API tools faq
paste
MrMcShroom

For caboose

MrMcShroom
Apr 29th, 2016
284
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.67 KB | None | 0 0
raw download clone embed print report
  1. Start:
  2. CreateRestorePoint:
  3. CloseProcesses:
  4. (Mathematical Applications) C:\ProgramData\cksHaFluPVh\QHEeyanHKY.exe
  5. CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
  6. couponcheapchea (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - couponcheapchea) <==== ATTENTION
  7. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  8. HKU\S-1-5-21-3827153911-1438991111-4112591388-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  9. CHR DefaultSearchKeyword: Default -> www-searching.com
  10. CHR StartupUrls: Default -> "hxxps://www.yahoo.com/?fr=hp-avast&type=avastbcl","hxxp://www.google.com/"
  11. S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
  12. S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
  13. S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
  14. S2 McNaiAnn; "C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
  15. S3 McODS; "C:\Program Files\mcafee\VirusScan\mcods.exe" [X]
  16. S2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [X]
  17. S2 MSK80Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
  18. couponcheapchea (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - couponcheapchea) <==== ATTENTION
  19. GamesDesktop 025.163 (HKLM-x32\...\gmsd_us_163_is1) (Version: - GAMESDESKTOP) <==== ATTENTION
  20. Ge-Force (HKLM-x32\...\Ge-Force) (Version: 1.36.01.22 - Webar) <==== ATTENTION
  21. globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION
  22. LibraryProc (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{163ac2d4}) (Version: - Software Publisher) <==== ATTENTION
  23. News Alert (HKLM-x32\...\BreakingNewsAlert) (Version: 2.7.56 - Mathematical Applications) <==== ATTENTION
  24. Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.3 - PC Utilities Software Limited) <==== ATTENTION
  25. Pro PC Cleaner (HKLM-x32\...\{23497AFC-382C-417E-AC1F-42D98A5A8ADA}) (Version: 2.5.6 - Rainmaker Software Group LLC.) <==== ATTENTION
  26. Settings Manager (HKU\S-1-5-21-3827153911-1438991111-4112591388-1001\...\Settings Manager) (Version: 22.3.0.1 - Spigot, Inc.) <==== ATTENTION
  27. Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATTENTION
  28. Task: {1F60E001-784A-4367-8403-76E4258967E2} - System32\Tasks\mr_fun_updating_service => C:\Program Files (x86)\mr fun\mr_fun_updating_service.exe [2015-04-03] () <==== ATTENTION
  29. Task: {34D91CDA-E07B-4FEA-8888-47F9DCD6806A} - System32\Tasks\48_dresses_updating_service => C:\Program Files (x86)\48 dresses\48_dresses_updating_service.exe [2015-04-05] () <==== ATTENTION
  30. Task: {56CD8C54-0369-49D7-9113-8856A5651674} - System32\Tasks\ProPCCleaner_Popup => C:\Program Files (x86)\Pro PC Cleaner\Splash.exe <==== ATTENTION
  31. Task: {AFCDB96C-EF29-4D39-8398-0D570875C28F} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro 3.38\OptProLauncher.exe <==== ATTENTION
  32. Task: {B53581C3-7294-4FE8-BD78-83ACDDDAEC9E} - System32\Tasks\ProPCCleaner_Start => C:\Program Files (x86)\Pro PC Cleaner\ProPCCleaner.exe <==== ATTENTION
  33. Task: {BCE955FA-5B27-4383-B7DC-37ABA3CA174B} - System32\Tasks\SPBIW_UpdateTask_Time_343036353037353739312d78782345572a4a3441325057 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
  34. Task: {E3AB531F-1ED8-46DC-8BC8-C75F7FA6718E} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
  35. Task: {F8A001A2-B3C0-420B-A836-A9C5DEC68846} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
  36. Task: C:\Windows\Tasks\48_dresses_updating_service.job => C:\Program Files (x86)\48 dresses\48_dresses_updating_service.exe« /campid=2913 /verid=1 /url=hxxp:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=48_dresses_updating_service /funurl=hxxp:/stats.buildomserv.com <==== ATTENTION
  37. Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
  38. Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ATTENTION
  39. Task: C:\Windows\Tasks\mr_fun_updating_service.job => C:\Program Files (x86)\mr fun\mr_fun_updating_service.exe§ /campid=2913 /verid=1 /url=hxxp:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=mr_fun_updating_service /funurl=hxxp:/stats.buildomserv.com <==== ATTENTION
  40. HKU\S-1-5-21-3827153911-1438991111-4112591388-1001\...\StartupApproved\Run: => "Optimizer Pro"
  41. HKU\S-1-5-21-3827153911-1438991111-4112591388-1001\...\StartupApproved\Run: => "YTDownloader"
  42. HKU\S-1-5-21-3827153911-1438991111-4112591388-1001\...\StartupApproved\Run: => "Pokki"
  43. HKU\S-1-5-21-3827153911-1438991111-4112591388-1001\...\StartupApproved\StartupFolder: => "optimizerpro_soft_partner.lnk"
  44. HKLM\...\StartupApproved\Run32: => "YTDownloader"
  45. HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
  46. HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
  47. HKLM\...\StartupApproved\Run32: => "abDocsDllLoader"
  48. Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\iaioi2ce.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
  49. \Device\HarddiskVolume4\Windows\System32\drivers\iaioi2ce.sys
  50. EmptyTemp:
  51. Hosts:
  52. Reboot:
  53. End
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!