API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 23rd, 2011
133
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 53.06 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 23/09/2011 22:00:50 - Run 4
  2. OTL by OldTimer - Version 3.2.26.1 Folder = D:\Security
  3. 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
  6.  
  7. 3,86 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 42,83% Memory free
  8. 7,71 Gb Paging File | 4,96 Gb Available in Paging File | 64,36% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 116,44 Gb Total Space | 37,02 Gb Free Space | 31,80% Space Free | Partition Type: NTFS
  13. Drive D: | 327,83 Gb Total Space | 325,29 Gb Free Space | 99,23% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: ADMIN-PC | User Name: admin | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2011/09/22 23:01:02 | 000,419,624 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  22. PRC - [2011/09/10 13:33:33 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  23. PRC - [2011/09/06 22:45:30 | 003,722,416 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  24. PRC - [2011/09/06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  25. PRC - [2011/09/06 22:45:27 | 000,127,192 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
  26. PRC - [2011/09/02 11:33:18 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
  27. PRC - [2011/08/31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  28. PRC - [2011/07/11 17:04:38 | 000,579,584 | ---- | M] (OldTimer Tools) -- D:\Security\OTL.exe
  29. PRC - [2011/05/26 11:29:03 | 000,800,768 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
  30. PRC - [2011/05/13 06:45:56 | 001,756,232 | ---- | M] (ManyCam LLC) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
  31. PRC - [2011/04/07 14:23:34 | 002,672,600 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
  32. PRC - [2011/03/25 23:42:16 | 000,334,448 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
  33. PRC - [2011/03/25 23:42:04 | 000,129,648 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
  34. PRC - [2011/03/25 23:42:00 | 000,404,080 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
  35. PRC - [2011/03/25 23:41:50 | 000,113,264 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
  36. PRC - [2011/03/25 22:27:40 | 000,539,248 | ---- | M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
  37. PRC - [2011/03/09 18:34:38 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
  38. PRC - [2011/01/24 13:23:14 | 000,286,000 | ---- | M] (PC Tools) -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
  39. PRC - [2010/10/29 14:11:04 | 000,236,136 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  40. PRC - [2010/10/15 11:24:38 | 000,084,464 | ---- | M] () -- C:\Program Files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe
  41. PRC - [2010/10/01 01:15:20 | 001,078,912 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
  42. PRC - [2010/09/24 02:53:16 | 001,601,536 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  43. PRC - [2010/09/14 05:45:56 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
  44. PRC - [2010/09/14 05:45:44 | 000,508,264 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
  45. PRC - [2010/06/25 03:50:50 | 006,806,144 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
  46. PRC - [2010/05/04 00:45:50 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  47. PRC - [2010/05/04 00:41:46 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
  48. PRC - [2009/12/15 20:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
  49. PRC - [2009/11/03 00:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
  50. PRC - [2009/10/01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  51. PRC - [2009/10/01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  52. PRC - [2009/07/31 20:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
  53. PRC - [2009/06/19 20:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
  54. PRC - [2009/06/19 20:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
  55. PRC - [2009/06/16 03:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
  56. PRC - [2008/12/23 03:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
  57. PRC - [2008/11/09 22:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
  58. PRC - [2007/11/30 21:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
  59.  
  60.  
  61. [color=#E56717]========== Modules (SafeList) ==========[/color]
  62.  
  63. MOD - [2011/09/06 22:45:26 | 000,199,792 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\snxhk.dll
  64. MOD - [2011/07/11 17:04:38 | 000,579,584 | ---- | M] (OldTimer Tools) -- D:\Security\OTL.exe
  65. MOD - [2011/03/09 18:22:58 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
  66. MOD - [2011/01/12 10:34:58 | 000,328,152 | ---- | M] (PC Tools) -- C:\Program Files (x86)\Common Files\PC Tools\KDS\pctESPHooking32.dll
  67.  
  68.  
  69. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  70.  
  71. SRV:[b]64bit:[/b] - [2011/09/06 22:45:28 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  72. SRV:[b]64bit:[/b] - [2011/09/06 22:45:27 | 000,127,192 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
  73. SRV:[b]64bit:[/b] - [2010/06/22 21:20:42 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
  74. SRV:[b]64bit:[/b] - [2009/08/07 00:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
  75. SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
  76. SRV - [2011/09/22 23:06:25 | 003,542,616 | ---- | M] () [Auto | Running] -- c:\Program Files (x86)\Common Files\Akamai\netsession_win_b31de1e.dll -- (Akamai)
  77. SRV - [2011/09/22 23:01:02 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  78. SRV - [2011/08/31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  79. SRV - [2011/03/25 23:42:16 | 000,334,448 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
  80. SRV - [2011/03/25 23:42:00 | 000,404,080 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
  81. SRV - [2011/03/25 23:41:50 | 000,113,264 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe -- (VMAuthdService)
  82. SRV - [2011/03/25 22:27:40 | 000,539,248 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
  83. SRV - [2011/03/09 18:29:55 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
  84. SRV - [2011/03/09 18:29:52 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
  85. SRV - [2011/01/24 13:23:14 | 000,286,000 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus)
  86. SRV - [2010/10/29 14:11:04 | 000,236,136 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  87. SRV - [2010/09/14 05:45:56 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
  88. SRV - [2010/09/14 05:45:44 | 000,508,264 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
  89. SRV - [2010/08/19 13:57:14 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Workstation\vmware-ufad.exe -- (ufad-ws60)
  90. SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  91. SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  92. SRV - [2009/12/15 20:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
  93. SRV - [2009/10/01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
  94. SRV - [2009/10/01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
  95. SRV - [2009/06/16 03:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
  96. SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  97. SRV - [2008/11/09 22:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
  98.  
  99.  
  100. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  101.  
  102. DRV:[b]64bit:[/b] - [2011/09/06 22:36:30 | 000,065,368 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  103. DRV:[b]64bit:[/b] - [2011/09/06 22:10:01 | 000,012,368 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdis.sys -- (aswNdis)
  104. DRV:[b]64bit:[/b] - [2011/08/31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  105. DRV:[b]64bit:[/b] - [2011/03/25 23:43:06 | 000,068,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
  106. DRV:[b]64bit:[/b] - [2011/03/25 23:43:04 | 000,081,008 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
  107. DRV:[b]64bit:[/b] - [2011/03/25 23:41:18 | 000,031,856 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
  108. DRV:[b]64bit:[/b] - [2011/03/25 23:41:08 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
  109. DRV:[b]64bit:[/b] - [2011/03/25 22:27:36 | 000,038,512 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
  110. DRV:[b]64bit:[/b] - [2011/03/25 20:04:58 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
  111. DRV:[b]64bit:[/b] - [2011/03/25 20:04:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
  112. DRV:[b]64bit:[/b] - [2011/03/11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  113. DRV:[b]64bit:[/b] - [2011/03/11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  114. DRV:[b]64bit:[/b] - [2011/01/17 09:09:58 | 000,334,976 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pctgntdi64.sys -- (pctgntdi)
  115. DRV:[b]64bit:[/b] - [2011/01/17 08:11:12 | 000,179,976 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctplfw64.sys -- (pctplfw)
  116. DRV:[b]64bit:[/b] - [2011/01/12 10:35:40 | 000,119,688 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys -- (PCTFW-PacketFilter)
  117. DRV:[b]64bit:[/b] - [2010/10/28 21:33:54 | 000,215,104 | ---- | M] (Fresco Logic) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FLxHCIc.sys -- (FLxHCIc) Fresco Logic xHCI (USB3)
  118. DRV:[b]64bit:[/b] - [2010/10/28 21:33:54 | 000,081,984 | ---- | M] (Fresco Logic) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\FLxHCIh.sys -- (FLxHCIh) Fresco Logic xHCI (USB3)
  119. DRV:[b]64bit:[/b] - [2010/10/01 16:56:23 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  120. DRV:[b]64bit:[/b] - [2010/09/14 05:45:52 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
  121. DRV:[b]64bit:[/b] - [2010/09/14 05:45:50 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
  122. DRV:[b]64bit:[/b] - [2010/09/14 05:45:48 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
  123. DRV:[b]64bit:[/b] - [2010/09/14 05:45:44 | 000,760,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
  124. DRV:[b]64bit:[/b] - [2010/07/26 05:27:33 | 000,318,056 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
  125. DRV:[b]64bit:[/b] - [2010/07/08 08:49:08 | 000,079,000 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pctNdis64.sys -- (pctNdisMP)
  126. DRV:[b]64bit:[/b] - [2010/07/08 08:49:08 | 000,079,000 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pctNdis64.sys -- (pctNdis)
  127. DRV:[b]64bit:[/b] - [2010/06/23 03:31:11 | 000,333,928 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  128. DRV:[b]64bit:[/b] - [2010/06/08 04:33:13 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  129. DRV:[b]64bit:[/b] - [2010/05/13 08:00:21 | 000,190,464 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\S6000KNT.sys -- (S6000KNT)
  130. DRV:[b]64bit:[/b] - [2010/03/19 13:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
  131. DRV:[b]64bit:[/b] - [2010/03/05 05:19:45 | 000,316,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  132. DRV:[b]64bit:[/b] - [2010/03/02 10:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  133. DRV:[b]64bit:[/b] - [2009/11/18 01:11:59 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  134. DRV:[b]64bit:[/b] - [2009/10/26 06:39:43 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  135. DRV:[b]64bit:[/b] - [2009/09/17 22:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
  136. DRV:[b]64bit:[/b] - [2009/08/07 00:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
  137. DRV:[b]64bit:[/b] - [2009/07/20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
  138. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  139. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  140. DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  141. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  142. DRV:[b]64bit:[/b] - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
  143. DRV:[b]64bit:[/b] - [2009/06/10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
  144. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  145. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  146. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  147. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  148. DRV:[b]64bit:[/b] - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  149. DRV:[b]64bit:[/b] - [2009/05/13 19:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
  150. DRV:[b]64bit:[/b] - [2008/05/24 03:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
  151. DRV:[b]64bit:[/b] - [2008/03/13 09:46:00 | 000,027,136 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ManyCam_x64.sys -- (ManyCam)
  152. DRV - [2010/08/19 13:56:38 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\VMware\VMware Workstation\vstor2-ws60.sys -- (vstor2-ws60)
  153. DRV - [2009/07/03 03:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
  154.  
  155.  
  156. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  157.  
  158.  
  159. [color=#E56717]========== Internet Explorer ==========[/color]
  160.  
  161. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
  162. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  163. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
  164.  
  165. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
  166. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
  167. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  168.  
  169. [color=#E56717]========== FireFox ==========[/color]
  170.  
  171. FF - prefs.js..keyword.URL: "« http://www.google.com/search?btnI=I%27m+Feeling+Lucky&ie=UTF-8&oe=UTF-8&q= "
  172.  
  173.  
  174. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  175. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
  176. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  177. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  178. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  179. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  180. FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
  181. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  182. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
  183. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  184. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  185. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  186. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  187. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
  188. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
  189. FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
  190.  
  191. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/09/18 13:40:45 | 000,000,000 | ---D | M]
  192. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/10 13:33:33 | 000,000,000 | ---D | M]
  193. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  194.  
  195. [2011/06/30 14:42:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Extensions
  196. [2011/09/16 23:15:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\jmq2rr1g.default\extensions
  197. [2011/09/02 11:57:59 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\jmq2rr1g.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  198. [2011/07/04 23:15:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  199. [2011/07/04 23:15:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
  200. File not found (No name found) --
  201. [2011/09/18 13:40:45 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
  202. [2011/09/10 13:33:33 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  203. [2011/09/02 23:11:33 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-france.xml
  204. [2011/09/02 23:11:33 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  205. [2011/09/02 23:11:33 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
  206. [2011/09/02 23:11:33 | 000,001,154 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-france.xml
  207. [2011/09/02 23:11:33 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-fr.xml
  208.  
  209. O1 HOSTS File: ([2011/09/05 00:49:27 | 000,003,119 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  210. O1 - Hosts: 127.0.0.1 fr-fr.facebook.com
  211. O1 - Hosts: 127.0.0.1 192.150.14.69
  212. O1 - Hosts: 127.0.0.1 192.150.18.101
  213. O1 - Hosts: 127.0.0.1 192.150.18.108
  214. O1 - Hosts: 127.0.0.1 192.150.22.40
  215. O1 - Hosts: 127.0.0.1 192.150.8.100
  216. O1 - Hosts: 127.0.0.1 192.150.8.118
  217. O1 - Hosts: 127.0.0.1 209-34-83-73.ood.opsource.net
  218. O1 - Hosts: 127.0.0.1 3dns-1.adobe.com
  219. O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
  220. O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
  221. O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
  222. O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
  223. O1 - Hosts: 127.0.0.1 3dns-4.adobe.com
  224. O1 - Hosts: 127.0.0.1 3dns.adobe.com
  225. O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
  226. O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
  227. O1 - Hosts: 127.0.0.1 activate.adobe.com
  228. O1 - Hosts: 127.0.0.1 activate.wip.adobe.com
  229. O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com
  230. O1 - Hosts: 127.0.0.1 activate.wip2.adobe.com
  231. O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
  232. O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
  233. O1 - Hosts: 127.0.0.1 activate.wip4.adobe.com
  234. O1 - Hosts: 127.0.0.1 adobe-dns-1.adobe.com
  235. O1 - Hosts: 43 more lines...
  236. O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  237. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  238. O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
  239. O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
  240. O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
  241. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  242. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  243. O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
  244. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  245. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  246. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  247. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  248. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  249. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
  250. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  251. O4:[b]64bit:[/b] - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
  252. O4 - HKLM..\Run: [00PCTFW] C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)
  253. O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] File not found
  254. O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
  255. O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
  256. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  257. O4 - HKLM..\Run: [CPMonitor] C:\Program Files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe ()
  258. O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
  259. O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
  260. O4 - HKLM..\Run: [Nuance PDF Reader-reminder] C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe (Nuance Communications, Inc.)
  261. O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
  262. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  263. O4 - HKLM..\Run: [THX TruStudio NB Settings] C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe (Creative Technology Ltd)
  264. O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
  265. O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
  266. O4 - HKLM..\Run: [vmware-tray] C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe (VMware, Inc.)
  267. O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
  268. O4 - HKCU..\Run: [FileHippo.com] C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe (FileHippo.com)
  269. O4 - HKCU..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
  270. O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
  271. O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
  272. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  273. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  274. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  275. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  276. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  277. O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  278. O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  279. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
  280. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
  281. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
  282. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Workstation\vsocklib.dll (VMware, Inc.)
  283. O13 - gopher Prefix: missing
  284. O13 - gopher Prefix: missing
  285. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  286. O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  287. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  288. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
  289. O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  290. O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  291. O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
  292. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
  293. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  294. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  295. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  296. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  297. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  298. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  299. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  300. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  301. O32 - HKLM CDRom: AutoRun - 1
  302. O34 - HKLM BootExecute: (autocheck autochk *) - File not found
  303. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  304. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  305. O35 - HKLM\..comfile [open] -- "%1" %*
  306. O35 - HKLM\..exefile [open] -- "%1" %*
  307. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  308. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  309. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  310. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  311.  
  312.  
  313. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  314. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  315. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  316. Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
  317. Drivers32: VIDC.VMnc - C:\Windows\SysWow64\vmnc.dll (VMware, Inc.)
  318.  
  319. CREATERESTOREPOINT
  320. Restore point Set: OTL Restore Point
  321.  
  322. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  323.  
  324. [2011/09/22 21:32:15 | 000,000,000 | ---D | C] -- C:\sfzone_profile
  325. [2011/09/21 22:55:51 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Font Pack
  326. [2011/09/20 23:08:31 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
  327. [2011/09/20 15:00:22 | 000,000,000 | ---D | C] -- C:\Program Files\Axantum
  328. [2011/09/20 15:00:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axantum AxCrypt
  329. [2011/09/20 14:41:52 | 000,000,000 | ---D | C] -- C:\Program Files\Mplayer
  330. [2011/09/20 14:34:20 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\XWindows Dock
  331. [2011/09/20 14:34:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XWindows Dock
  332. [2011/09/20 14:34:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XWindows Dock
  333. [2011/09/20 12:12:10 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\vlc
  334. [2011/09/20 12:11:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
  335. [2011/09/20 12:11:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
  336. [2011/09/18 13:42:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security
  337. [2011/09/18 13:42:00 | 000,301,912 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  338. [2011/09/18 13:42:00 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
  339. [2011/09/18 13:41:59 | 000,140,120 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFW.sys
  340. [2011/09/18 13:41:19 | 000,258,392 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdis2.sys
  341. [2011/09/18 13:41:19 | 000,042,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
  342. [2011/09/18 13:41:18 | 000,058,200 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
  343. [2011/09/18 13:41:15 | 000,601,944 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  344. [2011/09/18 13:41:15 | 000,065,368 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  345. [2011/09/18 13:40:48 | 000,012,368 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswNdis.sys
  346. [2011/09/18 13:40:40 | 000,199,304 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
  347. [2011/09/18 13:40:40 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  348. [2011/09/17 21:35:24 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Diagnostics
  349. [2011/09/17 16:49:09 | 000,254,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  350. [2011/09/17 16:46:29 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
  351. [2011/09/17 16:46:29 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
  352. [2011/09/17 15:05:29 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
  353. [2011/09/17 15:05:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
  354. [2011/09/06 09:28:16 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Yahoo!
  355. [2011/09/04 23:58:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger
  356. [2011/09/04 23:58:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Yahoo!
  357. [2011/09/04 23:55:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Yahoo!
  358. [2011/09/02 16:24:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français)
  359. [2011/09/02 16:10:16 | 000,000,000 | ---D | C] -- C:\ProgramData\VirtualizedApplications
  360. [2011/09/02 14:24:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileHippo.com
  361. [2011/09/02 13:57:50 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\SoftGrid Client
  362. [2011/09/02 13:57:50 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\SoftGrid Client
  363. [2011/09/02 13:56:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
  364. [2011/09/02 13:56:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  365. [2011/09/02 13:56:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Application Virtualization Client
  366. [2011/09/02 13:56:30 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\TP
  367. [2 C:\Users\admin\AppData\Local\*.tmp files -> C:\Users\admin\AppData\Local\*.tmp -> ]
  368. [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  369.  
  370. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  371.  
  372. [2011/09/23 21:25:06 | 000,001,082 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  373. [2011/09/23 21:11:17 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  374. [2011/09/23 21:11:17 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  375. [2011/09/23 21:04:18 | 000,001,078 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  376. [2011/09/23 21:03:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  377. [2011/09/23 21:03:08 | 3105,263,616 | -HS- | M] () -- C:\hiberfil.sys
  378. [2011/09/22 21:08:30 | 012,160,016 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  379. [2011/09/21 21:31:15 | 000,000,132 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Adobe PNG Format CS5 Prefs
  380. [2011/09/21 21:03:43 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  381. [2011/09/20 23:26:10 | 000,196,718 | ---- | M] () -- C:\Users\admin\Desktop\Photoshop Mac miller.jpg
  382. [2011/09/20 22:09:31 | 000,297,297 | ---- | M] () -- C:\Users\admin\Desktop\mac_miller_wallpaper_by_diigitalart-d3d5oxs.jpg
  383. [2011/09/20 21:43:03 | 000,193,164 | ---- | M] () -- C:\Users\admin\Desktop\S_W_A_G__by_linda_retrobyte.png
  384. [2011/09/20 14:44:15 | 000,001,094 | ---- | M] () -- C:\Users\admin\Desktop\procexp.lnk
  385. [2011/09/20 14:43:47 | 000,000,915 | ---- | M] () -- C:\Users\admin\Desktop\TDSSKiller.lnk
  386. [2011/09/20 14:43:38 | 000,000,915 | ---- | M] () -- C:\Users\admin\Desktop\HiJackThis.lnk
  387. [2011/09/20 14:42:08 | 000,001,496 | ---- | M] () -- C:\Users\admin\Desktop\Mplayer.lnk
  388. [2011/09/20 14:36:29 | 000,001,276 | ---- | M] () -- C:\Users\admin\Desktop\Adobe Photoshop CS5.1 (64 Bit).lnk
  389. [2011/09/20 14:34:19 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\XWindows Dock.lnk
  390. [2011/09/20 12:11:28 | 000,001,072 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
  391. [2011/09/19 20:31:47 | 000,000,000 | ---- | M] () -- C:\Users\admin\AppData\Local\{FD1C3123-DF37-4F51-BA88-4F770FA0D700}
  392. [2011/09/19 20:30:00 | 000,000,000 | ---- | M] () -- C:\Users\admin\AppData\Local\{31C53535-8332-4BA4-A683-67942FF1CEBB}
  393. [2011/09/19 20:29:28 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
  394. [2011/09/18 13:42:01 | 000,001,843 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
  395. [2011/09/17 21:14:36 | 000,002,420 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
  396. [2011/09/17 21:14:28 | 000,001,527 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
  397. [2011/09/17 17:11:05 | 001,652,826 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  398. [2011/09/17 17:11:05 | 000,737,724 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
  399. [2011/09/17 17:11:05 | 000,638,972 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  400. [2011/09/17 17:11:05 | 000,142,686 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
  401. [2011/09/17 17:11:05 | 000,117,570 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  402. [2011/09/17 15:05:03 | 000,000,798 | ---- | M] () -- C:\Users\Public\Desktop\Speccy.lnk
  403. [2011/09/16 22:59:46 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
  404. [2011/09/14 00:00:53 | 001,657,770 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  405. [2011/09/07 22:09:12 | 001,056,768 | ---- | M] () -- C:\Windows\SysNative\defltbase.sdb
  406. [2011/09/06 22:45:29 | 000,199,304 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
  407. [2011/09/06 22:45:29 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  408. [2011/09/06 22:45:17 | 000,254,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  409. [2011/09/06 22:39:00 | 000,140,120 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFW.sys
  410. [2011/09/06 22:38:18 | 000,601,944 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  411. [2011/09/06 22:38:16 | 000,301,912 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  412. [2011/09/06 22:37:45 | 000,258,392 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswNdis2.sys
  413. [2011/09/06 22:36:41 | 000,058,200 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
  414. [2011/09/06 22:36:41 | 000,042,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
  415. [2011/09/06 22:36:30 | 000,065,368 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  416. [2011/09/06 22:36:14 | 000,024,408 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
  417. [2011/09/06 22:10:01 | 000,012,368 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswNdis.sys
  418. [2011/09/05 00:49:27 | 000,003,119 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  419. [2011/09/04 23:58:51 | 000,001,167 | ---- | M] () -- C:\Users\admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
  420. [2011/09/04 23:58:51 | 000,001,143 | ---- | M] () -- C:\Users\Public\Desktop\Yahoo! Messenger.lnk
  421. [2011/09/02 23:20:33 | 002,097,152 | ---- | M] () -- C:\Users\admin\NTUSER.bak
  422. [2011/09/02 23:12:43 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  423. [2011/09/02 14:24:56 | 000,001,975 | ---- | M] () -- C:\Users\admin\Desktop\Update Checker.lnk
  424. [2011/08/31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  425. [2 C:\Users\admin\AppData\Local\*.tmp files -> C:\Users\admin\AppData\Local\*.tmp -> ]
  426. [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  427.  
  428. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  429.  
  430. [2011/09/20 23:23:58 | 000,196,718 | ---- | C] () -- C:\Users\admin\Desktop\Photoshop Mac miller.jpg
  431. [2011/09/20 22:09:29 | 000,297,297 | ---- | C] () -- C:\Users\admin\Desktop\mac_miller_wallpaper_by_diigitalart-d3d5oxs.jpg
  432. [2011/09/20 17:56:31 | 000,193,164 | ---- | C] () -- C:\Users\admin\Desktop\S_W_A_G__by_linda_retrobyte.png
  433. [2011/09/20 14:44:17 | 000,001,094 | ---- | C] () -- C:\Users\admin\Desktop\procexp.lnk
  434. [2011/09/20 14:43:51 | 000,000,915 | ---- | C] () -- C:\Users\admin\Desktop\TDSSKiller.lnk
  435. [2011/09/20 14:43:40 | 000,000,915 | ---- | C] () -- C:\Users\admin\Desktop\HiJackThis.lnk
  436. [2011/09/20 14:42:08 | 000,001,496 | ---- | C] () -- C:\Users\admin\Desktop\Mplayer.lnk
  437. [2011/09/20 14:36:29 | 000,001,276 | ---- | C] () -- C:\Users\admin\Desktop\Adobe Photoshop CS5.1 (64 Bit).lnk
  438. [2011/09/20 14:34:19 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\XWindows Dock.lnk
  439. [2011/09/20 12:11:28 | 000,001,072 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
  440. [2011/09/19 20:31:47 | 000,000,000 | ---- | C] () -- C:\Users\admin\AppData\Local\{FD1C3123-DF37-4F51-BA88-4F770FA0D700}
  441. [2011/09/19 20:30:00 | 000,000,000 | ---- | C] () -- C:\Users\admin\AppData\Local\{31C53535-8332-4BA4-A683-67942FF1CEBB}
  442. [2011/09/18 13:42:01 | 000,001,843 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
  443. [2011/09/17 16:49:28 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
  444. [2011/09/07 22:09:11 | 001,056,768 | ---- | C] () -- C:\Windows\SysNative\defltbase.sdb
  445. [2011/09/05 01:42:13 | 000,000,132 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Adobe PNG Format CS5 Prefs
  446. [2011/09/04 23:58:51 | 000,001,167 | ---- | C] () -- C:\Users\admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
  447. [2011/09/04 23:58:51 | 000,001,143 | ---- | C] () -- C:\Users\Public\Desktop\Yahoo! Messenger.lnk
  448. [2011/09/02 14:24:56 | 000,002,005 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update Checker.lnk
  449. [2011/09/02 14:24:56 | 000,001,975 | ---- | C] () -- C:\Users\admin\Desktop\Update Checker.lnk
  450. [2011/07/16 21:42:08 | 005,653,224 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe
  451. [2011/07/16 21:42:08 | 000,015,347 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall-dBpoweramp Music Converter.dat
  452. [2011/07/03 20:06:52 | 001,657,770 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  453. [2011/03/09 18:29:57 | 000,001,200 | ---- | C] () -- C:\Windows\THXCfg_SP_APOIM.ini
  454. [2011/03/09 18:29:57 | 000,001,099 | ---- | C] () -- C:\Windows\THXCfg_HP_APOIM.ini
  455. [2011/03/09 18:29:57 | 000,001,099 | ---- | C] () -- C:\Windows\THXCfg_APOIM.ini
  456. [2011/03/09 18:29:56 | 000,181,760 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
  457. [2011/03/09 18:29:56 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
  458. [2011/03/09 18:06:47 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
  459. [2010/05/13 07:59:59 | 000,015,190 | ---- | C] () -- C:\Windows\S6000Twn.ini
  460. [2009/10/26 05:38:22 | 000,000,176 | ---- | C] () -- C:\Windows\explorer.exe.config
  461. [2009/07/29 07:20:40 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini
  462. [2009/07/14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  463. [2009/07/14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  464. [2009/07/14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  465. [2009/07/14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
  466. [2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  467. [2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  468. [2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
  469.  
  470. [color=#E56717]========== LOP Check ==========[/color]
  471.  
  472. [2011/04/15 00:41:44 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Asus WebStorage
  473. [2011/09/20 23:08:31 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
  474. [2011/07/04 17:06:07 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
  475. [2011/07/03 16:50:59 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ManyCam
  476. [2011/07/12 02:09:30 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Mumble
  477. [2011/04/18 00:26:37 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Nuance
  478. [2011/06/28 20:04:53 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\PCToolsFirewallPlus
  479. [2011/09/17 22:22:29 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\SoftGrid Client
  480. [2011/07/12 03:41:49 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\SystemRequirementsLab
  481. [2011/05/20 20:44:44 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\The Creative Engine Limited
  482. [2011/09/02 13:58:03 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TP
  483. [2011/09/20 14:39:56 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\XWindows Dock
  484. [2011/04/18 00:26:36 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Zeon
  485. [2011/09/08 19:29:36 | 000,022,770 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  486.  
  487. [color=#E56717]========== Purity Check ==========[/color]
  488.  
  489.  
  490.  
  491. [color=#E56717]========== Custom Scans ==========[/color]
  492.  
  493.  
  494. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  495. [2011/07/03 20:07:00 | 000,001,024 | ---- | M] () -- C:\.rnd
  496. [2009/07/14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
  497. [2009/07/29 08:03:37 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  498. [2011/03/09 18:29:59 | 000,000,168 | ---- | M] () -- C:\creative.log
  499. [2011/03/09 18:45:44 | 000,015,820 | ---- | M] () -- C:\devlist.txt
  500. [2011/03/09 18:45:44 | 000,000,009 | ---- | M] () -- C:\Finish.log
  501. [2010/10/20 08:54:05 | 002,097,152 | -H-- | M] () -- C:\G53JW.bin
  502. [2010/12/29 07:27:07 | 000,000,019 | ---- | M] () -- C:\G53JW_G53JQ_WIN7.20
  503. [2011/09/23 21:03:08 | 3105,263,616 | -HS- | M] () -- C:\hiberfil.sys
  504. [2011/09/23 21:03:10 | 4140,351,488 | -HS- | M] () -- C:\pagefile.sys
  505. [2011/03/09 04:07:34 | 000,000,233 | ---- | M] () -- C:\Pass.txt
  506. [2011/09/16 22:59:46 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
  507. [2010/12/29 07:27:07 | 000,000,014 | ---- | M] () -- C:\RECOVERY.DAT
  508. [2011/03/09 18:24:08 | 000,002,280 | ---- | M] () -- C:\RHDSetup.log
  509. [2011/03/09 18:36:41 | 000,000,090 | ---- | M] () -- C:\setup.log
  510. [2006/05/13 18:22:24 | 000,000,005 | ---- | M] () -- C:\store.log
  511. [2011/09/02 22:10:07 | 000,137,464 | ---- | M] () -- C:\TDSSKiller.2.5.17.0_02.09.2011_15.49.19_log.txt
  512. [2011/09/16 21:51:10 | 000,000,414 | ---- | M] () -- C:\TDSSKiller.2.5.17.0_16.09.2011_21.51.07_log.txt
  513. [2011/09/16 21:52:45 | 000,069,852 | ---- | M] () -- C:\TDSSKiller.2.5.22.0_16.09.2011_21.52.23_log.txt
  514. [2011/09/23 22:05:43 | 000,072,042 | ---- | M] () -- C:\TDSSKiller.2.5.22.0_23.09.2011_22.03.18_log.txt
  515. [2011/09/02 15:48:59 | 000,000,412 | ---- | M] () -- C:\TDSSKiller.2.5.9.0_02.09.2011_15.48.57_log.txt
  516. [2011/07/08 17:14:41 | 000,068,368 | ---- | M] () -- C:\TDSSKiller.2.5.9.0_08.07.2011_17.14.13_log.txt
  517. [2011/07/10 23:29:44 | 000,134,498 | ---- | M] () -- C:\TDSSKiller.2.5.9.0_10.07.2011_23.27.16_log.txt
  518. [2011/07/11 04:55:36 | 000,068,368 | ---- | M] () -- C:\TDSSKiller.2.5.9.0_11.07.2011_04.37.31_log.txt
  519. [2011/09/23 22:07:11 | 000,083,872 | ---- | M] () -- C:\TDSSKiller.2.6.0.0_23.09.2011_22.06.09_log.txt
  520.  
  521. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  522.  
  523. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  524.  
  525. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  526.  
  527. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  528.  
  529. [color=#E56717]========== Alternate Data Streams ==========[/color]
  530.  
  531. @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:D20FFA63
  532. @Alternate Data Stream - 100 bytes -> C:\ProgramData\Temp:C31F31E6
  533.  
  534. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!