API tools faq
paste
Advertisement
toroktok

Untitled

toroktok
Mar 25th, 2017
276
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 94.79 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 3/25/2017 3:08:14 PM - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = D:\Downloads
  3. 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.18125)
  5. Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
  6.  
  7. 3.92 Gb Total Physical Memory | 2.25 Gb Available Physical Memory | 57.41% Memory free
  8. 8.21 Gb Paging File | 5.67 Gb Available in Paging File | 69.11% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 100.54 Gb Total Space | 28.38 Gb Free Space | 28.23% Space Free | Partition Type: NTFS
  13. Drive D: | 174.79 Gb Total Space | 104.25 Gb Free Space | 59.64% Space Free | Partition Type: NTFS
  14. Drive E: | 174.81 Gb Total Space | 168.85 Gb Free Space | 96.59% Space Free | Partition Type: NTFS
  15. Drive Z: | 7.79 Gb Total Space | 7.58 Gb Free Space | 97.28% Space Free | Partition Type: FAT32
  16.  
  17. Computer Name: LASMININGRAT | User Name: Lasminingrat_ | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  19. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - D:\Downloads\OTL.exe (OldTimer Tools)
  24. PRC - C:\Users\Lasminingrat_\AppData\Roaming\Kyubey\Kyubey.exe (Kyubey.exe)
  25. PRC - C:\Program Files (x86)\BikaQRss\BikaQ.exe (IEC)
  26. PRC - C:\Users\Lasminingrat_\AppData\Roaming\uTorrent\updates\3.4.9_43388\utorrentie.exe (BitTorrent Inc.)
  27. PRC - C:\Users\Lasminingrat_\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
  28. PRC - C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe ()
  29. PRC - C:\Program Files (x86)\amuleCexx\ed2k.exe (http://www.amule.org/)
  30. PRC - C:\Users\Lasminingrat_\AppData\Roaming\gplyra\gplyra\gplyra.exe ()
  31. PRC - C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.0.9.exe (Microleaves LTD)
  32. PRC - C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe (Elex do Brasil Participações Ltda)
  33. PRC - C:\Users\Lasminingrat_\AppData\Local\Microsoft Windows\taskhost.exe (Microsoft Corporation)
  34. PRC - C:\Program Files (x86)\Microleaves\Traffic Exchange\OnlineGuardian-v2.exe (Microleaves LTD)
  35. PRC - C:\Users\Lasminingrat_\AppData\Roaming\WMPNetworkAcSvc\WMPNetworkAcSvc.exe ()
  36. PRC - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe (Elex do Brasil Participações Ltda)
  37. PRC - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe (Elex do Brasil Participações Ltda)
  38. PRC - C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe (Microleaves LTD)
  39. PRC - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe (HP)
  40. PRC - C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe ()
  41. PRC - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
  42. PRC - C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe (CyberLink Corp.)
  43.  
  44.  
  45. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  46.  
  47. MOD - C:\Users\Lasminingrat_\AppData\Roaming\gplyra\gplyra\gplyra.exe ()
  48. MOD - C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll ()
  49. MOD - C:\Program Files (x86)\Elex-tech\YAC\libpng.dll ()
  50. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ee6d89830b1aea077e5fc12fb95df6a0\System.Configuration.ni.dll ()
  51. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\49201f5658aca21352debffb85ff41df\System.Xml.ni.dll ()
  52. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\035d2a25a1bf16475e1bbc0a112b3388\System.Core.ni.dll ()
  53. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\4976746d2f27ea6b60301a84d6c3e4be\System.ni.dll ()
  54. MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\5bd3374f05d46ba0563f44d032209f08\mscorlib.ni.dll ()
  55. MOD - C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\MiTrace.dll ()
  56. MOD - C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\MiPlugin4NSIS.dll ()
  57. MOD - C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\MiFramework.dll ()
  58. MOD - C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe ()
  59. MOD - C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\zlib1.dll ()
  60. MOD - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll ()
  61. MOD - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll ()
  62. MOD - C:\Program Files (x86)\Yahoo!\Messenger\yui.dll ()
  63.  
  64.  
  65. [color=#E56717]========== Services (SafeList) ==========[/color]
  66.  
  67. SRV:[b]64bit:[/b] - (XBox) -- C:\Program Files\XBox\XBLive.exe (Microsoft Corporation)
  68. SRV:[b]64bit:[/b] - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
  69. SRV:[b]64bit:[/b] - (RtkAudioService) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor)
  70. SRV:[b]64bit:[/b] - (igfxCUIService2.0.0.0) -- C:\Windows\SysNative\igfxCUIService.exe (Intel Corporation)
  71. SRV:[b]64bit:[/b] - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
  72. SRV:[b]64bit:[/b] - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
  73. SRV:[b]64bit:[/b] - (lfsvc) -- C:\Windows\SysNative\GeofenceMonitorService.dll (Microsoft Corporation)
  74. SRV:[b]64bit:[/b] - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
  75. SRV:[b]64bit:[/b] - (WdNisSvc) -- C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation)
  76. SRV:[b]64bit:[/b] - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
  77. SRV:[b]64bit:[/b] - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
  78. SRV:[b]64bit:[/b] - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
  79. SRV:[b]64bit:[/b] - (ETDService) -- C:\Program Files\Elantech\ETDService.exe (ELAN Microelectronics Corp.)
  80. SRV:[b]64bit:[/b] - (NitroUpdateService) -- C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe ()
  81. SRV:[b]64bit:[/b] - (NitroDriverReadSpool10) -- C:\Program Files\Nitro\Pro 10\NitroPDFDriverService10x64.exe (Nitro PDF Software)
  82. SRV:[b]64bit:[/b] - (IEEtwCollectorService) -- C:\Windows\SysNative\IEEtwCollector.exe (Microsoft Corporation)
  83. SRV:[b]64bit:[/b] - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation)
  84. SRV:[b]64bit:[/b] - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  85. SRV:[b]64bit:[/b] - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation)
  86. SRV:[b]64bit:[/b] - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation)
  87. SRV:[b]64bit:[/b] - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
  88. SRV:[b]64bit:[/b] - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
  89. SRV:[b]64bit:[/b] - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
  90. SRV:[b]64bit:[/b] - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
  91. SRV:[b]64bit:[/b] - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
  92. SRV:[b]64bit:[/b] - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
  93. SRV:[b]64bit:[/b] - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation)
  94. SRV:[b]64bit:[/b] - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
  95. SRV:[b]64bit:[/b] - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
  96. SRV:[b]64bit:[/b] - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation)
  97. SRV:[b]64bit:[/b] - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)
  98. SRV:[b]64bit:[/b] - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
  99. SRV:[b]64bit:[/b] - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
  100. SRV:[b]64bit:[/b] - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
  101. SRV:[b]64bit:[/b] - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
  102. SRV:[b]64bit:[/b] - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
  103. SRV:[b]64bit:[/b] - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation)
  104. SRV:[b]64bit:[/b] - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)
  105. SRV:[b]64bit:[/b] - (MsKeyboardFilter) -- C:\Windows\SysNative\KeyboardFilterSvc.dll (Microsoft Corporation)
  106. SRV:[b]64bit:[/b] - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  107. SRV:[b]64bit:[/b] - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  108. SRV:[b]64bit:[/b] - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  109. SRV:[b]64bit:[/b] - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  110. SRV:[b]64bit:[/b] - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  111. SRV:[b]64bit:[/b] - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  112. SRV:[b]64bit:[/b] - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
  113. SRV:[b]64bit:[/b] - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
  114. SRV:[b]64bit:[/b] - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
  115. SRV:[b]64bit:[/b] - (BthHFSrv) -- C:\Windows\SysNative\BthHFSrv.dll (Microsoft Corporation)
  116. SRV:[b]64bit:[/b] - (PSI_SVC_2_x64) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (arvato digital services llc)
  117. SRV - (WinSAPSvc) -- C:\Users\Lasminingrat_\AppData\Roaming\WinSAPSvc\WinSAP.dll (Windows)
  118. SRV - (Kyubey) -- C:\Users\Lasminingrat_\AppData\Roaming\Kyubey\Kyubey.exe (Kyubey.exe)
  119. SRV - (WindowsSecurity) -- C:\ProgramData\Windows Security\winsecurity.exe (Microsoft Corporation)
  120. SRV - (FirefoxU) -- C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe ()
  121. SRV - (Apple_Cfg) -- C:\ProgramData\Apple\Apple Application Support\Support.dll ()
  122. SRV - (ed2kidle) -- C:\Program Files (x86)\amuleCexx\ed2k.exe (http://www.amule.org/)
  123. SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
  124. SRV - (HPSupportSolutionsFrameworkService) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (HP Inc.)
  125. SRV - (WMPNetworkAcSvc) -- C:\Users\Lasminingrat_\AppData\Roaming\WMPNetworkAcSvc\WMPNetworkAcSvc.exe ()
  126. SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
  127. SRV - (iSafeService) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe (Elex do Brasil Participações Ltda)
  128. SRV - (hpqcaslwmiex) -- C:\Program Files (x86)\HP\Shared\hpqwmiex.exe (HP)
  129. SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
  130. SRV - (esifsvc) -- C:\Windows\SysWOW64\esif_uf.exe (Intel Corporation)
  131. SRV - (lfsvc) -- C:\Windows\SysWOW64\GeofenceMonitorService.dll (Microsoft Corporation)
  132. SRV - (PrintNotify) -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
  133. SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation)
  134. SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
  135. SRV - (Blackberry Device Manager) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (Research In Motion Limited)
  136.  
  137.  
  138. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  139.  
  140. DRV:[b]64bit:[/b] - (19b7bcfeb4c099c227d787b6895a78f4) -- C:\Windows\SysNative\drivers\19b7bcfeb4c099c227d787b6895a78f4.sys (HAJDRU)
  141. DRV:[b]64bit:[/b] - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL63a.SYS (Broadcom Corporation)
  142. DRV:[b]64bit:[/b] - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
  143. DRV:[b]64bit:[/b] - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
  144. DRV:[b]64bit:[/b] - (iSafeKrnlBoot) -- C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys (Elex do Brasil Participações Ltda)
  145. DRV:[b]64bit:[/b] - (iSafeNetFilter) -- C:\Windows\SysNative\drivers\iSafeNetFilter.sys (Elex do Brasil Participações Ltda)
  146. DRV:[b]64bit:[/b] - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
  147. DRV:[b]64bit:[/b] - (bcbtums) -- C:\Windows\SysNative\drivers\bcbtums.sys (Broadcom Corporation.)
  148. DRV:[b]64bit:[/b] - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
  149. DRV:[b]64bit:[/b] - (RTL8168) -- C:\Windows\SysNative\drivers\Rt630x64.sys (Realtek )
  150. DRV:[b]64bit:[/b] - (MEIx64) -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys (Intel Corporation)
  151. DRV:[b]64bit:[/b] - (esif_lf) -- C:\Windows\SysNative\drivers\esif_lf.sys (Intel Corporation)
  152. DRV:[b]64bit:[/b] - (dptf_cpu) -- C:\Windows\SysNative\drivers\dptf_cpu.sys (Intel Corporation)
  153. DRV:[b]64bit:[/b] - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)
  154. DRV:[b]64bit:[/b] - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)
  155. DRV:[b]64bit:[/b] - (usb_rndisx) -- C:\Windows\SysNative\drivers\usb8023x.sys (Microsoft Corporation)
  156. DRV:[b]64bit:[/b] - (BthHFEnum) -- C:\Windows\SysNative\drivers\bthhfenum.sys (Microsoft Corporation)
  157. DRV:[b]64bit:[/b] - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
  158. DRV:[b]64bit:[/b] - (storvsp) -- C:\Windows\SysNative\drivers\storvsp.sys (Microsoft Corporation)
  159. DRV:[b]64bit:[/b] - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation)
  160. DRV:[b]64bit:[/b] - (WdFilter) -- C:\Windows\SysNative\drivers\WdFilter.sys (Microsoft Corporation)
  161. DRV:[b]64bit:[/b] - (WdNisDrv) -- C:\Windows\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation)
  162. DRV:[b]64bit:[/b] - (WdBoot) -- C:\Windows\SysNative\drivers\WdBoot.sys (Microsoft Corporation)
  163. DRV:[b]64bit:[/b] - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
  164. DRV:[b]64bit:[/b] - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)
  165. DRV:[b]64bit:[/b] - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)
  166. DRV:[b]64bit:[/b] - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation)
  167. DRV:[b]64bit:[/b] - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation)
  168. DRV:[b]64bit:[/b] - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation)
  169. DRV:[b]64bit:[/b] - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
  170. DRV:[b]64bit:[/b] - (intaud_WaveExtensible) -- C:\Windows\SysNative\drivers\intelaud.sys (Intel Corporation)
  171. DRV:[b]64bit:[/b] - (iwdbus) -- C:\Windows\SysNative\drivers\iwdbus.sys (Intel Corporation)
  172. DRV:[b]64bit:[/b] - (iaStorA) -- C:\Windows\SysNative\drivers\iaStorA.sys (Intel Corporation)
  173. DRV:[b]64bit:[/b] - (SmbDrvI) -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys (Synaptics Incorporated)
  174. DRV:[b]64bit:[/b] - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
  175. DRV:[b]64bit:[/b] - (WirelessButtonDriver64) -- C:\Windows\SysNative\drivers\WirelessButtonDriver64.sys (HP)
  176. DRV:[b]64bit:[/b] - (edevmon) -- C:\Windows\SysNative\drivers\edevmon.sys (ESET)
  177. DRV:[b]64bit:[/b] - (blackberryncm) -- C:\Windows\SysNative\drivers\blackberryncm6_AMD64.sys (BlackBerry Limited)
  178. DRV:[b]64bit:[/b] - (Wof) -- C:\Windows\SysNative\drivers\wof.sys (Microsoft Corporation)
  179. DRV:[b]64bit:[/b] - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
  180. DRV:[b]64bit:[/b] - (wpcfltr) -- C:\Windows\SysNative\drivers\wpcfltr.sys (Microsoft Corporation)
  181. DRV:[b]64bit:[/b] - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)
  182. DRV:[b]64bit:[/b] - (ROOTMODEM) -- C:\Windows\SysNative\drivers\rootmdm.sys (Microsoft Corporation)
  183. DRV:[b]64bit:[/b] - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation)
  184. DRV:[b]64bit:[/b] - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation)
  185. DRV:[b]64bit:[/b] - (ReFS) -- C:\Windows\SysNative\drivers\refs.sys (Microsoft Corporation)
  186. DRV:[b]64bit:[/b] - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)
  187. DRV:[b]64bit:[/b] - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
  188. DRV:[b]64bit:[/b] - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation)
  189. DRV:[b]64bit:[/b] - (UCX01000) -- C:\Windows\SysNative\drivers\UCX01000.SYS (Microsoft Corporation)
  190. DRV:[b]64bit:[/b] - (netvsc) -- C:\Windows\SysNative\drivers\netvsc63.sys (Microsoft Corporation)
  191. DRV:[b]64bit:[/b] - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation)
  192. DRV:[b]64bit:[/b] - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
  193. DRV:[b]64bit:[/b] - (BthLEEnum) -- C:\Windows\SysNative\drivers\BthLEEnum.sys (Microsoft Corporation)
  194. DRV:[b]64bit:[/b] - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)
  195. DRV:[b]64bit:[/b] - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation)
  196. DRV:[b]64bit:[/b] - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation)
  197. DRV:[b]64bit:[/b] - (BasicRender) -- C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
  198. DRV:[b]64bit:[/b] - (kbldfltr) -- C:\Windows\SysNative\drivers\kbldfltr.sys (Microsoft Corporation)
  199. DRV:[b]64bit:[/b] - (Vid) -- C:\Windows\SysNative\drivers\Vid.sys (Microsoft Corporation)
  200. DRV:[b]64bit:[/b] - (vmbusr) -- C:\Windows\SysNative\drivers\vmbusr.sys (Microsoft Corporation)
  201. DRV:[b]64bit:[/b] - (vpcivsp) -- C:\Windows\SysNative\drivers\vpcivsp.sys (Microsoft Corporation)
  202. DRV:[b]64bit:[/b] - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
  203. DRV:[b]64bit:[/b] - (HpqKbFiltr) -- C:\Windows\SysNative\drivers\HpqKbFiltr64.sys (Hewlett-Packard Company)
  204. DRV:[b]64bit:[/b] - (clwvd6) -- C:\Windows\SysNative\drivers\clwvd6.sys (CyberLink Corporation)
  205. DRV:[b]64bit:[/b] - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation)
  206. DRV:[b]64bit:[/b] - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
  207. DRV:[b]64bit:[/b] - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation)
  208. DRV:[b]64bit:[/b] - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)
  209. DRV:[b]64bit:[/b] - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)
  210. DRV:[b]64bit:[/b] - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
  211. DRV:[b]64bit:[/b] - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
  212. DRV:[b]64bit:[/b] - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation)
  213. DRV:[b]64bit:[/b] - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
  214. DRV:[b]64bit:[/b] - (LSI_SAS3) -- C:\Windows\SysNative\drivers\lsi_sas3.sys (LSI Corporation)
  215. DRV:[b]64bit:[/b] - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra)
  216. DRV:[b]64bit:[/b] - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
  217. DRV:[b]64bit:[/b] - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
  218. DRV:[b]64bit:[/b] - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI)
  219. DRV:[b]64bit:[/b] - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
  220. DRV:[b]64bit:[/b] - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)
  221. DRV:[b]64bit:[/b] - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)
  222. DRV:[b]64bit:[/b] - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
  223. DRV:[b]64bit:[/b] - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)
  224. DRV:[b]64bit:[/b] - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation)
  225. DRV:[b]64bit:[/b] - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)
  226. DRV:[b]64bit:[/b] - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation)
  227. DRV:[b]64bit:[/b] - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
  228. DRV:[b]64bit:[/b] - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation)
  229. DRV:[b]64bit:[/b] - (UEFI) -- C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
  230. DRV:[b]64bit:[/b] - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)
  231. DRV:[b]64bit:[/b] - (BasicDisplay) -- C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
  232. DRV:[b]64bit:[/b] - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)
  233. DRV:[b]64bit:[/b] - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)
  234. DRV:[b]64bit:[/b] - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation)
  235. DRV:[b]64bit:[/b] - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation)
  236. DRV:[b]64bit:[/b] - (BthAvrcpTg) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation)
  237. DRV:[b]64bit:[/b] - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation)
  238. DRV:[b]64bit:[/b] - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)
  239. DRV:[b]64bit:[/b] - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)
  240. DRV:[b]64bit:[/b] - (bthhfhid) -- C:\Windows\SysNative\drivers\BthhfHid.sys (Microsoft Corporation)
  241. DRV:[b]64bit:[/b] - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)
  242. DRV:[b]64bit:[/b] - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
  243. DRV:[b]64bit:[/b] - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation)
  244. DRV:[b]64bit:[/b] - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
  245. DRV:[b]64bit:[/b] - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)
  246. DRV:[b]64bit:[/b] - (FxPPM) -- C:\Windows\SysNative\drivers\fxppm.sys (Microsoft Corporation)
  247. DRV:[b]64bit:[/b] - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
  248. DRV:[b]64bit:[/b] - (iaStorAV) -- C:\Windows\SysNative\drivers\iaStorAV.sys (Intel Corporation)
  249. DRV:[b]64bit:[/b] - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)
  250. DRV:[b]64bit:[/b] - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)
  251. DRV:[b]64bit:[/b] - (RimUsb) -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
  252. DRV:[b]64bit:[/b] - (RimVSerPort) -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys (Research in Motion Ltd)
  253. DRV:[b]64bit:[/b] - (Revoflt) -- C:\Windows\SysNative\drivers\revoflt.sys (VS Revo Group)
  254. DRV - (iSafeKrnl) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys (Elex do Brasil Participações Ltda)
  255. DRV - (iSafeKrnlKit) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys (Elex do Brasil Participações Ltda)
  256. DRV - (iSafeKrnlMon) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys (Elex do Brasil Participações Ltda)
  257. DRV - (iSafeKrnlR3) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys (Elex do Brasil Participações Ltda)
  258. DRV - (ISODrive) -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys (EZB Systems, Inc.)
  259.  
  260.  
  261. [color=#E56717]========== Standard Registry (All) ==========[/color]
  262.  
  263.  
  264. [color=#E56717]========== Internet Explorer ==========[/color]
  265.  
  266. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT
  267. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.startpageing123.com/search/?type=ds&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  268. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  269. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  270. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  271. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.startpageing123.com/search/?type=ds&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  272. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  273. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT
  274. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  275. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  276. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT
  277. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.startpageing123.com/search/?type=ds&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  278. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  279. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  280. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  281. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.startpageing123.com/search/?type=ds&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  282. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  283. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT
  284. IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  285. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  286.  
  287. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT
  288. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.startpageing123.com/search/?type=ds&ts=1489996617&z=180656830416551f95e4f9fg6z0bdt8t0t4qaq7g5t&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  289. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  290. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.startpageing123.com/search/?type=ds&ts=1489996617&z=180656830416551f95e4f9fg6z0bdt8t0t4qaq7g5t&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  291. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT
  292. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 75 2E 9C 2F 27 13 D2 01 [binary data]
  293. IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  294. IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  295. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
  296. IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.startpageing123.com/search/?type=ds&ts=1489996617&z=180656830416551f95e4f9fg6z0bdt8t0t4qaq7g5t&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT&q={searchTerms}
  297. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
  298. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:8080;https=127.0.0.1:8080
  299.  
  300. [color=#E56717]========== FireFox ==========[/color]
  301.  
  302. FF - prefs.js..browser.search.countryCode: "ID"
  303. FF - prefs.js..browser.search.defaultenginename: "luck"
  304. FF - prefs.js..browser.search.order.1: "luck"
  305. FF - prefs.js..browser.search.region: "ID"
  306. FF - prefs.js..browser.search.searchengine.alias: ""
  307. FF - prefs.js..browser.search.searchengine.iconURL: "http://www.luckysearch123.com/favicon.ico?t=1"
  308. FF - prefs.js..browser.search.searchengine.name: "luck"
  309. FF - prefs.js..browser.search.searchengine.ref: ""
  310. FF - prefs.js..browser.search.searchengine.ts: "1489139707"
  311. FF - prefs.js..browser.search.searchengine.type: ""
  312. FF - prefs.js..browser.search.searchengine.uid: "st500lt012-1dg142_s3ptdqnt"
  313. FF - prefs.js..browser.search.searchengine.url: "http://www.luckysearch123.com/search.php?type=ds&ts=1489139707&from=5fdc0308&uid=st500lt012-1dg142_s3ptdqnt&z=cd2ac03c0ed9e4e6950f795gaz0bbt4g5c0t0m6e3b&q={searchTerms}"
  314. FF - prefs.js..browser.search.selectedEngine: "luck"
  315. FF - prefs.js..browser.search.useDBForOrder: true
  316. FF - prefs.js..browser.startup.homepage: "http://www.startpageing123.com/?type=hp&ts=1488608556&z=1303ce38eec75310491c0c8gczdbfb7qce0b9w8w0q&from=che0812&uid=ST500LT012-1DG142_S3PTDQNT"
  317. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:51.0.1
  318. FF - user.js - File not found
  319.  
  320. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll File not found
  321. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  322. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
  323. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
  324. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
  325. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  326. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
  327. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll ()
  328. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  329. FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
  330. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
  331. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
  332. FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro\Pro 10\npnitromozilla.dll (Nitro PDF)
  333. FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
  334. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll (Google Inc.)
  335. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll (Google Inc.)
  336. FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
  337.  
  338. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Waterfox 43.0.4\extensions\\Components: C:\PROGRAM FILES\WATERFOX\COMPONENTS
  339. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Waterfox 43.0.4\extensions\\Plugins: C:\PROGRAM FILES\WATERFOX\PLUGINS
  340. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\WSVCU@Wondershare.com: C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com\ [2016/05/10 18:15:37 | 000,000,000 | ---D | M]
  341. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\arthurj8283@gmail.com: C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\extensions\arthurj8283@gmail.com [2017/03/10 16:55:07 | 000,000,000 | ---D | M]
  342. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 51.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  343. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 51.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  344. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc2@internetdownloadmanager.com: C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
  345.  
  346. [2016/05/12 10:40:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Extensions
  347. [2016/10/01 22:15:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\browser-extension-data
  348. [2017/02/22 13:35:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\browser-extension-data\firefox@ghostery.com
  349. [2017/02/22 13:35:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\browser-extension-data\particle@particlecore.github.io
  350. [2017/02/22 13:35:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\browser-extension-data\stefanvandamme@stefanvd.net
  351. [2017/03/10 16:55:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\extensions
  352. [2017/03/10 16:55:07 | 000,000,000 | ---D | M] (xRocket Toolbar) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\extensions\arthurj8283@gmail.com
  353. [2017/02/22 13:35:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\extensions\trash
  354. [2017/03/10 16:55:07 | 000,000,755 | ---- | M] () -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\searchplugins\luck.xml
  355. [2017/03/24 02:00:39 | 000,000,654 | ---- | M] () -- C:\Users\Lasminingrat_\AppData\Roaming\Mozilla\Firefox\Profiles\lc6o0g47.default\searchplugins\startpageing123.xml
  356. [2017/01/30 14:48:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  357.  
  358. O1 HOSTS File: ([2016/11/16 23:34:19 | 000,001,132 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  359. O1 - Hosts: 127.0.0.1 activate.adobe.com
  360. O1 - Hosts: 127.0.0.1 practivate.adobe.com
  361. O1 - Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
  362. O1 - Hosts: 127.0.0.1 lm.licenses.adobe.com
  363. O1 - Hosts: 127.0.0.1 na1r.services.adobe.com
  364. O1 - Hosts: 127.0.0.1 hlrcv.stage.adobe.com
  365. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
  366. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswwebrepie64.dll (AVAST Software)
  367. O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
  368. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
  369. O2:[b]64bit:[/b] - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (HP Inc.)
  370. O2 - BHO: (Wondershare Video Converter Ultimate 7.1.0) - {451C804F-C205-4F03-B48E-537EC94937BF} - C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll (Wondershare)
  371. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
  372. O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
  373. O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (HP Inc.)
  374. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  375. O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
  376. O4:[b]64bit:[/b] - HKLM..\Run: [gplyra] C:\Users\Lasminingrat_\AppData\Roaming\gplyra\gplyra\start.cmd ()
  377. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
  378. O4:[b]64bit:[/b] - HKLM..\Run: [StartCN] C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe (Advanced Micro Devices, Inc.)
  379. O4 - HKLM..\Run: [DelaypluginInstall] C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe ()
  380. O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
  381. O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
  382. O4 - HKLM..\Run: [YouCam Service6] C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe (CyberLink Corp.)
  383. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
  384. O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
  385. O4 - HKCU..\Run: [MiPhoneManager] C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe ()
  386. O4 - HKCU..\Run: [uTorrent] C:\Users\Lasminingrat_\AppData\Roaming\uTorrent\updates\3.4.9_43388.exe (BitTorrent Inc.)
  387. O4 - HKCU..\Run: [WinStart] C:\Users\Lasminingrat_\AppData\Local\Microsoft Windows\taskhost.exe (Microsoft Corporation)
  388. O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe (Adobe Systems Incorporated)
  389. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
  390. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  391. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  392. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  393. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  394. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  395. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  396. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  397. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  398. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  399. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  400. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  401. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  402. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  403. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  404. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  405. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  406. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  407. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  408. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  409. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  410. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  411. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  412. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  413. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  414. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  415. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  416. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
  417. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office15\EXCEL.EXE (Microsoft Corporation)
  418. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
  419. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
  420. O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office15\EXCEL.EXE (Microsoft Corporation)
  421. O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
  422. O9:[b]64bit:[/b] - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
  423. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
  424. O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
  425. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
  426. O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  427. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  428. O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
  429. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
  430. O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
  431. O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
  432. O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  433. O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  434. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
  435. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  436. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  437. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
  438. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  439. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
  440. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation)
  441. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  442. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  443. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  444. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  445. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  446. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  447. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  448. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  449. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  450. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  451. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  452. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
  453. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  454. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  455. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
  456. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  457. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
  458. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation)
  459. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  460. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  461. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  462. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  463. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  464. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  465. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  466. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  467. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  468. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  469. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  470. O13[b]64bit:[/b] - gopher Prefix: missing
  471. O13 - gopher Prefix: missing
  472. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  473. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4C77B27B-956C-40C0-9F18-39E96BA805B3}: DhcpNameServer = 192.168.1.1
  474. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B12286D5-0AA4-43FA-9B77-ADF95BE143AE}: DhcpNameServer = 192.168.1.1
  475. O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  476. O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  477. O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  478. O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  479. O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  480. O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  481. O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  482. O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  483. O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  484. O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  485. O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  486. O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
  487. O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  488. O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
  489. O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  490. O18:[b]64bit:[/b] - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
  491. O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  492. O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  493. O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  494. O18:[b]64bit:[/b] - Protocol\Handler\WSWSVCUchrome - No CLSID value found
  495. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  496. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  497. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  498. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  499. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  500. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  501. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  502. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  503. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  504. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  505. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  506. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
  507. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  508. O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - c:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
  509. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  510. O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
  511. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  512. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  513. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  514. O18 - Protocol\Handler\WSWSVCUchrome - No CLSID value found
  515. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  516. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  517. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  518. O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL (Microsoft Corporation)
  519. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
  520. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
  521. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
  522. O18 - Protocol\Filter\text/xml {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL (Microsoft Corporation)
  523. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  524. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  525. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  526. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  527. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  528. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
  529. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  530. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  531. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {BDC00790-F447-11E6-8378-64006A5CFC23} - No CLSID value found.
  532. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  533. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  534. O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  535. O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  536. O31 - SafeBoot: AlternateShell - cmd.exe
  537. O32 - HKLM CDRom: AutoRun - 1
  538. O32 - AutoRun File - [2011/01/28 09:51:38 | 000,000,723 | ---- | M] () - Z:\autoexec.bat -- [ FAT32 ]
  539. O33 - MountPoints2\{85a5ad0e-cb6b-11e6-8275-308d99bf4c01}\Shell - "" = AutoRun
  540. O33 - MountPoints2\{85a5ad0e-cb6b-11e6-8275-308d99bf4c01}\Shell\AutoRun\command - "" = "H:\Lenovo_Suite.exe"
  541. O33 - MountPoints2\{85a5ad17-cb6b-11e6-8275-308d99bf4c01}\Shell - "" = AutoRun
  542. O33 - MountPoints2\{85a5ad17-cb6b-11e6-8275-308d99bf4c01}\Shell\AutoRun\command - "" = "H:\Lenovo_Suite.exe"
  543. O33 - MountPoints2\{ac37a592-50cd-11e6-825a-d85de2e90260}\Shell - "" = AutoRun
  544. O33 - MountPoints2\{ac37a592-50cd-11e6-825a-d85de2e90260}\Shell\AutoRun\command - "" = "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL G:\Start.exe
  545. O33 - MountPoints2\{f1630745-faae-11e6-8278-308d99bf4c01}\Shell - "" = AutoRun
  546. O33 - MountPoints2\{f1630745-faae-11e6-8278-308d99bf4c01}\Shell\AutoRun\command - "" = "H:\install.exe"
  547. O34 - HKLM BootExecute: (autocheck autochk*)
  548. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  549. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  550. O35 - HKLM\..comfile [open] -- "%1" %*
  551. O35 - HKLM\..exefile [open] -- "%1" %*
  552. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  553. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  554. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  555. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  556. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  557. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  558.  
  559. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  560.  
  561. [2017/03/25 14:30:56 | 000,000,000 | ---D | C] -- D:\Documents\KONAMI
  562. [2017/03/25 14:30:56 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI
  563. [2017/03/25 14:30:48 | 000,000,000 | ---D | C] -- D:\Documents\CPY_SAVES
  564. [2017/03/25 13:30:12 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
  565. [2017/03/24 02:00:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinSnare(4.3.7)
  566. [2017/03/23 11:09:54 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\Desktop\data pr
  567. [2017/03/23 11:08:09 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\Desktop\image
  568. [2017/03/22 16:30:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tebagh
  569. [2017/03/22 16:30:21 | 000,000,000 | ---D | C] -- C:\Program Files\f09er35s
  570. [2017/03/22 07:59:39 | 000,000,000 | ---D | C] -- C:\Program Files\2kt45msa
  571. [2017/03/20 16:20:46 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
  572. [2017/03/20 16:20:46 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
  573. [2017/03/20 16:20:46 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
  574. [2017/03/20 16:20:46 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
  575. [2017/03/20 16:20:46 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
  576. [2017/03/20 16:20:46 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
  577. [2017/03/20 16:20:45 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
  578. [2017/03/20 16:20:45 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
  579. [2017/03/20 16:20:45 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
  580. [2017/03/20 16:20:45 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
  581. [2017/03/20 16:20:45 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
  582. [2017/03/20 16:20:45 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
  583. [2017/03/20 16:20:45 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
  584. [2017/03/20 16:20:45 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
  585. [2017/03/20 16:20:44 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
  586. [2017/03/20 16:20:44 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
  587. [2017/03/20 16:20:44 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
  588. [2017/03/20 16:20:44 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
  589. [2017/03/20 16:20:44 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
  590. [2017/03/20 16:20:44 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
  591. [2017/03/20 16:20:44 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
  592. [2017/03/20 16:20:44 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
  593. [2017/03/20 16:20:44 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
  594. [2017/03/20 16:20:44 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
  595. [2017/03/20 16:20:43 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
  596. [2017/03/20 16:20:43 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
  597. [2017/03/20 16:20:43 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
  598. [2017/03/20 16:20:43 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
  599. [2017/03/20 16:20:42 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
  600. [2017/03/20 16:20:42 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
  601. [2017/03/20 16:20:42 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
  602. [2017/03/20 16:20:42 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
  603. [2017/03/20 16:20:42 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
  604. [2017/03/20 16:20:42 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
  605. [2017/03/20 16:20:41 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
  606. [2017/03/20 16:20:41 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
  607. [2017/03/20 16:20:41 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
  608. [2017/03/20 16:20:41 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
  609. [2017/03/20 16:20:40 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
  610. [2017/03/20 16:20:40 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
  611. [2017/03/20 16:20:40 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
  612. [2017/03/20 16:20:39 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
  613. [2017/03/20 16:20:39 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
  614. [2017/03/20 16:20:39 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
  615. [2017/03/20 16:20:39 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
  616. [2017/03/20 16:20:39 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
  617. [2017/03/20 16:20:38 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
  618. [2017/03/20 16:20:38 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
  619. [2017/03/20 16:20:37 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
  620. [2017/03/20 16:20:36 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
  621. [2017/03/20 16:20:36 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
  622. [2017/03/20 16:20:36 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
  623. [2017/03/20 16:20:36 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
  624. [2017/03/20 16:20:36 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
  625. [2017/03/20 16:20:36 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
  626. [2017/03/20 16:20:36 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
  627. [2017/03/20 16:20:36 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
  628. [2017/03/20 16:20:35 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
  629. [2017/03/20 16:20:35 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
  630. [2017/03/20 16:20:35 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
  631. [2017/03/20 16:20:35 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
  632. [2017/03/20 16:20:35 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
  633. [2017/03/20 16:20:35 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
  634. [2017/03/20 16:20:35 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
  635. [2017/03/20 16:20:35 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
  636. [2017/03/20 16:20:34 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
  637. [2017/03/20 16:20:33 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
  638. [2017/03/20 16:20:33 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
  639. [2017/03/20 16:20:33 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
  640. [2017/03/20 16:20:33 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
  641. [2017/03/20 16:20:32 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
  642. [2017/03/20 16:20:32 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
  643. [2017/03/20 16:20:31 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
  644. [2017/03/20 16:20:31 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
  645. [2017/03/20 16:20:31 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
  646. [2017/03/20 16:20:30 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
  647. [2017/03/20 16:20:30 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
  648. [2017/03/20 16:20:30 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
  649. [2017/03/20 16:20:30 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
  650. [2017/03/20 16:20:29 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
  651. [2017/03/20 16:20:29 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
  652. [2017/03/20 16:20:29 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
  653. [2017/03/20 16:20:28 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
  654. [2017/03/20 16:20:27 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
  655. [2017/03/20 16:20:27 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
  656. [2017/03/20 16:20:27 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
  657. [2017/03/20 16:20:26 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
  658. [2017/03/20 16:20:26 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
  659. [2017/03/20 16:20:26 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
  660. [2017/03/20 16:20:26 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
  661. [2017/03/20 16:20:26 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
  662. [2017/03/20 16:20:25 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
  663. [2017/03/20 16:20:25 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
  664. [2017/03/20 16:20:24 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
  665. [2017/03/20 16:20:24 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
  666. [2017/03/20 16:20:24 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
  667. [2017/03/20 16:20:24 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
  668. [2017/03/20 16:20:23 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
  669. [2017/03/20 16:20:23 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
  670. [2017/03/20 16:20:23 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
  671. [2017/03/20 16:20:22 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
  672. [2017/03/20 16:20:22 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
  673. [2017/03/20 16:20:22 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
  674. [2017/03/20 16:20:22 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
  675. [2017/03/20 16:20:21 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
  676. [2017/03/20 16:20:21 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
  677. [2017/03/20 16:20:20 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
  678. [2017/03/20 16:20:20 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
  679. [2017/03/20 16:20:19 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
  680. [2017/03/20 16:20:13 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
  681. [2017/03/20 16:20:10 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
  682. [2017/03/20 16:20:10 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
  683. [2017/03/20 16:20:10 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
  684. [2017/03/20 16:20:09 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
  685. [2017/03/20 16:20:08 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
  686. [2017/03/20 16:20:08 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
  687. [2017/03/20 16:20:07 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
  688. [2017/03/20 16:20:07 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
  689. [2017/03/20 16:19:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strogino CS Portal
  690. [2017/03/20 16:12:31 | 000,000,000 | ---D | C] -- C:\Program Files\Strogino CS Portal
  691. [2017/03/20 16:05:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
  692. [2017/03/20 16:05:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraISO
  693. [2017/03/20 16:05:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
  694. [2017/03/20 14:22:05 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Corel
  695. [2017/03/20 14:21:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X7 (64-bit)
  696. [2017/03/20 14:20:20 | 000,000,000 | ---D | C] -- C:\Program Files\Corel
  697. [2017/03/20 14:10:41 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Saqtherclaki
  698. [2017/03/20 13:22:14 | 000,000,000 | ---D | C] -- C:\ProgramData\CorelDRAW Graphics Suite X7 x64
  699. [2017/03/18 00:30:33 | 000,000,000 | ---D | C] -- C:\MiFlash_Redmi3_Global_7.2.1_build3
  700. [2017/03/17 22:10:47 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
  701. [2017/03/17 20:01:37 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\IDM
  702. [2017/03/17 18:37:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\58CBCA80_cacayima
  703. [2017/03/17 18:37:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\deskapp
  704. [2017/03/17 16:40:27 | 000,116,736 | ---- | C] (XiaoMi Corporation) -- C:\Windows\SysWow64\qcCoInstaller.dll
  705. [2017/03/17 16:40:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xiaomi
  706. [2017/03/17 16:32:48 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xiaomi
  707. [2017/03/17 16:32:46 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\.android
  708. [2017/03/17 16:32:36 | 001,721,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll
  709. [2017/03/17 16:32:36 | 001,002,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinUSBCoInstaller2.dll
  710. [2017/03/17 16:32:30 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Local\MiPhoneManager
  711. [2017/03/17 16:32:28 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Xiaomi
  712. [2017/03/17 16:26:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minimal ADB and Fastboot
  713. [2017/03/17 16:26:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Minimal ADB and Fastboot
  714. [2017/03/10 15:27:02 | 000,000,000 | ---D | C] -- D:\Documents\BlackBerry
  715. [2017/03/10 15:26:46 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Local\Research In Motion
  716. [2017/03/10 15:26:45 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Research In Motion
  717. [2017/03/10 15:25:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBerry
  718. [2017/03/10 15:25:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Research In Motion
  719. [2017/03/10 15:25:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\XCPCSync.OEM
  720. [2017/03/10 15:25:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Research In Motion
  721. [2017/03/10 15:16:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\amulell
  722. [2017/03/10 15:08:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Research In Motion
  723. [2017/03/10 15:06:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BBSAK
  724. [2017/03/10 14:55:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MK
  725. [2017/03/04 13:51:29 | 000,095,048 | ---- | C] (HAJDRU) -- C:\Windows\SysNative\drivers\19b7bcfeb4c099c227d787b6895a78f4.sys
  726. [2017/03/04 13:22:35 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Kyubey
  727. [2017/03/02 12:00:01 | 000,000,000 | ---D | C] -- C:\Windows\19
  728. [2017/02/28 17:37:07 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Local\Garena
  729. [2017/02/24 22:56:35 | 000,055,056 | ---- | C] (Elex do Brasil Participações Ltda) -- C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys
  730. [2017/02/24 22:56:35 | 000,052,392 | ---- | C] (Elex do Brasil Participações Ltda) -- C:\Windows\SysNative\drivers\iSafeNetFilter.sys
  731. [2017/02/24 22:56:35 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\log
  732. [2017/02/24 22:56:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elex-tech
  733. [2017/02/24 22:56:30 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Elex-tech
  734. [2017/02/24 22:50:11 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Local\Firefox
  735. [2017/02/24 22:50:10 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Firefox
  736. [2017/02/24 22:50:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Firefox
  737. [2017/02/24 22:45:54 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Local\Birdjob
  738. [2017/02/24 22:45:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
  739. [2017/02/24 21:53:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Birdjob
  740. [2017/02/24 14:44:16 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC
  741. [2017/02/24 14:44:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\amuleCexx
  742. [2017/02/24 14:44:15 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\aMule
  743. [2017/02/24 13:44:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novicorp WinToFlash Lite
  744. [2017/02/24 13:44:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Novicorp WinToFlash
  745. [2017/02/24 13:44:26 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\Novicorp
  746. [2017/02/24 13:44:26 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Local\Novicorp
  747. [2017/02/24 13:19:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\nLite
  748. [2017/02/24 13:19:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\nLite
  749. [2017/02/24 12:46:17 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\Desktop\FD a topan
  750. [2017/02/23 19:16:15 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\WinSnare
  751. [2017/02/23 19:16:14 | 000,000,000 | ---D | C] -- C:\Users\Lasminingrat_\AppData\Roaming\WinSAPSvc
  752. [2017/02/23 19:16:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BikaQRss
  753. [2017/02/23 19:16:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BikaQ
  754. [2017/02/23 19:16:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MIO
  755. [2017/02/23 17:30:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\2kt45msa
  756. [9 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
  757. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  758.  
  759. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  760.  
  761. [2017/03/25 15:10:00 | 000,000,358 | ---- | M] () -- C:\Windows\tasks\Traffic Exchange v209 - 3.job
  762. [2017/03/25 15:10:00 | 000,000,358 | ---- | M] () -- C:\Windows\tasks\Traffic Exchange v209 - 2.job
  763. [2017/03/25 15:10:00 | 000,000,358 | ---- | M] () -- C:\Windows\tasks\Traffic Exchange v209 - 1.job
  764. [2017/03/25 15:10:00 | 000,000,348 | ---- | M] () -- C:\Windows\tasks\Traffic Exchange v2 - 3.job
  765. [2017/03/25 15:10:00 | 000,000,348 | ---- | M] () -- C:\Windows\tasks\Traffic Exchange v2 - 2.job
  766. [2017/03/25 15:10:00 | 000,000,348 | ---- | M] () -- C:\Windows\tasks\Traffic Exchange v2 - 1.job
  767. [2017/03/25 14:54:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  768. [2017/03/25 14:38:15 | 000,001,064 | ---- | M] () -- C:\Users\Lasminingrat_\Desktop\OTL - Shortcut.lnk
  769. [2017/03/25 14:36:00 | 000,000,945 | ---- | M] () -- C:\Windows\tasks\EPSON L120 Series Update {0B92207F-2B12-4197-A360-DE44CDC8B398}.job
  770. [2017/03/25 14:36:00 | 000,000,759 | ---- | M] () -- C:\Windows\tasks\EPSON L120 Series Invitation {0B92207F-2B12-4197-A360-DE44CDC8B398}.job
  771. [2017/03/25 14:35:27 | 000,000,000 | ---- | M] () -- C:\Users\Public\Documents\report.dat
  772. [2017/03/25 14:30:00 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job
  773. [2017/03/25 13:35:02 | 000,000,400 | -H-- | M] () -- C:\Windows\tasks\Traffic Exchange Updater.job
  774. [2017/03/25 12:42:02 | 000,000,657 | ---- | M] () -- C:\Users\Public\Desktop\PES 2017 Settings.lnk
  775. [2017/03/25 12:42:02 | 000,000,651 | ---- | M] () -- C:\Users\Public\Desktop\Pro Evolution Soccer 2017.lnk
  776. [2017/03/25 11:49:02 | 000,000,390 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForLasminingrat_.job
  777. [2017/03/25 11:15:19 | 000,000,032 | ---- | M] () -- C:\Users\Public\Documents\temp.dat
  778. [2017/03/25 11:15:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  779. [2017/03/25 04:11:21 | 000,000,034 | ---- | M] () -- C:\Users\Public\Documents\{DE764086-1C0A-4DD3-90BA-0B93BDD794BE}
  780. [2017/03/25 04:11:09 | 000,000,180 | ---- | M] () -- C:\Windows\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
  781. [2017/03/24 18:40:01 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\4
  782. [2017/03/24 18:40:01 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\3
  783. [2017/03/24 17:03:29 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\UltraISO.lnk
  784. [2017/03/24 11:24:34 | 000,863,592 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  785. [2017/03/24 11:24:34 | 000,733,086 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  786. [2017/03/24 11:24:34 | 000,136,146 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  787. [2017/03/22 16:35:32 | 000,079,381 | ---- | M] () -- D:\Documents\mug naomi.jpg
  788. [2017/03/20 16:19:46 | 000,001,001 | ---- | M] () -- C:\Users\Public\Desktop\Dota 2.lnk
  789. [2017/03/20 14:57:07 | 000,001,520 | ---- | M] () -- C:\Users\Lasminingrat_\Desktop\Google Chrome.lnk
  790. [2017/03/20 14:56:57 | 000,001,587 | ---- | M] () -- C:\Users\Lasminingrat_\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  791. [2017/03/20 14:56:57 | 000,001,544 | ---- | M] () -- C:\Users\Lasminingrat_\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  792. [2017/03/20 14:43:33 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  793. [2017/03/20 14:43:32 | 3371,466,752 | -HS- | M] () -- C:\hiberfil.sys
  794. [2017/03/20 14:23:04 | 000,002,539 | ---- | M] () -- C:\Users\Public\Desktop\Bitstream Font Navigator (64-Bit).lnk
  795. [2017/03/20 14:21:55 | 000,002,363 | ---- | M] () -- C:\Users\Public\Desktop\Corel CONNECT X7 (64-Bit).lnk
  796. [2017/03/20 14:21:51 | 000,003,072 | ---- | M] () -- C:\Users\Public\Desktop\Corel CAPTURE X7 (64-Bit).lnk
  797. [2017/03/20 14:21:44 | 000,003,079 | ---- | M] () -- C:\Users\Public\Desktop\Corel PHOTO-PAINT X7 (64-Bit).lnk
  798. [2017/03/20 14:21:17 | 000,003,031 | ---- | M] () -- C:\Users\Public\Desktop\CorelDRAW X7 (64-Bit).lnk
  799. [2017/03/20 11:49:29 | 000,002,828 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
  800. [2017/03/20 11:48:42 | 000,000,088 | RHS- | M] () -- C:\ProgramData\51B731FCC6.sys
  801. [2017/03/17 22:21:57 | 000,002,407 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  802. [2017/03/17 20:01:35 | 000,001,021 | ---- | M] () -- C:\Users\Lasminingrat_\Desktop\Internet Download Manager.lnk
  803. [2017/03/17 16:52:51 | 000,001,387 | ---- | M] () -- C:\Users\Lasminingrat_\Desktop\MiPCSuite.lnk
  804. [2017/03/17 16:32:34 | 001,721,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll
  805. [2017/03/17 16:32:34 | 001,002,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinUSBCoInstaller2.dll
  806. [2017/03/10 15:25:28 | 000,002,247 | ---- | M] () -- C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
  807. [2017/03/10 15:06:21 | 000,003,087 | ---- | M] () -- C:\Users\Lasminingrat_\Desktop\BBSAK.lnk
  808. [2017/03/04 13:51:27 | 002,175,158 | ---- | M] () -- C:\Windows\e138a3cdee56bab688f2f6d9e0b4775f.exe
  809. [2017/03/04 13:51:21 | 000,095,048 | ---- | M] (HAJDRU) -- C:\Windows\SysNative\drivers\19b7bcfeb4c099c227d787b6895a78f4.sys
  810. [2017/03/04 13:45:54 | 020,722,338 | ---- | M] () -- D:\Documents\KADARWOKO, SH. M.Hum.psd
  811. [2017/03/04 13:22:52 | 000,002,227 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  812. [2017/02/27 14:50:34 | 318,912,029 | ---- | M] () -- C:\Users\Lasminingrat_\AppData\Local\ACCCx3_9_5_353.zip.aamdownload
  813. [2017/02/27 14:50:34 | 000,003,560 | ---- | M] () -- C:\Users\Lasminingrat_\AppData\Local\ACCCx3_9_5_353.zip.aamdownload.aamd
  814. [2017/02/24 15:44:36 | 017,288,123 | ---- | M] () -- D:\Documents\MOBIL HIAS PDAM.cdr
  815. [2017/02/24 14:09:17 | 000,000,400 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  816. [2017/02/24 13:44:28 | 000,001,218 | ---- | M] () -- C:\Users\Public\Desktop\Novicorp WinToFlash Lite.lnk
  817. [2017/02/24 13:19:59 | 000,000,975 | ---- | M] () -- C:\Users\Lasminingrat_\Desktop\nLite.lnk
  818. [9 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
  819. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  820.  
  821. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  822.  
  823. [2017/03/25 14:38:15 | 000,001,064 | ---- | C] () -- C:\Users\Lasminingrat_\Desktop\OTL - Shortcut.lnk
  824. [2017/03/25 12:42:02 | 000,000,657 | ---- | C] () -- C:\Users\Public\Desktop\PES 2017 Settings.lnk
  825. [2017/03/25 12:42:02 | 000,000,651 | ---- | C] () -- C:\Users\Public\Desktop\Pro Evolution Soccer 2017.lnk
  826. [2017/03/24 18:40:01 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\4
  827. [2017/03/24 18:40:01 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\3
  828. [2017/03/22 16:35:31 | 000,079,381 | ---- | C] () -- D:\Documents\mug naomi.jpg
  829. [2017/03/20 16:19:46 | 000,001,001 | ---- | C] () -- C:\Users\Public\Desktop\Dota 2.lnk
  830. [2017/03/20 16:05:39 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\UltraISO.lnk
  831. [2017/03/20 14:23:33 | 000,003,079 | ---- | C] () -- C:\Users\Public\Desktop\Corel PHOTO-PAINT X7 (64-Bit).lnk
  832. [2017/03/20 14:23:33 | 000,003,072 | ---- | C] () -- C:\Users\Public\Desktop\Corel CAPTURE X7 (64-Bit).lnk
  833. [2017/03/20 14:23:33 | 000,003,031 | ---- | C] () -- C:\Users\Public\Desktop\CorelDRAW X7 (64-Bit).lnk
  834. [2017/03/20 14:23:33 | 000,002,539 | ---- | C] () -- C:\Users\Public\Desktop\Bitstream Font Navigator (64-Bit).lnk
  835. [2017/03/20 14:23:33 | 000,002,363 | ---- | C] () -- C:\Users\Public\Desktop\Corel CONNECT X7 (64-Bit).lnk
  836. [2017/03/20 11:56:46 | 000,001,520 | ---- | C] () -- C:\Users\Lasminingrat_\Desktop\Google Chrome.lnk
  837. [2017/03/17 16:32:48 | 000,001,387 | ---- | C] () -- C:\Users\Lasminingrat_\Desktop\MiPCSuite.lnk
  838. [2017/03/10 15:25:28 | 000,002,247 | ---- | C] () -- C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
  839. [2017/03/10 15:06:21 | 000,003,087 | ---- | C] () -- C:\Users\Lasminingrat_\Desktop\BBSAK.lnk
  840. [2017/03/04 13:45:53 | 020,722,338 | ---- | C] () -- D:\Documents\KADARWOKO, SH. M.Hum.psd
  841. [2017/02/28 18:00:35 | 000,002,407 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  842. [2017/02/27 14:39:29 | 318,912,029 | ---- | C] () -- C:\Users\Lasminingrat_\AppData\Local\ACCCx3_9_5_353.zip.aamdownload
  843. [2017/02/27 14:39:29 | 000,003,560 | ---- | C] () -- C:\Users\Lasminingrat_\AppData\Local\ACCCx3_9_5_353.zip.aamdownload.aamd
  844. [2017/02/24 22:45:52 | 000,000,000 | ---- | C] () -- C:\Users\Public\Documents\report.dat
  845. [2017/02/24 21:44:51 | 000,000,032 | ---- | C] () -- C:\Users\Public\Documents\temp.dat
  846. [2017/02/24 15:44:24 | 017,288,123 | ---- | C] () -- D:\Documents\MOBIL HIAS PDAM.cdr
  847. [2017/02/24 13:44:28 | 000,001,218 | ---- | C] () -- C:\Users\Public\Desktop\Novicorp WinToFlash Lite.lnk
  848. [2017/02/24 13:19:59 | 000,000,975 | ---- | C] () -- C:\Users\Lasminingrat_\Desktop\nLite.lnk
  849. [2017/02/22 15:03:34 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
  850. [2017/02/22 15:03:34 | 000,000,088 | RHS- | C] () -- C:\ProgramData\51B731FCC6.sys
  851. [2017/02/18 04:05:52 | 002,175,158 | ---- | C] () -- C:\Windows\e138a3cdee56bab688f2f6d9e0b4775f.exe
  852. [2016/11/16 00:33:07 | 000,000,400 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  853. [2016/10/09 18:27:23 | 000,262,864 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
  854. [2016/09/19 17:28:13 | 000,265,504 | ---- | C] () -- C:\Windows\SysWow64\vulkan-1.dll
  855. [2016/09/19 17:28:13 | 000,110,880 | ---- | C] () -- C:\Windows\SysWow64\vulkaninfo.exe
  856. [2016/09/07 22:18:56 | 000,164,352 | ---- | C] () -- C:\Windows\SysWow64\amdhdl32.dll
  857. [2016/09/07 21:07:08 | 000,223,744 | ---- | C] () -- C:\Windows\SysWow64\GameManager32.dll
  858. [2016/09/07 21:07:02 | 000,192,000 | ---- | C] () -- C:\Windows\SysWow64\atieah32.exe
  859. [2016/09/07 21:06:54 | 000,204,800 | ---- | C] () -- C:\Windows\SysWow64\amdgfxinfo32.dll
  860. [2016/09/07 20:57:48 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\hsa-thunk.dll
  861. [2016/07/21 22:47:30 | 000,265,504 | ---- | C] () -- C:\Windows\SysWow64\vulkan-1-1-0-21-0.dll
  862. [2016/07/21 22:47:00 | 000,110,880 | ---- | C] () -- C:\Windows\SysWow64\vulkaninfo-1-1-0-21-0.exe
  863. [2016/05/11 04:16:08 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  864. [2016/05/11 04:16:08 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  865. [2016/05/10 19:23:00 | 000,004,608 | ---- | C] () -- C:\Windows\SECOH-QAD.exe
  866. [2016/05/10 19:23:00 | 000,003,584 | ---- | C] () -- C:\Windows\SECOH-QAD.dll
  867. [2016/05/10 18:15:36 | 000,721,263 | ---- | C] () -- C:\Windows\SysWow64\WSCM64.dll
  868. [2016/05/10 18:15:36 | 000,214,528 | ---- | C] () -- C:\Windows\SysWow64\WSCM32.dll
  869.  
  870. [color=#E56717]========== ZeroAccess Check ==========[/color]
  871.  
  872. [2016/09/19 16:53:24 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  873.  
  874. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  875.  
  876. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  877.  
  878. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  879.  
  880. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  881.  
  882. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  883. "" = C:\Windows\SysNative\shell32.dll -- [2015/12/18 22:18:32 | 022,372,152 | ---- | M] (Microsoft Corporation)
  884. "ThreadingModel" = Apartment
  885.  
  886. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  887. "" = %SystemRoot%\system32\shell32.dll -- [2015/12/18 22:18:32 | 019,795,904 | ---- | M] (Microsoft Corporation)
  888. "ThreadingModel" = Apartment
  889.  
  890. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  891. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2014/11/21 09:50:30 | 001,013,760 | ---- | M] (Microsoft Corporation)
  892. "ThreadingModel" = Free
  893.  
  894. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  895. "" = %systemroot%\system32\wbem\fastprox.dll -- [2014/11/21 09:51:10 | 000,786,944 | ---- | M] (Microsoft Corporation)
  896. "ThreadingModel" = Free
  897.  
  898. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  899. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2014/11/21 09:50:29 | 000,512,512 | ---- | M] (Microsoft Corporation)
  900. "ThreadingModel" = Both
  901.  
  902. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  903.  
  904. [color=#E56717]========== LOP Check ==========[/color]
  905.  
  906. [2017/03/24 02:00:47 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\aMule
  907. [2016/11/16 23:06:36 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\AVAST Software
  908. [2017/03/17 20:18:33 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\DMCache
  909. [2016/05/10 17:55:34 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Downloaded Installations
  910. [2017/02/24 22:56:30 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Elex-tech
  911. [2016/05/10 18:51:07 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\ESET
  912. [2017/02/22 13:38:59 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\excdir
  913. [2017/02/24 22:50:10 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Firefox
  914. [2016/05/10 17:54:53 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\GHISLER
  915. [2017/02/22 13:34:55 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\gplyra
  916. [2017/03/17 20:10:35 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\IDM
  917. [2016/10/01 02:14:54 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Kalypso Media
  918. [2017/03/04 13:22:35 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Kyubey
  919. [2017/02/22 13:32:08 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Microleaves
  920. [2016/10/09 20:26:50 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\MMFApplications
  921. [2017/03/25 14:36:00 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Nitro
  922. [2017/02/24 13:44:26 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Novicorp
  923. [2017/02/22 13:31:48 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Profiles
  924. [2017/03/10 15:27:01 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Research In Motion
  925. [2016/10/09 18:27:16 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\sa.edu.ksa.ayat
  926. [2017/03/20 14:10:41 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Saqtherclaki
  927. [2016/11/17 22:04:48 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Smadav
  928. [2017/01/28 10:24:18 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Telegram Desktop
  929. [2016/10/07 11:16:41 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Tropico 4
  930. [2017/03/25 15:11:35 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\uTorrent
  931. [2017/03/20 14:32:06 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\WebTorrent
  932. [2017/03/24 02:00:12 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\WinSAPSvc
  933. [2017/03/24 04:29:54 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\WinSnare
  934. [2017/03/25 14:49:12 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\WMPNetworkAcSvc
  935. [2016/05/10 18:16:19 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Wondershare Video Converter Ultimate
  936. [2017/03/17 16:32:28 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\Xiaomi
  937. [2016/05/10 18:16:23 | 000,000,000 | ---D | M] -- C:\Users\Lasminingrat_\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
  938.  
  939. [color=#E56717]========== Purity Check ==========[/color]
  940.  
  941.  
  942.  
  943. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!