API tools faq
paste
View difference between Paste ID: CxkvVr3W and URaTy00M
SHOW: | | - or go back to the newest paste.
1
OTL logfile created on: 4/27/2012 2:22:26 AM - Run 1
2
OTL by OldTimer - Version 3.2.42.1     Folder = C:\Users\spaski\Desktop
3
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
4
Internet Explorer (Version = 8.0.7601.17514)
5
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
6
7
3.00 Gb Total Physical Memory | 2.01 Gb Available Physical Memory | 66.95% Memory free
8
6.00 Gb Paging File | 4.87 Gb Available in Paging File | 81.19% Paging File free
9
Paging file location(s): ?:\pagefile.sys [binary data]
10
11
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
12
Drive C: | 97.56 Gb Total Space | 85.70 Gb Free Space | 87.84% Space Free | Partition Type: NTFS
13
Drive D: | 658.07 Gb Total Space | 4.06 Gb Free Space | 0.62% Space Free | Partition Type: NTFS
14
Drive E: | 175.78 Gb Total Space | 3.21 Gb Free Space | 1.83% Space Free | Partition Type: NTFS
15
16
Computer Name: SPASKI-PC | User Name: spaski | Logged in as Administrator.
17
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
18
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
19
20
[color=#E56717]========== Processes (SafeList) ==========[/color]
21
22
PRC - [2012/04/27 02:17:30 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\spaski\Desktop\OTL.exe
23
PRC - [2012/03/07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
24
PRC - [2012/03/07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
25
PRC - [2012/03/07 01:15:13 | 000,134,920 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe
26
PRC - [2010/11/20 23:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
27
PRC - [2010/11/20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
28
PRC - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
29
PRC - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
30
PRC - [2009/10/07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
31
PRC - [2009/07/16 15:35:42 | 005,458,704 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Logitech Vid\Vid.exe
32
33
34
[color=#E56717]========== Modules (No Company Name) ==========[/color]
35
36
MOD - [2009/10/14 13:36:56 | 002,793,304 | ---- | M] () -- C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
37
MOD - [2009/10/14 13:36:34 | 000,181,592 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LvApi11\LvApi11.dll
38
MOD - [2009/10/14 13:34:18 | 000,560,472 | ---- | M] () -- C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
39
MOD - [2009/07/16 15:36:20 | 000,138,000 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\plugins\imageformats\qjpeg4.dll
40
MOD - [2009/07/16 15:36:16 | 000,035,088 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\plugins\imageformats\qico4.dll
41
MOD - [2009/07/16 15:36:16 | 000,028,944 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\plugins\imageformats\qgif4.dll
42
MOD - [2009/07/16 15:35:30 | 000,027,408 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\SDL.dll
43
MOD - [2009/07/16 15:35:20 | 000,363,792 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\qtxml4.dll
44
MOD - [2009/07/16 15:35:08 | 011,311,888 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtWebKit4.dll
45
MOD - [2009/07/16 15:34:56 | 000,199,952 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\qtsql4.dll
46
MOD - [2009/07/16 15:34:46 | 000,475,408 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtOpenGL4.dll
47
MOD - [2009/07/16 15:34:34 | 000,968,976 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtNetwork4.dll
48
MOD - [2009/07/16 15:34:22 | 007,704,336 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtGui4.dll
49
MOD - [2009/07/16 15:34:22 | 002,140,944 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\QtCore4.dll
50
MOD - [2009/07/16 15:34:12 | 000,291,600 | ---- | M] () -- C:\Program Files\Logitech\Logitech Vid\phonon4.dll
51
52
53
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
54
55
SRV - [2012/03/07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
56
SRV - [2012/03/07 01:15:13 | 000,134,920 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
57
SRV - [2009/10/07 01:47:34 | 000,154,136 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
58
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
59
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
60
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
61
62
63
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
64
65
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
66
DRV - [2012/03/07 01:04:25 | 000,112,984 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswFW.sys -- (aswFW)
67
DRV - [2012/03/07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
68
DRV - [2012/03/07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
69
DRV - [2012/03/07 01:03:23 | 000,196,440 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis2.sys -- (aswNdis2)
70
DRV - [2012/03/07 01:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
71
DRV - [2012/03/07 01:02:14 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
72
DRV - [2012/03/07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
73
DRV - [2012/03/07 01:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
74
DRV - [2012/03/07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
75
DRV - [2011/05/10 13:40:58 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis.sys -- (aswNdis)
76
DRV - [2010/11/20 23:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
77
DRV - [2010/11/20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
78
DRV - [2010/11/20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
79
DRV - [2010/11/20 23:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
80
DRV - [2010/11/20 23:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
81
DRV - [2010/11/20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
82
DRV - [2010/11/20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
83
DRV - [2010/11/20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
84
DRV - [2010/11/20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
85
DRV - [2010/11/20 23:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
86
DRV - [2010/11/20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
87
DRV - [2010/11/20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
88
DRV - [2009/10/07 08:49:40 | 006,756,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC) QuickCam for Notebooks Deluxe(UVC)
89
DRV - [2009/10/07 01:46:36 | 000,025,752 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
90
DRV - [2009/07/14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
91
DRV - [2009/06/10 23:19:48 | 009,853,248 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
92
93
94
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
95
96
97
[color=#E56717]========== Internet Explorer ==========[/color]
98
99
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
100
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
101
102
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
103
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
104
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9E 6C B5 3B 01 24 CD 01  [binary data]
105
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
106
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
107
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
108
109
110
111
112
O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
113
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
114
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
115
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
116
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
117
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\vid.exe (Logitech Inc.)
118
O4 - Startup: C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe (Leader Technologies/Logitech)
119
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
120
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
121
O13 - gopher Prefix: missing
122
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.16.1
123
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FA40EF71-0693-482F-BFA4-4975B8269BD9}: DhcpNameServer = 192.168.16.1
124
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
125
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
126
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
127
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
128
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
129
O32 - HKLM CDRom: AutoRun - 1
130
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
131
O34 - HKLM BootExecute: (autocheck autochk *)
132
O35 - HKLM\..comfile [open] -- "%1" %*
133
O35 - HKLM\..exefile [open] -- "%1" %*
134
O37 - HKLM\...com [@ = comfile] -- "%1" %*
135
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
136
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
137
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
138
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
139
140
NetSvcs: FastUserSwitchingCompatibility -  File not found
141
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
142
NetSvcs: Nla -  File not found
143
NetSvcs: Ntmssvc -  File not found
144
NetSvcs: NWCWorkstation -  File not found
145
NetSvcs: Nwsapagent -  File not found
146
NetSvcs: SRService -  File not found
147
NetSvcs: WmdmPmSp -  File not found
148
NetSvcs: LogonHours -  File not found
149
NetSvcs: PCAudit -  File not found
150
NetSvcs: helpsvc -  File not found
151
NetSvcs: uploadmgr -  File not found
152
153
CREATERESTOREPOINT
154
Restore point Set: OTL Restore Point
155
156
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
157
158
[2012/04/27 09:26:53 | 000,000,000 | ---D | C] -- C:\Windows\Panther
159
[2012/04/27 08:28:15 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
160
[2012/04/27 08:27:46 | 000,000,000 | -HSD | C] -- C:\System Volume Information
161
[2012/04/27 02:17:17 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\spaski\Desktop\OTL.exe
162
[2012/04/27 01:18:50 | 000,250,168 | ---- | C] (Doctor Web, Ltd.) -- C:\te94decrypt.exe
163
[2012/04/27 01:18:11 | 000,250,168 | ---- | C] (Doctor Web, Ltd.) -- C:\Users\spaski\Desktop\te94decrypt.exe
164
[2012/04/26 23:59:36 | 000,044,376 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
165
[2012/04/26 23:59:36 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
166
[2012/04/26 23:56:35 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\LogiShrd
167
[2012/04/26 23:56:23 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Roaming\Leadertech
168
[2012/04/26 23:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
169
[2012/04/26 23:56:17 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
170
[2012/04/26 23:56:17 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
171
[2012/04/26 23:49:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security
172
[2012/04/26 23:49:52 | 000,337,880 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
173
[2012/04/26 23:49:52 | 000,020,696 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
174
[2012/04/26 23:49:50 | 000,112,984 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFW.sys
175
[2012/04/26 23:49:45 | 000,196,440 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswNdis2.sys
176
[2012/04/26 23:49:44 | 000,612,184 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
177
[2012/04/26 23:49:44 | 000,053,848 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
178
[2012/04/26 23:49:44 | 000,025,432 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
179
[2012/04/26 23:49:43 | 000,057,688 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
180
[2012/04/26 23:49:14 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
181
[2012/04/26 23:49:10 | 000,201,352 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
182
[2012/04/26 23:49:10 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
183
[2012/04/26 23:49:10 | 000,012,112 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswNdis.sys
184
[2012/04/26 23:49:01 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
185
[2012/04/26 23:49:01 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
186
[2012/04/26 23:47:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd
187
[2012/04/26 23:46:11 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
188
[2012/04/26 23:46:11 | 000,000,000 | R--D | C] -- C:\Users\spaski\Searches
189
[2012/04/26 23:46:11 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
190
[2012/04/26 23:46:11 | 000,000,000 | -H-D | C] -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
191
[2012/04/26 23:46:03 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Roaming\Identities
192
[2012/04/26 23:46:02 | 000,000,000 | R--D | C] -- C:\Users\spaski\Contacts
193
[2012/04/26 23:45:58 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\VirtualStore
194
[2012/04/26 23:45:57 | 000,000,000 | -HSD | C] -- C:\Users\spaski\AppData\Local\Temporary Internet Files
195
[2012/04/26 23:45:56 | 000,000,000 | --SD | C] -- C:\Users\spaski\AppData\Roaming\Microsoft
196
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Videos
197
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Saved Games
198
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Pictures
199
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Music
200
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
201
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Links
202
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Favorites
203
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Downloads
204
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Documents
205
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\Desktop
206
[2012/04/26 23:45:56 | 000,000,000 | R--D | C] -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
207
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Templates
208
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Start Menu
209
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\SendTo
210
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Recent
211
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\PrintHood
212
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\NetHood
213
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Documents\My Videos
214
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Documents\My Pictures
215
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Documents\My Music
216
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\My Documents
217
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Local Settings
218
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\AppData\Local\History
219
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Cookies
220
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\Application Data
221
[2012/04/26 23:45:56 | 000,000,000 | -HSD | C] -- C:\Users\spaski\AppData\Local\Application Data
222
[2012/04/26 23:45:56 | 000,000,000 | -H-D | C] -- C:\Users\spaski\AppData
223
[2012/04/26 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\Temp
224
[2012/04/26 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Local\Microsoft
225
[2012/04/26 23:45:56 | 000,000,000 | ---D | C] -- C:\Users\spaski\AppData\Roaming\Media Center Programs
226
[2012/04/26 23:45:46 | 000,000,000 | -HSD | C] -- C:\Recovery
227
[2012/04/26 23:45:44 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
228
229
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
230
231
[2012/04/27 08:30:45 | 000,116,385 | ---- | M] () -- C:\Windows\System32\license.rtf
232
[2012/04/27 08:28:01 | 000,266,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
233
[2012/04/27 02:17:30 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\spaski\Desktop\OTL.exe
234
[2012/04/27 01:55:26 | 000,002,566 | ---- | M] () -- C:\Users\spaski\Documents\s.pfx
235
[2012/04/27 01:55:02 | 000,615,122 | ---- | M] () -- C:\Windows\System32\perfh009.dat
236
[2012/04/27 01:55:02 | 000,103,496 | ---- | M] () -- C:\Windows\System32\perfc009.dat
237
[2012/04/27 01:50:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
238
[2012/04/27 01:50:32 | 000,000,000 | ---- | M] () -- C:\Windows\System32\drivers\lvuvc.hs
239
[2012/04/27 01:50:28 | 2415,271,936 | -HS- | M] () -- C:\hiberfil.sys
240
[2012/04/27 01:18:26 | 000,250,168 | ---- | M] (Doctor Web, Ltd.) -- C:\Users\spaski\Desktop\te94decrypt.exe
241
[2012/04/27 01:18:26 | 000,250,168 | ---- | M] (Doctor Web, Ltd.) -- C:\te94decrypt.exe
242
[2012/04/27 01:06:36 | 000,001,407 | ---- | M] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
243
[2012/04/27 00:23:56 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
244
[2012/04/27 00:21:44 | 000,016,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
245
[2012/04/27 00:21:44 | 000,016,640 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
246
[2012/04/26 23:56:32 | 000,001,023 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Vid.lnk
247
[2012/04/26 23:56:23 | 000,001,182 | ---- | M] () -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
248
[2012/04/26 23:56:19 | 000,002,083 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Webcam Software.lnk
249
[2012/04/26 23:49:53 | 000,001,994 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
250
251
[color=#E56717]========== Files Created - No Company Name ==========[/color]
252
253
[2012/04/27 08:30:40 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
254
[2012/04/27 08:30:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
255
[2012/04/27 08:27:46 | 2415,271,936 | -HS- | C] () -- C:\hiberfil.sys
256
[2012/04/27 01:55:18 | 000,002,566 | ---- | C] () -- C:\Users\spaski\Documents\s.pfx
257
[2012/04/27 01:06:36 | 000,001,407 | ---- | C] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
258
[2012/04/26 23:56:32 | 000,001,023 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Vid.lnk
259
[2012/04/26 23:56:23 | 000,001,182 | ---- | C] () -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Product Registration.lnk
260
[2012/04/26 23:56:19 | 000,002,083 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Webcam Software.lnk
261
[2012/04/26 23:49:53 | 000,001,994 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
262
[2012/04/26 23:47:39 | 000,000,000 | ---- | C] () -- C:\Windows\System32\drivers\lvuvc.hs
263
[2012/04/26 23:46:12 | 000,001,413 | ---- | C] () -- C:\Users\spaski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
264
[2012/04/26 23:45:56 | 000,000,290 | ---- | C] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
265
[2012/04/26 23:45:56 | 000,000,272 | ---- | C] () -- C:\Users\spaski\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
266
[2010/11/20 23:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
267
[2010/11/20 23:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
268
269
[color=#E56717]========== LOP Check ==========[/color]
270
271
[2012/04/26 23:56:23 | 000,000,000 | ---D | M] -- C:\Users\spaski\AppData\Roaming\Leadertech
272
[2009/07/14 06:53:46 | 000,003,642 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
273
274
[color=#E56717]========== Purity Check ==========[/color]
275
276
277
278
[color=#E56717]========== Custom Scans ==========[/color]
279
280
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
281
[2012/04/27 01:18:26 | 000,250,168 | ---- | M] (Doctor Web, Ltd.) -- C:\te94decrypt.exe
282
283
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
284
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
285
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
286
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys
287
288
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
289
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
290
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
291
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
292
293
[color=#A23BEC]< MD5 for: CNGAUDIT.DLL  >[/color]
294
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
295
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
296
297
[color=#A23BEC]< MD5 for: IASTORV.SYS  >[/color]
298
[2010/11/20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\drivers\iaStorV.sys
299
[2010/11/20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
300
[2010/11/20 23:29:03 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys
301
302
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
303
[2010/11/20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
304
[2010/11/20 23:29:12 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
305
306
[color=#A23BEC]< MD5 for: NVSTOR.SYS  >[/color]
307
[2010/11/20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\drivers\nvstor.sys
308
[2010/11/20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
309
[2010/11/20 23:29:03 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys
310
311
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
312
[2010/11/20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
313
[2010/11/20 23:29:07 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll
314
315
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
316
317
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
318
319
< End of report >
        

    


            


                                


        

            



                
    

        Public Pastes
    

    
            

    

                    

        

    





    


    
    
    
    
    
    
    
    




    


    



                

            We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.             OK, I Understand
        

    
                

            

                
                    
                
            

            

                Not a member of Pastebin yet?

                Sign Up, it unlocks many cool features!