.exe
  738. [2013/07/10 03:12:51 | 000,224,256 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\HPToneCtrls64.dll
  739. [2013/07/10 02:54:40 | 000,495,856 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\SynTP.sys
  740. [2013/07/10 02:54:40 | 000,264,432 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysNative\SynTPAPI.dll
  741. [2013/07/10 02:54:40 | 000,192,240 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysNative\SynTPCo18.dll
  742. [2013/07/10 02:54:40 | 000,151,280 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynTPCom.dll
  743. [2013/07/10 02:54:36 | 001,060,080 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysNative\SynCOM.dll
  744. [2013/07/10 02:54:36 | 000,544,496 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynCom.dll
  745. [2013/07/10 02:54:30 | 000,033,008 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys
  746. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  747.  
  748. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  749.  
  750. [2013/08/08 08:39:30 | 000,000,178 | ---- | C] () -- C:\Windows\SysWow64\0_default.pf
  751. [2013/08/08 02:22:19 | 000,035,842 | ---- | C] () -- C:\Users\NeoX12\Desktop\923352_587075731332843_380666374_n.jpg
  752. [2013/08/08 02:21:51 | 000,038,884 | ---- | C] () -- C:\Users\NeoX12\Desktop\7a38d12ec4959ade27a663889fa23723 (1).jpg
  753. [2013/08/08 02:21:25 | 000,037,772 | ---- | C] () -- C:\Users\NeoX12\Desktop\7a38d12ec4959ade27a663889fa23723.jpg
  754. [2013/08/08 01:12:32 | 003,477,863 | ---- | C] () -- C:\Users\NeoX12\Desktop\sentimp.rar
  755. [2013/08/08 00:43:10 | 003,512,668 | ---- | C] () -- C:\Users\NeoX12\Desktop\sentimp.png
  756. [2013/08/08 00:17:28 | 000,407,032 | ---- | C] () -- C:\Users\NeoX12\Desktop\websiteprntscrn.rar
  757. [2013/08/07 23:04:44 | 000,053,096 | ---- | C] () -- C:\Users\NeoX12\Desktop\About Is.png
  758. [2013/08/05 20:24:35 | 000,010,861 | ---- | C] () -- C:\Users\NeoX12\Desktop\cares.png
  759. [2013/08/05 19:57:01 | 000,063,622 | ---- | C] () -- C:\Users\NeoX12\Desktop\Mandarina by Cristina Otero.jpg
  760. [2013/08/04 21:04:24 | 000,001,808 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
  761. [2013/08/03 23:00:41 | 000,000,069 | ---- | C] () -- C:\Users\NeoX12\Desktop\samia.rar
  762. [2013/08/03 22:09:02 | 000,006,079 | ---- | C] () -- C:\Users\NeoX12\Desktop\farez.png
  763. [2013/08/02 16:02:08 | 000,002,043 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
  764. [2013/08/02 15:57:36 | 000,036,044 | ---- | C] () -- C:\Users\NeoX12\Desktop\i3KLRCY.jpg
  765. [2013/08/01 23:47:17 | 000,028,225 | ---- | C] () -- C:\Users\NeoX12\Desktop\625447_10201486740108000_2026219108_n.jpg
  766. [2013/07/31 16:58:32 | 006,411,025 | ---- | C] () -- C:\Users\NeoX12\Desktop\unnamed--61e6c10b2f.jpg
  767. [2013/07/31 16:51:23 | 000,019,558 | ---- | C] () -- C:\Users\NeoX12\Desktop\576.jpg
  768. [2013/07/30 02:03:16 | 000,681,612 | ---- | C] () -- C:\Users\NeoX12\Desktop\Google Plus.png
  769. [2013/07/30 02:02:08 | 000,054,666 | ---- | C] () -- C:\Users\NeoX12\Desktop\1017289_10201602257445349_885844170_n.jpg
  770. [2013/07/30 01:50:06 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01007.Wdf
  771. [2013/07/30 01:01:19 | 000,148,013 | ---- | C] () -- C:\Users\NeoX12\Desktop\av_lp700-4_gal2_1920x1080.jpg
  772. [2013/07/29 23:20:12 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  773. [2013/07/29 22:42:49 | 000,553,476 | ---- | C] () -- C:\Users\NeoX12\Desktop\Untitled.png
  774. [2013/07/28 01:10:31 | 017,016,416 | ---- | C] () -- C:\Users\NeoX12\Desktop\Nike- Take It To The Next Level - [Directors Cut].mp4
  775. [2013/07/27 21:04:55 | 000,020,765 | ---- | C] () -- C:\Users\NeoX12\Desktop\2145253.png
  776. [2013/07/27 01:21:31 | 000,001,276 | ---- | C] () -- C:\Users\Public\Desktop\Uninstaller.lnk
  777. [2013/07/27 01:21:31 | 000,001,225 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
  778. [2013/07/26 00:46:52 | 000,001,250 | ---- | C] () -- C:\Users\NeoX12\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
  779. [2013/07/24 22:22:02 | 000,203,909 | ---- | C] () -- C:\Users\NeoX12\Desktop\Salary Certificate_3.pdf
  780. [2013/07/22 21:47:51 | 000,000,397 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GRID 2.lnk
  781. [2013/07/22 14:41:14 | 000,000,161 | ---- | C] () -- C:\Windows\AutoKMS.ini
  782. [2013/07/21 20:28:02 | 000,000,751 | ---- | C] () -- C:\Users\NeoX12\AppData\Local\recently-used.xbel
  783. [2013/07/21 01:02:43 | 000,345,790 | ---- | C] () -- C:\Users\NeoX12\Desktop\yVqoQyA.jpg
  784. [2013/07/18 20:11:13 | 000,001,052 | ---- | C] () -- C:\Users\NeoX12\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
  785. [2013/07/18 20:11:13 | 000,001,046 | ---- | C] () -- C:\Users\NeoX12\Application Data\Microsoft\Internet Explorer\Quick Launch\GameRanger.lnk
  786. [2013/07/15 22:27:16 | 003,343,087 | ---- | C] () -- C:\Users\NeoX12\Desktop\Guy - The Art of the Start.pdf
  787. [2013/07/13 21:18:47 | 000,810,983 | ---- | C] () -- C:\Users\NeoX12\Desktop\photos for website.rar
  788. [2013/07/12 19:32:24 | 000,535,053 | ---- | C] () -- C:\Users\NeoX12\Desktop\Barcode Reader Pro v1.8.1 apkmania.com.apk
  789. [2013/07/11 23:39:03 | 005,053,328 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
  790. [2013/07/10 15:29:36 | 000,386,642 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
  791. [2013/07/09 20:56:17 | 000,001,163 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  792. [2013/07/09 15:21:44 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForNeoX12.job
  793. [2013/07/09 15:17:18 | 004,450,358 | ---- | C] () -- C:\Users\NeoX12\Desktop\Millionaire-Mindset.pdf
  794. [2013/07/09 15:17:18 | 001,039,644 | ---- | C] () -- C:\Users\NeoX12\Desktop\secrets-of-the-millionaire-mind-t.-harv-eker.pdf
  795. [2013/07/09 15:17:11 | 016,581,240 | R--- | C] () -- C:\Users\NeoX12\Desktop\The Millionaire Next Door [Book]-MANTESH.PDF.pdf
  796. [2013/06/28 17:04:42 | 000,000,037 | -HS- | C] () -- C:\Users\NeoX12\AppData\Local\70149b02515b3bb20dd492.47983420
  797. [2013/06/16 23:38:00 | 000,000,258 | RHS- | C] () -- C:\Users\NeoX12\ntuser.pol
  798. [2013/06/04 21:52:08 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
  799. [2013/06/02 22:27:55 | 000,007,601 | ---- | C] () -- C:\Users\NeoX12\AppData\Local\Resmon.ResmonCfg
  800. [2013/06/02 22:05:55 | 000,001,098 | ---- | C] () -- C:\Windows\SysWow64\SHORTCUT.INI
  801. [2013/06/02 22:05:09 | 000,000,168 | ---- | C] () -- C:\Windows\SysWow64\REMOTEDEVICE.INI
  802. [2013/06/02 20:36:10 | 000,000,141 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
  803. [2013/03/22 12:34:19 | 000,003,620 | ---- | C] () -- C:\Windows\SysWow64\LOCALSERVICE.INI
  804. [2013/03/22 12:34:19 | 000,000,043 | ---- | C] () -- C:\Windows\SysWow64\LOCALDEVICE.INI
  805. [2013/03/22 12:22:09 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat
  806. [2013/03/22 12:22:02 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  807. [2012/12/02 03:32:06 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
  808. [2012/09/26 22:53:56 | 000,000,950 | ---- | C] () -- C:\Windows\SysWow64\bscs.ini
  809. [2012/09/20 07:36:54 | 000,057,096 | ---- | C] () -- C:\Windows\SysWow64\BSWMPPlugin.dll
  810. [2012/09/20 07:36:54 | 000,018,696 | ---- | C] () -- C:\Windows\SysWow64\SCChangeMonitor.dll
  811. [2012/09/20 07:36:52 | 000,093,544 | ---- | C] () -- C:\Windows\SysWow64\BSVoIPComm.dll
  812. [2012/09/20 07:36:52 | 000,089,352 | ---- | C] () -- C:\Windows\SysWow64\BsVistaCommon.dll
  813. [2012/09/20 07:36:48 | 000,097,640 | ---- | C] () -- C:\Windows\SysWow64\BSSkypeAgent.dll
  814. [2012/09/20 07:36:48 | 000,026,888 | ---- | C] () -- C:\Windows\SysWow64\BsTrace.dll
  815. [2012/09/20 07:36:46 | 000,352,008 | ---- | C] () -- C:\Windows\SysWow64\BsExtendFunc.dll
  816. [2012/09/20 07:36:46 | 000,070,408 | ---- | C] () -- C:\Windows\SysWow64\BsProfileFunc.dll
  817. [2012/09/18 16:40:14 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  818. [2012/09/18 16:40:14 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  819. [2012/09/05 05:21:40 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
  820. [2012/09/05 05:21:16 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  821. [2012/09/05 05:21:12 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
  822. [2012/08/04 04:40:09 | 000,961,152 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  823. [2012/07/26 14:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  824. [2012/07/26 14:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  825. [2012/07/26 13:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  826. [2012/07/26 07:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  827. [2012/07/26 02:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
  828. [2012/07/26 02:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  829. [2012/07/26 02:22:54 | 000,982,240 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
  830. [2012/07/26 02:22:54 | 000,439,308 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
  831. [2012/07/26 02:22:54 | 000,092,356 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin
  832. [2012/06/13 21:45:02 | 000,008,704 | ---- | C] () -- C:\Windows\SysWow64\SROF.dll
  833. [2012/06/05 10:31:00 | 000,000,417 | ---- | C] () -- C:\Windows\SysWow64\RaoBLE.ini
  834. [2012/06/02 20:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
  835. [2012/04/21 02:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
  836. [2011/09/13 08:06:18 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  837.  
  838. [color=#E56717]========== ZeroAccess Check ==========[/color]
  839.  
  840. [2012/12/02 02:52:03 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  841.  
  842. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  843.  
  844. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  845.  
  846. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  847.  
  848. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  849.  
  850. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  851. "" = C:\Windows\SysNative\shell32.dll -- [2013/03/06 12:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation)
  852. "ThreadingModel" = Apartment
  853.  
  854. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  855. "" = %SystemRoot%\system32\shell32.dll -- [2013/03/06 11:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation)
  856. "ThreadingModel" = Apartment
  857.  
  858. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  859. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 09:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
  860. "ThreadingModel" = Free
  861.  
  862. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  863. "" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 09:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
  864. "ThreadingModel" = Free
  865.  
  866. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  867. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 09:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
  868. "ThreadingModel" = Both
  869.  
  870. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  871.  
  872. [color=#E56717]========== Custom Scans ==========[/color]
  873.  
  874. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  875. [2013/06/03 23:41:44 | 000,001,024 | ---- | M] () -- C:\.rnd
  876. [2012/07/26 09:44:30 | 000,398,156 | RHS- | M] () -- C:\bootmgr
  877. [2012/06/02 20:30:55 | 000,000,001 | -HS- | M] () -- C:\BOOTNXT
  878. [2012/08/04 05:21:37 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  879. [2013/08/05 13:58:30 | 3348,959,232 | -HS- | M] () -- C:\hiberfil.sys
  880. [2013/08/05 17:32:16 | 4294,967,295 | -HS- | M] () -- C:\pagefile.sys
  881. [2013/08/05 17:32:17 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  882.  
  883. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  884.  
  885. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  886.  
  887. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  888.  
  889. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!