API tools faq
paste
Advertisement
Guest User

combo

a guest
Oct 11th, 2013
852
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 30.76 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 13-10-09.01 - User# 11/10/2013 19:49:37.1.4 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4023.2317 [GMT 1:00]
  3. Running from: c:\users\User#\Desktop\ComboFix.exe
  4. AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
  5. FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
  6. SP: avast! Internet Security *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
  7. SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  8. * Created a new restore point
  9. .
  10. .
  11. ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  12. .
  13. .
  14. c:\programdata\AMMYY
  15. c:\programdata\AMMYY\hr
  16. c:\programdata\AMMYY\hr3
  17. c:\programdata\AMMYY\settings3.bin
  18. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij
  19. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij\1.6\background.html
  20. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij\1.6\CMpsuoaclBI.js
  21. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij\1.6\content.js
  22. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij\1.6\lsdb.js
  23. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij\1.6\manifest.json
  24. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dejlgnepjlapgbknajmkhihjggknhgij\1.6\sqlite.js
  25. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dejlgnepjlapgbknajmkhihjggknhgij_0.localstorage-journal
  26. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dejlgnepjlapgbknajmkhihjggknhgij_0.localstorage
  27. c:\users\Heidi\AppData\Local\Google\Chrome\User Data\Default\Preferences
  28. c:\users\User#\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
  29. c:\users\User#\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences
  30. c:\windows\wininit.ini
  31. .
  32. .
  33. ((((((((((((((((((((((((( Files Created from 2013-09-11 to 2013-10-11 )))))))))))))))))))))))))))))))
  34. .
  35. .
  36. 2013-10-11 19:01 . 2013-10-11 19:01 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
  37. 2013-10-11 19:01 . 2013-10-11 19:01 -------- d-----w- c:\users\postgres\AppData\Local\temp
  38. 2013-10-11 19:01 . 2013-10-11 19:01 -------- d-----w- c:\users\Heidi\AppData\Local\temp
  39. 2013-10-11 19:01 . 2013-10-11 19:01 -------- d-----w- c:\users\RaineNew\AppData\Local\temp
  40. 2013-10-11 19:01 . 2013-10-11 19:01 -------- d-----w- c:\users\Default\AppData\Local\temp
  41. 2013-10-11 18:22 . 2013-10-11 18:22 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  42. 2013-10-11 18:22 . 2013-10-11 18:22 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
  43. 2013-10-11 09:49 . 2013-10-11 09:49 -------- d-----w- c:\program files\iPod
  44. 2013-10-11 09:49 . 2013-10-11 09:49 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
  45. 2013-10-11 09:49 . 2013-10-11 09:49 -------- d-----w- c:\program files\iTunes
  46. 2013-10-11 09:49 . 2013-10-11 09:49 -------- d-----w- c:\program files (x86)\iTunes
  47. 2013-10-09 09:38 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll
  48. 2013-10-09 09:38 . 2013-07-04 11:50 530432 ----a-w- c:\windows\SysWow64\comctl32.dll
  49. 2013-10-09 09:37 . 2013-06-06 05:50 41472 ----a-w- c:\windows\system32\lpk.dll
  50. 2013-10-09 09:37 . 2013-06-06 05:49 100864 ----a-w- c:\windows\system32\fontsub.dll
  51. 2013-10-09 09:37 . 2013-06-06 05:49 14336 ----a-w- c:\windows\system32\dciman32.dll
  52. 2013-10-09 09:37 . 2013-06-06 05:47 46080 ----a-w- c:\windows\system32\atmlib.dll
  53. 2013-10-09 09:37 . 2013-06-06 04:57 25600 ----a-w- c:\windows\SysWow64\lpk.dll
  54. 2013-10-09 09:37 . 2013-06-06 04:51 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
  55. 2013-10-09 09:37 . 2013-06-06 04:50 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
  56. 2013-10-09 09:37 . 2013-06-06 03:30 368128 ----a-w- c:\windows\system32\atmfd.dll
  57. 2013-10-09 09:37 . 2013-06-06 03:01 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
  58. 2013-10-09 09:37 . 2013-06-06 03:01 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
  59. 2013-10-09 09:37 . 2013-06-25 22:55 785624 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
  60. 2013-10-09 09:36 . 2013-07-12 10:41 185344 ----a-w- c:\windows\system32\drivers\usbvideo.sys
  61. 2013-10-09 09:36 . 2013-07-12 10:41 100864 ----a-w- c:\windows\system32\drivers\usbcir.sys
  62. 2013-10-09 09:36 . 2013-07-12 10:40 109824 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys
  63. 2013-10-09 09:36 . 2013-07-03 04:40 42496 ----a-w- c:\windows\system32\drivers\usbscan.sys
  64. 2013-10-09 09:36 . 2013-07-03 04:05 76800 ----a-w- c:\windows\system32\drivers\hidclass.sys
  65. 2013-10-09 09:36 . 2013-07-03 04:05 32896 ----a-w- c:\windows\system32\drivers\hidparse.sys
  66. 2013-10-09 09:35 . 2013-07-04 12:57 259584 ----a-w- c:\windows\system32\WebClnt.dll
  67. 2013-10-09 09:35 . 2013-07-04 12:50 102400 ----a-w- c:\windows\system32\davclnt.dll
  68. 2013-10-09 09:35 . 2013-07-04 11:57 205824 ----a-w- c:\windows\SysWow64\WebClnt.dll
  69. 2013-10-09 09:35 . 2013-07-04 11:51 81920 ----a-w- c:\windows\SysWow64\davclnt.dll
  70. 2013-10-09 09:35 . 2013-07-04 10:11 140800 ----a-w- c:\windows\system32\drivers\mrxdav.sys
  71. 2013-10-09 09:35 . 2013-09-14 01:10 497152 ----a-w- c:\windows\system32\drivers\afd.sys
  72. 2013-10-09 09:35 . 2013-09-08 02:30 1903552 ----a-w- c:\windows\system32\drivers\tcpip.sys
  73. 2013-10-09 09:35 . 2013-09-08 02:27 327168 ----a-w- c:\windows\system32\mswsock.dll
  74. 2013-10-09 09:35 . 2013-09-08 02:03 231424 ----a-w- c:\windows\SysWow64\mswsock.dll
  75. 2013-10-09 09:32 . 2013-07-20 10:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
  76. 2013-10-09 09:32 . 2013-07-20 10:33 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
  77. 2013-10-09 09:32 . 2013-08-01 12:09 983488 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
  78. 2013-10-09 09:31 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
  79. 2013-10-09 09:31 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
  80. 2013-10-09 09:31 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
  81. 2013-10-09 09:31 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
  82. 2013-10-09 09:31 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
  83. 2013-10-09 09:31 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
  84. 2013-10-09 09:31 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
  85. 2013-10-09 09:31 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
  86. 2013-10-08 19:23 . 2013-10-10 10:52 -------- d-----w- c:\programdata\DouwwnLoad keepeer
  87. 2013-10-08 19:22 . 2013-10-08 19:22 -------- d-----w- c:\programdata\InstallMate
  88. 2013-10-02 14:14 . 2013-10-07 11:04 -------- d-----w- c:\users\User#\AppData\Local\E81C8DE9-E381-4691-BE5F-307011700953.aplzod
  89. 2013-10-01 18:22 . 2013-10-01 18:22 -------- d-----w- c:\program files (x86)\Common Files\Skype
  90. 2013-10-01 18:22 . 2013-10-01 18:22 -------- d-----r- c:\program files (x86)\Skype
  91. 2013-10-01 13:23 . 2013-10-01 20:30 -------- d-----w- c:\users\User#\AppData\Roaming\TeamViewer
  92. 2013-10-01 12:21 . 2013-10-01 12:21 -------- d-----w- c:\program files (x86)\TeamViewer
  93. 2013-09-27 11:51 . 2013-09-27 11:50 312744 ----a-w- c:\windows\system32\javaws.exe
  94. 2013-09-27 11:51 . 2013-09-27 11:50 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
  95. 2013-09-27 11:51 . 2013-09-27 11:50 189352 ----a-w- c:\windows\system32\javaw.exe
  96. 2013-09-27 11:51 . 2013-09-27 11:50 189352 ----a-w- c:\windows\system32\java.exe
  97. 2013-09-27 11:50 . 2013-09-27 11:50 -------- d-----w- c:\program files\Java
  98. 2013-09-26 18:00 . 2013-09-26 18:00 208760 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
  99. 2013-09-13 09:58 . 2013-08-05 02:25 155584 ----a-w- c:\windows\system32\drivers\ataport.sys
  100. 2013-09-13 09:58 . 2013-08-02 02:13 424448 ----a-w- c:\windows\system32\KernelBase.dll
  101. 2013-09-12 12:14 . 2013-09-12 12:14 18612928 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE14\MSO.DLL
  102. .
  103. .
  104. .
  105. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  106. .
  107. 2013-10-09 22:14 . 2011-06-02 14:00 80541720 ----a-w- c:\windows\system32\MRT.exe
  108. 2013-09-27 11:50 . 2013-08-13 23:51 973736 ----a-w- c:\windows\system32\deployJava1.dll
  109. 2013-09-27 11:50 . 2013-08-13 23:51 1095080 ----a-w- c:\windows\system32\npDeployJava1.dll
  110. 2013-08-30 07:48 . 2013-03-14 12:20 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
  111. 2013-08-30 07:48 . 2013-03-14 12:20 204880 ----a-w- c:\windows\system32\drivers\aswVmm.sys
  112. 2013-08-30 07:48 . 2012-02-25 23:11 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
  113. 2013-08-30 07:48 . 2011-08-01 11:43 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
  114. 2013-08-30 07:48 . 2011-08-01 11:43 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
  115. 2013-08-30 07:48 . 2011-08-01 11:43 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
  116. 2013-08-30 07:48 . 2012-02-25 23:11 22600 ----a-w- c:\windows\system32\drivers\aswKbd.sys
  117. 2013-08-30 07:48 . 2011-08-01 11:43 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
  118. 2013-08-30 07:48 . 2011-08-01 11:43 131232 ----a-w- c:\windows\system32\drivers\aswFW.sys
  119. 2013-08-30 07:48 . 2011-08-01 11:43 270824 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
  120. 2013-08-30 07:48 . 2011-08-01 11:43 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
  121. 2013-08-30 07:47 . 2011-08-01 11:42 41664 ----a-w- c:\windows\avastSS.scr
  122. 2013-08-30 07:47 . 2011-08-01 11:42 287840 ----a-w- c:\windows\system32\aswBoot.exe
  123. 2013-08-29 01:48 . 2013-10-09 09:34 44032 ----a-w- c:\windows\apppatch\acwow64.dll
  124. 2013-07-25 09:25 . 2013-08-14 05:38 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL
  125. 2013-07-25 08:57 . 2013-08-14 05:38 1620992 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
  126. 2013-07-19 01:58 . 2013-08-14 05:38 2048 ----a-w- c:\windows\system32\tzres.dll
  127. 2013-07-19 01:41 . 2013-08-14 05:38 2048 ----a-w- c:\windows\SysWow64\tzres.dll
  128. .
  129. .
  130. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  131. .
  132. .
  133. *Note* empty entries & legit default entries are not shown
  134. REGEDIT4
  135. .
  136. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{31FAC9DC-0A03-CCC2-D028-703FA1B18F4D}]
  137. 2013-10-08 19:23 264192 ----a-w- c:\programdata\DouwwnLoad keepeer\1p0mlbtfMe.dll
  138. .
  139. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
  140. 2012-05-04 14:43 1519272 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
  141. .
  142. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{ecce0073-a837-45a2-95b9-600420505f7e}]
  143. 2011-05-09 08:49 176936 ----a-w- c:\program files (x86)\WiseConvert_2.1\prxtbWiserror.dll
  144. .
  145. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
  146. "{ecce0073-a837-45a2-95b9-600420505f7e}"= "c:\program files (x86)\WiseConvert_2.1\prxtbWiserror.dll" [2011-05-09 176936]
  147. "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-05-04 1519272]
  148. .
  149. [HKEY_CLASSES_ROOT\clsid\{ecce0073-a837-45a2-95b9-600420505f7e}]
  150. .
  151. [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
  152. [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
  153. [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
  154. [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
  155. .
  156. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  157. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  158. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  159. 2011-02-18 05:12 94208 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  160. .
  161. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  162. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  163. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  164. 2011-02-18 05:12 94208 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  165. .
  166. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  167. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  168. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  169. 2011-02-18 05:12 94208 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  170. .
  171. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
  172. @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
  173. [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
  174. 2011-02-18 05:12 94208 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
  175. .
  176. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
  177. @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
  178. [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
  179. 2010-02-01 18:03 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
  180. .
  181. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
  182. @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
  183. [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
  184. 2012-11-10 10:55 158056 ----a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll
  185. .
  186. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  187. "Spotify Web Helper"="c:\program files (x86)\Spotify\Data\SpotifyWebHelper.exe" [2012-07-21 1192664]
  188. "OfficeSyncProcess"="c:\program files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" [2013-04-22 720064]
  189. .
  190. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  191. "EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2009-12-25 401192]
  192. "Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2010-03-26 563744]
  193. "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-08-30 4858968]
  194. "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
  195. "ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-05-04 1561768]
  196. "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
  197. "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
  198. "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-10-01 152392]
  199. .
  200. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  201. Adobe Gamma Loader.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2011-6-3 113664]
  202. .
  203. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  204. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  205. "ConsentPromptBehaviorUser"= 3 (0x3)
  206. "EnableLUA"= 0 (0x0)
  207. "EnableUIADesktopToggle"= 0 (0x0)
  208. "PromptOnSecureDesktop"= 0 (0x0)
  209. "SoftwareSASGeneration"= 3 (0x3)
  210. .
  211. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  212. "LoadAppInit_DLLs"=1 (0x1)
  213. .
  214. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
  215. @=""
  216. .
  217. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
  218. R2 CrossLoopService;CrossLoop Service;c:\users\User#\AppData\Local\CrossLoop\CrossLoopService.exe;c:\users\User#\AppData\Local\CrossLoop\CrossLoopService.exe [x]
  219. R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x]
  220. R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
  221. R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
  222. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
  223. R3 tvnserver;TightVNC Server;c:\users\User#\AppData\Local\CrossLoop\tvnserver.exe;c:\users\User#\AppData\Local\CrossLoop\tvnserver.exe [x]
  224. R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
  225. R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
  226. S0 aswKbd;aswKbd; [x]
  227. S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdis.sys [x]
  228. S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
  229. S0 aswRvrt;aswRvrt; [x]
  230. S0 aswVmm;aswVmm; [x]
  231. S1 aswFW;avast! TDI Firewall driver; [x]
  232. S1 aswSnx;aswSnx; [x]
  233. S1 aswSP;aswSP; [x]
  234. S1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys;c:\windows\SYSNATIVE\drivers\cbfs3.sys [x]
  235. S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
  236. S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
  237. S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
  238. S2 aswFsBlk;aswFsBlk; [x]
  239. S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
  240. S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
  241. S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
  242. S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe;c:\program files (x86)\Acer\Registration\GregHSRW.exe [x]
  243. S2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe;c:\program files (x86)\PostgreSQL\8.3\bin\pg_ctl.exe [x]
  244. S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
  245. S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
  246. S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe;c:\program files\Tablet\Pen\Pen_Tablet.exe [x]
  247. S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
  248. S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe;c:\program files\Tablet\Pen\Pen_TouchService.exe [x]
  249. S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
  250. S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe;c:\oem\USBDECTION\USBS3S4Detection.exe [x]
  251. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
  252. S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
  253. S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
  254. S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
  255. S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
  256. S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
  257. S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys;c:\windows\SYSNATIVE\DRIVERS\wacmoumonitor.sys [x]
  258. .
  259. .
  260. Contents of the 'Scheduled Tasks' folder
  261. .
  262. 2013-10-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  263. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-06 14:58]
  264. .
  265. 2013-10-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  266. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-06-06 14:58]
  267. .
  268. 2013-10-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3858472843-2171679214-460599152-1005Core.job
  269. - c:\users\Heidi\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-04 23:04]
  270. .
  271. 2013-10-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3858472843-2171679214-460599152-1005UA.job
  272. - c:\users\Heidi\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-04 23:04]
  273. .
  274. 2013-10-11 c:\windows\Tasks\SDMsgUpdate (TE).job
  275. - c:\progra~2\SMARTD~1\Messages\SDNotify.exe [2012-03-18 18:22]
  276. .
  277. .
  278. --------- X64 Entries -----------
  279. .
  280. .
  281. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
  282. @="{472083B0-C522-11CF-8763-00608CC02F24}"
  283. [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
  284. 2013-08-30 07:47 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
  285. .
  286. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  287. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  288. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  289. 2011-02-18 05:12 97792 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  290. .
  291. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  292. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  293. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  294. 2011-02-18 05:12 97792 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  295. .
  296. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  297. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  298. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  299. 2011-02-18 05:12 97792 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  300. .
  301. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
  302. @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
  303. [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
  304. 2011-02-18 05:12 97792 ----a-w- c:\users\User#\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
  305. .
  306. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
  307. @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
  308. [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
  309. 2010-02-01 18:06 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
  310. .
  311. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay]
  312. @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}"
  313. [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}]
  314. 2012-11-10 10:55 190312 ----a-w- c:\windows\System32\CbFsMntNtf3.dll
  315. .
  316. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  317. "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-01-12 9955872]
  318. "CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-11 689488]
  319. "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-07 2114376]
  320. .
  321. ------- Supplementary Scan -------
  322. .
  323. uLocal Page = c:\windows\system32\blank.htm
  324. uStart Page = hxxp://www.banbury-cross.co.uk/
  325. mLocal Page = c:\windows\SysWOW64\blank.htm
  326. uInternet Settings,ProxyOverride = *.local
  327. Trusted Zone: crm-uk.com\hosting
  328. TCP: DhcpNameServer = 192.168.0.1
  329. DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/4.0.1.0/GarminAxControl_32.CAB
  330. DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} - hxxp://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20111026060252
  331. DPF: {52E87C77-C4CF-428C-93D2-B3401823F1B8} - hxxp://hosting.crm-uk.com/gold-visionshine/GoldVisionControl.CAB
  332. DPF: {BD3D7BEF-7B55-4B17-8FCE-00CD33770ADD} - hxxp://hosting.crm-uk.com/gold-visionshine/GoldVisionMailCtrl.CAB
  333. DPF: {E55B74AB-0B51-4BAE-A5B5-2531AB5EA4D9} - hxxp://assets.photobox.com/assets/v/Dp8wGnXTjsIAQtd7V5T0lFcde-o.cab
  334. .
  335. - - - - ORPHANS REMOVED - - - -
  336. .
  337. Toolbar-Locked - (no file)
  338. Wow6432Node-HKCU-Run-iCloudServices - c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
  339. Wow6432Node-HKCU-Run-ApplePhotoStreams - c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
  340. Wow6432Node-HKLM-Run-<NO NAME> - (no file)
  341. HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
  342. Toolbar-Locked - (no file)
  343. WebBrowser-{ECCE0073-A837-45A2-95B9-600420505F7E} - (no file)
  344. AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
  345. AddRemove-1522400073.go.sky.com - c:\program files (x86)\Microsoft Silverlight\5.1.10411.0\Silverlight.Configuration.exe
  346. .
  347. .
  348. .
  349. --------------------- LOCKED REGISTRY KEYS ---------------------
  350. .
  351. [HKEY_USERS\S-1-5-21-3858472843-2171679214-460599152-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
  352. @Denied: (2) (S-1-5-21-3858472843-2171679214-460599152-1000)
  353. @Denied: (2) (LocalSystem)
  354. "Progid"="Outlook.File.eml.14"
  355. .
  356. [HKEY_USERS\S-1-5-21-3858472843-2171679214-460599152-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
  357. @Denied: (2) (LocalSystem)
  358. "Progid"="WindowsLiveMail.VCard.1"
  359. .
  360. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
  361. @Denied: (A 2) (Everyone)
  362. @="FlashBroker"
  363. "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
  364. .
  365. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
  366. "Enabled"=dword:00000001
  367. .
  368. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
  369. @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
  370. .
  371. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
  372. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  373. .
  374. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  375. @Denied: (A 2) (Everyone)
  376. @="IFlashBroker5"
  377. .
  378. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
  379. @="{00020424-0000-0000-C000-000000000046}"
  380. .
  381. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
  382. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  383. "Version"="1.0"
  384. .
  385. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
  386. @Denied: (A 2) (Everyone)
  387. @="FlashBroker"
  388. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
  389. .
  390. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
  391. "Enabled"=dword:00000001
  392. .
  393. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
  394. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
  395. .
  396. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
  397. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  398. .
  399. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  400. @Denied: (A 2) (Everyone)
  401. @="Shockwave Flash Object"
  402. .
  403. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  404. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
  405. "ThreadingModel"="Apartment"
  406. .
  407. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  408. @="0"
  409. .
  410. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  411. @="ShockwaveFlash.ShockwaveFlash.11"
  412. .
  413. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  414. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
  415. .
  416. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  417. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  418. .
  419. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  420. @="1.0"
  421. .
  422. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  423. @="ShockwaveFlash.ShockwaveFlash"
  424. .
  425. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  426. @Denied: (A 2) (Everyone)
  427. @="Macromedia Flash Factory Object"
  428. .
  429. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  430. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
  431. "ThreadingModel"="Apartment"
  432. .
  433. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  434. @="FlashFactory.FlashFactory.1"
  435. .
  436. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  437. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
  438. .
  439. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  440. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  441. .
  442. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  443. @="1.0"
  444. .
  445. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  446. @="FlashFactory.FlashFactory"
  447. .
  448. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  449. @Denied: (A 2) (Everyone)
  450. @="IFlashBroker5"
  451. .
  452. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
  453. @="{00020424-0000-0000-C000-000000000046}"
  454. .
  455. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
  456. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  457. "Version"="1.0"
  458. .
  459. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  460. @Denied: (A) (Everyone)
  461. "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
  462. .
  463. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  464. @Denied: (A) (Everyone)
  465. .
  466. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
  467. "Key"="ActionsPane3"
  468. "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
  469. .
  470. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  471. @Denied: (Full) (Everyone)
  472. .
  473. Completion time: 2013-10-11 20:04:54
  474. ComboFix-quarantined-files.txt 2013-10-11 19:04
  475. .
  476. Pre-Run: 293,850,054,656 bytes free
  477. Post-Run: 296,268,775,424 bytes free
  478. .
  479. - - End Of File - - D9419CF0EDB777F5B80D783C7FD7D8A3
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!