API tools faq
paste
Advertisement
Mrain

Untitled

Mrain
Jul 2nd, 2013
87
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 60.61 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 7/2/2013 10:32:30 AM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mrain\Downloads
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16618)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 3.73 Gb Total Physical Memory | 1.97 Gb Available Physical Memory | 52.80% Memory free
  8. 7.46 Gb Paging File | 5.31 Gb Available in Paging File | 71.19% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 99.90 Gb Total Space | 30.96 Gb Free Space | 30.99% Space Free | Partition Type: NTFS
  13. Drive D: | 198.09 Gb Total Space | 35.94 Gb Free Space | 18.14% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: MRAIN-PC | User Name: Mrain | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2013/07/02 10:32:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mrain\Downloads\OTL.exe
  22. PRC - [2013/06/06 23:57:24 | 019,676,256 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
  23. PRC - [2013/05/27 13:48:52 | 000,312,608 | ---- | M] (Skillbrains) -- C:\Users\Mrain\AppData\Local\Skillbrains\lightshot\4.3.0.0\Lightshot.exe
  24. PRC - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  25. PRC - [2013/05/09 10:58:35 | 006,583,664 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\Setup\avast.setup
  26. PRC - [2013/05/09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  27. PRC - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  28. PRC - [2013/01/27 15:36:02 | 000,337,432 | ---- | M] (Power Software Ltd) -- C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
  29. PRC - [2012/08/13 11:57:02 | 010,376,704 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
  30. PRC - [2012/08/13 11:57:02 | 010,368,512 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
  31. PRC - [2011/07/01 04:51:10 | 001,103,440 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
  32.  
  33.  
  34. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  35.  
  36. MOD - [2013/07/02 10:15:21 | 000,557,056 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\pysqlite2._sqlite.pyd
  37. MOD - [2013/07/02 10:15:21 | 000,128,512 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\_elementtree.pyd
  38. MOD - [2013/07/02 10:15:21 | 000,098,816 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32api.pyd
  39. MOD - [2013/07/02 10:15:21 | 000,044,032 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\_socket.pyd
  40. MOD - [2013/07/02 10:15:21 | 000,022,528 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32ts.pyd
  41. MOD - [2013/07/02 10:15:20 | 001,022,416 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\windows._cacheinvalidation.pyd
  42. MOD - [2013/07/02 10:15:20 | 000,805,888 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._gdi_.pyd
  43. MOD - [2013/07/02 10:15:20 | 000,320,512 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32com.shell.shell.pyd
  44. MOD - [2013/07/02 10:15:20 | 000,070,656 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._html2.pyd
  45. MOD - [2013/07/02 10:15:20 | 000,026,624 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\_multiprocessing.pyd
  46. MOD - [2013/07/02 10:15:20 | 000,011,264 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32crypt.pyd
  47. MOD - [2013/07/02 10:15:19 | 001,175,040 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._core_.pyd
  48. MOD - [2013/07/02 10:15:19 | 001,153,024 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\_ssl.pyd
  49. MOD - [2013/07/02 10:15:19 | 000,735,232 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._misc_.pyd
  50. MOD - [2013/07/02 10:15:19 | 000,364,544 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\pythoncom27.dll
  51. MOD - [2013/07/02 10:15:19 | 000,110,080 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\PyWinTypes27.dll
  52. MOD - [2013/07/02 10:15:19 | 000,108,544 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32security.pyd
  53. MOD - [2013/07/02 10:15:19 | 000,087,040 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\_ctypes.pyd
  54. MOD - [2013/07/02 10:15:19 | 000,017,408 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32profile.pyd
  55. MOD - [2013/07/02 10:15:18 | 000,811,008 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._windows_.pyd
  56. MOD - [2013/07/02 10:15:18 | 000,711,680 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\_hashlib.pyd
  57. MOD - [2013/07/02 10:15:18 | 000,122,368 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._wizard.pyd
  58. MOD - [2013/07/02 10:15:18 | 000,119,808 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32file.pyd
  59. MOD - [2013/07/02 10:15:18 | 000,035,840 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32process.pyd
  60. MOD - [2013/07/02 10:15:18 | 000,025,600 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32pdh.pyd
  61. MOD - [2013/07/02 10:15:17 | 001,062,400 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\wx._controls_.pyd
  62. MOD - [2013/07/02 10:15:17 | 000,038,912 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32inet.pyd
  63. MOD - [2013/07/02 10:15:16 | 000,686,080 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\unicodedata.pyd
  64. MOD - [2013/07/02 10:15:16 | 000,127,488 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\pyexpat.pyd
  65. MOD - [2013/07/02 10:15:16 | 000,018,432 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\win32event.pyd
  66. MOD - [2013/07/02 10:15:16 | 000,010,240 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Temp\_MEI24562\select.pyd
  67. MOD - [2013/06/15 03:28:42 | 000,393,168 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppgooglenaclpluginchrome.dll
  68. MOD - [2013/06/15 03:28:40 | 004,051,408 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll
  69. MOD - [2013/06/15 03:27:51 | 000,599,504 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Google\Chrome\Application\27.0.1453.116\libglesv2.dll
  70. MOD - [2013/06/15 03:27:50 | 000,124,368 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Google\Chrome\Application\27.0.1453.116\libegl.dll
  71. MOD - [2013/06/15 03:27:48 | 001,597,392 | ---- | M] () -- C:\Users\Mrain\AppData\Local\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll
  72. MOD - [2013/01/24 13:58:04 | 001,046,528 | ---- | M] () -- c:\Program Files (x86)\MagniPic\sprotector.dll
  73. MOD - [2013/01/24 13:16:54 | 001,050,112 | ---- | M] () -- c:\Program Files (x86)\BrowseToSave\sprotector.dll
  74. MOD - [2012/08/10 17:51:32 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
  75.  
  76.  
  77. [color=#E56717]========== Services (SafeList) ==========[/color]
  78.  
  79. SRV:[b]64bit:[/b] - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  80. SRV:[b]64bit:[/b] - [2013/01/27 12:34:32 | 000,379,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  81. SRV:[b]64bit:[/b] - [2013/01/27 12:34:32 | 000,022,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  82. SRV:[b]64bit:[/b] - [2012/12/19 21:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  83. SRV:[b]64bit:[/b] - [2012/12/19 16:32:12 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
  84. SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  85. SRV:[b]64bit:[/b] - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  86. SRV - [2013/06/18 13:06:03 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  87. SRV - [2013/06/12 00:04:41 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  88. SRV - [2013/05/11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  89. SRV - [2013/01/08 13:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  90. SRV - [2012/07/25 19:58:26 | 000,126,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe -- (Te.Service)
  91. SRV - [2012/07/25 19:13:16 | 000,139,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe -- (fussvc)
  92. SRV - [2012/07/09 01:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  93. SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  94.  
  95.  
  96. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  97.  
  98. DRV:[b]64bit:[/b] - [2013/07/02 10:22:14 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  99. DRV:[b]64bit:[/b] - [2013/07/02 10:22:14 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  100. DRV:[b]64bit:[/b] - [2013/07/02 10:22:14 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  101. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Unknown] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  102. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  103. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  104. DRV:[b]64bit:[/b] - [2013/05/09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  105. DRV:[b]64bit:[/b] - [2013/05/09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  106. DRV:[b]64bit:[/b] - [2013/02/12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
  107. DRV:[b]64bit:[/b] - [2013/01/27 15:35:46 | 000,127,384 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
  108. DRV:[b]64bit:[/b] - [2013/01/20 16:59:04 | 000,130,008 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  109. DRV:[b]64bit:[/b] - [2012/12/19 22:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  110. DRV:[b]64bit:[/b] - [2012/12/19 21:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  111. DRV:[b]64bit:[/b] - [2012/11/06 13:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  112. DRV:[b]64bit:[/b] - [2012/08/23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  113. DRV:[b]64bit:[/b] - [2012/08/23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  114. DRV:[b]64bit:[/b] - [2012/08/23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  115. DRV:[b]64bit:[/b] - [2012/03/30 11:49:08 | 000,056,448 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
  116. DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  117. DRV:[b]64bit:[/b] - [2011/05/24 01:24:22 | 002,750,464 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  118. DRV:[b]64bit:[/b] - [2011/05/13 04:21:04 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
  119. DRV:[b]64bit:[/b] - [2011/05/13 04:21:04 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
  120. DRV:[b]64bit:[/b] - [2011/05/13 04:21:02 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
  121. DRV:[b]64bit:[/b] - [2011/05/13 04:21:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
  122. DRV:[b]64bit:[/b] - [2011/05/13 04:21:02 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
  123. DRV:[b]64bit:[/b] - [2011/03/28 05:44:46 | 001,417,776 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  124. DRV:[b]64bit:[/b] - [2011/03/23 04:20:58 | 000,077,936 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  125. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  126. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  127. DRV:[b]64bit:[/b] - [2010/12/01 17:12:06 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
  128. DRV:[b]64bit:[/b] - [2010/11/21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  129. DRV:[b]64bit:[/b] - [2010/11/21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  130. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  131. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  132. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  133. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  134. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  135. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  136. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  137. DRV - [2012/07/13 17:13:14 | 000,070,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys -- (VSPerfDrv110)
  138. DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  139.  
  140.  
  141. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  142.  
  143.  
  144. [color=#E56717]========== Internet Explorer ==========[/color]
  145.  
  146. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  147. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  148. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  149. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  150. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  151. IE - HKLM\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = ${SEARCH_URL}{searchTerms}
  152.  
  153. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
  154. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
  155. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  156. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
  157. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 28 A4 A5 32 CF E8 CD 01 [binary data]
  158. IE - HKCU\..\URLSearchHook: {7473b6bd-4691-4744-a82b-7854eb3d70b6} - No CLSID value found
  159. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  160. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  161. IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://searchou.com/?affil=7&uid=0f76b233-8edb-11e2-8406-e840f266d71c&q={searchTerms}
  162. IE - HKCU\..\SearchScopes\{9897FA83-9A3C-406F-B865-9D5CFD06F500}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3220468
  163. IE - HKCU\..\SearchScopes\{B33EE7E7-61BF-4C4F-BE4E-9B8B2ABB6622}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119585&tt=260213_gnew&babsrc=SP_ss&mntrId=24fd573d0000000000009cb70dc367ef
  164. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  165.  
  166. [color=#E56717]========== FireFox ==========[/color]
  167.  
  168. FF - prefs.js..browser.search.defaultengine: "Google"
  169. FF - prefs.js..browser.search.defaultenginename: "Google"
  170. FF - prefs.js..browser.search.defaultenginename,S: S", ""
  171. FF - prefs.js..browser.search.defaultthis.engineName: ""
  172. FF - prefs.js..browser.search.defaulturl: ""
  173. FF - prefs.js..browser.search.order.1: "Google"
  174. FF - prefs.js..browser.search.order.1,S: S", ""
  175. FF - prefs.js..browser.search.selectedEngine: "Google"
  176. FF - prefs.js..browser.search.selectedEngine,S: S", ""
  177. FF - prefs.js..browser.search.useDBForOrder: true
  178. FF - prefs.js..browser.startup.homepage: "http://www.google.com/firefox"
  179. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
  180. FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=utf-8&q="
  181. FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
  182. FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
  183. FF - prefs.js..browser.startup.homepage: ""
  184. FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
  185.  
  186.  
  187. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
  188. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  189. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  190. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
  191. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  192. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  193. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  194. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  195. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  196. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  197. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  198. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  199. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mrain\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  200. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mrain\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  201.  
  202. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/07/02 10:21:32 | 000,000,000 | ---D | M]
  203. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  204. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  205. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/06/26 13:26:20 | 000,000,000 | ---D | M]
  206. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  207. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  208. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  209. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/06/26 13:26:20 | 000,000,000 | ---D | M]
  210. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  211.  
  212. [2013/01/02 12:17:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mrain\AppData\Roaming\Mozilla\Extensions
  213. [2013/05/28 19:47:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\extensions
  214. [2013/02/26 17:05:18 | 000,213,444 | ---- | M] () (No name found) -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\extensions\torntv@torntv.com.xpi
  215. [2013/01/07 14:58:31 | 000,002,444 | ---- | M] () -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\searchplugins\babylon1.xml
  216. [2013/03/01 18:00:14 | 000,006,525 | ---- | M] () -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\searchplugins\BrowserProtect.xml
  217. [2013/03/01 18:01:09 | 000,001,294 | ---- | M] () -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\searchplugins\delta.xml
  218. [2013/03/17 10:17:32 | 000,002,090 | ---- | M] () -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\searchplugins\Searchou.xml
  219. [2013/01/05 12:30:19 | 000,001,066 | ---- | M] () -- C:\Users\Mrain\AppData\Roaming\Mozilla\Firefox\Profiles\fqbv2267.default\searchplugins\utorrentcontrolv2-customized-web-search.xml
  220. [2013/06/18 13:04:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  221. [2013/06/18 13:06:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  222. [2013/06/18 13:06:08 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  223. [2013/02/26 17:06:44 | 000,006,525 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
  224.  
  225. [color=#E56717]========== Chrome ==========[/color]
  226.  
  227. CHR - homepage: http://google.com/
  228. CHR - Extension: No name found = C:\Users\Mrain\AppData\Local\Google\Chrome\User Data\Default\Extensions\ambfimhigppdidfmelpjmojccbfdoeig\1_0\
  229. CHR - Extension: No name found = C:\Users\Mrain\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  230. CHR - Extension: No name found = C:\Users\Mrain\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.2_0\
  231.  
  232. O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  233. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  234. O2:[b]64bit:[/b] - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
  235. O2 - BHO: (MMagnyIPic) - {439D57CD-C074-FC9A-7639-558E36C6AE0E} - C:\ProgramData\MMagnyIPic\514583cc3edd4.dll ()
  236. O2 - BHO: (no name) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - No CLSID value found.
  237. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  238. O2 - BHO: (no name) - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - No CLSID value found.
  239. O2 - BHO: (Microsoft Web Test Recorder 10.0 Helper) - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
  240. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  241. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  242. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  243. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  244. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - No CLSID value found.
  245. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  246. O4:[b]64bit:[/b] - HKLM..\Run: [PLFSetL] C:\Windows\\PLFSetL.exe ()
  247. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  248. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  249. O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
  250. O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (Power Software Ltd)
  251. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  252. O4 - HKCU..\Run: [CommandosBeyondCallDutySetup.exe] C:\Users\Mrain\Downloads\CommandosBeyondCallDutySetup-dm.exe ()
  253. O4 - HKCU..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)
  254. O4 - HKCU..\Run: [LightShot] C:\Users\Mrain\AppData\Local\Skillbrains\lightshot\LightShot.exe ()
  255. O4 - HKCU..\Run: [Smart Driver Updater] C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe File not found
  256. O4 - Startup: C:\Users\Mrain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
  257. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  258. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  259. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  260. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  261. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  262. O13[b]64bit:[/b] - gopher Prefix: missing
  263. O13 - gopher Prefix: missing
  264. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  265. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  266. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{298C2BCA-EE83-44D2-BC60-7EE93020D04D}: DhcpNameServer = 192.168.1.1
  267. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2BC46CC9-9E97-4385-A9A3-EDE27FCC4350}: DhcpNameServer = 192.168.42.129
  268. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  269. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  270. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  271. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  272. O18:[b]64bit:[/b] - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  273. O18:[b]64bit:[/b] - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  274. O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  275. O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  276. O20 - AppInit_DLLs: (c:\progra~2\magnipic\sprote~1.dll) - c:\Program Files (x86)\MagniPic\sprotector.dll ()
  277. O20 - AppInit_DLLs: (c:\progra~2\browse~1\sprote~1.dll) - c:\Program Files (x86)\BrowseToSave\sprotector.dll ()
  278. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  279. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  280. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  281. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  282. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  283. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  284. O32 - HKLM CDRom: AutoRun - 1
  285. O33 - MountPoints2\F\Shell - "" = AutoRun
  286. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup.exe /autorun
  287. O33 - MountPoints2\G\Shell - "" = AutoRun
  288. O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\Launcher.exe
  289. O34 - HKLM BootExecute: (autocheck autochk *)
  290. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  291. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  292. O35 - HKLM\..comfile [open] -- "%1" %*
  293. O35 - HKLM\..exefile [open] -- "%1" %*
  294. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  295. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  296. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  297. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  298. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  299. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  300. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  301.  
  302. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  303.  
  304. [2013/07/02 10:22:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
  305. [2013/07/02 10:22:07 | 000,378,944 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  306. [2013/07/02 10:22:07 | 000,033,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
  307. [2013/07/02 10:22:04 | 000,072,016 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
  308. [2013/07/02 10:22:02 | 000,064,288 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
  309. [2013/07/02 10:22:01 | 001,030,952 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  310. [2013/07/02 10:21:57 | 000,080,816 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  311. [2013/07/02 10:20:56 | 000,041,664 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  312. [2013/07/02 09:43:22 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft
  313. [2013/07/02 09:01:34 | 000,287,840 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  314. [2013/07/02 08:59:50 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
  315. [2013/07/02 08:58:27 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
  316. [2013/06/26 13:26:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
  317. [2013/06/22 07:52:08 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  318. [2013/06/22 07:52:08 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
  319. [2013/06/22 07:52:08 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
  320. [2013/06/22 07:52:08 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
  321. [2013/06/22 07:52:06 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  322. [2013/06/22 07:52:06 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  323. [2013/06/22 07:52:06 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
  324. [2013/06/22 07:52:06 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
  325. [2013/06/22 07:52:06 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  326. [2013/06/22 07:52:06 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  327. [2013/06/22 07:52:05 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  328. [2013/06/22 07:52:05 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  329. [2013/06/22 07:52:05 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
  330. [2013/06/22 07:52:04 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  331. [2013/06/22 07:52:04 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
  332. [2013/06/22 07:52:04 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
  333. [2013/06/22 07:52:04 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  334. [2013/06/22 07:52:04 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
  335. [2013/06/22 07:52:04 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
  336. [2013/06/22 07:52:04 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
  337. [2013/06/22 07:52:03 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  338. [2013/06/22 07:52:03 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  339. [2013/06/22 07:52:03 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  340. [2013/06/22 07:52:02 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  341. [2013/06/22 07:52:02 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
  342. [2013/06/22 07:52:02 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  343. [2013/06/22 07:52:02 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  344. [2013/06/22 07:52:02 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
  345. [2013/06/22 07:52:02 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  346. [2013/06/22 07:52:02 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  347. [2013/06/22 07:52:02 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
  348. [2013/06/22 07:52:01 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  349. [2013/06/22 07:52:01 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
  350. [2013/06/22 07:52:00 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
  351. [2013/06/22 07:52:00 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  352. [2013/06/22 07:52:00 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  353. [2013/06/22 07:52:00 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  354. [2013/06/22 07:52:00 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  355. [2013/06/22 07:52:00 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
  356. [2013/06/22 07:52:00 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
  357. [2013/06/22 07:52:00 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  358. [2013/06/22 07:52:00 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  359. [2013/06/22 07:52:00 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  360. [2013/06/22 07:51:59 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  361. [2013/06/22 07:51:59 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  362. [2013/06/22 07:51:59 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  363. [2013/06/22 07:51:59 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
  364. [2013/06/22 07:51:59 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
  365. [2013/06/22 07:51:59 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  366. [2013/06/22 07:51:59 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  367. [2013/06/22 07:51:59 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
  368. [2013/06/22 07:51:58 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  369. [2013/06/22 07:51:58 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  370. [2013/06/22 07:51:58 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  371. [2013/06/22 07:51:58 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  372. [2013/06/22 07:51:58 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
  373. [2013/06/22 07:51:58 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
  374. [2013/06/22 07:51:57 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  375. [2013/06/22 07:51:57 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
  376. [2013/06/22 07:51:57 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
  377. [2013/06/22 07:51:57 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
  378. [2013/06/22 07:51:57 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
  379. [2013/06/22 07:51:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
  380. [2013/06/22 07:51:56 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  381. [2013/06/22 07:51:56 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  382. [2013/06/22 07:51:56 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  383. [2013/06/22 07:51:56 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  384. [2013/06/22 07:51:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
  385. [2013/06/18 13:04:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  386. [2013/06/14 09:21:55 | 000,000,000 | ---D | C] -- C:\Windows\en
  387. [2013/06/14 09:19:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
  388. [2013/06/14 09:18:30 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
  389. [2013/06/14 09:18:30 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
  390. [2013/06/14 09:18:30 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
  391. [2013/06/14 09:18:30 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
  392. [2013/06/14 09:18:28 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
  393. [2013/06/14 09:18:28 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
  394. [2013/06/14 09:18:27 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
  395. [2013/06/14 09:18:27 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
  396. [2013/06/14 09:17:40 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
  397. [2013/06/14 09:17:40 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
  398. [2013/06/14 09:16:43 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
  399. [2013/06/14 09:16:43 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
  400. [2013/06/14 09:12:39 | 000,000,000 | ---D | C] -- C:\Users\Mrain\AppData\Local\Windows Live
  401. [2013/06/14 09:12:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
  402. [2013/06/12 07:50:58 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
  403. [2013/06/12 07:50:58 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
  404. [2013/06/12 07:50:47 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
  405. [2013/06/12 07:50:47 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
  406. [2013/06/12 07:50:28 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
  407. [2013/06/12 07:50:16 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
  408. [2013/06/12 07:50:16 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
  409. [2013/06/12 07:50:15 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  410. [2013/06/12 07:50:14 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  411. [2013/06/12 07:50:13 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
  412. [2013/06/12 07:50:12 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
  413. [2013/06/12 07:49:47 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
  414. [2013/06/12 07:49:47 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
  415. [2013/06/03 08:51:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\emu8086
  416. [2013/06/03 08:51:06 | 000,389,120 | ---- | C] (WinMain Software (http://www.winmain.com)) -- C:\Windows\SysWow64\cmax20.ocx
  417. [2013/06/03 08:51:01 | 000,000,000 | ---D | C] -- C:\emu8086
  418.  
  419. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  420.  
  421. [2013/07/02 10:30:52 | 000,021,904 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  422. [2013/07/02 10:30:52 | 000,021,904 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  423. [2013/07/02 10:22:14 | 001,030,952 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  424. [2013/07/02 10:22:14 | 000,378,944 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  425. [2013/07/02 10:22:14 | 000,189,936 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
  426. [2013/07/02 10:22:14 | 000,000,175 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys.sum
  427. [2013/07/02 10:22:14 | 000,000,175 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSP.sys.sum
  428. [2013/07/02 10:22:14 | 000,000,175 | ---- | M] () -- C:\Windows\SysNative\drivers\aswSnx.sys.sum
  429. [2013/07/02 10:22:08 | 000,001,882 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
  430. [2013/07/02 10:21:57 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  431. [2013/07/02 10:18:46 | 000,000,546 | ---- | M] () -- C:\Windows\tasks\MATLAB R2012b Startup Accelerator.job
  432. [2013/07/02 10:15:23 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  433. [2013/07/02 10:14:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  434. [2013/07/02 10:14:50 | 3002,519,552 | -HS- | M] () -- C:\hiberfil.sys
  435. [2013/07/02 10:14:00 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4051618742-2955246505-184859728-1000UA.job
  436. [2013/07/02 10:11:02 | 000,000,388 | ---- | M] () -- C:\Windows\tasks\update-S-1-5-21-4051618742-2955246505-184859728-1000.job
  437. [2013/07/02 10:04:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  438. [2013/07/02 10:04:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  439. [2013/07/02 08:10:00 | 000,000,388 | ---- | M] () -- C:\Windows\tasks\update-sys.job
  440. [2013/07/01 21:14:01 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4051618742-2955246505-184859728-1000Core.job
  441. [2013/07/01 20:52:03 | 000,000,218 | ---- | M] () -- C:\Users\Mrain\AppData\Local\recently-used.xbel
  442. [2013/06/28 19:59:10 | 000,781,362 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  443. [2013/06/28 19:59:10 | 000,662,102 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  444. [2013/06/28 19:59:10 | 000,121,938 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  445. [2013/06/27 16:27:31 | 000,002,110 | ---- | M] () -- C:\Users\Mrain\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk
  446. [2013/06/22 07:52:08 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  447. [2013/06/22 07:52:08 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
  448. [2013/06/22 07:52:08 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
  449. [2013/06/22 07:52:08 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
  450. [2013/06/22 07:52:07 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  451. [2013/06/22 07:52:06 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  452. [2013/06/22 07:52:06 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
  453. [2013/06/22 07:52:06 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
  454. [2013/06/22 07:52:06 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  455. [2013/06/22 07:52:06 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  456. [2013/06/22 07:52:05 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  457. [2013/06/22 07:52:05 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  458. [2013/06/22 07:52:05 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  459. [2013/06/22 07:52:05 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
  460. [2013/06/22 07:52:04 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
  461. [2013/06/22 07:52:04 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
  462. [2013/06/22 07:52:04 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  463. [2013/06/22 07:52:04 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
  464. [2013/06/22 07:52:04 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
  465. [2013/06/22 07:52:04 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
  466. [2013/06/22 07:52:03 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
  467. [2013/06/22 07:52:03 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  468. [2013/06/22 07:52:03 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  469. [2013/06/22 07:52:03 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  470. [2013/06/22 07:52:02 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  471. [2013/06/22 07:52:02 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  472. [2013/06/22 07:52:02 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  473. [2013/06/22 07:52:02 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
  474. [2013/06/22 07:52:02 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  475. [2013/06/22 07:52:02 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  476. [2013/06/22 07:52:02 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
  477. [2013/06/22 07:52:02 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
  478. [2013/06/22 07:52:01 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  479. [2013/06/22 07:52:01 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
  480. [2013/06/22 07:52:00 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
  481. [2013/06/22 07:52:00 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  482. [2013/06/22 07:52:00 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  483. [2013/06/22 07:52:00 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  484. [2013/06/22 07:52:00 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  485. [2013/06/22 07:52:00 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
  486. [2013/06/22 07:52:00 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
  487. [2013/06/22 07:52:00 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  488. [2013/06/22 07:52:00 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  489. [2013/06/22 07:52:00 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  490. [2013/06/22 07:52:00 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
  491. [2013/06/22 07:51:59 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  492. [2013/06/22 07:51:59 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  493. [2013/06/22 07:51:59 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  494. [2013/06/22 07:51:59 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  495. [2013/06/22 07:51:59 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
  496. [2013/06/22 07:51:59 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
  497. [2013/06/22 07:51:59 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  498. [2013/06/22 07:51:59 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  499. [2013/06/22 07:51:59 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
  500. [2013/06/22 07:51:58 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  501. [2013/06/22 07:51:58 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  502. [2013/06/22 07:51:58 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  503. [2013/06/22 07:51:58 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  504. [2013/06/22 07:51:58 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
  505. [2013/06/22 07:51:58 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
  506. [2013/06/22 07:51:57 | 003,958,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  507. [2013/06/22 07:51:57 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
  508. [2013/06/22 07:51:57 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
  509. [2013/06/22 07:51:57 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
  510. [2013/06/22 07:51:57 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
  511. [2013/06/22 07:51:57 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
  512. [2013/06/22 07:51:56 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  513. [2013/06/22 07:51:56 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  514. [2013/06/22 07:51:56 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  515. [2013/06/22 07:51:56 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
  516. [2013/06/19 16:23:45 | 000,002,366 | ---- | M] () -- C:\Users\Mrain\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  517. [2013/06/19 16:23:45 | 000,002,364 | ---- | M] () -- C:\Users\Mrain\Desktop\Google Chrome.lnk
  518. [2013/06/12 00:04:40 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  519. [2013/06/12 00:04:40 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  520. [2013/06/03 08:51:12 | 000,001,454 | ---- | M] () -- C:\Users\Mrain\Desktop\emu8086.lnk
  521.  
  522. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  523.  
  524. [2013/07/02 10:22:08 | 000,001,882 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
  525. [2013/07/02 10:22:00 | 000,189,936 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
  526. [2013/07/02 10:22:00 | 000,065,336 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
  527. [2013/07/02 09:02:03 | 000,000,175 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys.sum
  528. [2013/07/02 09:02:03 | 000,000,175 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSP.sys.sum
  529. [2013/07/02 09:02:03 | 000,000,175 | ---- | C] () -- C:\Windows\SysNative\drivers\aswSnx.sys.sum
  530. [2013/07/02 09:01:35 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
  531. [2013/07/01 20:52:03 | 000,000,218 | ---- | C] () -- C:\Users\Mrain\AppData\Local\recently-used.xbel
  532. [2013/06/22 07:52:02 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
  533. [2013/06/22 07:52:00 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
  534. [2013/06/14 09:21:41 | 000,001,305 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
  535. [2013/06/14 09:21:18 | 000,001,374 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
  536. [2013/06/03 08:51:12 | 000,001,454 | ---- | C] () -- C:\Users\Mrain\Desktop\emu8086.lnk
  537. [2013/05/14 12:55:59 | 000,000,884 | RHS- | C] () -- C:\Users\Mrain\ntuser.pol
  538. [2013/04/06 19:24:47 | 001,749,376 | ---- | C] () -- C:\Windows\SysWow64\drivers\snp2uvc.sys
  539. [2013/04/06 19:24:47 | 000,028,032 | ---- | C] () -- C:\Windows\SysWow64\drivers\sncduvc.sys
  540. [2013/04/06 19:24:43 | 001,749,376 | ---- | C] () -- C:\Windows\SysWow64\snp2uvc.sys
  541. [2013/04/06 19:24:43 | 000,028,032 | ---- | C] () -- C:\Windows\SysWow64\sncduvc.sys
  542. [2013/04/06 19:24:42 | 000,172,032 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp2uvc.dll
  543. [2013/04/06 19:24:41 | 000,000,131 | ---- | C] () -- C:\Windows\SysWow64\PidList.ini
  544. [2013/03/22 14:44:18 | 000,000,162 | ---- | C] () -- C:\Windows\ODBC.INI
  545. [2013/01/23 21:36:09 | 000,007,605 | ---- | C] () -- C:\Users\Mrain\AppData\Local\Resmon.ResmonCfg
  546. [2013/01/10 10:36:35 | 000,000,440 | ---- | C] () -- C:\Users\Mrain\AppData\Local\UserProducts.xml
  547. [2013/01/03 11:06:57 | 000,774,004 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  548. [2013/01/02 10:44:36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  549. [2013/01/02 10:40:43 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
  550. [2013/01/02 10:05:15 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
  551. [2012/12/19 21:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  552. [2012/12/19 21:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  553. [2012/05/02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  554. [2011/09/13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  555.  
  556. [color=#E56717]========== ZeroAccess Check ==========[/color]
  557.  
  558. [2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  559.  
  560. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  561.  
  562. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  563.  
  564. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  565.  
  566. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  567.  
  568. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  569. "" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
  570. "ThreadingModel" = Apartment
  571.  
  572. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  573. "" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
  574. "ThreadingModel" = Apartment
  575.  
  576. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  577. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  578. "ThreadingModel" = Free
  579.  
  580. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  581. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  582. "ThreadingModel" = Free
  583.  
  584. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  585. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  586. "ThreadingModel" = Both
  587.  
  588. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  589.  
  590. [color=#E56717]========== Alternate Data Streams ==========[/color]
  591.  
  592. @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:1C6D843F
  593.  
  594. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!