API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 1st, 2015
76
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.53 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-12-2015
  2. Ran by Sevgin (administrator) on CARO-FA4A76B0CA (01-12-2015 22:49:15)
  3. Running from C:\Documents and Settings\Sevgin\Desktop
  4. Loaded Profiles: Sevgin (Available Profiles: Sevgin)
  5. Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
  6. Internet Explorer Version 8 (Default browser: FF)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (Microsoft Corporation) C:\WINDOWS.0\system32\smss.exe
  15. (Microsoft Corporation) C:\WINDOWS.0\system32\csrss.exe
  16. (Microsoft Corporation) C:\WINDOWS.0\system32\winlogon.exe
  17. (Microsoft Corporation) C:\WINDOWS.0\system32\services.exe
  18. (Microsoft Corporation) C:\WINDOWS.0\system32\lsass.exe
  19. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  20. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  21. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  22. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  23. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  24. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  25. (Microsoft Corporation) C:\WINDOWS.0\explorer.exe
  26. (Lexmark International, Inc.) C:\WINDOWS.0\system32\LEXBCES.EXE
  27. (Microsoft Corporation) C:\WINDOWS.0\system32\spoolsv.exe
  28. (Lexmark International, Inc.) C:\WINDOWS.0\system32\LEXPPS.EXE
  29. () C:\WINDOWS.0\VistaDrive\VistaDrive.exe
  30. () C:\Program Files\AutorunRemover\AutorunRemover.exe
  31. () C:\Program Files\Vtune\TBPANEL.exe
  32. (Microsoft Corporation) C:\WINDOWS.0\system32\rundll32.exe
  33. (Realtek Semiconductor Corp.) C:\WINDOWS.0\RTHDCPL.exe
  34. (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  35. (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
  36. (Lexmark International, Inc.) C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
  37. (Microsoft Corporation) C:\WINDOWS.0\system32\ctfmon.exe
  38. (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
  39. (Lexmark International, Inc.) C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
  40. (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
  41. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  42. () C:\Program Files\RayDld\ihpmServer.exe
  43. (NVIDIA Corporation) C:\WINDOWS.0\system32\nvsvc32.exe
  44. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  45. (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
  46. (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
  47. (Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
  48. (Microsoft Corporation) C:\WINDOWS.0\system32\alg.exe
  49. (Microsoft Corporation) C:\WINDOWS.0\system32\svchost.exe
  50. (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
  51. (BitTorrent Inc.) C:\Documents and Settings\Sevgin\Application Data\uTorrent\uTorrent.exe
  52. (BitTorrent Inc.) C:\Documents and Settings\Sevgin\Application Data\uTorrent\updates\3.4.5_41372\utorrentie.exe
  53. (BitTorrent Inc.) C:\Documents and Settings\Sevgin\Application Data\uTorrent\updates\3.4.5_41372\utorrentie.exe
  54. (Microsoft Corporation) C:\WINDOWS.0\system32\wbem\wmiprvse.exe
  55. (Microsoft Corporation) C:\WINDOWS.0\system32\wscript.exe
  56. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
  57. (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
  58. (Trend Media Corporation Limited.) C:\Documents and Settings\Sevgin\My Documents\Downloads\Chip+genius+v3+00+to+Repa_10924_i93285534_il345.exe
  59. () C:\Program Files\OLBPre\OLBPre.exe
  60. () C:\Program Files\OLBPre\OLBPre.exe
  61. () C:\Program Files\Dripkix\Dripkix.exe
  62. (Microsoft Corporation) C:\WINDOWS.0\system32\cmd.exe
  63.  
  64.  
  65. ==================== Registry (Whitelisted) ===========================
  66.  
  67. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  68.  
  69. HKLM\...\Run: [VistaDrive] => C:\WINDOWS.0\VistaDrive\VistaDrive.exe [280779 2006-10-05] ()
  70. HKLM\...\Run: [AutorunRemover] => C:\Program Files\AutorunRemover\AutorunRemover.exe [1257472 2009-07-11] ()
  71. HKLM\...\Run: [Gainward] => C:\Program Files\Vtune\TBPanel.exe [2154496 2006-09-13] ()
  72. HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS.0\system32\NvCpl.dll,NvStartup
  73. HKLM\...\Run: [nwiz] => nwiz.exe /install
  74. HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS.0\system32\NvMcTray.dll,NvTaskbarInit
  75. HKLM\...\Run: [RTHDCPL] => C:\WINDOWS.0\RTHDCPL.EXE [16264192 2006-09-12] (Realtek Semiconductor Corp.)
  76. HKLM\...\Run: [SkyTel] => C:\WINDOWS.0\SkyTel.EXE [2879488 2006-05-16] (Realtek Semiconductor Corp.)
  77. HKLM\...\Run: [Alcmtr] => C:\WINDOWS.0\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
  78. HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
  79. HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
  80. HKLM\...\Run: [NeroFilterCheck] => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
  81. HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
  82. HKLM\...\Run: [Lexmark 1200 Series] => C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe [57344 2006-07-13] (Lexmark International, Inc.)
  83. HKLM\...\Run: [bin_16347694874825] => wscript.exe //B "C:\Documents and Settings\Sevgin\Application Data\bin_16347694874825.vbe"
  84. HKLM\...\Winlogon: [Userinit] C:\WINDOWS.0\system32\userinit.exe,
  85. HKLM\...\Winlogon: [Shell] Explorer.exe [x ] ()
  86. HKLM\...\Winlogon: [UIHost] C:\WINDOWS.0\system32\logonui.exe [5737984 2010-03-16] (Microsoft Corporation)
  87. HKU\S-1-5-19\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
  88. HKU\S-1-5-19\...\Policies\Explorer: [ForceClassicControlPanel] 1
  89. HKU\S-1-5-19\...\Policies\Explorer: [NoSMHelp] 1
  90. HKU\S-1-5-20\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
  91. HKU\S-1-5-20\...\Policies\Explorer: [ForceClassicControlPanel] 1
  92. HKU\S-1-5-20\...\Policies\Explorer: [NoSMHelp] 1
  93. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Run: [ctfmon.exe] => C:\WINDOWS.0\system32\ctfmon.exe [37376 2010-03-17] (Microsoft Corporation)
  94. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)
  95. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Run: [uTorrent] => C:\Documents and Settings\Sevgin\Application Data\uTorrent\uTorrent.exe [2026520 2015-12-01] (BitTorrent Inc.)
  96. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
  97. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [4556048 2015-02-27] (Disc Soft Ltd)
  98. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Run: [bin_16347694874825] => wscript.exe //B "C:\Documents and Settings\Sevgin\Application Data\bin_16347694874825.vbe"
  99. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Policies\Explorer: [ForceClassicControlPanel] 1
  100. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\Policies\Explorer: [NoSMHelp] 1
  101. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\...\MountPoints2: {e4c4b434-855c-11e5-a509-00138ff717d8} - F:\setup.exe
  102. HKU\S-1-5-18\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
  103. HKU\S-1-5-18\...\Policies\Explorer: [ForceClassicControlPanel] 1
  104. HKU\S-1-5-18\...\Policies\Explorer: [NoSMHelp] 1
  105. HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> logon.scr
  106. Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\nVienna Sidebar.lnk [2015-03-04]
  107. ShortcutTarget: nVienna Sidebar.lnk -> C:\WINDOWS.0\system32\Sidebar\Sidebar.exe ()
  108. Startup: C:\Documents and Settings\Sevgin\Start Menu\Programs\Startup\bin_16347694874825.vbe [2014-04-03] ()
  109. Startup: C:\Documents and Settings\Sevgin\Start Menu\Programs\Startup\MyPC Backup.lnk [2015-12-01]
  110. ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\OLBPre\OLBPre.exe ()
  111. Startup: C:\Documents and Settings\Sevgin\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2015-09-05]
  112. ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
  113.  
  114. ==================== Internet (Whitelisted) ====================
  115.  
  116. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  117.  
  118. Winsock: Catalog5 01 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  119. Winsock: Catalog5 02 C:\WINDOWS.0\system32\winrnr.dll [16896 2008-04-14] (Microsoft Corporation)
  120. Winsock: Catalog5 03 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  121. Winsock: Catalog9 01 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  122. Winsock: Catalog9 02 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  123. Winsock: Catalog9 03 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  124. Winsock: Catalog9 04 C:\WINDOWS.0\system32\rsvpsp.dll [92672 2008-04-14] (Microsoft Corporation)
  125. Winsock: Catalog9 05 C:\WINDOWS.0\system32\rsvpsp.dll [92672 2008-04-14] (Microsoft Corporation)
  126. Winsock: Catalog9 06 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  127. Winsock: Catalog9 07 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  128. Winsock: Catalog9 08 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  129. Winsock: Catalog9 09 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  130. Winsock: Catalog9 10 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  131. Winsock: Catalog9 11 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  132. Winsock: Catalog9 12 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  133. Winsock: Catalog9 13 C:\WINDOWS.0\system32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  134. Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
  135. Tcpip\..\Interfaces\{1E554EC0-373C-4F8B-A285-3352A5F243F5}: [DhcpNameServer] 192.168.0.1
  136.  
  137. Internet Explorer:
  138. ==================
  139. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x
  140. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=ds&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x&q={searchTerms}
  141. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x
  142. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x&q={searchTerms}
  143. HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
  144. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
  145. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hp&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x
  146. HKU\S-1-5-21-1390067357-1292428093-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hp&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x
  147. SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x&q={searchTerms}
  148. SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x&q={searchTerms}
  149. SearchScopes: HKU\S-1-5-21-1390067357-1292428093-1177238915-1003 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x&q={searchTerms}
  150. SearchScopes: HKU\S-1-5-21-1390067357-1292428093-1177238915-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=ds&ts=1446906760&z=aadfbb4361316cb7292d87fg0z4zdq3tfebq9mbq6e&from=cor&uid=maxtorxstm3802110axxxxxxxxxxxxxxxx_9lr3ct6xxxxx9lr3ct6x&q={searchTerms}
  151. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
  152. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-21] (Oracle Corporation)
  153. BHO: Round World 1.0.0.7 -> {78549bde-b964-4d2a-b7b1-c4ac15ddff64} -> C:\Program Files\Round World\RoundWorldbho.dll [2015-03-05] (Round World)
  154. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-21] (Oracle Corporation)
  155. Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
  156.  
  157. FireFox:
  158. ========
  159. FF ProfilePath: C:\Documents and Settings\Sevgin\Application Data\Mozilla\Firefox\Profiles\jtieetca.default
  160. FF NewTab: chrome://quick_start/content/index.html
  161. FF DefaultSearchEngine: istartsurf
  162. FF Homepage: www.google.com
  163. FF NetworkProxy: "type", 0
  164. FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS.0\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-10] ()
  165. FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-21] (Oracle Corporation)
  166. FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-21] (Oracle Corporation)
  167. FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
  168. FF user.js: detected! => C:\Documents and Settings\Sevgin\Application Data\Mozilla\Firefox\Profiles\jtieetca.default\user.js [2015-03-05]
  169. FF SearchPlugin: C:\Documents and Settings\Sevgin\Application Data\Mozilla\Firefox\Profiles\jtieetca.default\searchplugins\istartsurf.xml [2015-11-07]
  170. FF Extension: Newtab - C:\Documents and Settings\Sevgin\Application Data\Mozilla\Firefox\Profiles\jtieetca.default\extensions\deskCutv2@gmail.com [2015-12-01] [not signed]
  171. FF HKLM\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Documents and Settings\Sevgin\Application Data\Mozilla\Firefox\Profiles\jtieetca.default\extensions\deskCutv2@gmail.com
  172.  
  173. ==================== Services (Whitelisted) ========================
  174.  
  175. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  176.  
  177. S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS.0\system32\Macromed\Flash\FlashPlayerUpdateService.exe [269000 2015-11-10] (Adobe Systems Incorporated)
  178. S4 Alerter; C:\WINDOWS.0\system32\alrsvc.dll [17408 2008-04-14] (Microsoft Corporation)
  179. R3 ALG; C:\WINDOWS.0\System32\alg.exe [44544 2008-04-14] (Microsoft Corporation)
  180. S3 AppMgmt; C:\WINDOWS.0\System32\appmgmts.dll [167936 2008-04-14] (Microsoft Corporation)
  181. S3 aspnet_state; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [34312 2008-07-25] (Microsoft Corporation)
  182. R2 AudioSrv; C:\WINDOWS.0\System32\audiosrv.dll [42496 2008-04-14] (Microsoft Corporation)
  183. R2 BITS; C:\WINDOWS.0\system32\qmgr.dll [409088 2008-04-14] (Microsoft Corporation)
  184. S2 Browser; C:\WINDOWS.0\System32\browser.dll [77824 2008-04-14] (Microsoft Corporation)
  185. S4 ClipSrv; C:\WINDOWS.0\system32\clipsrv.exe [55296 2010-03-17] (Microsoft Corporation) [File not signed]
  186. S3 clr_optimization_v2.0.50727_32; C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [69632 2008-07-25] (Microsoft Corporation)
  187. R2 CryptSvc; C:\WINDOWS.0\System32\cryptsvc.dll [62464 2008-04-14] (Microsoft Corporation)
  188. R2 DcomLaunch; C:\WINDOWS.0\system32\rpcss.dll [401408 2010-03-17] (Microsoft Corporation)
  189. R2 Dhcp; C:\WINDOWS.0\System32\dhcpcsvc.dll [126976 2008-04-14] (Microsoft Corporation)
  190. R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1030928 2015-02-27] (Disc Soft Ltd)
  191. S3 dmadmin; C:\WINDOWS.0\System32\dmadmin.exe [224768 2008-04-14] (Microsoft Corp., Veritas Software)
  192. R2 dmserver; C:\WINDOWS.0\System32\dmserver.dll [23552 2008-04-14] (Microsoft Corp.)
  193. R2 Dnscache; C:\WINDOWS.0\System32\dnsrslvr.dll [45568 2008-04-14] (Microsoft Corporation)
  194. S3 Dot3svc; C:\WINDOWS.0\System32\dot3svc.dll [132096 2008-04-14] (Microsoft Corporation)
  195. R2 Dripkix; C:\Program Files\Dripkix\Dripkix.exe [379904 2015-11-12] () [File not signed] <==== ATTENTION
  196. S3 EapHost; C:\WINDOWS.0\System32\eapsvc.dll [33792 2008-04-14] (Microsoft Corporation)
  197. R2 ERSvc; C:\WINDOWS.0\System32\ersvc.dll [23040 2008-04-14] (Microsoft Corporation)
  198. R2 Eventlog; C:\WINDOWS.0\system32\services.exe [110592 2010-03-17] (Microsoft Corporation)
  199. R3 EventSystem; C:\WINDOWS.0\system32\es.dll [253952 2010-03-17] (Microsoft Corporation)
  200. R3 FastUserSwitchingCompatibility; C:\WINDOWS.0\System32\shsvcs.dll [135168 2008-04-14] (Microsoft Corporation)
  201. R2 helpsvc; C:\WINDOWS.0\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400 2008-04-14] (Microsoft Corporation)
  202. S3 hkmsvc; C:\WINDOWS.0\System32\kmsvc.dll [61440 2008-04-14] (Microsoft Corporation)
  203. R3 HTTPFilter; C:\WINDOWS.0\System32\w3ssl.dll [15872 2008-04-14] (Microsoft Corporation)
  204. R2 ihpmServer; C:\Program Files\RayDld\ihpmServer.exe [271592 2015-11-03] ()
  205. S3 ImapiService; C:\WINDOWS.0\system32\imapi.exe [150528 2008-04-14] (Microsoft Corporation)
  206. R2 LanmanServer; C:\WINDOWS.0\System32\srvsvc.dll [96768 2008-04-14] (Microsoft Corporation)
  207. R2 lanmanworkstation; C:\WINDOWS.0\System32\wkssvc.dll [134144 2010-03-17] (Microsoft Corporation)
  208. R2 LexBceS; C:\WINDOWS.0\system32\LEXBCES.EXE [311296 2006-04-17] (Lexmark International, Inc.)
  209. R2 LmHosts; C:\WINDOWS.0\System32\lmhsvc.dll [13824 2008-04-14] (Microsoft Corporation)
  210. S4 Messenger; C:\WINDOWS.0\System32\msgsvc.dll [33792 2008-04-14] (Microsoft Corporation)
  211. S3 mnmsrvc; C:\WINDOWS.0\system32\mnmsrvc.exe [53248 2010-03-17] (Microsoft Corporation) [File not signed]
  212. S3 MSDTC; C:\WINDOWS.0\system32\msdtc.exe [27648 2010-03-17] (Microsoft Corporation) [File not signed]
  213. S3 MSIServer; C:\WINDOWS.0\System32\msiexec.exe [96768 2010-03-17] (Microsoft Corporation) [File not signed]
  214. S3 napagent; C:\WINDOWS.0\System32\qagentrt.dll [291328 2008-04-14] (Microsoft Corporation)
  215. S4 NetDDE; C:\WINDOWS.0\system32\netdde.exe [111104 2008-04-14] (Microsoft Corporation)
  216. S4 NetDDEdsdm; C:\WINDOWS.0\system32\netdde.exe [111104 2008-04-14] (Microsoft Corporation)
  217. S3 Netlogon; C:\WINDOWS.0\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
  218. R3 Netman; C:\WINDOWS.0\System32\netman.dll [198144 2008-04-14] (Microsoft Corporation)
  219. R3 Nla; C:\WINDOWS.0\System32\mswsock.dll [245248 2010-03-17] (Microsoft Corporation)
  220. S3 NtLmSsp; C:\WINDOWS.0\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
  221. S3 NtmsSvc; C:\WINDOWS.0\system32\ntmssvc.dll [435200 2008-04-14] (Microsoft Corporation)
  222. R2 NVSvc; C:\WINDOWS.0\system32\nvsvc32.exe [155715 2006-08-11] (NVIDIA Corporation)
  223. R2 PlugPlay; C:\WINDOWS.0\system32\services.exe [110592 2010-03-17] (Microsoft Corporation)
  224. R2 PolicyAgent; C:\WINDOWS.0\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
  225. R2 ProtectedStorage; C:\WINDOWS.0\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
  226. S3 RasAuto; C:\WINDOWS.0\System32\rasauto.dll [88576 2008-04-14] (Microsoft Corporation)
  227. R3 RasMan; C:\WINDOWS.0\System32\rasmans.dll [186368 2008-04-14] (Microsoft Corporation)
  228. S3 RDSessMgr; C:\WINDOWS.0\system32\sessmgr.exe [141312 2008-04-14] (Microsoft Corporation)
  229. S4 RemoteAccess; C:\WINDOWS.0\System32\mprdim.dll [53248 2008-04-14] (Microsoft Corporation)
  230. R2 RemoteRegistry; C:\WINDOWS.0\system32\regsvc.dll [59904 2008-04-14] (Microsoft Corporation)
  231. S3 RpcLocator; C:\WINDOWS.0\system32\locator.exe [75264 2008-04-14] (Microsoft Corporation)
  232. R2 RpcSs; C:\WINDOWS.0\system32\rpcss.dll [401408 2010-03-17] (Microsoft Corporation)
  233. S3 RSVP; C:\WINDOWS.0\system32\rsvp.exe [132608 2008-04-14] (Microsoft Corporation)
  234. R2 SamSs; C:\WINDOWS.0\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation)
  235. S3 SCardSvr; C:\WINDOWS.0\System32\SCardSvr.exe [95744 2008-04-14] (Microsoft Corporation)
  236. R2 Schedule; C:\WINDOWS.0\system32\schedsvc.dll [192512 2008-04-14] (Microsoft Corporation)
  237. R2 seclogon; C:\WINDOWS.0\System32\seclogon.dll [18944 2008-04-14] (Microsoft Corporation)
  238. R2 SENS; C:\WINDOWS.0\system32\sens.dll [39424 2008-04-14] (Microsoft Corporation)
  239. R2 SharedAccess; C:\WINDOWS.0\System32\ipnathlp.dll [331264 2008-04-14] (Microsoft Corporation)
  240. R2 ShellHWDetection; C:\WINDOWS.0\System32\shsvcs.dll [135168 2008-04-14] (Microsoft Corporation)
  241. R2 Spooler; C:\WINDOWS.0\system32\spoolsv.exe [57856 2008-04-14] (Microsoft Corporation)
  242. R2 srservice; C:\WINDOWS.0\system32\srsvc.dll [171008 2008-04-14] (Microsoft Corporation)
  243. R3 SSDPSRV; C:\WINDOWS.0\System32\ssdpsrv.dll [71680 2008-04-14] (Microsoft Corporation)
  244. R2 stisvc; C:\WINDOWS.0\system32\wiaservc.dll [333824 2008-04-14] (Microsoft Corporation)
  245. S3 SysmonLog; C:\WINDOWS.0\system32\smlogsvc.exe [89600 2008-04-14] (Microsoft Corporation)
  246. R3 TapiSrv; C:\WINDOWS.0\System32\tapisrv.dll [249856 2008-04-14] (Microsoft Corporation)
  247. R3 TermService; C:\WINDOWS.0\System32\termsrv.dll [295424 2008-04-14] (Microsoft Corporation)
  248. R2 Themes; C:\WINDOWS.0\System32\shsvcs.dll [135168 2008-04-14] (Microsoft Corporation)
  249. S4 TlntSvr; C:\WINDOWS.0\system32\tlntsvr.exe [73216 2008-04-14] (Microsoft Corporation)
  250. R2 TrkWks; C:\WINDOWS.0\system32\trkwks.dll [90112 2008-04-14] (Microsoft Corporation)
  251. S3 upnphost; C:\WINDOWS.0\System32\upnphost.dll [185856 2008-04-14] (Microsoft Corporation)
  252. S3 UPS; C:\WINDOWS.0\System32\ups.exe [18432 2008-04-14] (Microsoft Corporation)
  253. S3 VSS; C:\WINDOWS.0\System32\vssvc.exe [289792 2008-04-14] (Microsoft Corporation)
  254. R2 W32Time; C:\WINDOWS.0\system32\w32time.dll [175104 2008-04-14] (Microsoft Corporation)
  255. R2 WebClient; C:\WINDOWS.0\System32\webclnt.dll [68096 2008-04-14] (Microsoft Corporation)
  256. R2 winmgmt; C:\WINDOWS.0\system32\wbem\WMIsvc.dll [144896 2008-04-14] (Microsoft Corporation)
  257. S3 WmdmPmSN; C:\WINDOWS.0\system32\mspmsnsv.dll [27136 2010-03-17] (Microsoft Corporation)
  258. S3 Wmi; C:\WINDOWS.0\System32\advapi32.dll [617472 2010-03-17] (Microsoft Corporation)
  259. S3 WmiApSrv; C:\WINDOWS.0\system32\wbem\wmiapsrv.exe [126464 2008-04-14] (Microsoft Corporation)
  260. R2 wscsvc; C:\WINDOWS.0\system32\wscsvc.dll [80896 2008-04-14] (Microsoft Corporation)
  261. R2 wuauserv; C:\WINDOWS.0\system32\wuauserv.dll [6656 2008-04-14] (Microsoft Corporation)
  262. R2 WudfSvc; C:\WINDOWS.0\System32\WUDFSvc.dll [55808 2010-03-17] (Microsoft Corporation)
  263. R2 WZCSVC; C:\WINDOWS.0\System32\wzcsvc.dll [483840 2010-03-17] (Microsoft Corporation)
  264. S3 xmlprov; C:\WINDOWS.0\System32\xmlprov.dll [129024 2008-04-14] (Microsoft Corporation)
  265. S3 COMSysApp; C:\WINDOWS.0\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
  266. S3 SwPrv; C:\WINDOWS.0\system32\dllhost.exe /Processid:{E9C3B1F1-E26E-494F-9B90-936ABEE4F6CC}
  267.  
  268. ===================== Drivers (Whitelisted) ==========================
  269.  
  270. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  271.  
  272. R0 ACPI; C:\WINDOWS.0\System32\DRIVERS\ACPI.sys [187776 2008-04-14] (Microsoft Corporation)
  273. S4 ACPIEC; C:\WINDOWS.0\system32\Drivers\ACPIEC.sys [11648 2008-04-14] (Microsoft Corporation)
  274. S3 aec; C:\WINDOWS.0\System32\drivers\aec.sys [142592 2008-04-13] (Microsoft Corporation)
  275. R1 AFD; C:\WINDOWS.0\System32\drivers\afd.sys [138496 2010-03-17] (Microsoft Corporation)
  276. S3 AsyncMac; C:\WINDOWS.0\System32\DRIVERS\asyncmac.sys [14336 2008-04-14] (Microsoft Corporation)
  277. R0 atapi; C:\WINDOWS.0\System32\DRIVERS\atapi.sys [96512 2008-04-14] (Microsoft Corporation)
  278. S3 Atmarpc; C:\WINDOWS.0\System32\DRIVERS\atmarpc.sys [59904 2008-04-14] (Microsoft Corporation)
  279. R3 audstub; C:\WINDOWS.0\System32\DRIVERS\audstub.sys [3072 2001-08-17] (Microsoft Corporation)
  280. R1 Beep; C:\WINDOWS.0\system32\Drivers\Beep.sys [4224 2008-04-14] (Microsoft Corporation)
  281. S3 Cardex; C:\WINDOWS.0\system32\drivers\TBPANEL.SYS [5306 2002-07-27] (Windows (R) 2000 DDK provider) [File not signed]
  282. S1 Cdaudio; C:\WINDOWS.0\system32\Drivers\Cdaudio.sys [18688 2010-03-17] (Microsoft Corporation)
  283. R4 Cdfs; C:\WINDOWS.0\system32\Drivers\Cdfs.sys [63744 2008-04-14] (Microsoft Corporation)
  284. R1 Cdrom; C:\WINDOWS.0\System32\DRIVERS\cdrom.sys [62976 2008-04-14] (Microsoft Corporation)
  285. R0 Disk; C:\WINDOWS.0\System32\DRIVERS\disk.sys [36352 2008-04-14] (Microsoft Corporation)
  286. S4 dmboot; C:\WINDOWS.0\System32\drivers\dmboot.sys [799744 2008-04-14] (Microsoft Corp., Veritas Software)
  287. R0 dmio; C:\WINDOWS.0\System32\drivers\dmio.sys [153344 2008-04-14] (Microsoft Corp., Veritas Software)
  288. R0 dmload; C:\WINDOWS.0\System32\drivers\dmload.sys [5888 2008-04-14] (Microsoft Corp., Veritas Software.)
  289. S3 DMusic; C:\WINDOWS.0\System32\drivers\DMusic.sys [52864 2008-04-13] (Microsoft Corporation)
  290. S3 drmkaud; C:\WINDOWS.0\System32\drivers\drmkaud.sys [2944 2008-04-13] (Microsoft Corporation)
  291. R3 dtlitescsibus; C:\WINDOWS.0\System32\DRIVERS\dtlitescsibus.sys [25104 2015-11-07] (Disc Soft Ltd)
  292. R3 eaps2kbd; C:\WINDOWS.0\System32\DRIVERS\eaps2kbd.sys [24035 2001-12-28] (Compaq Computer Corp.) [File not signed]
  293. R1 eawdmfd; C:\WINDOWS.0\System32\DRIVERS\eawdmfd.sys [24348 1999-10-29] (Compaq Computer Corporation) [File not signed]
  294. R4 Fastfat; C:\WINDOWS.0\system32\Drivers\Fastfat.sys [143744 2008-04-14] (Microsoft Corporation)
  295. R3 Fdc; C:\WINDOWS.0\System32\DRIVERS\fdc.sys [27392 2008-04-14] (Microsoft Corporation)
  296. S3 FET5X86V; C:\WINDOWS.0\System32\DRIVERS\fetnd5bv.sys [43008 2006-03-15] (VIA Technologies, Inc. )
  297. R3 FETND5BV; C:\WINDOWS.0\System32\DRIVERS\fetnd5bv.sys [43008 2006-03-15] (VIA Technologies, Inc. )
  298. S3 FETNDIS; C:\WINDOWS.0\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (VIA Technologies, Inc. )
  299. R1 Fips; C:\WINDOWS.0\system32\Drivers\Fips.sys [44544 2008-04-14] (Microsoft Corporation)
  300. R3 Flpydisk; C:\WINDOWS.0\System32\DRIVERS\flpydisk.sys [20480 2008-04-14] (Microsoft Corporation)
  301. R0 FltMgr; C:\WINDOWS.0\System32\DRIVERS\fltMgr.sys [129792 2008-04-14] (Microsoft Corporation)
  302. U1 Fs_Rec; C:\WINDOWS.0\system32\Drivers\Fs_Rec.sys [7936 2008-04-14] (Microsoft Corporation)
  303. R0 Ftdisk; C:\WINDOWS.0\System32\DRIVERS\ftdisk.sys [125056 2008-04-14] (Microsoft Corporation)
  304. R3 gameenum; C:\WINDOWS.0\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
  305. R3 Gpc; C:\WINDOWS.0\System32\DRIVERS\msgpc.sys [35072 2008-04-14] (Microsoft Corporation)
  306. R3 HDAudBus; C:\WINDOWS.0\System32\DRIVERS\HDAudBus.sys [144384 2008-04-14] (Windows (R) Server 2003 DDK provider)
  307. R3 hidusb; C:\WINDOWS.0\System32\DRIVERS\hidusb.sys [10368 2008-04-14] (Microsoft Corporation)
  308. R3 HTTP; C:\WINDOWS.0\System32\Drivers\HTTP.sys [265728 2010-03-17] (Microsoft Corporation)
  309. R1 i8042prt; C:\WINDOWS.0\System32\DRIVERS\i8042prt.sys [52480 2008-04-14] (Microsoft Corporation)
  310. R1 Imapi; C:\WINDOWS.0\System32\DRIVERS\imapi.sys [42112 2008-04-14] (Microsoft Corporation)
  311. R3 IntcAzAudAddService; C:\WINDOWS.0\System32\drivers\RtkHDAud.sys [4381184 2006-09-12] (Realtek Semiconductor Corp.)
  312. R1 intelppm; C:\WINDOWS.0\System32\DRIVERS\intelppm.sys [36352 2008-04-14] (Microsoft Corporation)
  313. S3 Ip6Fw; C:\WINDOWS.0\System32\DRIVERS\Ip6Fw.sys [36608 2008-04-14] (Microsoft Corporation)
  314. S3 IpFilterDriver; C:\WINDOWS.0\System32\DRIVERS\ipfltdrv.sys [32896 2008-04-14] (Microsoft Corporation)
  315. S3 IpInIp; C:\WINDOWS.0\System32\DRIVERS\ipinip.sys [20864 2008-04-14] (Microsoft Corporation)
  316. R3 IpNat; C:\WINDOWS.0\System32\DRIVERS\ipnat.sys [152832 2008-04-14] (Microsoft Corporation)
  317. R1 IPSec; C:\WINDOWS.0\System32\DRIVERS\ipsec.sys [75264 2008-04-14] (Microsoft Corporation)
  318. S3 IRENUM; C:\WINDOWS.0\System32\DRIVERS\irenum.sys [11264 2008-04-14] (Microsoft Corporation)
  319. R0 isapnp; C:\WINDOWS.0\System32\DRIVERS\isapnp.sys [37248 2008-04-13] (Microsoft Corporation)
  320. R1 Kbdclass; C:\WINDOWS.0\System32\DRIVERS\kbdclass.sys [24576 2008-04-14] (Microsoft Corporation)
  321. R3 kmixer; C:\WINDOWS.0\System32\drivers\kmixer.sys [172416 2008-04-13] (Microsoft Corporation)
  322. R0 KSecDD; C:\WINDOWS.0\system32\Drivers\KSecDD.sys [92928 2009-06-24] (Microsoft Corporation)
  323. R1 mnmdd; C:\WINDOWS.0\system32\Drivers\mnmdd.sys [4224 2008-04-14] (Microsoft Corporation)
  324. S3 Modem; C:\WINDOWS.0\system32\Drivers\Modem.sys [30080 2010-03-17] (Microsoft Corporation)
  325. R1 Mouclass; C:\WINDOWS.0\System32\DRIVERS\mouclass.sys [23040 2010-03-17] (Microsoft Corporation)
  326. R3 mouhid; C:\WINDOWS.0\System32\DRIVERS\mouhid.sys [12160 2010-03-17] (Microsoft Corporation)
  327. R0 MountMgr; C:\WINDOWS.0\system32\Drivers\MountMgr.sys [42368 2008-04-14] (Microsoft Corporation)
  328. R3 MRxDAV; C:\WINDOWS.0\System32\DRIVERS\mrxdav.sys [180608 2008-04-14] (Microsoft Corporation)
  329. R1 MRxSmb; C:\WINDOWS.0\System32\DRIVERS\mrxsmb.sys [456832 2010-03-17] (Microsoft Corporation)
  330. R1 Msfs; C:\WINDOWS.0\system32\Drivers\Msfs.sys [19072 2008-04-14] (Microsoft Corporation)
  331. S3 MSKSSRV; C:\WINDOWS.0\System32\drivers\MSKSSRV.sys [7552 2008-04-13] (Microsoft Corporation)
  332. S3 MSPCLOCK; C:\WINDOWS.0\System32\drivers\MSPCLOCK.sys [5376 2008-04-13] (Microsoft Corporation)
  333. S3 MSPQM; C:\WINDOWS.0\System32\drivers\MSPQM.sys [4992 2008-04-13] (Microsoft Corporation)
  334. R3 mssmbios; C:\WINDOWS.0\System32\DRIVERS\mssmbios.sys [15488 2010-03-17] (Microsoft Corporation)
  335. R0 Mup; C:\WINDOWS.0\system32\Drivers\Mup.sys [105344 2008-04-14] (Microsoft Corporation)
  336. R0 NDIS; C:\WINDOWS.0\system32\Drivers\NDIS.sys [182656 2008-04-14] (Microsoft Corporation)
  337. R3 NdisTapi; C:\WINDOWS.0\System32\DRIVERS\ndistapi.sys [10112 2008-04-14] (Microsoft Corporation)
  338. R3 Ndisuio; C:\WINDOWS.0\System32\DRIVERS\ndisuio.sys [14592 2010-03-17] (Microsoft Corporation)
  339. R3 NdisWan; C:\WINDOWS.0\System32\DRIVERS\ndiswan.sys [91520 2008-04-14] (Microsoft Corporation)
  340. R3 NDProxy; C:\WINDOWS.0\system32\Drivers\NDProxy.sys [40576 2008-04-14] (Microsoft Corporation)
  341. R1 NetBIOS; C:\WINDOWS.0\System32\DRIVERS\netbios.sys [34688 2008-04-14] (Microsoft Corporation)
  342. R1 NetBT; C:\WINDOWS.0\System32\DRIVERS\netbt.sys [162816 2008-04-14] (Microsoft Corporation)
  343. R1 Npfs; C:\WINDOWS.0\system32\Drivers\Npfs.sys [30848 2008-04-14] (Microsoft Corporation)
  344. R4 Ntfs; C:\WINDOWS.0\system32\Drivers\Ntfs.sys [574976 2008-04-14] (Microsoft Corporation)
  345. R1 Null; C:\WINDOWS.0\system32\Drivers\Null.sys [2944 2008-04-14] (Microsoft Corporation)
  346. R3 nv; C:\WINDOWS.0\System32\DRIVERS\nv4_mini.sys [3958496 2006-08-11] (NVIDIA Corporation)
  347. S3 NwlnkFlt; C:\WINDOWS.0\System32\DRIVERS\nwlnkflt.sys [12416 2008-04-14] (Microsoft Corporation)
  348. S3 NwlnkFwd; C:\WINDOWS.0\System32\DRIVERS\nwlnkfwd.sys [32512 2008-04-14] (Microsoft Corporation)
  349. R3 Parport; C:\WINDOWS.0\System32\DRIVERS\parport.sys [80128 2010-03-17] (Microsoft Corporation)
  350. R0 PartMgr; C:\WINDOWS.0\system32\Drivers\PartMgr.sys [19712 2008-04-14] (Microsoft Corporation)
  351. R2 ParVdm; C:\WINDOWS.0\system32\Drivers\ParVdm.sys [6784 2008-04-14] (Microsoft Corporation)
  352. R0 PCI; C:\WINDOWS.0\System32\DRIVERS\pci.sys [68224 2008-04-13] (Microsoft Corporation)
  353. R0 PCIIde; C:\WINDOWS.0\System32\DRIVERS\pciide.sys [3328 2001-08-17] (Microsoft Corporation)
  354. S4 Pcmcia; C:\WINDOWS.0\system32\Drivers\Pcmcia.sys [120192 2008-04-14] (Microsoft Corporation)
  355. R3 PptpMiniport; C:\WINDOWS.0\System32\DRIVERS\raspptp.sys [48384 2008-04-14] (Microsoft Corporation)
  356. R3 PSched; C:\WINDOWS.0\System32\DRIVERS\psched.sys [69120 2008-04-14] (Microsoft Corporation)
  357. R3 Ptilink; C:\WINDOWS.0\System32\DRIVERS\ptilink.sys [17792 2008-04-14] (Parallel Technologies, Inc.)
  358. R1 RasAcd; C:\WINDOWS.0\System32\DRIVERS\rasacd.sys [8832 2008-04-14] (Microsoft Corporation)
  359. R3 Rasl2tp; C:\WINDOWS.0\System32\DRIVERS\rasl2tp.sys [51328 2008-04-14] (Microsoft Corporation)
  360. R3 RasPppoe; C:\WINDOWS.0\System32\DRIVERS\raspppoe.sys [41472 2008-04-14] (Microsoft Corporation)
  361. R3 Raspti; C:\WINDOWS.0\System32\DRIVERS\raspti.sys [16512 2008-04-14] (Microsoft Corporation)
  362. R1 Rdbss; C:\WINDOWS.0\System32\DRIVERS\rdbss.sys [175744 2008-04-14] (Microsoft Corporation)
  363. R1 RDPCDD; C:\WINDOWS.0\System32\DRIVERS\RDPCDD.sys [4224 2008-04-14] (Microsoft Corporation)
  364. R3 rdpdr; C:\WINDOWS.0\System32\DRIVERS\rdpdr.sys [196224 2008-04-13] (Microsoft Corporation)
  365. S3 RDPWD; C:\WINDOWS.0\system32\Drivers\RDPWD.sys [139656 2008-04-14] (Microsoft Corporation)
  366. R1 redbook; C:\WINDOWS.0\System32\DRIVERS\redbook.sys [57600 2008-04-13] (Microsoft Corporation)
  367. R3 RTL8023xp; C:\WINDOWS.0\System32\DRIVERS\Rtnicxp.sys [130432 2009-03-25] (Realtek Semiconductor Corporation ) [File not signed]
  368. S3 rtl8139; C:\WINDOWS.0\System32\DRIVERS\RTL8139.SYS [20992 2008-04-13] (Realtek Semiconductor Corporation)
  369. S3 Secdrv; C:\WINDOWS.0\System32\DRIVERS\secdrv.sys [20480 2008-04-14] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
  370. R3 serenum; C:\WINDOWS.0\System32\DRIVERS\serenum.sys [15744 2008-04-14] (Microsoft Corporation)
  371. R1 Serial; C:\WINDOWS.0\System32\DRIVERS\serial.sys [64512 2008-04-14] (Microsoft Corporation)
  372. S1 Sfloppy; C:\WINDOWS.0\system32\Drivers\Sfloppy.sys [11392 2008-04-14] (Microsoft Corporation)
  373. S3 splitter; C:\WINDOWS.0\System32\drivers\splitter.sys [6272 2008-04-13] (Microsoft Corporation)
  374. R0 sr; C:\WINDOWS.0\System32\DRIVERS\sr.sys [73472 2008-04-14] (Microsoft Corporation)
  375. R3 Srv; C:\WINDOWS.0\System32\DRIVERS\srv.sys [353792 2010-03-17] (Microsoft Corporation)
  376. R3 swenum; C:\WINDOWS.0\System32\DRIVERS\swenum.sys [4352 2010-03-17] (Microsoft Corporation)
  377. S3 swmidi; C:\WINDOWS.0\System32\drivers\swmidi.sys [56576 2008-04-13] (Microsoft Corporation)
  378. R3 sysaudio; C:\WINDOWS.0\System32\drivers\sysaudio.sys [60800 2008-04-13] (Microsoft Corporation)
  379. R2 TBPanel; C:\WINDOWS.0\system32\Drivers\TBPanel.sys [5306 2002-07-27] (Windows (R) 2000 DDK provider) [File not signed]
  380. R1 Tcpip; C:\WINDOWS.0\System32\DRIVERS\tcpip.sys [361600 2010-03-17] (Microsoft Corporation)
  381. S3 TDPIPE; C:\WINDOWS.0\system32\Drivers\TDPIPE.sys [12040 2008-04-14] (Microsoft Corporation)
  382. S3 TDTCP; C:\WINDOWS.0\system32\Drivers\TDTCP.sys [21896 2008-04-14] (Microsoft Corporation)
  383. R1 TermDD; C:\WINDOWS.0\System32\DRIVERS\termdd.sys [40840 2008-04-13] (Microsoft Corporation)
  384. R0 uagp35; C:\WINDOWS.0\System32\DRIVERS\uagp35.sys [44672 2008-04-13] (Microsoft Corporation)
  385. S4 Udfs; C:\WINDOWS.0\system32\Drivers\Udfs.sys [66048 2008-04-14] (Microsoft Corporation)
  386. R3 Update; C:\WINDOWS.0\System32\DRIVERS\update.sys [384768 2008-04-14] (Microsoft Corporation)
  387. R3 usbehci; C:\WINDOWS.0\System32\DRIVERS\usbehci.sys [30208 2008-04-14] (Microsoft Corporation)
  388. R3 usbhub; C:\WINDOWS.0\System32\DRIVERS\usbhub.sys [59520 2008-04-14] (Microsoft Corporation)
  389. S3 usbprint; C:\WINDOWS.0\System32\DRIVERS\usbprint.sys [25856 2008-04-13] (Microsoft Corporation)
  390. S3 usbscan; C:\WINDOWS.0\System32\DRIVERS\usbscan.sys [15104 2008-04-13] (Microsoft Corporation)
  391. R3 USBSTOR; C:\WINDOWS.0\System32\DRIVERS\USBSTOR.SYS [26368 2008-04-13] (Microsoft Corporation)
  392. R3 usbuhci; C:\WINDOWS.0\System32\DRIVERS\usbuhci.sys [20608 2008-04-14] (Microsoft Corporation)
  393. R1 VgaSave; C:\WINDOWS.0\System32\drivers\vga.sys [20992 2008-04-14] (Microsoft Corporation)
  394. R0 viaagp1; C:\WINDOWS.0\System32\DRIVERS\viaagp1.sys [27904 2003-07-01] (VIA Technologies, Inc.) [File not signed]
  395. R0 ViaIde; C:\WINDOWS.0\System32\DRIVERS\viaide.sys [5376 2008-04-13] (Microsoft Corporation)
  396. R0 videX32; C:\WINDOWS.0\System32\DRIVERS\videX32.sys [9728 2006-02-23] (VIA Technologies, Inc.)
  397. R0 VolSnap; C:\WINDOWS.0\system32\Drivers\VolSnap.sys [52352 2008-04-14] (Microsoft Corporation)
  398. R3 Wanarp; C:\WINDOWS.0\System32\DRIVERS\wanarp.sys [34560 2008-04-14] (Microsoft Corporation)
  399. R3 wdmaud; C:\WINDOWS.0\System32\drivers\wdmaud.sys [83072 2008-04-13] (Microsoft Corporation)
  400. S3 WpdUsb; C:\WINDOWS.0\System32\DRIVERS\wpdusb.sys [38528 2010-03-17] (Microsoft Corporation)
  401. R0 WudfPf; C:\WINDOWS.0\System32\DRIVERS\WudfPf.sys [77568 2010-03-17] (Microsoft Corporation)
  402. S3 WudfRd; C:\WINDOWS.0\System32\DRIVERS\wudfrd.sys [82944 2010-03-17] (Microsoft Corporation)
  403. R0 xfilt; C:\WINDOWS.0\System32\DRIVERS\xfilt.sys [11264 2006-02-23] (VIA Technologies,Inc)
  404. S4 IntelIde; no ImagePath
  405. U1 WS2IFSL; no ImagePath
  406.  
  407. ==================== NetSvcs (Whitelisted) ===================
  408.  
  409. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  410.  
  411.  
  412. ==================== One Month Created files and folders ========
  413.  
  414. (If an entry is included in the fixlist, the file/folder will be moved.)
  415.  
  416. 2015-12-01 22:49 - 2015-12-01 22:50 - 00038116 _____ C:\Documents and Settings\Sevgin\Desktop\FRST.txt
  417. 2015-12-01 22:49 - 2015-12-01 22:49 - 00000000 ____D C:\FRST
  418. 2015-12-01 22:48 - 2015-12-01 22:48 - 01721344 _____ (Farbar) C:\Documents and Settings\Sevgin\Desktop\FRST.exe
  419. 2015-12-01 22:17 - 2015-12-01 22:17 - 00046592 _____ C:\Documents and Settings\Sevgin\Local Settings\Application Data\Hexit.exe
  420. 2015-12-01 22:17 - 2015-12-01 22:17 - 00000187 _____ C:\Documents and Settings\Sevgin\Local Settings\Application Data\Hexit.exe.config
  421. 2015-12-01 22:17 - 2015-12-01 22:17 - 00000000 ____D C:\Program Files\Dripkix
  422. 2015-12-01 19:37 - 2015-12-01 19:37 - 00001526 _____ C:\Documents and Settings\Sevgin\Desktop\MyPC Backup.lnk
  423. 2015-12-01 19:37 - 2015-12-01 19:37 - 00000000 ____D C:\Program Files\OLBPre
  424. 2015-12-01 19:17 - 2015-12-01 22:15 - 00000420 _____ C:\WINDOWS.0\Tasks\AmiUpdXp.job
  425. 2015-12-01 19:17 - 2015-12-01 19:17 - 00000000 ____D C:\Documents and Settings\Sevgin\Application Data\6772
  426. 2015-12-01 15:19 - 2015-12-01 15:38 - 00000000 ____D C:\Documents and Settings\Sevgin\Desktop\New Folder (4)
  427. 2015-12-01 15:19 - 2015-12-01 15:27 - 00000000 ____D C:\Documents and Settings\Sevgin\Desktop\New Folder (5)
  428. 2015-12-01 15:18 - 2014-04-03 17:46 - 02451768 ___SH C:\Documents and Settings\Sevgin\Application Data\bin_16347694874825.vbe
  429. 2015-11-19 17:59 - 2015-11-22 14:04 - 00000000 ____D C:\Documents and Settings\Sevgin\Desktop\izradi
  430. 2015-11-13 16:46 - 2015-11-20 18:05 - 00000000 ____D C:\Documents and Settings\Sevgin\[
  431. 2015-11-11 15:49 - 2015-11-11 16:03 - 00000000 ____D C:\Program Files\Stronghold Crusader 2
  432. 2015-11-07 18:29 - 2015-11-09 18:15 - 00000000 ____D C:\Program Files\Mozilla Firefox
  433. 2015-11-07 17:32 - 2015-11-07 17:34 - 00000000 ____D C:\Documents and Settings\Sevgin\Application Data\DAEMON Tools Lite
  434. 2015-11-07 17:32 - 2015-11-07 17:32 - 00025104 _____ (Disc Soft Ltd) C:\WINDOWS.0\system32\Drivers\dtlitescsibus.sys
  435. 2015-11-07 17:32 - 2015-11-07 17:32 - 00001613 _____ C:\Documents and Settings\All Users\Desktop\DAEMON Tools Lite.lnk
  436. 2015-11-07 17:32 - 2015-11-07 17:32 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
  437. 2015-11-07 17:32 - 2015-11-07 17:32 - 00000000 ____D C:\Documents and Settings\All Users\Start Menu\Programs\DAEMON Tools Lite
  438. 2015-11-07 17:32 - 2015-11-07 17:32 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
  439. 2015-11-07 16:31 - 1970-01-01 01:00 - 00000930 _____ C:\Program Files\installscript.vdf
  440. 2015-11-07 15:33 - 2015-11-07 15:33 - 00000000 ____D C:\Program Files\RayDld
  441. 2015-11-07 15:33 - 2015-11-07 15:33 - 00000000 ____D C:\Documents and Settings\Sevgin\Application Data\PowerISO
  442. 2015-11-07 15:32 - 2015-11-07 15:33 - 00000000 ____D C:\Documents and Settings\Sevgin\Application Data\istartsurf
  443. 2015-11-04 18:16 - 2015-10-11 12:39 - 02489396 _____ C:\Documents and Settings\Sevgin\Desktop\Gijom Muso - U jednom trenu.pdf
  444.  
  445. ==================== One Month Modified files and folders ========
  446.  
  447. (If an entry is included in the fixlist, the file/folder will be moved.)
  448.  
  449. 2015-12-01 22:50 - 2015-03-04 17:31 - 00000000 ____D C:\Documents and Settings\Sevgin\Local Settings\Temp
  450. 2015-12-01 22:49 - 2015-03-04 17:37 - 00000000 ____D C:\Documents and Settings\Sevgin\Application Data\uTorrent
  451. 2015-12-01 22:49 - 2015-03-04 17:04 - 00000000 ____D C:\WINDOWS
  452. 2015-12-01 22:44 - 2015-03-05 15:24 - 00000834 _____ C:\WINDOWS.0\Tasks\Adobe Flash Player Updater.job
  453. 2015-12-01 22:38 - 2015-03-04 17:49 - 00000000 ____D C:\Documents and Settings\Sevgin\Application Data\Skype
  454. 2015-12-01 22:17 - 2015-03-04 17:58 - 00000000 ____D C:\WINDOWS.0\Temp
  455. 2015-12-01 19:37 - 2015-03-04 18:06 - 00405884 _____ C:\WINDOWS.0\system32\PerfStringBackup.INI
  456. 2015-12-01 19:37 - 2015-03-04 17:58 - 00000000 ____D C:\WINDOWS.0\system32
  457. 2015-12-01 19:36 - 2015-03-04 17:58 - 00000000 ____D C:\WINDOWS.0
  458. 2015-12-01 19:35 - 2015-03-04 17:58 - 00000000 ___HD C:\WINDOWS.0\inf
  459. 2015-12-01 19:35 - 2015-03-04 17:58 - 00000000 ____D C:\WINDOWS.0\system32\mui
  460. 2015-12-01 18:46 - 2015-09-14 18:05 - 00000000 ____D C:\Documents and Settings\Sevgin\Desktop\Plan i program
  461. 2015-12-01 15:02 - 2015-03-04 17:37 - 00081191 _____ C:\WINDOWS.0\system32\nvapps.xml
  462. 2015-12-01 15:02 - 2015-03-04 17:29 - 00000006 ____H C:\WINDOWS.0\Tasks\SA.DAT
  463. 2015-11-30 22:38 - 2015-03-04 17:31 - 00000178 ___SH C:\Documents and Settings\Sevgin\ntuser.ini
  464. 2015-11-30 22:38 - 2015-03-04 17:29 - 00032578 _____ C:\WINDOWS.0\SchedLgU.Txt
  465. 2015-11-30 07:24 - 2008-04-14 06:00 - 00002206 _____ C:\WINDOWS.0\system32\wpa.dbl
  466. 2015-11-26 22:27 - 2015-03-04 17:31 - 00000000 ____D C:\Documents and Settings\Sevgin
  467. 2015-11-23 22:44 - 2015-03-04 22:36 - 00013824 _____ C:\Documents and Settings\Sevgin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  468. 2015-11-23 22:44 - 2015-03-04 19:41 - 00000069 _____ C:\WINDOWS.0\NeroDigital.ini
  469. 2015-11-19 18:08 - 2015-07-16 18:44 - 00000000 ____D C:\Documents and Settings\Sevgin\Desktop\New Folder (2)
  470. 2015-11-11 22:35 - 2015-03-04 18:44 - 00000000 ____D C:\Documents and Settings\Sevgin\Local Settings\Application Data\Adobe
  471. 2015-11-10 19:45 - 2015-03-05 15:24 - 00780488 _____ (Adobe Systems Incorporated) C:\WINDOWS.0\system32\FlashPlayerApp.exe
  472. 2015-11-10 19:45 - 2015-03-05 15:24 - 00142536 _____ (Adobe Systems Incorporated) C:\WINDOWS.0\system32\FlashPlayerCPLApp.cpl
  473. 2015-11-10 15:29 - 2015-03-04 17:34 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
  474. 2015-11-09 14:07 - 2015-03-04 17:49 - 00002269 _____ C:\Documents and Settings\All Users\Desktop\Skype.lnk
  475. 2015-11-07 17:23 - 2015-03-04 17:18 - 00000000 ____D C:\Program Files\AutorunRemover
  476. 2015-11-07 15:33 - 2015-03-04 17:35 - 00001056 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
  477. 2015-11-07 15:33 - 2015-03-04 17:35 - 00001050 _____ C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
  478. 2015-11-04 19:20 - 2015-04-21 15:34 - 00000151 _____ C:\WINDOWS.0\PhotoSnapViewer.INI
  479. 2015-11-02 15:09 - 2015-03-04 19:41 - 00000161 _____ C:\Documents and Settings\Sevgin\default.pls
  480.  
  481. ==================== Files in the root of some directories =======
  482.  
  483. 2015-11-07 16:31 - 1970-01-01 01:00 - 0000930 _____ () C:\Program Files\installscript.vdf
  484. 2015-12-01 15:18 - 2014-04-03 17:46 - 2451768 ___SH () C:\Documents and Settings\Sevgin\Application Data\bin_16347694874825.vbe
  485. 2015-03-04 22:36 - 2015-11-23 22:44 - 0013824 _____ () C:\Documents and Settings\Sevgin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  486. 2015-12-01 22:17 - 2015-12-01 22:17 - 0046592 _____ () C:\Documents and Settings\Sevgin\Local Settings\Application Data\Hexit.exe
  487. 2015-12-01 22:17 - 2015-12-01 22:17 - 0000187 _____ () C:\Documents and Settings\Sevgin\Local Settings\Application Data\Hexit.exe.config
  488.  
  489. Some files in TEMP:
  490. ====================
  491. C:\Documents and Settings\Sevgin\Local Settings\Temp\9a36ac43d07f47878eab94afbcd947bd719678.exe
  492. C:\Documents and Settings\Sevgin\Local Settings\Temp\BaiduJP_Setup_MINI_Silent.exe
  493. C:\Documents and Settings\Sevgin\Local Settings\Temp\Chip genius v3 00 to Repa_Downloader.exe
  494. C:\Documents and Settings\Sevgin\Local Settings\Temp\Chip+genius+v3+00+to+Repa__10924_i1765835254_il592682.exe
  495. C:\Documents and Settings\Sevgin\Local Settings\Temp\Chip+genius+v3+00+to+Repa__10924_i1766022653_il592682.exe
  496. C:\Documents and Settings\Sevgin\Local Settings\Temp\CloudBackup1422.exe
  497. C:\Documents and Settings\Sevgin\Local Settings\Temp\ExPromo.exe
  498. C:\Documents and Settings\Sevgin\Local Settings\Temp\GomEncDnInstaller.exe
  499. C:\Documents and Settings\Sevgin\Local Settings\Temp\ICReinstall_Malavida_Download_Manager.exe
  500. C:\Documents and Settings\Sevgin\Local Settings\Temp\javagiac0.04823524688181857.dll
  501. C:\Documents and Settings\Sevgin\Local Settings\Temp\jre-8u60-windows-au.exe
  502. C:\Documents and Settings\Sevgin\Local Settings\Temp\KERNEL.DLL
  503. C:\Documents and Settings\Sevgin\Local Settings\Temp\nstCF.exe
  504. C:\Documents and Settings\Sevgin\Local Settings\Temp\rtdrvmon.exe
  505. C:\Documents and Settings\Sevgin\Local Settings\Temp\setup.exe
  506. C:\Documents and Settings\Sevgin\Local Settings\Temp\ShellHook.dll
  507. C:\Documents and Settings\Sevgin\Local Settings\Temp\SkypeSetup.exe
  508. C:\Documents and Settings\Sevgin\Local Settings\Temp\Zzoomit_uninstall.exe
  509.  
  510.  
  511. ==================== Bamital & volsnap =================
  512.  
  513. (There is no automatic fix for files that do not pass verification.)
  514.  
  515. C:\WINDOWS.0\explorer.exe
  516. [2010-03-17 05:01] - [2010-03-17 05:01] - 1872896 ____A (Microsoft Corporation) EDADAB7C2E75B3C0B52F7EEE81B46CFA
  517.  
  518. C:\WINDOWS.0\system32\winlogon.exe
  519. [2010-03-17 05:03] - [2010-03-17 05:03] - 0568832 ____A (Microsoft Corporation) 739103085CE0EE74192B7B9245CAE66A
  520.  
  521. C:\WINDOWS.0\system32\svchost.exe => File is digitally signed
  522. C:\WINDOWS.0\system32\services.exe => File is digitally signed
  523. C:\WINDOWS.0\system32\User32.dll
  524. [2010-03-17 05:02] - [2010-03-17 05:02] - 0575488 ____A (Microsoft Corporation) D3A166458A9BDB04300FDDA261F400EC
  525.  
  526. C:\WINDOWS.0\system32\userinit.exe => File is digitally signed
  527. C:\WINDOWS.0\system32\rpcss.dll => File is digitally signed
  528. C:\WINDOWS.0\system32\dnsapi.dll => File is digitally signed
  529. C:\WINDOWS.0\system32\Drivers\volsnap.sys => File is digitally signed
  530.  
  531. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!