API tools faq
paste
Guest User

OTL.txt

a guest
Jul 5th, 2011
250
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 65.76 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 05/07/2011 15:43:09 - Run 1
  2. OTL by OldTimer - Version 3.2.26.0 Folder = C:\Users\ASUS\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 0000040c | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd
  6.  
  7. 3,86 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 49,95% Memory free
  8. 7,71 Gb Paging File | 5,49 Gb Available in Paging File | 71,15% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 581,52 Gb Total Space | 411,22 Gb Free Space | 70,71% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: ASUS-PC | User Name: ASUS | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - C:\Users\ASUS\Downloads\OTL.exe (OldTimer Tools)
  21. PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
  22. PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
  23. PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
  24. PRC - C:\Program Files (x86)\Stardock\ObjectDockPlus2\ObjectDock.exe (Stardock)
  25. PRC - C:\Windows\AsScrPro.exe (ASUS)
  26. PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
  27. PRC - C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe ()
  28. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
  29. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
  30. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS)
  31. PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
  32. PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
  33. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
  34. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
  35. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS)
  36. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
  37. PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS)
  38.  
  39.  
  40. [color=#E56717]========== Modules (SafeList) ==========[/color]
  41.  
  42. MOD - C:\Users\ASUS\Downloads\OTL.exe (OldTimer Tools)
  43. MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)
  44.  
  45.  
  46. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  47.  
  48. SRV:[b]64bit:[/b] - (maconfservice) -- C:\Program Files\ma-config.com\x64\maconfservice.exe (CybelSoft)
  49. SRV:[b]64bit:[/b] - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
  50. SRV:[b]64bit:[/b] - (VhdAttach) -- C:\Program Files\Josip Medved\VHD Attach\VhdAttachService.exe (Josip Medved)
  51. SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  52. SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
  53. SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
  54. SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
  55. SRV - (AVP) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
  56. SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
  57. SRV - (ATKGFNEXSrv) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
  58. SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
  59. SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
  60. SRV - (ASLDRService) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
  61. SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
  62.  
  63.  
  64. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  65.  
  66. DRV:[b]64bit:[/b] - (driverhardwarev2x64) -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys (CybelSoft)
  67. DRV:[b]64bit:[/b] - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
  68. DRV:[b]64bit:[/b] - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
  69. DRV:[b]64bit:[/b] - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
  70. DRV:[b]64bit:[/b] - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
  71. DRV:[b]64bit:[/b] - (KLIF) -- C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab)
  72. DRV:[b]64bit:[/b] - (VBoxNetAdp) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation)
  73. DRV:[b]64bit:[/b] - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
  74. DRV:[b]64bit:[/b] - (dc3d) -- C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
  75. DRV:[b]64bit:[/b] - (NuidFltr) -- C:\Windows\SysNative\drivers\nuidfltr.sys (Microsoft Corporation)
  76. DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
  77. DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
  78. DRV:[b]64bit:[/b] - (JME) JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits) -- C:\Windows\SysNative\drivers\JME.sys (JMicron Technology Corp.)
  79. DRV:[b]64bit:[/b] - (JMCR) -- C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
  80. DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
  81. DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
  82. DRV:[b]64bit:[/b] - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
  83. DRV:[b]64bit:[/b] - (kl2) -- C:\Windows\SysNative\drivers\kl2.sys (Kaspersky Lab ZAO)
  84. DRV:[b]64bit:[/b] - (KL1) -- C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab ZAO)
  85. DRV:[b]64bit:[/b] - (KLIM6) -- C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab ZAO)
  86. DRV:[b]64bit:[/b] - (Revoflt) -- C:\Windows\SysNative\drivers\revoflt.sys (VS Revo Group)
  87. DRV:[b]64bit:[/b] - (AtiHdmiService) -- C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
  88. DRV:[b]64bit:[/b] - (klmouflt) -- C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab)
  89. DRV:[b]64bit:[/b] - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.)
  90. DRV:[b]64bit:[/b] - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronic Corp.)
  91. DRV:[b]64bit:[/b] - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
  92. DRV:[b]64bit:[/b] - (HECIx64) Intel(R) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
  93. DRV:[b]64bit:[/b] - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\Windows\SysNative\drivers\snp2uvc.sys ()
  94. DRV:[b]64bit:[/b] - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
  95. DRV:[b]64bit:[/b] - (kbfiltr) -- C:\Windows\SysNative\drivers\kbfiltr.sys ( )
  96. DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
  97. DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
  98. DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
  99. DRV:[b]64bit:[/b] - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
  100. DRV:[b]64bit:[/b] - (SiSGbeLH) -- C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
  101. DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
  102. DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
  103. DRV:[b]64bit:[/b] - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
  104. DRV:[b]64bit:[/b] - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
  105. DRV:[b]64bit:[/b] - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
  106. DRV:[b]64bit:[/b] - (MTsensor) -- C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
  107. DRV:[b]64bit:[/b] - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
  108. DRV:[b]64bit:[/b] - (WimFltr) -- C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
  109. DRV - (ISODrive) -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys (EZB Systems, Inc.)
  110. DRV - (ASMMAP64) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)
  111.  
  112.  
  113. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  114.  
  115.  
  116. [color=#E56717]========== Internet Explorer ==========[/color]
  117.  
  118. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  119.  
  120. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
  121. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
  122. IE - HKCU\..\URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023} - Reg Error: Key error. File not found
  123. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  124. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  125.  
  126. [color=#E56717]========== FireFox ==========[/color]
  127.  
  128. FF - prefs.js..browser.search.defaultenginename: "Yahoo"
  129. FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=382950"
  130. FF - prefs.js..browser.startup.homepage: "facebook.com"
  131. FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=382950&p="
  132.  
  133. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
  134. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  135. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
  136. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  137. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  138. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  139. FF - HKLM\Software\MozillaPlugins\@ma-config.com/HardwareDetection: C:\Program Files\ma-config.com\nphardwaredetection.dll (Cybelsoft)
  140. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  141. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
  142. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  143. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  144. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  145. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  146.  
  147. FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/05/31 16:37:15 | 000,000,000 | ---D | M]
  148. FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/05/31 16:37:15 | 000,000,000 | ---D | M]
  149. FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/05/31 16:37:15 | 000,000,000 | ---D | M]
  150. FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/21 16:52:07 | 000,000,000 | ---D | M]
  151. FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/03 15:20:08 | 000,000,000 | ---D | M]
  152. FF - HKCU\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/05/31 16:37:15 | 000,000,000 | ---D | M]
  153. FF - HKCU\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/05/31 16:37:15 | 000,000,000 | ---D | M]
  154. FF - HKCU\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\[email protected] [2011/05/31 16:37:15 | 000,000,000 | ---D | M]
  155. FF - HKCU\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/21 16:52:07 | 000,000,000 | ---D | M]
  156. FF - HKCU\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/03 15:20:08 | 000,000,000 | ---D | M]
  157.  
  158. [2011/05/20 18:31:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ASUS\AppData\Roaming\mozilla\Extensions
  159. [2011/07/01 18:46:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\5c7kgx2e.default\extensions
  160. [2011/06/21 16:52:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  161. [2011/06/12 23:14:03 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
  162. [2011/05/21 14:57:15 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]_bak
  163. [2011/05/21 14:57:10 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]_bak
  164. File not found (No name found) --
  165. () (No name found) -- C:\USERS\ASUS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5C7KGX2E.DEFAULT\EXTENSIONS\{47624DDA-B77E-4FEB-820A-E4F077D5D4CA}.XPI
  166. () (No name found) -- C:\USERS\ASUS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5C7KGX2E.DEFAULT\EXTENSIONS\{A0D7CCB3-214D-498B-B4AA-0E8FDA9A7BF7}.XPI
  167. () (No name found) -- C:\USERS\ASUS\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5C7KGX2E.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
  168. [2011/06/16 00:38:33 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  169. [2010/01/01 04:00:00 | 000,001,516 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-france.xml
  170. [2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  171. [2010/01/01 04:00:00 | 000,001,822 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
  172. [2010/01/01 04:00:00 | 000,001,154 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-france.xml
  173. [2010/01/01 04:00:00 | 000,001,426 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-fr.xml
  174. [2010/01/01 04:00:00 | 000,000,956 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-france.xml
  175.  
  176. O1 HOSTS File: ([2011/05/22 12:29:06 | 000,000,852 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  177. O1 - Hosts: 74.208.10.249 gs.apple.com
  178. O2:[b]64bit:[/b] - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\ievkbd.dll (Kaspersky Lab ZAO)
  179. O2:[b]64bit:[/b] - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO)
  180. O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
  181. O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
  182. O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
  183. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  184. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  185. O4:[b]64bit:[/b] - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
  186. O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
  187. O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
  188. O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
  189. O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
  190. O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
  191. O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
  192. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  193. O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
  194. O4 - Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = C:\Program Files (x86)\Stardock\ObjectDockPlus2\ObjectDock.exe (Stardock)
  195. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  196. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  197. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  198. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  199. O8:[b]64bit:[/b] - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
  200. O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
  201. O9:[b]64bit:[/b] - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO)
  202. O9:[b]64bit:[/b] - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\klwtbbho.dll (Kaspersky Lab ZAO)
  203. O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
  204. O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
  205. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  206. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  207. O12 - Plugin for: .spop - C:\Program Files (x86)\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.)
  208. O13 - gopher Prefix: missing
  209. O13 - gopher Prefix: missing
  210. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)
  211. O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)
  212. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)
  213. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  214. O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  215. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  216. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 205.151.67.6 205.151.67.2
  217. O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  218. O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
  219. O18:[b]64bit:[/b] - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
  220. O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  221. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\kloehk.dll (Kaspersky Lab ZAO)
  222. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\x64\sbhook64.dll (Kaspersky Lab ZAO)
  223. O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\sbhook.dll (Kaspersky Lab ZAO)
  224. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  225. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  226. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  227. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  228. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  229. O20:[b]64bit:[/b] - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO)
  230. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  231. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
  232. O22:[b]64bit:[/b] - SharedTaskScheduler: {1984D045-52CF-49cd-DB77-08F378FEA4DB} - ObjectDockShellExt - C:\Program Files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll (Stardock)
  233. O32 - HKLM CDRom: AutoRun - 1
  234. O34 - HKLM BootExecute: (autocheck autochk *) - File not found
  235. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  236. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  237. O35 - HKLM\..comfile [open] -- "%1" %*
  238. O35 - HKLM\..exefile [open] -- "%1" %*
  239. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  240. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  241. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  242. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  243.  
  244.  
  245. MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - File not found
  246. MsConfig:64bit - StartUpReg: [b]ADSMTray[/b] - hkey= - key= - File not found
  247. MsConfig:64bit - StartUpReg: [b]DAEMON Tools Lite[/b] - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
  248. MsConfig:64bit - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - C:\Program Files (x86)\iTunes\iTunesHelper.exe (Apple Inc.)
  249. MsConfig:64bit - StartUpReg: [b]LogMeIn Hamachi Ui[/b] - hkey= - key= - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
  250. MsConfig:64bit - StartUpReg: [b]Malwarebytes' Anti-Malware[/b] - hkey= - key= - File not found
  251. MsConfig:64bit - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
  252. MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
  253.  
  254. SafeBootMin:[b]64bit:[/b] AppMgmt - Service
  255. SafeBootMin:[b]64bit:[/b] Base - Driver Group
  256. SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
  257. SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
  258. SafeBootMin:[b]64bit:[/b] File system - Driver Group
  259. SafeBootMin:[b]64bit:[/b] Filter - Driver Group
  260. SafeBootMin:[b]64bit:[/b] HelpSvc - Service
  261. SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
  262. SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
  263. SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
  264. SafeBootMin:[b]64bit:[/b] sacsvr - Service
  265. SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
  266. SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
  267. SafeBootMin:[b]64bit:[/b] vmms - Service
  268. SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  269. SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  270. SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  271. SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  272. SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  273. SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  274. SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  275. SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  276. SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  277. SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  278. SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  279. SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  280. SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  281. SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  282. SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  283. SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  284. SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  285. SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  286. SafeBootMin: AppMgmt - Service
  287. SafeBootMin: Base - Driver Group
  288. SafeBootMin: Boot Bus Extender - Driver Group
  289. SafeBootMin: Boot file system - Driver Group
  290. SafeBootMin: File system - Driver Group
  291. SafeBootMin: Filter - Driver Group
  292. SafeBootMin: HelpSvc - Service
  293. SafeBootMin: PCI Configuration - Driver Group
  294. SafeBootMin: PNP Filter - Driver Group
  295. SafeBootMin: Primary disk - Driver Group
  296. SafeBootMin: sacsvr - Service
  297. SafeBootMin: SCSI Class - Driver Group
  298. SafeBootMin: System Bus Extender - Driver Group
  299. SafeBootMin: vmms - Service
  300. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  301. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  302. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  303. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  304. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  305. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  306. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  307. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  308. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  309. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  310. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  311. SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  312. SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  313. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  314. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  315. SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  316. SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  317.  
  318. SafeBootNet:[b]64bit:[/b] AppMgmt - Service
  319. SafeBootNet:[b]64bit:[/b] Base - Driver Group
  320. SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
  321. SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
  322. SafeBootNet:[b]64bit:[/b] File system - Driver Group
  323. SafeBootNet:[b]64bit:[/b] Filter - Driver Group
  324. SafeBootNet:[b]64bit:[/b] HelpSvc - Service
  325. SafeBootNet:[b]64bit:[/b] Messenger - Service
  326. SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
  327. SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
  328. SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
  329. SafeBootNet:[b]64bit:[/b] Network - Driver Group
  330. SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
  331. SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
  332. SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
  333. SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
  334. SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
  335. SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
  336. SafeBootNet:[b]64bit:[/b] sacsvr - Service
  337. SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
  338. SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
  339. SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
  340. SafeBootNet:[b]64bit:[/b] TDI - Driver Group
  341. SafeBootNet:[b]64bit:[/b] vmms - Service
  342. SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  343. SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
  344. SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  345. SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  346. SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  347. SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  348. SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  349. SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  350. SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  351. SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  352. SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  353. SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  354. SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  355. SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  356. SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  357. SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  358. SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  359. SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  360. SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  361. SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  362. SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  363. SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  364. SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  365. SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  366. SafeBootNet: AppMgmt - Service
  367. SafeBootNet: Base - Driver Group
  368. SafeBootNet: Boot Bus Extender - Driver Group
  369. SafeBootNet: Boot file system - Driver Group
  370. SafeBootNet: File system - Driver Group
  371. SafeBootNet: Filter - Driver Group
  372. SafeBootNet: Hamachi2Svc - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
  373. SafeBootNet: HelpSvc - Service
  374. SafeBootNet: Messenger - Service
  375. SafeBootNet: NDIS Wrapper - Driver Group
  376. SafeBootNet: NetBIOSGroup - Driver Group
  377. SafeBootNet: NetDDEGroup - Driver Group
  378. SafeBootNet: Network - Driver Group
  379. SafeBootNet: NetworkProvider - Driver Group
  380. SafeBootNet: PCI Configuration - Driver Group
  381. SafeBootNet: PNP Filter - Driver Group
  382. SafeBootNet: PNP_TDI - Driver Group
  383. SafeBootNet: Primary disk - Driver Group
  384. SafeBootNet: rdsessmgr - Service
  385. SafeBootNet: sacsvr - Service
  386. SafeBootNet: SCSI Class - Driver Group
  387. SafeBootNet: Streams Drivers - Driver Group
  388. SafeBootNet: System Bus Extender - Driver Group
  389. SafeBootNet: TDI - Driver Group
  390. SafeBootNet: vmms - Service
  391. SafeBootNet: WudfUsbccidDriver - Driver
  392. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  393. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  394. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  395. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  396. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  397. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  398. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  399. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  400. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  401. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  402. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  403. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  404. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  405. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  406. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  407. SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  408. SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  409. SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  410. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  411. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  412. SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  413. SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  414.  
  415. ActiveX:[b]64bit:[/b] {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  416. ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  417. ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  418. ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  419. ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  420. ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  421. ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  422. ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  423. ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  424. ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  425. ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  426. ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  427. ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  428. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  429. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
  430. ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
  431. ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  432. ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  433. ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  434. ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  435. ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  436. ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
  437. ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  438. ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
  439. ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  440. ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  441. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  442. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  443. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  444. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  445. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  446. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  447. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  448. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  449. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  450. ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  451. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  452. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  453. ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
  454. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  455. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
  456. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
  457. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  458. ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
  459. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  460. ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
  461. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  462. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  463. ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  464. ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  465. ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
  466. ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
  467.  
  468. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  469. Drivers32:[b]64bit:[/b] VIDC.FPS1 - frapsv64.dll (Beepa P/L)
  470. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  471. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  472. Drivers32: VIDC.FFDS - C:\Program Files (x86)\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()
  473. Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
  474.  
  475. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  476.  
  477. [2011/07/04 09:00:43 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Local\My Games
  478. [2011/07/04 08:49:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firaxis Games
  479. [2011/07/04 08:49:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Firaxis Games
  480. [2011/07/04 07:56:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com
  481. [2011/07/04 06:03:04 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\GlarySoft
  482. [2011/07/04 06:00:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities
  483. [2011/07/04 06:00:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Glary Utilities
  484. [2011/07/03 15:20:07 | 000,000,000 | ---D | C] -- C:\Windows\Profiles
  485. [2011/07/03 15:20:06 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Documents\My eBooks
  486. [2011/07/03 15:20:06 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\InterTrust
  487. [2011/07/03 15:20:06 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe
  488. [2011/07/03 14:48:55 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Documents\SavedGames
  489. [2011/07/03 14:47:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft XNA
  490. [2011/07/03 00:40:50 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\.minecraft
  491. [2011/06/30 08:31:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  492. [2011/06/30 08:31:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
  493. [2011/06/29 06:38:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
  494. [2011/06/29 06:38:02 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys
  495. [2011/06/29 06:25:06 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Local\VS Revo Group
  496. [2011/06/29 04:27:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra
  497. [2011/06/29 04:16:03 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\IObit
  498. [2011/06/29 04:13:58 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit
  499. [2011/06/29 04:13:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
  500. [2011/06/29 02:54:22 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\GameRanger
  501. [2011/06/28 23:56:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\directx
  502. [2011/06/28 23:53:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sierra
  503. [2011/06/28 23:22:48 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
  504. [2011/06/28 23:22:48 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
  505. [2011/06/28 23:22:47 | 002,315,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
  506. [2011/06/28 23:22:47 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
  507. [2011/06/28 23:22:47 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
  508. [2011/06/28 23:22:47 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
  509. [2011/06/28 23:22:47 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
  510. [2011/06/28 23:22:47 | 000,491,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
  511. [2011/06/28 23:22:47 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
  512. [2011/06/28 23:22:47 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
  513. [2011/06/28 23:22:47 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
  514. [2011/06/28 23:22:47 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
  515. [2011/06/28 23:22:46 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
  516. [2011/06/28 23:22:46 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssphtb.dll
  517. [2011/06/28 23:22:46 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscntrs.dll
  518. [2011/06/28 23:22:46 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscntrs.dll
  519. [2011/06/26 16:05:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Starcraft
  520. [2011/06/26 16:05:40 | 000,069,632 | ---- | C] (Blizzard Entertainment) -- C:\Windows\ScUnin.exe
  521. [2011/06/26 16:05:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Starcraft
  522. [2011/06/26 02:01:36 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
  523. [2011/06/25 14:30:31 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Documents\Games for Windows - LIVE Demos
  524. [2011/06/25 13:37:07 | 000,254,528 | ---- | C] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
  525. [2011/06/25 13:37:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
  526. [2011/06/25 13:36:24 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\DAEMON Tools Lite
  527. [2011/06/25 13:36:24 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
  528. [2011/06/25 12:55:51 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
  529. [2011/06/25 12:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
  530. [2011/06/25 12:55:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
  531. [2011/06/25 12:45:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Codemasters
  532. [2011/06/25 02:19:13 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Desktop\Operation.Flashpoint.Red.River-RELOADED
  533. [2011/06/25 01:02:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Games
  534. [2011/06/22 01:22:02 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Desktop\.minecraft
  535. [2011/06/18 18:58:41 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Documents\TmForever
  536. [2011/06/18 18:58:41 | 000,000,000 | ---D | C] -- C:\ProgramData\TmForever
  537. [2011/06/18 18:26:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TmNationsForever
  538. [2011/06/18 11:46:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
  539. [2011/06/18 11:46:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
  540. [2011/06/18 11:46:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
  541. [2011/06/18 11:46:32 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
  542. [2011/06/17 13:12:19 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
  543. [2011/06/17 13:12:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  544. [2011/06/16 16:28:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
  545. [2011/06/14 19:57:53 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  546. [2011/06/14 19:57:52 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  547. [2011/06/14 19:57:51 | 002,303,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  548. [2011/06/14 19:57:51 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9.dll
  549. [2011/06/14 19:57:51 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  550. [2011/06/14 19:57:51 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  551. [2011/06/14 19:57:50 | 000,818,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  552. [2011/06/14 19:57:50 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  553. [2011/06/14 16:38:07 | 000,861,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
  554. [2011/06/13 23:27:30 | 000,000,000 | ---D | C] -- C:\tmp
  555. [2011/06/13 23:24:22 | 000,000,000 | ---D | C] -- C:\Users\ASUS\.thumbnails
  556. [2011/06/13 23:23:55 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\Blender Foundation
  557. [2011/06/13 23:23:48 | 000,000,000 | ---D | C] -- C:\Program Files\Blender Foundation
  558. [2011/06/12 23:21:30 | 000,000,000 | ---D | C] -- C:\Users\ASUS\.netbeans
  559. [2011/06/12 23:21:21 | 000,000,000 | ---D | C] -- C:\Users\ASUS\.nbprofiler
  560. [2011/06/12 23:21:17 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\.visualvm
  561. [2011/06/12 23:21:08 | 000,190,752 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaws.exe
  562. [2011/06/12 23:21:08 | 000,171,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaw.exe
  563. [2011/06/12 23:21:08 | 000,171,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\java.exe
  564. [2011/06/12 23:14:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  565. [2011/06/12 23:13:57 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
  566. [2011/06/12 23:13:57 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
  567. [2011/06/12 23:13:57 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
  568. [2011/06/12 23:13:56 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
  569. [2011/06/11 15:40:27 | 000,000,000 | ---D | C] -- C:\.jagex_cache_32
  570. [2011/06/10 20:03:05 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
  571. [2011/06/10 20:02:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Fraps
  572. [2011/06/10 20:01:29 | 000,000,000 | ---D | C] -- C:\Fraps
  573. [2011/06/10 18:25:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  574. [2011/06/10 18:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
  575. [2011/06/10 18:24:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
  576. [2011/06/10 18:24:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
  577. [2011/06/09 21:48:28 | 000,000,000 | ---D | C] -- C:\Program Files\Java
  578. [2011/06/09 21:24:23 | 000,525,544 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll
  579. [2011/06/07 23:00:41 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Desktop\mod
  580. [2011/06/07 17:14:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
  581.  
  582. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  583.  
  584. [2011/07/05 14:42:09 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  585. [2011/07/05 14:42:09 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  586. [2011/07/05 14:33:43 | 000,000,322 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
  587. [2011/07/05 14:33:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  588. [2011/07/05 14:33:08 | 3105,259,520 | -HS- | M] () -- C:\hiberfil.sys
  589. [2011/07/05 03:25:24 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  590. [2011/07/03 15:19:01 | 000,000,607 | ---- | M] () -- C:\Windows\SIERRA.INI
  591. [2011/07/03 00:57:01 | 000,001,178 | ---- | M] () -- C:\Users\ASUS\Desktop\Minecraft.exe.lnk
  592. [2011/07/01 18:45:03 | 000,488,384 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  593. [2011/06/28 23:52:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\SIntfNT.dll
  594. [2011/06/28 23:52:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\SIntf32.dll
  595. [2011/06/28 23:52:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\SIntf16.dll
  596. [2011/06/27 07:53:12 | 001,626,992 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  597. [2011/06/27 07:53:12 | 000,740,912 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
  598. [2011/06/27 07:53:12 | 000,647,984 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  599. [2011/06/27 07:53:12 | 000,146,690 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
  600. [2011/06/27 07:53:12 | 000,119,114 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  601. [2011/06/27 07:53:00 | 001,626,992 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  602. [2011/06/26 16:12:31 | 000,069,632 | ---- | M] (Blizzard Entertainment) -- C:\Windows\ScUnin.exe
  603. [2011/06/26 16:12:31 | 000,034,836 | ---- | M] () -- C:\Windows\scunin.dat
  604. [2011/06/26 16:12:31 | 000,000,967 | ---- | M] () -- C:\Windows\ScUnin.pif
  605. [2011/06/26 14:25:26 | 000,000,000 | -H-- | M] () -- C:\Users\ASUS\Documents\Default.rdp
  606. [2011/06/25 16:44:02 | 000,001,959 | ---- | M] () -- C:\Users\ASUS\Desktop\RedRiverLauncherC.exe - Raccourci.lnk
  607. [2011/06/25 13:37:07 | 000,254,528 | ---- | M] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
  608. [2011/06/18 18:28:06 | 000,001,114 | ---- | M] () -- C:\Users\Public\Desktop\TmNationsForever.lnk
  609. [2011/06/12 23:20:58 | 000,525,544 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll
  610. [2011/06/12 23:20:58 | 000,190,752 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaws.exe
  611. [2011/06/12 23:20:58 | 000,171,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaw.exe
  612. [2011/06/12 23:20:58 | 000,171,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\java.exe
  613. [2011/06/12 23:13:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
  614. [2011/06/12 23:13:44 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
  615. [2011/06/12 23:13:44 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
  616. [2011/06/12 23:13:44 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
  617. [2011/06/11 15:46:20 | 000,000,129 | ---- | M] () -- C:\Users\ASUS\jagex_runescape_preferences2.dat
  618. [2011/06/11 15:42:02 | 000,000,034 | ---- | M] () -- C:\Users\ASUS\jagex_runescape_preferences.dat
  619.  
  620. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  621.  
  622. [2011/07/04 06:00:58 | 000,000,322 | ---- | C] () -- C:\Windows\tasks\GlaryInitialize.job
  623. [2011/07/03 15:20:11 | 000,001,269 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk
  624. [2011/06/29 02:54:27 | 000,001,058 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
  625. [2011/06/28 23:54:08 | 000,000,607 | ---- | C] () -- C:\Windows\SIERRA.INI
  626. [2011/06/28 23:52:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
  627. [2011/06/28 23:52:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
  628. [2011/06/28 23:52:16 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
  629. [2011/06/26 16:05:42 | 000,034,836 | ---- | C] () -- C:\Windows\scunin.dat
  630. [2011/06/26 16:05:40 | 000,000,967 | ---- | C] () -- C:\Windows\ScUnin.pif
  631. [2011/06/26 14:25:26 | 000,000,000 | -H-- | C] () -- C:\Users\ASUS\Documents\Default.rdp
  632. [2011/06/25 16:44:02 | 000,001,959 | ---- | C] () -- C:\Users\ASUS\Desktop\RedRiverLauncherC.exe - Raccourci.lnk
  633. [2011/06/18 18:28:06 | 000,001,114 | ---- | C] () -- C:\Users\Public\Desktop\TmNationsForever.lnk
  634. [2011/06/16 16:28:46 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
  635. [2011/06/13 20:11:58 | 000,001,178 | ---- | C] () -- C:\Users\ASUS\Desktop\Minecraft.exe.lnk
  636. [2011/06/11 15:41:40 | 000,000,129 | ---- | C] () -- C:\Users\ASUS\jagex_runescape_preferences2.dat
  637. [2011/06/11 15:40:33 | 000,000,034 | ---- | C] () -- C:\Users\ASUS\jagex_runescape_preferences.dat
  638. [2011/05/24 23:44:26 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
  639. [2011/05/20 18:43:04 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  640. [2011/05/10 12:02:20 | 001,626,992 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  641. [2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
  642. [2011/03/17 13:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  643. [2010/03/20 00:57:47 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  644. [2010/03/20 00:43:49 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
  645. [2009/10/25 23:38:22 | 000,000,176 | ---- | C] () -- C:\Windows\explorer.exe.config
  646. [2009/08/19 04:33:09 | 000,018,432 | ---- | C] () -- C:\Windows\OOBEPlayer.exe
  647. [2009/08/19 04:33:09 | 000,000,035 | ---- | C] () -- C:\Windows\OOBEPlayer.ini
  648. [2009/07/29 01:20:40 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini
  649. [2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  650. [2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  651. [2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  652. [2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
  653. [2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  654. [2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  655. [2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
  656. [2006/05/18 23:39:57 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini
  657.  
  658. [color=#E56717]========== LOP Check ==========[/color]
  659.  
  660. [2011/07/05 01:14:47 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\.minecraft
  661. [2011/06/12 23:21:17 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\.visualvm
  662. [2011/07/05 15:27:42 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\BitTorrent
  663. [2011/06/13 23:23:55 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Blender Foundation
  664. [2011/07/04 01:43:19 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\DAEMON Tools Lite
  665. [2011/06/29 02:54:27 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\GameRanger
  666. [2011/07/04 06:03:04 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\GlarySoft
  667. [2011/06/17 13:01:06 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\go
  668. [2011/07/03 15:20:06 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\InterTrust
  669. [2011/06/29 04:16:54 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\IObit
  670. [2011/06/07 17:07:24 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Notepad++
  671. [2011/05/20 21:41:55 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\PyScripter
  672. [2011/05/20 20:40:42 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Stardock
  673. [2011/05/21 13:01:47 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Subversion
  674. [2011/06/17 22:55:18 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\SystemRequirementsLab
  675. [2011/07/05 14:33:43 | 000,000,322 | ---- | M] () -- C:\Windows\Tasks\GlaryInitialize.job
  676. [2009/07/14 01:08:49 | 000,017,296 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
  677.  
  678. [color=#E56717]========== Purity Check ==========[/color]
  679.  
  680.  
  681.  
  682. [color=#E56717]========== Custom Scans ==========[/color]
  683.  
  684.  
  685. [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]
  686.  
  687. [color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]
  688.  
  689. [color=#A23BEC]< %APPDATA%\*. >[/color]
  690. [2011/07/05 01:14:47 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\.minecraft
  691. [2011/06/12 23:21:17 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\.visualvm
  692. [2011/05/10 13:00:53 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Adobe
  693. [2011/05/22 12:26:38 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Apple Computer
  694. [2011/05/09 15:41:29 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\ATI
  695. [2011/07/05 15:27:42 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\BitTorrent
  696. [2011/06/13 23:23:55 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Blender Foundation
  697. [2011/07/04 01:43:19 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\DAEMON Tools Lite
  698. [2011/06/29 02:54:27 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\GameRanger
  699. [2011/07/04 06:03:04 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\GlarySoft
  700. [2011/06/17 13:01:06 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\go
  701. [2011/05/09 16:25:19 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Google
  702. [2011/05/09 15:40:56 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Identities
  703. [2011/07/03 15:20:06 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\InterTrust
  704. [2011/06/29 04:16:54 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\IObit
  705. [2011/05/27 18:47:20 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Logishrd
  706. [2011/05/27 18:47:13 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Logitech
  707. [2011/07/05 15:27:21 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Macromedia
  708. [2011/05/10 13:00:24 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Malwarebytes
  709. [2009/07/14 03:44:38 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Media Center Programs
  710. [2011/06/15 02:05:05 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Media Player Classic
  711. [2011/07/05 15:30:32 | 000,000,000 | --SD | M] -- C:\Users\ASUS\AppData\Roaming\Microsoft
  712. [2011/05/20 18:31:07 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Mozilla
  713. [2011/06/07 17:07:24 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Notepad++
  714. [2011/05/20 21:41:55 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\PyScripter
  715. [2011/07/05 15:45:07 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Skype
  716. [2011/05/29 11:32:20 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\skypePM
  717. [2011/05/20 20:40:42 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Stardock
  718. [2011/05/21 13:01:47 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\Subversion
  719. [2011/06/17 22:55:18 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\SystemRequirementsLab
  720. [2011/05/20 20:43:22 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\WinRAR
  721.  
  722. [color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
  723. [2011/06/24 12:46:03 | 001,449,696 | ---- | M] (GameRanger Technologies) -- C:\Users\ASUS\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
  724. [2011/05/31 20:45:38 | 000,005,390 | R--- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Installer\{42C39E85-D86C-494E-B159-4C0E37C248AC}\ARPPRODUCTICON.exe
  725. [2011/05/31 20:45:38 | 000,005,390 | R--- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Installer\{42C39E85-D86C-494E-B159-4C0E37C248AC}\NewShortcut1_32BD379178974E29B72DBCF093C36812.exe
  726. [2011/05/31 20:45:38 | 000,005,390 | R--- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Installer\{42C39E85-D86C-494E-B159-4C0E37C248AC}\NewShortcut5_32BD379178974E29B72DBCF093C36812.exe
  727.  
  728. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  729.  
  730.  
  731. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  732. [2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  733. [2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
  734. [2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  735. [2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  736. [2010/11/20 08:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  737. [2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
  738. [2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  739. [2010/11/20 09:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  740.  
  741. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  742. [2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
  743. [2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  744. [2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
  745. [2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  746.  
  747. [color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
  748. [2009/07/13 21:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
  749. [2009/07/13 21:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
  750. [2009/07/13 21:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
  751. [2009/07/13 21:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
  752.  
  753. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  754. [2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
  755. [2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  756.  
  757. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  758.  
  759. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  760. [2011/05/10 12:05:37 | 000,353,792 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\dxtmsft.dll
  761. [2011/05/10 12:05:37 | 000,223,232 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\dxtrans.dll
  762. [2009/07/13 21:15:20 | 000,380,957 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\expsrv.dll
  763. [2011/04/22 19:32:21 | 009,703,936 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\ieframe.dll
  764. [2009/07/13 21:15:50 | 001,386,496 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\msvbvm60.dll
  765.  
  766. [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  767.  
  768. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  769.  
  770. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  771.  
  772. [color=#E56717]========== Alternate Data Streams ==========[/color]
  773.  
  774. @Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:07BF512B
  775.  
  776. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!