API tools faq
paste
Advertisement
Guest User

OTL.txt

a guest
Nov 27th, 2010
308
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 73.62 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 27/11/2010 13:59:10 - Run 1
  2. OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Chris\Desktop
  3. 64bit- An unknown product (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 0000080c | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy
  6.  
  7. 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 64,00% Memory free
  8. 7,00 Gb Paging File | 6,00 Gb Available in Paging File | 80,00% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 103,85 Gb Total Space | 11,65 Gb Free Space | 11,22% Space Free | Partition Type: NTFS
  13. Drive E: | 44,88 Gb Total Space | 3,42 Gb Free Space | 7,62% Space Free | Partition Type: HFS
  14. Drive G: | 14,90 Gb Total Space | 8,03 Gb Free Space | 53,90% Space Free | Partition Type: FAT32
  15.  
  16. Computer Name: NYDAOR | User Name: Chris | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2010/11/27 13:58:10 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe
  23. PRC - [2010/11/26 17:50:15 | 000,304,368 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\cacaoweb\cacaoweb.exe
  24. PRC - [2010/11/12 19:08:04 | 000,398,680 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Game Booster\GameBox.exe
  25. PRC - [2010/11/01 22:36:03 | 000,974,904 | ---- | M] (Google Inc.) -- C:\Users\Chris\AppData\Local\Google\Chrome\Application\chrome.exe
  26. PRC - [2010/10/06 15:31:44 | 001,032,368 | ---- | M] () -- C:\Program Files (x86)\Air Mouse\Air Mouse\Air Mouse.exe
  27. PRC - [2010/09/24 01:10:48 | 009,777,448 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\iTunes\iTunes.exe
  28. PRC - [2010/09/23 17:15:18 | 000,350,256 | ---- | M] (AnchorFree Inc.) -- C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
  29. PRC - [2010/09/23 00:24:22 | 000,265,776 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
  30. PRC - [2010/09/22 20:19:06 | 000,325,168 | ---- | M] () -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
  31. PRC - [2010/08/13 12:08:46 | 000,033,056 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
  32. PRC - [2010/08/13 11:58:56 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  33. PRC - [2010/08/09 23:00:42 | 000,013,088 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
  34. PRC - [2010/06/21 15:57:19 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\java.exe
  35. PRC - [2010/06/21 15:57:19 | 000,023,328 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jp2launcher.exe
  36. PRC - [2010/01/07 23:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
  37. PRC - [2009/11/12 12:48:56 | 000,071,096 | ---- | M] () -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
  38. PRC - [2009/05/11 16:13:58 | 000,099,632 | ---- | M] (Apple Inc.) -- C:\Windows\SysWOW64\AppleTimeSrv.exe
  39. PRC - [2009/05/11 16:13:56 | 000,136,496 | ---- | M] () -- C:\Windows\SysWOW64\AppleOSSMgr.exe
  40. PRC - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
  41.  
  42.  
  43. [color=#E56717]========== Modules (SafeList) ==========[/color]
  44.  
  45. MOD - [2010/11/27 13:58:10 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe
  46. MOD - [2010/08/21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
  47.  
  48.  
  49. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  50.  
  51. SRV:[b]64bit:[/b] - [2010/09/12 14:34:12 | 000,325,120 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\x64\maconfservice.exe -- (maconfservice)
  52. SRV:[b]64bit:[/b] - [2010/07/06 13:07:42 | 000,036,160 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
  53. SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
  54. SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  55. SRV - [2010/09/23 17:15:18 | 000,350,256 | ---- | M] (AnchorFree Inc.) [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe -- (HssSrv)
  56. SRV - [2010/09/23 00:25:28 | 000,057,640 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.exe -- (HssTrayService)
  57. SRV - [2010/09/23 00:24:22 | 000,265,776 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe -- (HotspotShieldService)
  58. SRV - [2010/09/22 20:19:06 | 000,325,168 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -- (HssWd)
  59. SRV - [2010/08/13 11:58:56 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
  60. SRV - [2010/07/10 19:50:06 | 000,607,040 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
  61. SRV - [2010/07/06 13:11:54 | 001,403,200 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
  62. SRV - [2010/07/06 13:07:34 | 000,030,016 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
  63. SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  64. SRV - [2010/01/07 23:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater)
  65. SRV - [2009/11/12 12:48:56 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
  66. SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  67. SRV - [2009/05/11 16:13:58 | 000,099,632 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Windows\SysWOW64\AppleTimeSrv.exe -- (AppleTimeSrv)
  68. SRV - [2009/05/11 16:13:56 | 000,136,496 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\AppleOSSMgr.exe -- (AppleOSSMgr)
  69. SRV - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
  70.  
  71.  
  72. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  73.  
  74. DRV:[b]64bit:[/b] - [2010/09/22 20:19:02 | 000,056,832 | ---- | M] (AnchorFree Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HssDrv.sys -- (HssDrv)
  75. DRV:[b]64bit:[/b] - [2010/09/22 20:19:02 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
  76. DRV:[b]64bit:[/b] - [2010/08/30 11:19:54 | 000,015,872 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys -- (driverhardwarev2x64)
  77. DRV:[b]64bit:[/b] - [2010/04/19 19:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  78. DRV:[b]64bit:[/b] - [2010/03/23 06:46:26 | 000,349,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
  79. DRV:[b]64bit:[/b] - [2010/03/22 21:53:48 | 000,021,048 | ---- | M] (Apple Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\MacHALDriver.sys -- (MacHALDriver)
  80. DRV:[b]64bit:[/b] - [2010/03/22 21:53:46 | 000,015,416 | ---- | M] (Apple Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\KeyAgent.sys -- (KeyAgent)
  81. DRV:[b]64bit:[/b] - [2010/03/22 21:45:00 | 000,018,432 | ---- | M] (Cirrus Logic) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CS420x64.sys -- (CirrusFilter)
  82. DRV:[b]64bit:[/b] - [2010/03/22 21:44:52 | 002,978,296 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
  83. DRV:[b]64bit:[/b] - [2010/03/22 21:43:57 | 000,037,888 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\applemtp.sys -- (applemtp)
  84. DRV:[b]64bit:[/b] - [2010/03/22 21:43:57 | 000,012,288 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\applemtm.sys -- (applemtm)
  85. DRV:[b]64bit:[/b] - [2010/03/22 21:43:53 | 000,029,184 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\KeyMagic.sys -- (KeyMagic)
  86. DRV:[b]64bit:[/b] - [2010/01/27 22:54:39 | 000,018,944 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AppleBtBc.sys -- (AppleBtBc)
  87. DRV:[b]64bit:[/b] - [2009/07/14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  88. DRV:[b]64bit:[/b] - [2009/07/14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  89. DRV:[b]64bit:[/b] - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  90. DRV:[b]64bit:[/b] - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  91. DRV:[b]64bit:[/b] - [2009/07/14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  92. DRV:[b]64bit:[/b] - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  93. DRV:[b]64bit:[/b] - [2009/06/10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
  94. DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  95. DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  96. DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  97. DRV:[b]64bit:[/b] - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  98. DRV:[b]64bit:[/b] - [2009/05/18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  99. DRV:[b]64bit:[/b] - [2009/05/11 16:06:42 | 000,018,432 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IRFilter.sys -- (IRRemoteFlt)
  100. DRV:[b]64bit:[/b] - [2009/05/08 15:08:00 | 000,020,520 | ---- | M] (GARMIN Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\grmnusb.sys -- (grmnusb)
  101. DRV - [2010/02/24 13:41:50 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
  102. DRV - [2009/11/12 12:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\SysWow64\drivers\StarOpen.sys -- (StarOpen)
  103. DRV - [2009/05/11 16:06:46 | 000,005,760 | ---- | M] (Apple Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\KeyAgent.sys -- (KeyAgent)
  104. DRV - [2009/05/11 16:06:28 | 000,006,784 | ---- | M] (Apple Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\MacHALDriver.sys -- (MacHALDriver)
  105.  
  106.  
  107. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  108.  
  109.  
  110. [color=#E56717]========== Internet Explorer ==========[/color]
  111.  
  112. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
  113. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
  114.  
  115. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/keyword/%s
  116. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR
  117. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=AVBR
  118. IE - HKCU\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files (x86)\Search Settings\SearchSettings.dll (Spigot, Inc.)
  119. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  120. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  121.  
  122. [color=#E56717]========== FireFox ==========[/color]
  123.  
  124. FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1
  125.  
  126.  
  127. FF - HKLM\software\mozilla\Firefox\Extensions\\ShopperReports@ShopperReports.com: C:\Program Files (x86)\ShopperReports3\bin\3.0.497.0\firefox\firefoxtoolbar\extensions [2010/10/27 15:01:13 | 000,000,000 | ---D | M]
  128. FF - HKLM\software\mozilla\Firefox\Extensions\\ClickPotatoLite@ClickPotatoLite.com: C:\Program Files (x86)\ClickPotatoLite\bin\10.0.530.0\firefox\extensions [2010/10/27 15:01:18 | 000,000,000 | ---D | M]
  129. FF - HKLM\software\mozilla\K-Meleon\Extensions\\Plugins: C:\Program Files (x86)\K-Meleon\Plugins [2010/10/22 23:53:25 | 000,000,000 | ---D | M]
  130. FF - HKLM\software\mozilla\K-Meleon\Extensions\\Components: C:\Program Files (x86)\K-Meleon\Components [2010/09/27 19:21:46 | 000,000,000 | ---D | M]
  131. FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/11/18 16:29:10 | 000,000,000 | ---D | M]
  132. FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/11/18 16:29:10 | 000,000,000 | ---D | M]
  133. FF - HKLM\software\mozilla\Mozilla Sunbird 1.0b1\extensions\\Components: C:\Program Files (x86)\Mozilla Sunbird\components [2010/09/27 19:21:46 | 000,000,000 | ---D | M]
  134. FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010/10/10 21:26:05 | 000,000,000 | ---D | M]
  135.  
  136. [2010/10/10 21:26:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mozilla\Extensions
  137. [2010/10/10 21:26:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
  138. [2010/09/11 21:25:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\mozilla\Extensions\{718e30fb-e89b-41dd-9da7-e25a45638b28}
  139. [2010/08/08 12:50:50 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
  140. [2010/11/24 23:14:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\7p2nxu1z.default\extensions
  141. [2010/11/24 23:14:29 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\7p2nxu1z.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  142. [2010/10/07 16:01:15 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\7p2nxu1z.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
  143. [2010/09/25 22:50:16 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\7p2nxu1z.default\extensions\illimitux@illimitux.net
  144. [2010/10/07 16:01:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mozilla\Firefox\Profiles\7p2nxu1z.default\extensions\personas@christopher.beard
  145. [2010/09/11 21:25:34 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mozilla\Sunbird\Profiles\lp8wwt8t.default\extensions
  146. [2010/11/24 23:14:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
  147. [2010/06/21 15:57:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
  148. [2010/09/28 23:48:38 | 000,087,344 | ---- | M] (Pinball Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll
  149. [2010/06/21 15:57:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
  150. [2010/10/06 20:17:36 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazon-france.xml
  151. [2010/10/06 20:17:36 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml
  152. [2010/10/06 20:17:36 | 000,000,757 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-france.xml
  153. [2010/10/06 20:17:36 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-fr.xml
  154. [2010/10/06 20:17:36 | 000,000,956 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-france.xml
  155.  
  156. O1 HOSTS File: ([2010/11/04 16:27:17 | 000,001,254 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  157. O1 - Hosts: 127.0.0.1 localhost
  158. O1 - Hosts: 127.0.0.1 genuine.microsoft.com
  159. O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
  160. O1 - Hosts: 127.0.0.1 sa.windows.com
  161. O1 - Hosts: 127.0.0.1 se.windows.com
  162. O1 - Hosts: 127.0.0.1 ie.search.msn.com
  163. O1 - Hosts: 127.0.0.1 wustat.windows.com
  164. O1 - Hosts: 127.0.0.1 wutrack.windows.com
  165. O1 - Hosts: 127.0.0.1 catalog.microsoft.com
  166. O1 - Hosts: 127.0.0.1 sls.microsoft.com
  167. O1 - Hosts: 127.0.0.1 spynet2.microsoft.com
  168. O1 - Hosts: 127.0.0.1 spynettest.microsoft.com
  169. O2:[b]64bit:[/b] - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll (AnchorFree Inc.)
  170. O2 - BHO: (ShopperReports) - {100EB1FD-D03E-47fd-81F3-EE91287F9465} - C:\Program Files (x86)\ShopperReports3\bin\3.0.497.0\ShopperReports.dll (SmartShopper Inc.)
  171. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
  172. O2 - BHO: (IeMonitorBho Class) - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files (x86)\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited)
  173. O2 - BHO: (SearchSettings Class) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files (x86)\Search Settings\SearchSettings.dll (Spigot, Inc.)
  174. O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
  175. O4:[b]64bit:[/b] - HKLM..\Run: [Apple_KbdMgr] C:\Program Files\Boot Camp\Bootcamp.exe (Apple Inc.)
  176. O4 - HKCU..\Run: [7 Taskbar Tweaker] C:\Users\Chris\AppData\Local\Temp\Rar$EX00.929\7 Taskbar Tweaker v1.1 x File not found
  177. O4 - HKCU..\Run: [cacaoweb] C:\Users\Chris\AppData\Roaming\cacaoweb\cacaoweb.exe ()
  178. O4 - HKCU..\Run: [DeskSpace] C:\Program Files (x86)\DeskSpace\deskspace.exe (Otaku Software Pty Ltd)
  179. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  180. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  181. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  182. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  183. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  184. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  185. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
  186. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
  187. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 1
  188. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
  189. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  190. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
  191. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
  192. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
  193. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  194. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Users\Chris\AppData\Roaming\install\server.exe File not found
  195. O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll (Apple Inc.)
  196. O9 - Extra Button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files (x86)\ShopperReports3\bin\3.0.497.0\ShopperReports.dll (SmartShopper Inc.)
  197. O9 - Extra Button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files (x86)\ShopperReports3\bin\3.0.497.0\ShopperReports.dll (SmartShopper Inc.)
  198. O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
  199. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  200. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  201. O13 - gopher Prefix: missing
  202. O13 - gopher Prefix: missing
  203. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
  204. O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
  205. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
  206. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 212.68.193.196
  207. O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  208. O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  209. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  210. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  211. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  212. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  213. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  214. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  215. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  216. O32 - HKLM CDRom: AutoRun - 1
  217. O33 - MountPoints2\{da4c639a-a725-11df-a883-002608bd7a3a}\Shell - "" = AutoRun
  218. O33 - MountPoints2\{da4c639a-a725-11df-a883-002608bd7a3a}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
  219. O34 - HKLM BootExecute: (autocheck autochk *) - File not found
  220. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  221. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  222. O35 - HKLM\..comfile [open] -- "%1" %*
  223. O35 - HKLM\..exefile [open] -- "%1" %*
  224. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  225. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  226. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  227. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  228.  
  229. NetSvcs:[b]64bit:[/b] UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
  230. NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  231.  
  232. MsConfig:64bit - StartUpFolder: C:^Users^Chris^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^K-Meleon Loader.lnk - C:\Program Files (x86)\K-Meleon\loader.exe - ()
  233. MsConfig:64bit - StartUpFolder: C:^Users^Chris^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe - ()
  234. MsConfig:64bit - StartUpFolder: C:^Users^Chris^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Serveur UltraVNC.lnk - C:\Program Files (x86)\UltraVNC\winvnc.exe - (www.ultravnc.fr)
  235. MsConfig:64bit - StartUpReg: [b]Apple_KbdMgr[/b] - hkey= - key= - C:\Program Files (x86)\Boot Camp\KbdMgr.exe (Apple Inc.)
  236. MsConfig:64bit - StartUpReg: [b]cacaoweb[/b] - hkey= - key= - C:\Users\Chris\AppData\Roaming\cacaoweb\cacaoweb.exe ()
  237. MsConfig:64bit - StartUpReg: [b]ClickPotatoLiteSA[/b] - hkey= - key= - C:\Program Files (x86)\ClickPotatoLite\bin\10.0.530.0\ClickPotatoLiteSA.exe (Pinball Corporation.)
  238. MsConfig:64bit - StartUpReg: [b]DivXUpdate[/b] - hkey= - key= - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
  239. MsConfig:64bit - StartUpReg: [b]Google Update[/b] - hkey= - key= - C:\Users\Chris\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
  240. MsConfig:64bit - StartUpReg: [b]msnmsgr[/b] - hkey= - key= - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
  241. MsConfig:64bit - StartUpReg: [b]PWRISOVM.EXE[/b] - hkey= - key= - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
  242. MsConfig:64bit - State: "startup" - Reg Error: Key error.
  243. MsConfig:64bit - State: "services" - Reg Error: Key error.
  244.  
  245. SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  246. SafeBootMin:[b]64bit:[/b] Base - Driver Group
  247. SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
  248. SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
  249. SafeBootMin:[b]64bit:[/b] File system - Driver Group
  250. SafeBootMin:[b]64bit:[/b] Filter - Driver Group
  251. SafeBootMin:[b]64bit:[/b] HelpSvc - Service
  252. SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
  253. SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
  254. SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
  255. SafeBootMin:[b]64bit:[/b] sacsvr - Service
  256. SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
  257. SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
  258. SafeBootMin:[b]64bit:[/b] vmms - Service
  259. SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  260. SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  261. SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  262. SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  263. SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  264. SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  265. SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  266. SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  267. SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  268. SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  269. SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  270. SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  271. SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  272. SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  273. SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  274. SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  275. SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  276. SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  277. SafeBootMin: Base - Driver Group
  278. SafeBootMin: Boot Bus Extender - Driver Group
  279. SafeBootMin: Boot file system - Driver Group
  280. SafeBootMin: File system - Driver Group
  281. SafeBootMin: Filter - Driver Group
  282. SafeBootMin: HelpSvc - Service
  283. SafeBootMin: PCI Configuration - Driver Group
  284. SafeBootMin: PNP Filter - Driver Group
  285. SafeBootMin: Primary disk - Driver Group
  286. SafeBootMin: sacsvr - Service
  287. SafeBootMin: SCSI Class - Driver Group
  288. SafeBootMin: System Bus Extender - Driver Group
  289. SafeBootMin: vmms - Service
  290. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  291. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  292. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  293. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  294. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  295. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  296. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  297. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  298. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  299. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  300. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  301. SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  302. SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  303. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  304. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  305. SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  306. SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  307.  
  308. SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  309. SafeBootNet:[b]64bit:[/b] Base - Driver Group
  310. SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
  311. SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
  312. SafeBootNet:[b]64bit:[/b] File system - Driver Group
  313. SafeBootNet:[b]64bit:[/b] Filter - Driver Group
  314. SafeBootNet:[b]64bit:[/b] HelpSvc - Service
  315. SafeBootNet:[b]64bit:[/b] Messenger - Service
  316. SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
  317. SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
  318. SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
  319. SafeBootNet:[b]64bit:[/b] Network - Driver Group
  320. SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
  321. SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
  322. SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
  323. SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
  324. SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
  325. SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
  326. SafeBootNet:[b]64bit:[/b] sacsvr - Service
  327. SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
  328. SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
  329. SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
  330. SafeBootNet:[b]64bit:[/b] TDI - Driver Group
  331. SafeBootNet:[b]64bit:[/b] vmms - Service
  332. SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  333. SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
  334. SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  335. SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  336. SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  337. SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  338. SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  339. SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  340. SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  341. SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  342. SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  343. SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  344. SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  345. SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  346. SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  347. SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  348. SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  349. SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  350. SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  351. SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  352. SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  353. SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  354. SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  355. SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  356. SafeBootNet: Base - Driver Group
  357. SafeBootNet: Boot Bus Extender - Driver Group
  358. SafeBootNet: Boot file system - Driver Group
  359. SafeBootNet: File system - Driver Group
  360. SafeBootNet: Filter - Driver Group
  361. SafeBootNet: HelpSvc - Service
  362. SafeBootNet: Messenger - Service
  363. SafeBootNet: NDIS Wrapper - Driver Group
  364. SafeBootNet: NetBIOSGroup - Driver Group
  365. SafeBootNet: NetDDEGroup - Driver Group
  366. SafeBootNet: Network - Driver Group
  367. SafeBootNet: NetworkProvider - Driver Group
  368. SafeBootNet: PCI Configuration - Driver Group
  369. SafeBootNet: PNP Filter - Driver Group
  370. SafeBootNet: PNP_TDI - Driver Group
  371. SafeBootNet: Primary disk - Driver Group
  372. SafeBootNet: rdsessmgr - Service
  373. SafeBootNet: sacsvr - Service
  374. SafeBootNet: SCSI Class - Driver Group
  375. SafeBootNet: Streams Drivers - Driver Group
  376. SafeBootNet: System Bus Extender - Driver Group
  377. SafeBootNet: TDI - Driver Group
  378. SafeBootNet: vmms - Service
  379. SafeBootNet: WudfUsbccidDriver - Driver
  380. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  381. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  382. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  383. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  384. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  385. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  386. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  387. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  388. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  389. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  390. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  391. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  392. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  393. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  394. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  395. SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  396. SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  397. SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  398. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  399. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  400. SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  401. SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  402.  
  403. ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  404. ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  405. ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  406. ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  407. ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  408. ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  409. ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  410. ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  411. ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  412. ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  413. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  414. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
  415. ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
  416. ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  417. ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  418. ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  419. ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  420. ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  421. ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
  422. ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
  423. ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  424. ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  425. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  426. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  427. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  428. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  429. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  430. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  431. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  432. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  433. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  434. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  435. ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
  436. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  437. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
  438. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
  439. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  440. ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
  441. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  442. ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker 2.6
  443. ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
  444. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  445. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  446. ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  447. ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
  448. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  449.  
  450. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  451. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  452. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  453. Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
  454. Drivers32: vidc.i420 - C:\Windows\SysWow64\i420vfw.dll (www.helixcommunity.org)
  455. Drivers32: vidc.yv12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
  456.  
  457. CREATERESTOREPOINT
  458. Restore point Set: OTL Restore Point
  459.  
  460. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  461.  
  462. [2010/11/27 13:57:55 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe
  463. [2010/11/25 23:09:55 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
  464. [2010/11/24 23:14:49 | 000,000,000 | ---D | C] -- C:\Users\Chris\dwhelper
  465. [2010/11/23 22:12:03 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\Windows\SysWow64\devil.dll
  466. [2010/11/23 22:12:02 | 000,318,976 | ---- | C] (The Public) -- C:\Windows\SysWow64\avisynth.dll
  467. [2010/11/23 22:12:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll
  468. [2010/11/23 22:12:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\i420vfw.dll
  469. [2010/11/23 22:12:00 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
  470. [2010/11/23 22:11:26 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\Windows\SysWow64\nbDX.dll
  471. [2010/11/23 22:11:26 | 000,186,880 | RHS- | C] (RadLight) -- C:\Windows\SysWow64\RLOgg.ax
  472. [2010/11/23 22:11:26 | 000,179,200 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\DiracSplitter.ax
  473. [2010/11/23 22:11:26 | 000,169,472 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\MatroskaDX.ax
  474. [2010/11/23 22:11:26 | 000,163,328 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\flvDX.dll
  475. [2010/11/23 22:11:26 | 000,161,792 | RHS- | C] (Gabest) -- C:\Windows\SysWow64\RealMediaDX.ax
  476. [2010/11/23 22:11:26 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\Windows\SysWow64\AVCDX.ax
  477. [2010/11/23 22:11:26 | 000,092,672 | RHS- | C] (RadLight) -- C:\Windows\SysWow64\RLVorbisDec.ax
  478. [2010/11/23 22:11:26 | 000,090,112 | RHS- | C] (-) -- C:\Windows\SysWow64\TTADSSplitter.ax
  479. [2010/11/23 22:11:26 | 000,090,112 | RHS- | C] (-) -- C:\Windows\SysWow64\TTADSDecoder.ax
  480. [2010/11/23 22:11:26 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\Windows\SysWow64\RLTheoraDec.ax
  481. [2010/11/23 22:11:26 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\Windows\SysWow64\msfDX.dll
  482. [2010/11/23 22:11:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eRightSoft
  483. [2010/11/23 22:01:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MediaCoder
  484. [2010/11/23 21:58:16 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\WMTools Downloaded Files
  485. [2010/11/23 21:56:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Movie Maker 2.6
  486. [2010/11/23 21:50:26 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\OMAD
  487. [2010/11/23 00:10:50 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Adobe
  488. [2010/11/23 00:10:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
  489. [2010/11/23 00:10:49 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Adobe
  490. [2010/11/21 22:24:02 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
  491. [2010/11/20 13:15:24 | 000,000,000 | R--D | C] -- C:\Users\Chris\Documents\MeggieSoft Games
  492. [2010/11/20 13:14:41 | 000,608,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx
  493. [2010/11/20 13:14:41 | 000,109,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswinsck.ocx
  494. [2010/11/20 13:14:41 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\MeggieSoft Games
  495. [2010/11/20 13:14:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MeggieSoft Games
  496. [2010/11/20 12:51:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dofus 2
  497. [2010/11/20 12:37:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-16.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  498. [2010/11/19 22:54:40 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-15.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  499. [2010/11/19 22:41:45 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-14.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  500. [2010/11/19 22:26:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-13.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  501. [2010/11/19 22:24:59 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-12.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  502. [2010/11/19 22:22:15 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-11.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  503. [2010/11/19 22:22:02 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Dofus-10.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  504. [2010/11/18 21:55:11 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\OtakuSoftware
  505. [2010/11/18 21:52:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DeskSpace
  506. [2010/11/17 20:30:00 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\X-Chat 2
  507. [2010/11/17 20:29:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\xchat
  508. [2010/11/17 20:23:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\mIRC
  509. [2010/11/17 20:23:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC
  510. [2010/11/17 14:06:29 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2FR.DLL
  511. [2010/11/17 14:06:29 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TABCTFR.DLL
  512. [2010/11/17 14:06:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pods
  513. [2010/11/16 21:12:31 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Naio
  514. [2010/11/15 23:01:22 | 000,000,000 | --SD | C] -- C:\Users\Chris\Documents\My DocsToGo
  515. [2010/11/15 23:00:54 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\DocumentsToGoDesktop
  516. [2010/11/15 23:00:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Documents To Go Desktop
  517. [2010/11/13 20:45:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Ocarina
  518. [2010/11/06 17:41:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Symantec Shared
  519. [2010/11/06 01:54:19 | 000,764,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\cohelper.dll
  520. [2010/11/04 22:08:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RomStation
  521. [2010/11/04 01:21:43 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Test AR
  522. [2010/11/02 14:38:48 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\FrostWire
  523. [2010/11/02 14:38:43 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\FrostWire
  524. [2010/11/02 14:08:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FrostWire
  525. [2010/10/31 21:36:59 | 000,000,000 | ---D | C] -- C:\ProgramData\DVD Shrink
  526. [2010/10/31 21:36:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVD Shrink
  527. [2010/10/30 19:29:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
  528. [2010/10/30 19:24:26 | 004,505,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  529. [2010/10/30 19:24:26 | 001,500,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco642050.dll
  530. [2010/10/30 19:24:26 | 001,308,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642030.dll
  531. [2010/10/30 19:24:25 | 009,392,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  532. [2010/10/30 19:24:25 | 001,594,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
  533. [2010/10/30 19:24:25 | 001,298,536 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
  534. [2010/10/30 19:15:36 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\VDownloader
  535. [2010/10/30 19:15:29 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\VDownloader
  536. [2010/10/30 19:15:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VDownloader
  537. [2010/10/30 13:24:12 | 000,000,000 | ---D | C] -- C:\Md5
  538. [2010/10/29 17:58:47 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\vlc
  539.  
  540. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  541.  
  542. [2010/11/27 13:58:10 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.exe
  543. [2010/11/27 13:48:15 | 000,013,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  544. [2010/11/27 13:48:15 | 000,013,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  545. [2010/11/27 13:45:35 | 001,549,700 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  546. [2010/11/27 13:45:35 | 000,704,480 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
  547. [2010/11/27 13:45:35 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  548. [2010/11/27 13:45:35 | 000,130,754 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
  549. [2010/11/27 13:45:35 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  550. [2010/11/27 13:40:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  551. [2010/11/27 13:40:34 | 3000,004,608 | -HS- | M] () -- C:\hiberfil.sys
  552. [2010/11/27 11:20:00 | 000,001,076 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1987493196-2323159855-4205808409-1001UA.job
  553. [2010/11/26 19:52:39 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_4
  554. [2010/11/26 17:52:27 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_1
  555. [2010/11/26 17:52:22 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_3
  556. [2010/11/26 17:42:01 | 000,000,173 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\D2Info0
  557. [2010/11/26 17:41:49 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_2
  558. [2010/11/26 17:31:25 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_6
  559. [2010/11/26 17:20:00 | 000,001,024 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1987493196-2323159855-4205808409-1001Core.job
  560. [2010/11/26 17:01:38 | 000,000,294 | ---- | M] () -- C:\Windows\tasks\Defraggler Volume C Task.job
  561. [2010/11/26 16:52:56 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  562. [2010/11/26 00:26:53 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\cd.dat
  563. [2010/11/25 19:56:45 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_5
  564. [2010/11/23 22:25:44 | 000,003,584 | ---- | M] () -- C:\Users\Chris\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  565. [2010/11/23 22:01:25 | 000,001,065 | ---- | M] () -- C:\Users\Chris\Desktop\MediaCoder.lnk
  566. [2010/11/23 19:27:14 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_9
  567. [2010/11/22 23:08:49 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_8
  568. [2010/11/22 23:08:48 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_7
  569. [2010/11/21 22:24:15 | 000,001,118 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster.lnk
  570. [2010/11/21 22:24:15 | 000,001,106 | ---- | M] () -- C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
  571. [2010/11/21 22:24:15 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Game Booster.lnk
  572. [2010/11/21 20:28:58 | 000,032,549 | ---- | M] () -- C:\Users\Chris\Documents\devoir eco(Hai).pdf
  573. [2010/11/21 20:28:51 | 000,052,208 | ---- | M] () -- C:\Users\Chris\Documents\devoir eco(Chris).pdf
  574. [2010/11/21 20:21:23 | 000,018,983 | ---- | M] () -- C:\Users\Chris\Documents\devoir eco(Hai).ods
  575. [2010/11/21 20:20:53 | 000,019,074 | ---- | M] () -- C:\Users\Chris\Documents\devoir eco(Sami).ods
  576. [2010/11/21 20:20:36 | 000,018,919 | ---- | M] () -- C:\Users\Chris\Documents\devoir eco(Chris).ods
  577. [2010/11/21 19:51:08 | 000,012,820 | ---- | M] () -- C:\Users\Chris\Documents\devoir eco.xlsx
  578. [2010/11/21 11:50:01 | 000,291,912 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  579. [2010/11/20 13:15:25 | 000,000,024 | -H-- | M] () -- C:\Windows\vbmgsext.ini
  580. [2010/11/20 13:15:25 | 000,000,024 | -H-- | M] () -- C:\Windows\vbmgsent.ini
  581. [2010/11/20 12:47:42 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_16
  582. [2010/11/20 01:36:58 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_13
  583. [2010/11/20 01:36:57 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_11
  584. [2010/11/20 01:36:46 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_14
  585. [2010/11/20 01:36:44 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_10
  586. [2010/11/20 01:36:42 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_15
  587. [2010/11/20 01:36:41 | 000,000,008 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_12
  588. [2010/11/18 16:57:13 | 000,001,328 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\ZaDS-nAiO.exe.lnk
  589. [2010/11/17 20:57:58 | 000,001,304 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\mirc.exe.lnk
  590. [2010/11/17 20:29:59 | 000,001,851 | ---- | M] () -- C:\Users\Public\Desktop\XChat.lnk
  591. [2010/11/16 21:13:21 | 000,000,371 | ---- | M] () -- C:\Users\Chris\SciTE.session
  592. [2010/11/15 23:01:22 | 000,000,748 | ---- | M] () -- C:\Users\Public\Desktop\My DocsToGo.lnk
  593. [2010/11/15 22:58:41 | 000,022,016 | ---- | M] () -- C:\Users\Chris\Documents\Ndls.doc
  594. [2010/11/13 17:47:25 | 000,001,619 | ---- | M] () -- C:\Users\Chris\Desktop\DivX Movies.lnk
  595. [2010/11/13 17:44:59 | 000,001,134 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
  596. [2010/11/10 02:48:57 | 000,000,600 | ---- | M] () -- C:\Users\Chris\AppData\Local\PUTTY.RND
  597. [2010/11/05 12:32:55 | 000,002,407 | ---- | M] () -- C:\Users\Chris\Desktop\Google Chrome.lnk
  598. [2010/11/05 12:32:55 | 000,002,369 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  599. [2010/11/04 22:08:52 | 000,001,053 | ---- | M] () -- C:\Users\Chris\Desktop\RomStation.lnk
  600. [2010/11/04 21:59:20 | 000,006,412 | ---- | M] () -- C:\Pokemon Jaune (Yellow) (F) [C][!].clt
  601. [2010/11/02 14:08:27 | 000,001,249 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.21.1.lnk
  602. [2010/11/02 14:08:27 | 000,001,225 | ---- | M] () -- C:\Users\Chris\Desktop\FrostWire 4.21.1.lnk
  603. [2010/11/01 13:18:28 | 000,001,231 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
  604. [2010/10/31 21:36:59 | 000,001,005 | ---- | M] () -- C:\Users\Chris\Desktop\DVD Shrink 3.2.lnk
  605. [2010/10/30 19:22:56 | 023,401,939 | ---- | M] () -- C:\Users\Chris\Documents\where is the love.mov
  606.  
  607. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  608.  
  609. [2010/11/26 00:26:53 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\cd.dat
  610. [2010/11/23 22:21:03 | 000,003,584 | ---- | C] () -- C:\Users\Chris\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  611. [2010/11/23 22:12:01 | 000,027,648 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll
  612. [2010/11/23 22:11:26 | 000,227,328 | RHS- | C] () -- C:\Windows\SysWow64\ac3DX.ax
  613. [2010/11/23 22:11:26 | 000,175,104 | RHS- | C] () -- C:\Windows\SysWow64\CoreAAC.ax
  614. [2010/11/23 22:11:26 | 000,120,832 | RHS- | C] () -- C:\Windows\SysWow64\MPCDx.ax
  615. [2010/11/23 22:11:26 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\RLMPCDec.ax
  616. [2010/11/23 22:11:26 | 000,097,280 | RHS- | C] () -- C:\Windows\SysWow64\FLACDX.ax
  617. [2010/11/23 22:11:26 | 000,081,920 | RHS- | C] () -- C:\Windows\SysWow64\aac_parser.ax
  618. [2010/11/23 22:11:26 | 000,070,656 | RHS- | C] () -- C:\Windows\SysWow64\RLAPEDec.ax
  619. [2010/11/23 22:11:26 | 000,051,712 | RHS- | C] () -- C:\Windows\SysWow64\RLSpeexDec.ax
  620. [2010/11/23 22:01:25 | 000,001,065 | ---- | C] () -- C:\Users\Chris\Desktop\MediaCoder.lnk
  621. [2010/11/21 20:28:56 | 000,032,549 | ---- | C] () -- C:\Users\Chris\Documents\devoir eco(Hai).pdf
  622. [2010/11/21 20:28:49 | 000,052,208 | ---- | C] () -- C:\Users\Chris\Documents\devoir eco(Chris).pdf
  623. [2010/11/21 20:19:02 | 000,019,074 | ---- | C] () -- C:\Users\Chris\Documents\devoir eco(Sami).ods
  624. [2010/11/21 20:13:40 | 000,018,983 | ---- | C] () -- C:\Users\Chris\Documents\devoir eco(Hai).ods
  625. [2010/11/21 20:09:19 | 000,018,919 | ---- | C] () -- C:\Users\Chris\Documents\devoir eco(Chris).ods
  626. [2010/11/21 19:50:58 | 000,012,820 | ---- | C] () -- C:\Users\Chris\Documents\devoir eco.xlsx
  627. [2010/11/20 13:15:25 | 000,000,024 | -H-- | C] () -- C:\Windows\vbmgsext.ini
  628. [2010/11/20 13:15:25 | 000,000,024 | -H-- | C] () -- C:\Windows\vbmgsent.ini
  629. [2010/11/20 12:37:22 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_16
  630. [2010/11/19 22:54:40 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_15
  631. [2010/11/19 22:41:45 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_14
  632. [2010/11/19 22:26:37 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_13
  633. [2010/11/19 22:24:59 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_12
  634. [2010/11/19 22:22:15 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_11
  635. [2010/11/19 22:22:02 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_10
  636. [2010/11/17 20:57:58 | 000,001,304 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\mirc.exe.lnk
  637. [2010/11/17 20:29:59 | 000,001,851 | ---- | C] () -- C:\Users\Public\Desktop\XChat.lnk
  638. [2010/11/17 14:24:15 | 000,001,328 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\ZaDS-nAiO.exe.lnk
  639. [2010/11/15 23:01:22 | 000,000,748 | ---- | C] () -- C:\Users\Public\Desktop\My DocsToGo.lnk
  640. [2010/11/15 22:45:52 | 000,022,016 | ---- | C] () -- C:\Users\Chris\Documents\Ndls.doc
  641. [2010/11/04 22:08:52 | 000,001,053 | ---- | C] () -- C:\Users\Chris\Desktop\RomStation.lnk
  642. [2010/11/04 21:47:05 | 000,006,412 | ---- | C] () -- C:\Pokemon Jaune (Yellow) (F) [C][!].clt
  643. [2010/11/02 14:08:27 | 000,001,249 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.21.1.lnk
  644. [2010/11/02 14:08:27 | 000,001,225 | ---- | C] () -- C:\Users\Chris\Desktop\FrostWire 4.21.1.lnk
  645. [2010/10/31 21:36:59 | 000,001,005 | ---- | C] () -- C:\Users\Chris\Desktop\DVD Shrink 3.2.lnk
  646. [2010/10/30 19:17:16 | 023,401,939 | ---- | C] () -- C:\Users\Chris\Documents\where is the love.mov
  647. [2010/10/01 17:44:09 | 000,000,035 | ---- | C] () -- C:\Windows\A5W.INI
  648. [2010/09/20 22:31:58 | 000,004,990 | ---- | C] () -- C:\ProgramData\mtbjfghn.xbe
  649. [2010/09/07 18:39:44 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId1_3
  650. [2010/09/07 17:35:31 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId1_1
  651. [2010/09/07 17:33:16 | 000,000,177 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\D2Info1
  652. [2010/09/07 17:33:16 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId1_2
  653. [2010/08/22 20:59:29 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_9
  654. [2010/08/22 16:21:38 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_8
  655. [2010/08/22 14:20:25 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_7
  656. [2010/08/21 20:39:07 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_6
  657. [2010/08/21 20:38:55 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_5
  658. [2010/08/21 20:34:32 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_3
  659. [2010/08/21 20:34:13 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_2
  660. [2010/08/21 20:33:56 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_1
  661. [2010/08/21 20:33:00 | 000,000,008 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\DofusAppId0_4
  662. [2010/08/06 00:11:03 | 000,000,132 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Adobe PNG Format CS5 Prefs
  663. [2010/08/05 23:58:02 | 000,000,600 | ---- | C] () -- C:\Users\Chris\AppData\Local\PUTTY.RND
  664. [2010/07/23 16:47:00 | 000,060,152 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\SQLite3.dll
  665. [2010/07/11 12:36:23 | 000,000,102 | ---- | C] () -- C:\Windows\permis.ini
  666. [2010/06/22 01:10:33 | 000,007,631 | ---- | C] () -- C:\Users\Chris\AppData\Local\Resmon.ResmonCfg
  667. [2010/06/21 18:46:32 | 000,000,173 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\D2Info0
  668. [2010/06/21 15:11:38 | 000,007,168 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
  669. [2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  670. [2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  671. [2005/07/02 02:04:32 | 000,267,419 | -H-- | C] () -- C:\Users\Chris\AppData\Roaming\logs.dat
  672.  
  673. [color=#E56717]========== Custom Scans ==========[/color]
  674.  
  675.  
  676. [color=#A23BEC]< %ALLUSERSPROFILE%Application Data*. >[/color]
  677. [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
  678.  
  679. [color=#A23BEC]< %ALLUSERSPROFILE%Application Data*.exe /s >[/color]
  680.  
  681. [color=#A23BEC]< %APPDATA%*. >[/color]
  682. [2010/11/23 16:20:21 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Adobe
  683. [2010/06/21 22:43:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\app
  684. [2010/07/30 21:46:45 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Apple Computer
  685. [2010/06/26 19:58:34 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Avant Profiles
  686. [2010/11/17 19:00:50 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\cacaoweb
  687. [2010/08/24 18:43:53 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Canneverbe Limited
  688. [2010/07/18 15:00:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Capturino
  689. [2010/09/20 22:31:58 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Carambis
  690. [2010/10/27 15:01:18 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ClickPotatoLite
  691. [2010/11/23 22:21:04 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DivX
  692. [2010/11/15 23:01:22 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DocumentsToGoDesktop
  693. [2010/11/26 17:47:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus 2
  694. [2010/09/07 19:19:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus 2 Beta
  695. [2010/11/19 22:22:02 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-10.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  696. [2010/11/19 22:22:15 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-11.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  697. [2010/11/19 22:24:59 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-12.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  698. [2010/11/19 22:26:37 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-13.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  699. [2010/11/19 22:41:45 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-14.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  700. [2010/11/19 22:54:40 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-15.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  701. [2010/11/20 12:37:22 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-16.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  702. [2010/11/20 12:48:36 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  703. [2010/08/21 20:34:32 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  704. [2010/08/21 20:33:00 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  705. [2010/08/21 20:38:55 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-5.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  706. [2010/08/21 20:39:07 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-6.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  707. [2010/08/22 14:20:25 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-7.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  708. [2010/08/22 16:21:38 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-8.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  709. [2010/08/22 20:59:29 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus-9.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  710. [2010/11/20 12:49:12 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  711. [2010/09/07 17:33:16 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DofusBeta-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  712. [2010/09/07 18:39:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DofusBeta-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  713. [2010/09/07 17:35:31 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\DofusBeta.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  714. [2010/11/23 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FileZilla
  715. [2010/08/03 22:06:30 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FreeVideoConverter
  716. [2010/11/26 00:51:43 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\FrostWire
  717. [2010/10/10 19:27:11 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\GARMIN
  718. [2010/06/21 15:12:37 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Identities
  719. [2005/09/23 08:04:14 | 000,000,000 | RHSD | M] -- C:\Users\Chris\AppData\Roaming\install
  720. [2010/09/19 15:32:14 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\iPhone.F4B6EDD4861104DF103CA831FC6755522BBBD9C1.1
  721. [2010/06/26 20:02:57 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\K-Meleon
  722. [2010/10/30 18:57:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\LimeWire
  723. [2010/06/21 15:52:25 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Macromedia
  724. [2009/07/14 16:35:18 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Media Center Programs
  725. [2010/09/15 13:25:08 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Megaupload
  726. [2010/11/20 13:16:51 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\MeggieSoft Games
  727. [2010/07/10 20:49:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Micro Application
  728. [2010/10/24 16:03:53 | 000,000,000 | --SD | M] -- C:\Users\Chris\AppData\Roaming\Microsoft
  729. [2010/11/19 22:24:51 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\mIRC
  730. [2010/09/11 21:25:33 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Mozilla
  731. [2010/10/27 18:50:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Notepad++
  732. [2010/06/25 22:22:53 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\OpenOffice.org
  733. [2010/11/18 21:55:11 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\OtakuSoftware
  734. [2010/06/21 22:43:44 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  735. [2010/09/07 17:33:19 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\RegBeta.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
  736. [2010/10/27 15:01:11 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ShopperReports3
  737. [2010/11/24 22:20:45 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Skype
  738. [2010/09/27 21:08:25 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Synthesia
  739. [2010/10/10 21:26:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Thunderbird
  740. [2010/07/10 19:49:56 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TuneUp Software
  741. [2010/11/08 22:47:05 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\uTorrent
  742. [2010/10/30 19:15:36 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\VDownloader
  743. [2010/11/27 11:46:26 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\vlc
  744. [2010/06/21 16:52:25 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\WinRAR
  745. [2010/11/17 20:37:24 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\X-Chat 2
  746.  
  747. [color=#A23BEC]< %APPDATA%*.exe /s >[/color]
  748. [2010/11/26 17:50:15 | 000,304,368 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\cacaoweb\cacaoweb.exe
  749. [2010/11/23 23:31:01 | 004,506,256 | ---- | M] (Lime Wire LLC) -- C:\Users\Chris\AppData\Roaming\FrostWire\.NetworkShare\LimeWireWin4.16.6.exe
  750. [2010/08/08 12:50:47 | 000,163,840 | ---- | M] (Mozilla Foundation) -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.exe
  751. [2010/08/08 12:50:48 | 000,196,608 | ---- | M] (Mozilla Foundation) -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\updater.exe
  752. [2010/08/08 12:50:48 | 000,014,848 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xpcshell.exe
  753. [2010/08/08 12:50:48 | 000,077,824 | ---- | M] (Mozilla Foundation) -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xpicleanup.exe
  754. [2010/08/08 12:50:48 | 000,266,240 | ---- | M] (Mozilla Foundation) -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xpidl.exe
  755. [2010/08/08 12:50:48 | 000,018,432 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xpt_dump.exe
  756. [2010/08/08 12:50:48 | 000,014,336 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xpt_link.exe
  757. [2010/08/08 12:50:48 | 000,073,728 | ---- | M] (Mozilla Foundation) -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner-stub.exe
  758. [2010/08/08 12:50:48 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Users\Chris\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner.exe
  759. [2010/11/10 17:40:07 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Users\Chris\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
  760. [2004/07/03 10:20:06 | 000,036,864 | ---- | M] (MeggieSoft Games) -- C:\Users\Chris\AppData\Roaming\MeggieSoft Games\retriever.exe
  761. [2007/03/02 15:58:00 | 000,180,224 | ---- | M] (MeggieSoft Games) -- C:\Users\Chris\AppData\Roaming\MeggieSoft Games\updater.exe
  762. [2010/06/21 15:15:34 | 000,098,304 | R--- | M] (Microsoft Corp.) -- C:\Users\Chris\AppData\Roaming\Microsoft\Installer\{3577E42B-3347-4EB8-BFDA-D36E8ED3C519}\icons.exe
  763.  
  764. [color=#A23BEC]< %SYSTEMDRIVE%*.exe >[/color]
  765.  
  766. [color=#A23BEC]< %systemroot%*. /mp /s >[/color]
  767.  
  768. [color=#A23BEC]< %systemroot%system32*.dll /lockedfiles >[/color]
  769.  
  770. [color=#A23BEC]< %systemroot%Tasks*.job /lockedfiles >[/color]
  771.  
  772. [color=#A23BEC]< %systemroot%system32drivers*.sys /lockedfiles >[/color]
  773.  
  774. [color=#A23BEC]< %systemroot%System32config*.sav >[/color]
  775.  
  776.  
  777. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  778. [2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
  779. [2010/02/19 22:07:36 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=22F7FA1FD0223AE08AE4070534B96CF9 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20570_none_b88db036e0e839ae\explorer.exe
  780. [2010/02/19 21:56:11 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
  781. [2010/02/19 22:07:36 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=90BD96C123F672C49CB5E1C7854FDFC0 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20570_none_ae3905e4ac8777b3\explorer.exe
  782. [2010/02/19 21:56:11 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
  783. [2010/02/19 21:56:11 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
  784. [2009/07/14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
  785. [2010/02/19 22:07:37 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=C9B74657CF24E4297C94D5F6BE62E915 -- C:\Windows\SysWOW64\explorer.exe
  786. [2010/02/19 22:07:37 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=C9B74657CF24E4297C94D5F6BE62E915 -- C:\Windows\SysWOW64\explorer.exe
  787. [2010/02/19 22:07:37 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=C9B74657CF24E4297C94D5F6BE62E915 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16457_none_b820b549c7b41363\explorer.exe
  788. [2010/02/19 22:07:37 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E0ABC4E94E734604A2244273784FD4CB -- C:\Windows\explorer.exe
  789. [2010/02/19 22:07:37 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E0ABC4E94E734604A2244273784FD4CB -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16457_none_adcc0af793535168\explorer.exe
  790. [2010/02/19 21:56:11 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
  791.  
  792. [color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
  793. [2009/07/14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
  794. [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
  795. [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
  796. [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
  797.  
  798. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  799. [2009/07/14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
  800. [2010/02/19 22:08:01 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=9D5DA4E693BE6B27339FB31EE2E8F808 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20574_none_cc4b611107b8ea45\winlogon.exe
  801.  
  802. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!