API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jun 28th, 2015
365
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 83.87 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 29/06/2015 8:51:31 AM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\owner\Desktop\mlwre
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17842)
  5. Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy
  6.  
  7. 7.94 Gb Total Physical Memory | 5.04 Gb Available Physical Memory | 63.50% Memory free
  8. 8.33 Gb Paging File | 5.10 Gb Available in Paging File | 61.20% Paging File free
  9. Paging file location(s): c:\pagefile.sys 400 4096 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 917.86 Gb Total Space | 283.65 Gb Free Space | 30.90% Space Free | Partition Type: NTFS
  13. Drive D: | 11.73 Gb Total Space | 1.43 Gb Free Space | 12.20% Space Free | Partition Type: NTFS
  14. Drive F: | 2.74 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
  15.  
  16. Computer Name: USER | User Name: owner | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - C:\Users\owner\Desktop\mlwre\OTL.exe (OldTimer Tools)
  23. PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_194.exe (Adobe Systems, Inc.)
  24. PRC - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (DTools LIMITED)
  25. PRC - C:\Program Files (x86)\SavePass 1.1\b5ef2f4e-a415-4a9f-9480-155bd2016223-1-6.exe (OB)
  26. PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
  27. PRC - C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
  28. PRC - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
  29. PRC - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\nis.exe (Symantec Corporation)
  30. PRC - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
  31. PRC - C:\Program Files (x86)\Camfrog\Camfrog Video Chat\update\cf_update_service.exe (Camshare Inc.)
  32. PRC - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe (CyberLink Corp.)
  33. PRC - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe (CyberLink)
  34. PRC - c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe (CyberLink)
  35. PRC - C:\Program Files (x86)\Hewlett-Packard\HP My Display\OSDManager.exe (Hewlett-Packard)
  36. PRC - C:\Program Files (x86)\Hewlett-Packard\HP My Display\DTune.exe (Hewlett-Packard)
  37. PRC - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (IVT Corporation)
  38. PRC - C:\Program Files (x86)\Common Files\Portrait Displays\Libs\DTHelper.exe (Portrait Displays, Inc.)
  39. PRC - C:\Program Files (x86)\Common Files\Portrait Displays\Libs\DTuneSrvc.exe (Portrait Displays, Inc.)
  40. PRC - c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (CyberLink)
  41. PRC - C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe (Portrait Displays, Inc)
  42. PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
  43. PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation)
  44. PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
  45. PRC - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (IVT Corporation)
  46. PRC - C:\Windows\SysWOW64\nlssrv32.exe (Nalpeiron Ltd.)
  47.  
  48.  
  49. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  50.  
  51. MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll ()
  52. MOD - C:\Program Files (x86)\GoPro\Tools\Importer\gopro-lib-win-analytics.dll ()
  53. MOD - c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll ()
  54. MOD - c:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll ()
  55. MOD - C:\Windows\SysWOW64\BsProfileFunc.dll ()
  56. MOD - C:\Windows\SysWOW64\BsTrace.dll ()
  57. MOD - C:\Windows\SysWOW64\BsExtendFunc.dll ()
  58. MOD - C:\Windows\SysWOW64\SCChangeMonitor.dll ()
  59. MOD - C:\Program Files (x86)\Hewlett-Packard\HP My Display\PEGAACPIDLL.dll ()
  60.  
  61.  
  62. [color=#E56717]========== Services (SafeList) ==========[/color]
  63.  
  64. SRV:[b]64bit:[/b] - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)
  65. SRV:[b]64bit:[/b] - (ClickToRunSvc) -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe (Microsoft Corporation)
  66. SRV:[b]64bit:[/b] - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
  67. SRV:[b]64bit:[/b] - (WdNisSvc) -- C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation)
  68. SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
  69. SRV:[b]64bit:[/b] - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
  70. SRV:[b]64bit:[/b] - (w3logsvc) -- C:\Windows\SysNative\inetsrv\w3logsvc.dll (Microsoft Corporation)
  71. SRV:[b]64bit:[/b] - (IEEtwCollectorService) -- C:\WINDOWS\SysNative\IEEtwCollector.exe (Microsoft Corporation)
  72. SRV:[b]64bit:[/b] - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation)
  73. SRV:[b]64bit:[/b] - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation)
  74. SRV:[b]64bit:[/b] - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation)
  75. SRV:[b]64bit:[/b] - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
  76. SRV:[b]64bit:[/b] - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
  77. SRV:[b]64bit:[/b] - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
  78. SRV:[b]64bit:[/b] - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
  79. SRV:[b]64bit:[/b] - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
  80. SRV:[b]64bit:[/b] - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
  81. SRV:[b]64bit:[/b] - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
  82. SRV:[b]64bit:[/b] - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation)
  83. SRV:[b]64bit:[/b] - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
  84. SRV:[b]64bit:[/b] - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
  85. SRV:[b]64bit:[/b] - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation)
  86. SRV:[b]64bit:[/b] - (lfsvc) -- C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation)
  87. SRV:[b]64bit:[/b] - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)
  88. SRV:[b]64bit:[/b] - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
  89. SRV:[b]64bit:[/b] - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
  90. SRV:[b]64bit:[/b] - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
  91. SRV:[b]64bit:[/b] - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
  92. SRV:[b]64bit:[/b] - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
  93. SRV:[b]64bit:[/b] - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
  94. SRV:[b]64bit:[/b] - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation)
  95. SRV:[b]64bit:[/b] - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)
  96. SRV:[b]64bit:[/b] - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  97. SRV:[b]64bit:[/b] - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  98. SRV:[b]64bit:[/b] - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  99. SRV:[b]64bit:[/b] - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  100. SRV:[b]64bit:[/b] - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  101. SRV:[b]64bit:[/b] - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  102. SRV:[b]64bit:[/b] - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  103. SRV:[b]64bit:[/b] - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
  104. SRV:[b]64bit:[/b] - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
  105. SRV:[b]64bit:[/b] - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
  106. SRV:[b]64bit:[/b] - (McComponentHostService) -- C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe (McAfee, Inc.)
  107. SRV:[b]64bit:[/b] - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
  108. SRV:[b]64bit:[/b] - (Intel(R) -- c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe (Intel(R) Corporation)
  109. SRV:[b]64bit:[/b] - (Intel(R) -- c:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
  110. SRV:[b]64bit:[/b] - (STacSV) -- C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
  111. SRV:[b]64bit:[/b] - (AESTFilters) -- C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
  112. SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
  113. SRV - (WindowsMangerProtect) -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (DTools LIMITED)
  114. SRV - (globalUpdatem) -- C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe (globalUpdate)
  115. SRV - (globalUpdate) -- C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe (globalUpdate)
  116. SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
  117. SRV - (WAS) -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
  118. SRV - (w3logsvc) -- C:\Windows\SysWOW64\inetsrv\w3logsvc.dll (Microsoft Corporation)
  119. SRV - (AppHostSvc) -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
  120. SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
  121. SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\NIS.exe (Symantec Corporation)
  122. SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation)
  123. SRV - (lfsvc) -- C:\Windows\SysWOW64\GeofenceMonitorService.dll (Microsoft Corporation)
  124. SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
  125. SRV - (PrintNotify) -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
  126. SRV - (camfrog_update_service) -- C:\Program Files (x86)\Camfrog\Camfrog Video Chat\update\cf_update_service.exe (Camshare Inc.)
  127. SRV - (CLHNServiceForPowerDVD12) -- c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\CLHNServiceForPowerDVD12.exe (CyberLink Corp.)
  128. SRV - (CyberLink PowerDVD 12 Media Server Service) -- c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe (CyberLink)
  129. SRV - (CyberLink PowerDVD 12 Media Server Monitor Service) -- c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe (CyberLink)
  130. SRV - (HP Support Assistant Service) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Hewlett-Packard Company)
  131. SRV - (CLKMSVC10_99E320F5) -- c:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe (CyberLink)
  132. SRV - (BlueSoleilCS) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (IVT Corporation)
  133. SRV - (DTuneSrvc) -- C:\Program Files (x86)\Common Files\Portrait Displays\Libs\DTuneSrvc.exe (Portrait Displays, Inc.)
  134. SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
  135. SRV - (Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation)
  136. SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation)
  137. SRV - (BsHelpCS) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (IVT Corporation)
  138. SRV - (nlsX86cc) -- C:\Windows\SysWOW64\nlssrv32.exe (Nalpeiron Ltd.)
  139.  
  140.  
  141. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  142.  
  143. DRV:[b]64bit:[/b] - (WdFilter) -- C:\Windows\SysNative\drivers\WdFilter.sys (Microsoft Corporation)
  144. DRV:[b]64bit:[/b] - (WdNisDrv) -- C:\Windows\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation)
  145. DRV:[b]64bit:[/b] - (WdBoot) -- C:\Windows\SysNative\drivers\WdBoot.sys (Microsoft Corporation)
  146. DRV:[b]64bit:[/b] - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation)
  147. DRV:[b]64bit:[/b] - (WDC_SAM) -- C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
  148. DRV:[b]64bit:[/b] - (IDMWFP) -- C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)
  149. DRV:[b]64bit:[/b] - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)
  150. DRV:[b]64bit:[/b] - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
  151. DRV:[b]64bit:[/b] - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
  152. DRV:[b]64bit:[/b] - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)
  153. DRV:[b]64bit:[/b] - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
  154. DRV:[b]64bit:[/b] - (BthHFEnum) -- C:\Windows\SysNative\drivers\bthhfenum.sys (Microsoft Corporation)
  155. DRV:[b]64bit:[/b] - (Wof) -- C:\WINDOWS\SysNative\drivers\wof.sys (Microsoft Corporation)
  156. DRV:[b]64bit:[/b] - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
  157. DRV:[b]64bit:[/b] - (wpcfltr) -- C:\Windows\SysNative\drivers\wpcfltr.sys (Microsoft Corporation)
  158. DRV:[b]64bit:[/b] - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)
  159. DRV:[b]64bit:[/b] - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)
  160. DRV:[b]64bit:[/b] - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation)
  161. DRV:[b]64bit:[/b] - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation)
  162. DRV:[b]64bit:[/b] - (ReFS) -- C:\WINDOWS\SysNative\drivers\refs.sys (Microsoft Corporation)
  163. DRV:[b]64bit:[/b] - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)
  164. DRV:[b]64bit:[/b] - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation)
  165. DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
  166. DRV:[b]64bit:[/b] - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation)
  167. DRV:[b]64bit:[/b] - (BthHFSrv) -- C:\Windows\SysNative\BthHFSrv.dll (Microsoft Corporation)
  168. DRV:[b]64bit:[/b] - (netvsc) -- C:\Windows\SysNative\drivers\netvsc63.sys (Microsoft Corporation)
  169. DRV:[b]64bit:[/b] - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation)
  170. DRV:[b]64bit:[/b] - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation)
  171. DRV:[b]64bit:[/b] - (UCX01000) -- C:\Windows\SysNative\drivers\UCX01000.SYS (Microsoft Corporation)
  172. DRV:[b]64bit:[/b] - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
  173. DRV:[b]64bit:[/b] - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)
  174. DRV:[b]64bit:[/b] - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation)
  175. DRV:[b]64bit:[/b] - (BthLEEnum) -- C:\Windows\SysNative\drivers\BthLEEnum.sys (Microsoft Corporation)
  176. DRV:[b]64bit:[/b] - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation)
  177. DRV:[b]64bit:[/b] - (BasicRender) -- C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
  178. DRV:[b]64bit:[/b] - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
  179. DRV:[b]64bit:[/b] - (SymNetS) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\symnets.sys (Symantec Corporation)
  180. DRV:[b]64bit:[/b] - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\symefa64.sys (Symantec Corporation)
  181. DRV:[b]64bit:[/b] - (SymELAM) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\symelam.sys (Symantec Corporation)
  182. DRV:[b]64bit:[/b] - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\symds64.sys (Symantec Corporation)
  183. DRV:[b]64bit:[/b] - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\srtsp64.sys (Symantec Corporation)
  184. DRV:[b]64bit:[/b] - (SRTSPX) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\srtspx64.sys (Symantec Corporation)
  185. DRV:[b]64bit:[/b] - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\ironx64.sys (Symantec Corporation)
  186. DRV:[b]64bit:[/b] - (ccSet_NIS) -- C:\Windows\SysNative\drivers\NISx64\1507000.00B\ccsetx64.sys (Symantec Corporation)
  187. DRV:[b]64bit:[/b] - (netr28x) -- C:\Windows\SysNative\drivers\netr28x.sys (Ralink Technology, Corp.)
  188. DRV:[b]64bit:[/b] - (rtbth) -- C:\Windows\SysNative\drivers\rtbth.sys (Ralink Technology, Corp.)
  189. DRV:[b]64bit:[/b] - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
  190. DRV:[b]64bit:[/b] - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
  191. DRV:[b]64bit:[/b] - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation)
  192. DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
  193. DRV:[b]64bit:[/b] - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation)
  194. DRV:[b]64bit:[/b] - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation)
  195. DRV:[b]64bit:[/b] - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)
  196. DRV:[b]64bit:[/b] - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)
  197. DRV:[b]64bit:[/b] - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)
  198. DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
  199. DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
  200. DRV:[b]64bit:[/b] - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation)
  201. DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
  202. DRV:[b]64bit:[/b] - (LSI_SAS3) -- C:\Windows\SysNative\drivers\lsi_sas3.sys (LSI Corporation)
  203. DRV:[b]64bit:[/b] - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra)
  204. DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
  205. DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
  206. DRV:[b]64bit:[/b] - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI)
  207. DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
  208. DRV:[b]64bit:[/b] - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)
  209. DRV:[b]64bit:[/b] - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)
  210. DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
  211. DRV:[b]64bit:[/b] - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)
  212. DRV:[b]64bit:[/b] - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation)
  213. DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)
  214. DRV:[b]64bit:[/b] - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation)
  215. DRV:[b]64bit:[/b] - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
  216. DRV:[b]64bit:[/b] - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation)
  217. DRV:[b]64bit:[/b] - (UEFI) -- C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
  218. DRV:[b]64bit:[/b] - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)
  219. DRV:[b]64bit:[/b] - (BasicDisplay) -- C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
  220. DRV:[b]64bit:[/b] - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)
  221. DRV:[b]64bit:[/b] - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)
  222. DRV:[b]64bit:[/b] - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation)
  223. DRV:[b]64bit:[/b] - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation)
  224. DRV:[b]64bit:[/b] - (BthAvrcpTg) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation)
  225. DRV:[b]64bit:[/b] - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation)
  226. DRV:[b]64bit:[/b] - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)
  227. DRV:[b]64bit:[/b] - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)
  228. DRV:[b]64bit:[/b] - (bthhfhid) -- C:\Windows\SysNative\drivers\BthhfHid.sys (Microsoft Corporation)
  229. DRV:[b]64bit:[/b] - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)
  230. DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
  231. DRV:[b]64bit:[/b] - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation)
  232. DRV:[b]64bit:[/b] - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
  233. DRV:[b]64bit:[/b] - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)
  234. DRV:[b]64bit:[/b] - (FxPPM) -- C:\Windows\SysNative\drivers\fxppm.sys (Microsoft Corporation)
  235. DRV:[b]64bit:[/b] - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
  236. DRV:[b]64bit:[/b] - (iaStorAV) -- C:\Windows\SysNative\drivers\iaStorAV.sys (Intel Corporation)
  237. DRV:[b]64bit:[/b] - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)
  238. DRV:[b]64bit:[/b] - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)
  239. DRV:[b]64bit:[/b] - (RTL8168) -- C:\Windows\SysNative\drivers\Rt630x64.sys (Realtek )
  240. DRV:[b]64bit:[/b] - (btUrbFilterDrv) -- C:\Windows\SysNative\drivers\IvtUrbBtFlt.sys (Ralink Corporation)
  241. DRV:[b]64bit:[/b] - (CLVirtualDrive) -- C:\Windows\SysNative\drivers\CLVirtualDrive.sys (CyberLink)
  242. DRV:[b]64bit:[/b] - (RSPCIESTOR) -- C:\Windows\SysNative\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
  243. DRV:[b]64bit:[/b] - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
  244. DRV:[b]64bit:[/b] - (STHDA) -- C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
  245. DRV:[b]64bit:[/b] - (BthL2caScoIfSrv) -- C:\Windows\SysNative\drivers\BtL2caScoIf.sys (Ralink Corporation)
  246. DRV:[b]64bit:[/b] - (BtAudioBusSrv) -- C:\Windows\SysNative\drivers\BtAudioBus.sys (IVT Corporation)
  247. DRV - (BHDrvx64) -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.6.0.32\Definitions\BASHDefs\20150519.001\BHDrvx64.sys (Symantec Corporation)
  248. DRV - (NAVEX15) -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.6.0.32\Definitions\VirusDefs\20150519.005\ex64.sys (Symantec Corporation)
  249. DRV - (NAVENG) -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.6.0.32\Definitions\VirusDefs\20150519.005\eng64.sys (Symantec Corporation)
  250. DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
  251. DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
  252. DRV - (IDSVia64) -- C:\Program Files (x86)\Norton Internet Security\NortonData\21.6.0.32\Definitions\IPSDefs\20150518.001\IDSviA64.sys (Symantec Corporation)
  253. DRV - (ntk_PowerDVD12) -- c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMP\CLHNServer\ntk_PowerDVD12_64.sys (Cyberlink Corp.)
  254.  
  255.  
  256. [color=#E56717]========== Standard Registry (All) ==========[/color]
  257.  
  258.  
  259. [color=#E56717]========== Internet Explorer ==========[/color]
  260.  
  261. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG
  262. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  263. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  264. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  265. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  266. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  267. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  268. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG
  269. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  270. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
  271. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  272. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG
  273. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  274. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  275. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  276. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  277. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  278. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  279. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG
  280. IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  281. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
  282. IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  283.  
  284. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG
  285. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://g.jp.msn.com/HPALL13/87
  286. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
  287. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  288. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.yahoo.com/?fr=oberhp&type=iwintoolbarforpogo
  289. IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  290. IE - HKCU\..\SearchScopes,DefaultScope = Yahoo
  291. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPDTDFJS
  292. IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}
  293. IE - HKCU\..\SearchScopes\Yahoo: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=oberhp&type=iwintoolbarforpogo
  294. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  295. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  296. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 10.1.1.16:80
  297.  
  298. [color=#E56717]========== FireFox ==========[/color]
  299.  
  300. FF - prefs.js..browser.search.countryCode: "ID"
  301. FF - prefs.js..browser.search.defaultenginename: "istartsurf"
  302. FF - prefs.js..browser.search.hiddenOneOffs: "Google,Yahoo,Bing,Amazon.com,DuckDuckGo,eBay,Twitter,Wikipedia (en)"
  303. FF - prefs.js..browser.search.param.yahoo-fr: "oberhp&type=iwintoolbarforpogo"
  304. FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "oberhp&type=iwintoolbarforpogo"
  305. FF - prefs.js..browser.search.region: "ID"
  306. FF - prefs.js..browser.search.searchengine.alias: "istartsurf"
  307. FF - prefs.js..browser.search.searchengine.desc: "this is my first firefox searchEngine"
  308. FF - prefs.js..browser.search.searchengine.iconURL: "http://www.istartsurf.com/favicon.ico"
  309. FF - prefs.js..browser.search.searchengine.name: "istartsurf"
  310. FF - prefs.js..browser.search.searchengine.ptid: "obw"
  311. FF - prefs.js..browser.search.searchengine.uid: "ST1000DM003-1ER162_S4Y1WRNG"
  312. FF - prefs.js..browser.search.searchengine.url: "http://www.istartsurf.com/web/?type=ds&ts=1435039200&z=d7ee665e17d239bd6ef3a5dg0zccdwae7c8tbg5tam&from=obw&uid=ST1000DM003-1ER162_S4Y1WRNG&q={searchTerms}"
  313. FF - prefs.js..browser.search.selectedEngine: "istartsurf"
  314. FF - prefs.js..browser.search.useDBForOrder: true
  315. FF - prefs.js..browser.startup.homepage: "www.google.com"
  316. FF - prefs.js..extensions.enabledAddons: searchffv2%40gmail.com:0.0.4
  317. FF - prefs.js..extensions.enabledAddons: sweetsearch%40gmail.com:1.0.0.1031
  318. FF - prefs.js..extensions.enabledAddons: %7Bd925bc12-7440-413e-a040-cef15508f0c5%7D:1.0.0.12
  319. FF - prefs.js..extensions.enabledAddons: 389579c4-efa9-4d96-a1dd-3c86f7bd1a51%40gmail.com:0.95.69
  320. FF - prefs.js..extensions.enabledAddons: mozilla_cc%40internetdownloadmanager.com:7.3.99
  321. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:38.0.5
  322. FF - prefs.js..network.proxy.http: "10.1.1.15"
  323. FF - prefs.js..network.proxy.http_port: 8080
  324. FF - prefs.js..network.proxy.type: 0
  325. FF - user.js - File not found
  326.  
  327. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll File not found
  328. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll ()
  329. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  330. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  331. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
  332. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  333. FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll (globalUpdate)
  334. FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll (globalUpdate)
  335. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  336. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  337.  
  338. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.6.0.32\coFFPlgn\ [2015/06/25 08:25:49 | 000,000,000 | ---D | M]
  339. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\searchffv2@gmail.com: C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\searchffv2@gmail.com [2015/06/23 13:03:34 | 000,000,000 | ---D | M]
  340. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\sweetsearch@gmail.com: C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\sweetsearch@gmail.com [2015/06/23 13:03:42 | 000,000,000 | ---D | M]
  341. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.5\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  342. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  343. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8}: C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014/04/04 17:36:14 | 000,010,691 | ---- | M] ()
  344. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\owner\AppData\Roaming\IDM\idmmzcc5 [2015/06/29 08:21:44 | 000,000,000 | ---D | M]
  345. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.5\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  346. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 38.0.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  347. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\owner\AppData\Roaming\IDM\idmmzcc5 [2015/06/29 08:21:44 | 000,000,000 | ---D | M]
  348.  
  349. [2015/03/06 14:43:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\Extensions
  350. [2015/06/29 08:39:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions
  351. [2015/06/24 12:35:51 | 000,000,000 | ---D | M] (iWin Toolbar for Pogo) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\{d925bc12-7440-413e-a040-cef15508f0c5}
  352. [2015/06/26 08:05:57 | 000,000,000 | ---D | M] ("SavePass v2.2") -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com
  353. [2015/06/23 13:03:34 | 000,000,000 | ---D | M] ("QuickSearch") -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\searchffv2@gmail.com
  354. [2015/06/29 08:39:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\staged
  355. [2015/06/23 13:03:42 | 000,000,000 | ---D | M] (Search Enginer) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\sweetsearch@gmail.com
  356. [2015/06/26 08:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData
  357. [2015/06/26 08:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins
  358. [2015/06/26 08:05:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gi3aiy3y.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\userCode
  359. [2015/06/29 08:39:24 | 000,015,318 | ---- | M] () (No name found) -- C:\Users\owner\AppData\Roaming\mozilla\firefox\profiles\gi3aiy3y.default\extensions\staged\defsearchp@gmail.com.xpi
  360. [2015/06/29 08:49:33 | 000,002,112 | ---- | M] () -- C:\Users\owner\AppData\Roaming\mozilla\firefox\profiles\gi3aiy3y.default\searchplugins\istartsurf.xml
  361. [2015/06/03 08:48:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  362. [2015/06/03 08:48:02 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  363. [2015/06/29 08:21:44 | 000,000,000 | ---D | M] (IDM CC) -- C:\USERS\OWNER\APPDATA\ROAMING\IDM\IDMMZCC5
  364.  
  365. O1 HOSTS File: ([2013/08/22 20:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  366. O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  367. O2:[b]64bit:[/b] - BHO: (Skype for Business Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
  368. O2:[b]64bit:[/b] - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coieplg.dll (Symantec Corporation)
  369. O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll (Microsoft Corporation)
  370. O2:[b]64bit:[/b] - BHO: (iWin Toolbar for Pogo) - {d925bc12-7440-413e-a040-cef15508f0c5} - C:\Program Files (x86)\iwintoolbarforpogo\encyclopediabritannicagamesbarX64.dll ()
  371. O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  372. O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
  373. O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coieplg.dll (Symantec Corporation)
  374. O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\ips\ipsbho.dll (Symantec Corporation)
  375. O2 - BHO: (iWin Toolbar for Pogo) - {d925bc12-7440-413e-a040-cef15508f0c5} - C:\Program Files (x86)\iwintoolbarforpogo\encyclopediabritannicagamesbarX.dll ()
  376. O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
  377. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.7.0.11\coieplg.dll (Symantec Corporation)
  378. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (iWin Toolbar for Pogo) - {d925bc12-7440-413e-a040-cef15508f0c5} - C:\Program Files (x86)\iwintoolbarforpogo\encyclopediabritannicagamesbarX64.dll ()
  379. O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\coieplg.dll (Symantec Corporation)
  380. O3 - HKLM\..\Toolbar: (iWin Toolbar for Pogo) - {d925bc12-7440-413e-a040-cef15508f0c5} - C:\Program Files (x86)\iwintoolbarforpogo\encyclopediabritannicagamesbarX.dll ()
  381. O4:[b]64bit:[/b] - HKLM..\Run: [BeatsOSDApp] C:\Program Files\IDT\WDM\Beats64.exe (Hewlett-Packard )
  382. O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
  383. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  384. O4 - HKLM..\Run: [BtTray] c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (IVT Corporation)
  385. O4 - HKLM..\Run: [DT_HPO] C:\Program Files (x86)\Common Files\Portrait Displays\Libs\DTuneStartup.exe (Portrait Displays, Inc.)
  386. O4 - HKLM..\Run: [GoPro Studio Importer] C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
  387. O4 - HKLM..\Run: [QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
  388. O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  389. O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
  390. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
  391. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  392. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  393. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  394. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  395. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
  396. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  397. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  398. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  399. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  400. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  401. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  402. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  403. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  404. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  405. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  406. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  407. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  408. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  409. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  410. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  411. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  412. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  413. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  414. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  415. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  416. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  417. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NofolderOptions = 0
  418. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
  419. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
  420. O8:[b]64bit:[/b] - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  421. O8:[b]64bit:[/b] - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  422. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
  423. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
  424. O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  425. O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  426. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
  427. O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
  428. O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
  429. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
  430. O9:[b]64bit:[/b] - Extra Button: Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
  431. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Skype for Business Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
  432. O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
  433. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
  434. O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
  435. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
  436. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
  437. O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
  438. O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
  439. O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
  440. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
  441. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  442. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  443. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
  444. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  445. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
  446. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
  447. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  448. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  449. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  450. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  451. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  452. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  453. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  454. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  455. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  456. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  457. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  458. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  459. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
  460. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  461. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  462. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
  463. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  464. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
  465. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
  466. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  467. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  468. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  469. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  470. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  471. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  472. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  473. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  474. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  475. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  476. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  477. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  478. O13[b]64bit:[/b] - gopher Prefix: missing
  479. O13 - gopher Prefix: missing
  480. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  481. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0A577E0A-4673-4AE7-853A-A0D78ABDFB6D}: DhcpNameServer = 192.168.1.1 192.168.1.1
  482. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BBE35CF1-FA6D-44ED-BA7F-F5CBDF7F8EBB}: DhcpNameServer = 10.1.54.90 10.1.54.92 10.1.1.12
  483. O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  484. O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  485. O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  486. O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  487. O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  488. O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  489. O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  490. O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  491. O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  492. O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  493. O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  494. O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
  495. O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  496. O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  497. O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
  498. O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  499. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  500. O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  501. O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  502. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  503. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  504. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  505. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  506. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  507. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  508. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  509. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  510. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  511. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  512. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  513. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  514. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
  515. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  516. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  517. O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\msosb.dll (Microsoft Corporation)
  518. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  519. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll (Skype Technologies)
  520. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  521. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  522. O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
  523. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  524. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  525. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  526. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
  527. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
  528. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
  529. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  530. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  531. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  532. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  533. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
  534. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
  535. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  536. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  537. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\WINDOWS\SysWow64\credssp.dll (Microsoft Corporation)
  538. O29 - HKLM SecurityProviders - (credssp.dll) - C:\WINDOWS\SysWow64\credssp.dll (Microsoft Corporation)
  539. O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\SysNative\msv1_0.dll (Microsoft Corporation)
  540. O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
  541. O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\WINDOWS\SysNative\kerberos.dll (Microsoft Corporation)
  542. O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\WINDOWS\SysNative\msv1_0.dll (Microsoft Corporation)
  543. O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\WINDOWS\SysNative\schannel.dll (Microsoft Corporation)
  544. O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\WINDOWS\SysNative\wdigest.dll (Microsoft Corporation)
  545. O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\WINDOWS\SysNative\tspkg.dll (Microsoft Corporation)
  546. O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\WINDOWS\SysNative\pku2u.dll (Microsoft Corporation)
  547. O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - C:\WINDOWS\SysNative\livessp.dll (Microsoft Corporation)
  548. O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\SysWow64\kerberos.dll (Microsoft Corporation)
  549. O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
  550. O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\SysWow64\schannel.dll (Microsoft Corporation)
  551. O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\SysWow64\wdigest.dll (Microsoft Corporation)
  552. O30 - LSA: Security Packages - (tspkg) - C:\WINDOWS\SysWow64\tspkg.dll (Microsoft Corporation)
  553. O30 - LSA: Security Packages - (pku2u) - C:\WINDOWS\SysWow64\pku2u.dll (Microsoft Corporation)
  554. O30 - LSA: Security Packages - (livessp) - File not found
  555. O31 - SafeBoot: AlternateShell - cmd.exe
  556. O32 - HKLM CDRom: AutoRun - 1
  557. O32 - AutoRun File - [1999/12/12 05:00:00 | 000,000,041 | R--- | M] () - F:\Autorun.inf -- [ CDFS ]
  558. O33 - MountPoints2\{7e57c1f8-d915-11e4-be78-3423874c64da}\Shell - "" = AutoRun
  559. O33 - MountPoints2\{7e57c1f8-d915-11e4-be78-3423874c64da}\Shell\AutoRun\command - "" = "F:\AutoRun.exe"
  560. O33 - MountPoints2\{9d1e1f05-13c4-11e5-be95-3423874c64da}\Shell - "" = AutoRun
  561. O33 - MountPoints2\{9d1e1f05-13c4-11e5-be95-3423874c64da}\Shell\AutoRun\command - "" = F:\setup.exe -- [1999/12/12 05:00:00 | 000,663,947 | R--- | M] (CODEX )
  562. O33 - MountPoints2\{fbc63eca-d13f-11e4-be74-3423874c64da}\Shell - "" = AutoRun
  563. O33 - MountPoints2\{fbc63eca-d13f-11e4-be74-3423874c64da}\Shell\AutoRun\command - "" = "F:\AutoRun.exe"
  564. O33 - MountPoints2\F\Shell - "" = AutoRun
  565. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup.exe -- [1999/12/12 05:00:00 | 000,663,947 | R--- | M] (CODEX )
  566. O34 - HKLM BootExecute: (autocheck autochk *)
  567. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  568. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  569. O35 - HKLM\..comfile [open] -- "%1" %*
  570. O35 - HKLM\..exefile [open] -- "%1" %*
  571. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  572. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  573. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  574. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  575. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  576. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  577.  
  578. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  579.  
  580. [2015/06/29 08:47:47 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\mlwre
  581. [2015/06/24 14:08:29 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\PopCap Games
  582. [2015/06/24 12:36:23 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\iWin
  583. [2015/06/24 12:35:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PogoDGC
  584. [2015/06/24 12:35:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iwintoolbarforpogo
  585. [2015/06/24 12:35:04 | 000,000,000 | ---D | C] -- C:\Games
  586. [2015/06/24 12:27:28 | 000,000,000 | ---D | C] -- C:\ProgramData\PogoDGC
  587. [2015/06/24 12:27:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pogo Games
  588. [2015/06/24 11:49:43 | 000,000,000 | ---D | C] -- C:\Users\owner\Documents\My Games
  589. [2015/06/24 11:49:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorcycle Club
  590. [2015/06/24 11:47:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Motorcycle Club
  591. [2015/06/23 13:03:55 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsMangerProtect
  592. [2015/06/23 13:03:49 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\istartsurf
  593. [2015/06/23 12:05:04 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\globalUpdate
  594. [2015/06/23 12:05:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\globalUpdate
  595. [2015/06/23 12:04:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SavePass 1.1
  596. [2015/06/23 11:20:15 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Steam
  597. [2015/06/23 11:20:15 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Celeris
  598. [2015/06/23 11:20:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Celeris
  599. [2015/06/23 11:19:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Pool 4
  600. [2015/06/23 11:19:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Virtual Pool 4
  601. [2015/06/22 13:53:31 | 000,000,000 | ---D | C] -- C:\Users\owner\Documents\Project CARS
  602. [2015/06/22 13:53:24 | 000,000,000 | ---D | C] -- C:\Users\owner\Documents\wmd_symbol_cache
  603. [2015/06/22 13:53:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
  604. [2015/06/22 13:37:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Project CARS
  605. [2015/06/19 14:13:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  606. [2015/06/18 14:51:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
  607. [2015/06/18 14:51:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GameTop.com
  608. [2015/06/18 14:43:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\THQ
  609. [2015/06/18 14:38:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameSpy Arcade
  610. [2015/06/18 14:07:20 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\game
  611. [2015/06/16 09:46:46 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\psptt
  612. [2015/06/15 08:18:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AV
  613. [2015/06/13 13:37:29 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\gwgw
  614. [2015/06/10 12:30:13 | 001,091,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
  615. [2015/06/10 12:30:13 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
  616. [2015/06/10 12:30:13 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiobj.dll
  617. [2015/06/10 12:30:13 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\compstui.dll
  618. [2015/06/10 12:30:13 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rastapi.dll
  619. [2015/06/10 12:30:13 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rastapi.dll
  620. [2015/06/10 12:30:12 | 001,430,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
  621. [2015/06/10 12:30:12 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UtcResources.dll
  622. [2015/06/10 12:30:11 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rgb9rast.dll
  623. [2015/06/10 12:30:10 | 002,483,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
  624. [2015/06/10 12:30:09 | 003,097,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
  625. [2015/06/10 12:25:09 | 003,633,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
  626. [2015/06/10 12:25:09 | 002,551,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
  627. [2015/06/10 12:25:09 | 001,920,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
  628. [2015/06/10 12:25:08 | 002,749,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
  629. [2015/06/10 12:25:08 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
  630. [2015/06/10 12:25:08 | 001,018,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
  631. [2015/06/10 12:25:08 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll
  632. [2015/06/10 12:25:08 | 000,699,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll
  633. [2015/06/10 12:25:08 | 000,653,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comctl32.dll
  634. [2015/06/10 12:25:08 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll
  635. [2015/06/10 12:25:08 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
  636. [2015/06/10 12:25:08 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
  637. [2015/06/10 12:25:08 | 000,325,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
  638. [2015/06/10 12:25:08 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authz.dll
  639. [2015/06/10 12:25:08 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssphtb.dll
  640. [2015/06/10 12:25:05 | 006,026,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
  641. [2015/06/10 12:25:02 | 002,865,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
  642. [2015/06/10 12:25:02 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
  643. [2015/06/10 12:25:02 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
  644. [2015/06/10 12:25:00 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
  645. [2015/06/10 12:25:00 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
  646. [2015/06/10 12:25:00 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
  647. [2015/06/10 12:25:00 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
  648. [2015/06/10 12:25:00 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\html.iec
  649. [2015/06/10 12:25:00 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\html.iec
  650. [2015/06/10 12:24:59 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
  651. [2015/06/10 12:24:59 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
  652. [2015/06/10 12:24:59 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
  653. [2015/06/10 12:24:59 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
  654. [2015/06/10 12:24:59 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieui.dll
  655. [2015/06/10 12:24:59 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
  656. [2015/06/10 12:24:59 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iepeers.dll
  657. [2015/06/10 12:24:59 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll
  658. [2015/06/10 12:24:59 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  659. [2015/06/10 12:24:59 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  660. [2015/06/08 08:14:01 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Apple Computer
  661. [2015/06/05 16:13:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
  662. [2015/06/05 16:13:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
  663. [2015/06/05 16:13:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
  664. [2015/06/05 16:13:13 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Apple
  665. [2015/06/05 16:13:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
  666. [2015/06/05 15:49:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro
  667. [2015/06/05 15:49:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GoPro
  668. [2015/06/05 15:35:32 | 121,651,128 | ---- | C] (GoPro, Inc.) -- C:\Users\owner\Desktop\GoProStudioPC-2.5.5.443.exe
  669. [2015/06/05 15:02:36 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\idm
  670. [2015/06/05 12:52:25 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\IDM
  671. [2015/06/05 12:52:25 | 000,000,000 | ---D | C] -- C:\ProgramData\IDM
  672. [2015/06/05 12:52:17 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
  673. [2015/06/05 12:52:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
  674. [2015/06/05 12:52:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager
  675. [2015/06/05 08:18:58 | 001,020,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
  676. [2015/06/05 08:18:57 | 001,119,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
  677. [2015/06/05 08:18:57 | 000,756,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
  678. [2015/06/05 08:18:57 | 000,700,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll
  679. [2015/06/05 08:18:57 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
  680. [2015/06/05 08:18:57 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepic.dll
  681. [2015/06/05 08:18:57 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
  682. [2015/06/05 08:18:56 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepdu.dll
  683. [2015/06/04 15:56:14 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Downloaded Installations
  684. [2015/06/03 13:33:40 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\GWX
  685. [2015/06/03 08:47:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  686.  
  687. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  688.  
  689. [2015/06/29 08:21:48 | 000,003,620 | ---- | M] () -- C:\WINDOWS\SysWow64\LOCALSERVICE.INI
  690. [2015/06/29 08:21:39 | 000,002,438 | ---- | M] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-5_user.job
  691. [2015/06/29 08:21:39 | 000,002,438 | ---- | M] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-5.job
  692. [2015/06/29 08:21:35 | 000,004,150 | ---- | M] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-4.job
  693. [2015/06/29 08:21:35 | 000,003,466 | ---- | M] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-1-7.job
  694. [2015/06/29 08:21:33 | 000,000,890 | ---- | M] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job
  695. [2015/06/29 08:21:30 | 000,003,130 | ---- | M] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-1-6.job
  696. [2015/06/29 08:17:47 | 000,000,983 | ---- | M] () -- C:\WINDOWS\SysWow64\bscs.ini
  697. [2015/06/29 08:17:00 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  698. [2015/06/29 08:14:44 | 000,000,043 | ---- | M] () -- C:\WINDOWS\SysWow64\LOCALDEVICE.INI
  699. [2015/06/29 08:14:34 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  700. [2015/06/26 13:06:08 | 000,000,894 | ---- | M] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job
  701. [2015/06/25 08:31:41 | 000,956,476 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  702. [2015/06/25 08:31:41 | 000,798,968 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  703. [2015/06/25 08:31:41 | 000,165,032 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  704. [2015/06/25 08:25:28 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  705. [2015/06/25 08:25:25 | 2521,669,631 | -HS- | M] () -- C:\hiberfil.sys
  706. [2015/06/24 15:20:00 | 000,001,200 | ---- | M] () -- C:\Users\owner\Desktop\Bejeweled 3.exe - Shortcut.lnk
  707. [2015/06/24 14:01:12 | 000,000,062 | ---- | M] () -- C:\Users\Public\Desktop\Bejeweled 3.url
  708. [2015/06/24 11:49:11 | 000,001,105 | ---- | M] () -- C:\Users\owner\Desktop\Motorcycle Club.lnk
  709. [2015/06/24 10:17:23 | 018,411,184 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerInstaller.exe
  710. [2015/06/23 14:30:09 | 000,001,479 | ---- | M] () -- C:\Users\owner\Desktop\vp4S.exe - Shortcut.lnk
  711. [2015/06/23 13:03:57 | 000,002,753 | ---- | M] () -- C:\Users\owner\Desktop\AnizanDownloadManager.lnk
  712. [2015/06/23 13:03:19 | 000,001,424 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  713. [2015/06/23 13:01:16 | 000,002,104 | ---- | M] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-10_user.job
  714. [2015/06/23 13:00:03 | 000,001,713 | ---- | M] () -- C:\Users\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  715. [2015/06/23 12:05:01 | 000,000,004 | ---- | M] () -- C:\WINDOWS\SysWow64\029B560A371F4E00AB32838EBC01B9E7
  716. [2015/06/23 11:19:40 | 000,001,044 | ---- | M] () -- C:\Users\owner\Desktop\Virtual Pool 4.lnk
  717. [2015/06/22 14:27:12 | 000,001,482 | ---- | M] () -- C:\Users\owner\Desktop\pCARS64.exe - Shortcut.lnk
  718. [2015/06/22 14:08:13 | 000,001,462 | ---- | M] () -- C:\Users\owner\Desktop\pCARS.exe - Shortcut.lnk
  719. [2015/06/20 10:02:45 | 000,792,568 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
  720. [2015/06/20 10:02:45 | 000,178,168 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
  721. [2015/06/18 14:52:03 | 000,001,181 | ---- | M] () -- C:\Users\owner\Desktop\City Racing.lnk
  722. [2015/06/15 09:02:24 | 059,235,544 | ---- | M] () -- C:\Users\owner\Desktop\20150615_MajalahDetik_185.pdf
  723. [2015/06/11 08:24:55 | 002,309,040 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
  724. [2015/06/05 15:49:34 | 000,000,826 | ---- | M] () -- C:\Users\Public\Desktop\GoPro Studio.lnk
  725. [2015/06/05 15:48:14 | 121,651,128 | ---- | M] (GoPro, Inc.) -- C:\Users\owner\Desktop\GoProStudioPC-2.5.5.443.exe
  726. [2015/06/05 15:03:25 | 000,001,028 | ---- | M] () -- C:\Users\owner\Desktop\Internet Download Manager.lnk
  727.  
  728. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  729.  
  730. [2015/06/24 15:20:00 | 000,001,200 | ---- | C] () -- C:\Users\owner\Desktop\Bejeweled 3.exe - Shortcut.lnk
  731. [2015/06/24 14:01:12 | 000,000,062 | ---- | C] () -- C:\Users\Public\Desktop\Bejeweled 3.url
  732. [2015/06/24 11:49:11 | 000,001,105 | ---- | C] () -- C:\Users\owner\Desktop\Motorcycle Club.lnk
  733. [2015/06/23 14:30:09 | 000,001,479 | ---- | C] () -- C:\Users\owner\Desktop\vp4S.exe - Shortcut.lnk
  734. [2015/06/23 12:05:35 | 000,002,753 | ---- | C] () -- C:\Users\owner\Desktop\AnizanDownloadManager.lnk
  735. [2015/06/23 12:05:29 | 000,002,438 | ---- | C] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-5_user.job
  736. [2015/06/23 12:05:28 | 000,002,438 | ---- | C] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-5.job
  737. [2015/06/23 12:05:21 | 000,003,130 | ---- | C] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-1-6.job
  738. [2015/06/23 12:05:20 | 000,003,466 | ---- | C] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-1-7.job
  739. [2015/06/23 12:05:06 | 000,004,150 | ---- | C] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-4.job
  740. [2015/06/23 12:05:06 | 000,000,894 | ---- | C] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job
  741. [2015/06/23 12:05:06 | 000,000,890 | ---- | C] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job
  742. [2015/06/23 12:05:01 | 000,000,004 | ---- | C] () -- C:\WINDOWS\SysWow64\029B560A371F4E00AB32838EBC01B9E7
  743. [2015/06/23 12:04:58 | 000,002,104 | ---- | C] () -- C:\WINDOWS\tasks\b5ef2f4e-a415-4a9f-9480-155bd2016223-10_user.job
  744. [2015/06/23 11:19:40 | 000,001,044 | ---- | C] () -- C:\Users\owner\Desktop\Virtual Pool 4.lnk
  745. [2015/06/22 14:27:12 | 000,001,482 | ---- | C] () -- C:\Users\owner\Desktop\pCARS64.exe - Shortcut.lnk
  746. [2015/06/22 14:08:13 | 000,001,462 | ---- | C] () -- C:\Users\owner\Desktop\pCARS.exe - Shortcut.lnk
  747. [2015/06/18 14:51:23 | 000,001,181 | ---- | C] () -- C:\Users\owner\Desktop\City Racing.lnk
  748. [2015/06/15 09:01:27 | 059,235,544 | ---- | C] () -- C:\Users\owner\Desktop\20150615_MajalahDetik_185.pdf
  749. [2015/06/10 12:30:15 | 000,410,336 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
  750. [2015/06/05 16:13:12 | 000,002,535 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
  751. [2015/06/05 15:49:34 | 000,000,826 | ---- | C] () -- C:\Users\Public\Desktop\GoPro Studio.lnk
  752. [2015/06/05 12:52:20 | 000,001,028 | ---- | C] () -- C:\Users\owner\Desktop\Internet Download Manager.lnk
  753. [2015/05/06 14:24:56 | 000,930,400 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
  754. [2015/05/06 14:20:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
  755. [2015/02/10 23:57:14 | 000,003,620 | ---- | C] () -- C:\WINDOWS\SysWow64\LOCALSERVICE.INI
  756. [2015/02/10 23:57:14 | 000,000,043 | ---- | C] () -- C:\WINDOWS\SysWow64\LOCALDEVICE.INI
  757. [2015/02/10 23:43:14 | 000,368,428 | ---- | C] () -- C:\WINDOWS\SysWow64\drivers\FW7650.bin
  758. [2015/02/10 23:43:14 | 000,000,313 | ---- | C] () -- C:\WINDOWS\SysWow64\RaCheckBTDev.ini
  759. [2014/11/21 12:16:22 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  760. [2014/11/21 12:14:22 | 000,107,008 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
  761. [2014/11/21 11:52:44 | 000,002,255 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
  762. [2013/09/10 22:23:22 | 000,204,952 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsvl.dat
  763. [2013/09/10 22:23:22 | 000,157,144 | ---- | C] () -- C:\WINDOWS\SysWow64\ativvsva.dat
  764. [2013/09/10 22:23:10 | 000,003,917 | ---- | C] () -- C:\WINDOWS\SysWow64\atipblag.dat
  765. [2013/09/10 22:22:38 | 000,798,734 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_ld32.exe
  766. [2013/09/10 22:22:36 | 000,995,342 | ---- | C] () -- C:\WINDOWS\SysWow64\amdocl_as32.exe
  767. [2013/09/10 22:22:26 | 000,123,392 | ---- | C] () -- C:\WINDOWS\SysWow64\amdhdl32.dll
  768. [2013/08/22 22:36:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  769. [2013/08/22 22:36:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  770. [2013/08/22 21:46:23 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  771. [2013/08/22 14:01:23 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  772. [2013/08/22 06:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  773. [2013/08/22 06:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  774.  
  775. [color=#E56717]========== ZeroAccess Check ==========[/color]
  776.  
  777.  
  778. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  779.  
  780. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  781.  
  782. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  783.  
  784. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  785.  
  786. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  787. "" = C:\Windows\SysNative\shell32.dll -- [2015/05/07 05:09:58 | 022,291,584 | ---- | M] (Microsoft Corporation)
  788. "ThreadingModel" = Apartment
  789.  
  790. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  791. "" = %SystemRoot%\system32\shell32.dll -- [2015/05/07 05:09:58 | 019,731,824 | ---- | M] (Microsoft Corporation)
  792. "ThreadingModel" = Apartment
  793.  
  794. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  795. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2014/11/21 12:14:42 | 001,013,760 | ---- | M] (Microsoft Corporation)
  796. "ThreadingModel" = Free
  797.  
  798. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  799. "" = %systemroot%\system32\wbem\fastprox.dll -- [2014/11/21 12:15:59 | 000,786,944 | ---- | M] (Microsoft Corporation)
  800. "ThreadingModel" = Free
  801.  
  802. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  803. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2014/11/21 12:14:42 | 000,512,512 | ---- | M] (Microsoft Corporation)
  804. "ThreadingModel" = Both
  805.  
  806. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  807.  
  808. [color=#E56717]========== LOP Check ==========[/color]
  809.  
  810. [2015/05/04 17:19:24 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Camfrog
  811. [2015/06/26 15:53:41 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\DMCache
  812. [2015/03/23 08:59:11 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Fuji Xerox
  813. [2015/04/02 14:45:07 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\GoPro
  814. [2015/06/16 09:47:39 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\IDM
  815. [2015/05/13 15:45:16 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\IDT
  816. [2015/06/23 13:03:49 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\istartsurf
  817. [2015/06/23 11:20:15 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Steam
  818.  
  819. [color=#E56717]========== Purity Check ==========[/color]
  820.  
  821.  
  822.  
  823. [color=#E56717]========== Alternate Data Streams ==========[/color]
  824.  
  825. @Alternate Data Stream - 220 bytes -> C:\Users\owner\OneDrive:ms-properties
  826. @Alternate Data Stream - 149 bytes -> C:\ProgramData\Temp:054203E4
  827.  
  828. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!