Spyware / Malware / Virus Removal

Hijack This Log

25 min read

Looking for the outcome? Ask AI

afterburner Topic Starter

Post #1November 30, 2010, 6:57 AM UTC

Please find attached my Hijack this log. I am also including a picture of a pop-up which appeared during the scanning process.
I have taken no steps and will await a knowledgeable reply. Thank you for your help.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:50:05 PM, on 11/29/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\VMware\VMware Player\hqtray.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Windows\WindowsMobile\WmdHost.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files (x86)\Microsoft Office\Office12\POWERPNT.EXE
C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://login.live.com/login.srf?wa=wsignin…=mai&snsc=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: FAIESSO Helper Object - {A2F122DA-055F-4df7-8F24-7354DBDBA85B} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~2\mcafee\sitead~1\mcieplg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
O4 - HKLM\..\Run: [UpdateYouPaintShortCut] "C:\Program Files (x86)\CyberLink\YouPaint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouPaint" UpdateWithCreateOnce "Software\CyberLink\YouPaint\1.2"
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\Dell\Dell TouchCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Dell\Dell TouchCam" UpdateWithCreateOnce "Software\CyberLink\Dell TouchCam\1.1"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [VMware hqtray] "C:\Program Files (x86)\VMware\VMware Player\hqtray.exe"
O4 - HKLM\..\Run: [Lexmark 6500 Series] "C:\Program Files (x86)\Lexmark 6500 Series\fm3032.exe" /s
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware (registration)] regsvr32.exe /s "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [InnoSetupRegFile.0000000001] "C:\Windows\is-05HHE.exe" /REG /REGSVRMODE
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [PeerBlock] C:\Program Files\PeerBlock\peerblock.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [DefaultSystem] C:\ProgramData\Sys32c.exe
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &NeoTrace It! - C:\PROGRA~2\NEOTRA~1\NTXcontext.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\PROGRA~2\NEOTRA~1\NTXtoolbar.htm (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\vmware\vmware player\vsocklib.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: FastAccess - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_fd9b60625db011f9\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Intel® PROSet/Wireless WiMAX Red Bend Device Management Service (DMAgent) - Red Bend Ltd. - C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FAService - Sensible Vision - C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® IT Director (ITDirectorService) - Intel Corporation - C:\Program Files (x86)\Intel\IntelITDirector\itdirectorservice.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: lxdfCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\x64\3\\lxdfserv.exe
O23 - Service: lxdf_device - - C:\Windows\system32\lxdfcoms.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing)
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - Unknown owner - C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sound Blaster X-Fi MB Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_fd9b60625db011f9\STacSV64.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Intel® Turbo Boost Technology Monitor (TurboBoost) - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Service (WiMAXAppSrv) - Intel® Corporation - C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 18366 bytes

System info
Windows 7 Ultimate
Dell Studio 1747
i7 Q 840 1.87 GHz
8.00 GB RAM
64 Bit

Thank you very much for your help

Attachments:

📎HIJACKTHIS.jpg

Tomk

Post #2December 1, 2010, 7:19 PM UTC

Hi afterburner,

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

uTorrent
You have uTorrent, a P2P/file sharing programs installed on your computer. P2P applications like it are the largest source of malware we see. You'll be doing yourself a favor by removing it.

References for the risk of these programs can be found in these links:
http://www.microsoft.com/windows/ie/commun…protection.mspx
http://www.techweb.com/wire/160500554
http://www.internetworldstats.com/articles/art053.htm://http://www.techweb.com/wire/1605005…cles/art053.htm

I would recommend that you uninstall uTorrent, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.

If you wish to keep it, please do not use it until your computer is cleaned.

It appears that you have Malwarebytes'. Please post the most recent log.

HijackThis doesn't play nice with 64 bit systems so I'd like a different log.

Download OTL to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
Double click inside the Custom Scan box at the bottom
A window will appear saying "Click Ok to load a custom scan from a file or Cancel to cancel"
Click the Ok button and navigate to the file scan.txt which we just saved to your desktop
Select scan.txt and click Open. Writing will now appear under the Custom Scan box
Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

afterburner

Post #3December 1, 2010, 7:36 PM UTC

Thanks a lot for your assistance. Here is the MB recent log Malwarebytes' Anti-Malware 1.50 www.malwarebytes.org Database version: 5220 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 11/30/2010 11:37:24 AM mbam-log-2010-11-30 (11-37-24).txt Scan type: Full scan (C:\|) Objects scanned: 294897 Time elapsed: 31 minute(s), 38 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 2 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: c:\Users\Dominus\AppData\Local\Temp\crack (RiskTool.P2P.H) -> Quarantined and deleted successfully. c:\Users\Dominus\AppData\Local\Temp\KEYGEN (RiskTool.P2P.H) -> Quarantined and deleted successfully. Files Infected: (No malicious items detected) I am running the OTL as we speak

Tomk

Post #4December 1, 2010, 7:44 PM UTC

afterburner,

Folders Infected:
c:\Users\Dominus\AppData\Local\Temp\crack (RiskTool.P2P.H) -> Quarantined and deleted successfully.
c:\Users\Dominus\AppData\Local\Temp\KEYGEN (RiskTool.P2P.H) -> Quarantined and deleted successfully.

Uhmm… Do I need to explain to you that when you download pirated software… I can without hesitation assure you that you will get infected? (besides… it's illegal).

Waiting for OTL log.

afterburner

Post #5December 1, 2010, 8:33 PM UTC

TomK, here is the extras log

OTL Extras logfile created on: 12/1/2010 12:36:55 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Dominus\Downloads
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

8.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 73.00% Memory free
16.00 Gb Paging File | 14.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 454.06 Gb Total Space | 353.66 Gb Free Space | 77.89% Space Free | Partition Type: NTFS
Drive D: | 465.76 Gb Total Space | 229.76 Gb Free Space | 49.33% Space Free | Partition Type: NTFS
Drive F: | 3.73 Gb Total Space | 3.36 Gb Free Space | 90.09% Space Free | Partition Type: FAT32

Computer Name: DOMINUS-PC | User Name: Dominus | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] – C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.0.0 (r181)
"{0A736376-5483-A955-2D85-774122C9DAD7}" = ATI Catalyst Install Manager
"{1336D61B-1D48-4E5C-9E39-35444B00EE3D}" = FastAccess
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{26A24AE4-039D-4CA4-87B4-2F86416021FF}" = Java™ 6 Update 21 (64-bit)
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel® Turbo Boost Technology Monitor
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{563F041C-DFDB-437B-A1E8-E141E0906076}" = Microsoft IntelliPoint 8.0
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center
"{64A3A4F4-B792-11D6-A78A-00B0D0160210}" = Java™ SE Development Kit 6 Update 21 (64-bit)
"{6548B189-BEA4-4041-80E0-AEB60548E046}" = Intel® PROSet/Wireless WiMAX Software
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.2.3
"{6ACE7F46-FACE-4125-AE86-672F4F2A6A28}" = Bing Maps 3D
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8965228E-F4F1-4281-AAD2-31448A6561B7}" = Foxit PDF IFilter
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = WIDCOMM Bluetooth Software
"{C7153392-1D61-B3A5-D054-987CF1A5CFEA}" = ccc-utility64
"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
"{CCAFF072-4DDB-4846-963D-15F02A8E9472}" = Intel® PROSet/Wireless WiFi Software
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F46C9CBE-1525-B428-E3D1-60FA79B445A3}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6F7EFFE-7E09-F490-DBA1-1F720433FC62}" = WMV9/VC-1 Video Playback
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.56
"KLiteCodecPack64_is1" = K-Lite Codec Pack (64-bit) v4.0.0
"Lexmark 6500 Series" = Lexmark 6500 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"ProInst" = Intel PROSet Wireless
"Recuva" = Recuva
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR archiver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Dell TouchCam
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}" = Microsoft Visual C++ 2005 Redistributable
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0A37050F-A3E6-F83C-E2EC-B7F3A2C81C13}" = Catalyst Control Center Core Implementation
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1272D148-4A53-C14D-A6C2-1CF277177356}" = CCC Help English
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{17BECEAF-FC27-5800-12CC-7CEFE59D8B70}" = Catalyst Control Center Graphics Previews Vista
"{187914BC-89DA-EBFA-B6C2-306DFBD15036}" = Catalyst Control Center Localization All
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B79F21E-63AB-4A93-8DDA-5A214956CFFF}" = CCC Help English
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 22
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A683A6C-3363-C08E-570B-5A304E496BC5}" = Catalyst Control Center Graphics Previews Vista
"{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}" = Next Generation Visualisations
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3741CC24-787C-F191-7B7A-3886A089252A}" = CCC Help Chinese Standard
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{3D374523-CFDE-461A-827E-2A102E2AB365}" = Star Wars Battlefront II
"{3EEFDA25-AED5-1116-CCB4-394B0C68D6D7}" = Catalyst Control Center Graphics Light
"{41218F6B-9198-E007-B1B5-C3398A5D6A9E}" = CCC Help Dutch
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{4358C118-AE5A-CE1E-4521-66A1B7C8AB5C}" = CCC Help Italian
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4F26C164-9373-4974-8F43-E0F2176AF937}" = CLEAR™ WiMAX Tutorial
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{62396FAC-2718-1CD9-BBF3-F78759D477AB}" = Skins
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{687105CD-5151-0E0A-3C43-E53B3CF10BA2}" = CCC Help Chinese Traditional
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6C021189-3BD1-EB7E-74A6-72A2C5E1F346}" = Catalyst Control Center Graphics Full Existing
"{6DE65446-8CD5-2118-6B8B-CF30EE30DFC3}" = CCC Help Spanish
"{71E015CC-52DA-4536-AF0C-C643BA1E45FB}" = Catalyst Control Center - Branding
"{72BF1DA0-2B00-4794-9173-159722019B74}" = CyberLink YouPaint
"{731C9181-C8CC-77B4-78EA-8E9B858BC941}" = Catalyst Control Center InstallProxy
"{75CE8AF5-0A5E-4A42-BC67-F83591DA9A7D}" = Sound Blaster X-Fi MB
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{790D741E-335D-1843-BA7B-3BC640E13FE6}" = CCC Help Danish
"{7EA4BBFA-5430-EC01-269F-6809F03852D0}" = CCC Help Finnish
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{836D5E9B-6D1E-4AFF-9329-5B9CB29A73C6}" = ArcSoft Print Creations
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FF90DB8-6DED-44A3-B182-244FEC09012F}" = Microsoft Touch Pack for Windows 7
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUSR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUSR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUSR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_PROPLUSR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_PROPLUSR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUSR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{936AF7D4-B995-F8FA-7D92-9ADE174C09A8}" = CCC Help French
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D318C86-AF4C-409F-A6AC-7183FF4CF424}" = Internet TV for Windows Media Center
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A1B9FF1D-DDBA-C5C0-9404-ADDA1650EA53}" = ccc-core-static
"{A2023936-7D17-417D-8E8C-BD0062827D7B}" = Star Wars Battlefront II PC Server
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A3A328BB-658E-695E-85EC-A45782209220}" = CCC Help Japanese
"{A53A11EA-0095-493F-86FA-A15E8A86A405}" = VMware Player
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{B03A4EA6-3F96-0C4E-2BEC-4C1FDBCE5ED9}" = CCC Help Swedish
"{B12DEF61-EC9F-3901-AC33-6EFC95E8F16C}" = ccc-core-static
"{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn
"{BAEBFB9B-43D0-7CC3-357F-C68311691F5D}" = CCC Help Norwegian
"{BE898830-D652-3A4F-19D8-D2CE2EAD8F3D}" = Catalyst Control Center InstallProxy
"{BF95339B-AB72-4C85-A6E1-C008CD2CC733}" = Xirrus Wi-Fi Inspector
"{C0904F0F-8A5C-1966-F87B-DA89B5F68FD7}" = CCC Help Russian
"{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}" = Microsoft Outlook Personal Folders Backup
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE1DEBFE-66A2-DEAF-6854-7DDE7BE34E50}" = Catalyst Control Center Graphics Previews Common
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D102611A-6466-4101-A51D-51069303AC65}" = tools-linux
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DBF0A096-6EE7-488E-8C04-2536C7B3F120}" = Dell Touch Zone
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E2D09AC2-4153-4817-AAEB-24F92A8BCE88}" = Windows Media Center Add-in for Flash
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E98350A5-4518-2004-2393-55F389856B29}" = Catalyst Control Center Localization All
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EDB84216-164C-1EC4-8C94-A98B5932C2F6}" = CCC Help German
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F38E39CE-3EAC-F845-C09B-0539F8539DDA}" = CCC Help Korean
"{F660A9AE-520F-827D-2E6D-74ED799AA4EA}" = Catalyst Control Center Graphics Full New
"{F8BDFBC2-BBE4-5291-B5C5-24D17ED5FD86}" = CCC Help Portuguese
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"AnyDVD" = AnyDVD
"avast5" = avast! Free Antivirus
"Call of Duty: Black Ops_is1" = Call of Duty: Black Ops
"CloneDVD2" = CloneDVD2
"Dell Dock" = Dell Dock
"Dell Webcam Central" = Dell Webcam Central
"Foxit Reader" = Foxit Reader
"GoToAssist" = GoToAssist 8.0.0.514
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Dell TouchCam
"InstallShield_{72BF1DA0-2B00-4794-9173-159722019B74}" = CyberLink YouPaint
"jGRASP" = jGRASP
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.5.0 (Full)
"Magic ISO Maker v5.5 (build 0265)" = Magic ISO Maker v5.5 (build 0265)
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"NeoTrace Pro 3.25" = NeoTrace Pro 3.25
"Oxelon Media Converter_is1" = Oxelon Media Converter 1.1
"PC Tools Firewall Plus" = PC Tools Firewall Plus 6.0
"Primal Pictures Interactive Hand 2000" = Primal Pictures Interactive Hand 2000
"PROPLUSR" = Microsoft Office Professional Plus 2007
"PuTTY_is1" = PuTTY version 0.60
"RealPlayer 12.0" = RealPlayer
"Recover My Files_is1" = Recover My Files
"Steam App 10180" = Call of Duty: Modern Warfare 2
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Steam App 240" = Counter-Strike: Source
"Steam App 300" = Day of Defeat: Source
"Steam App 320" = Half-Life 2: Deathmatch
"Steam App 340" = Half-Life 2: Lost Coast
"uTorrent" = µTorrent
"VideoPad" = VideoPad Video Editor
"VMware_Player" = VMware Player
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.0.2
"WinRAR archiver" = WinRAR archiver
"Wireshark" = Wireshark 1.1.2
"Xfire" = Xfire (remove only)
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"f031ef6ac137efc5" = Dell Driver Download Manager
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.8

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 11/27/2010 8:39:57 AM | Computer Name = Dominus-PC | Source = RapiMgr | ID = 8
Description = Windows Mobile-based device failed to connect due to communication
(0x80072745) failure (see data for failure code).

Error - 11/27/2010 12:01:52 PM | Computer Name = Dominus-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\Real\RealPlayer\plugins\rmxrend.dll".
Dependent
Assembly Microsoft.VC90.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 11/27/2010 12:18:07 PM | Computer Name = Dominus-PC | Source = Application Hang | ID = 1002
Description = The program DVDMaker.exe version 6.1.7600.16385 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1ba4 Start
Time: 01cb8e0382718fca Termination Time: 28 Application Path: C:\Program Files\DVD
Maker\DVDMaker.exe Report Id: d61f60f4-fa41-11df-9eda-b2b2b3f8ae34

Error - 11/27/2010 12:42:17 PM | Computer Name = Dominus-PC | Source = Application Hang | ID = 1002
Description = The program itdirector.exe version 1.7.0.68 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 17cc Start
Time: 01cb8e18cfd85170 Termination Time: 60000 Application Path: C:\Program Files
(x86)\Intel\IntelITDirector\itdirector.exe Report Id:

Error - 11/28/2010 1:45:04 AM | Computer Name = Dominus-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16671 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1778 Start
Time: 01cb8ebf022da557 Termination Time: 16 Application Path: C:\Program Files (x86)\Internet
Explorer\iexplore.exe Report Id: a071c4c3-fab2-11df-82f4-a017fab3d0c8

Error - 11/28/2010 2:28:43 AM | Computer Name = Dominus-PC | Source = RapiMgr | ID = 8
Description = Windows Mobile-based device failed to connect due to communication
(0x80072745) failure (see data for failure code).

Error - 11/28/2010 4:43:58 AM | Computer Name = Dominus-PC | Source = RapiMgr | ID = 8
Description = Windows Mobile-based device failed to connect due to communication
(0x80072745) failure (see data for failure code).

Error - 11/28/2010 7:16:19 PM | Computer Name = Dominus-PC | Source = Application Error | ID = 1000
Description = Faulting application name: lxdfJSWX.EXE, version: 3.383.0.0, time
stamp: 0x4653c5e0 Faulting module name: lxdfJSWX.EXE, version: 3.383.0.0, time stamp:
0x4653c5e0 Exception code: 0xc000041d Fault offset: 0x000000000001454e Faulting process
id: 0xd30 Faulting application start time: 0x01cb8f4784209f68 Faulting application
path: C:\Windows\system32\spool\DRIVERS\x64\3\lxdfJSWX.EXE Faulting module path:
C:\Windows\system32\spool\DRIVERS\x64\3\lxdfJSWX.EXE Report Id: 81762153-fb45-11df-b03e-a295ef16423c

Error - 11/28/2010 10:35:37 PM | Computer Name = Dominus-PC | Source = Windows Backup | ID = 4103
Description =

Error - 11/29/2010 8:21:42 AM | Computer Name = Dominus-PC | Source = RapiMgr | ID = 8
Description = Windows Mobile-based device failed to connect due to communication
(0x80072745) failure (see data for failure code).

[ Dell Events ]
Error - 11/19/2010 4:21:23 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/19/2010 8:38:26 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/19/2010 8:38:26 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 6:01:59 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 6:01:59 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 6:06:00 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 6:06:00 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 9:50:51 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 9:50:51 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 11/20/2010 9:54:07 PM | Computer Name = Dominus-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

[ Media Center Events ]
Error - 11/16/2010 9:07:39 AM | Computer Name = Dominus-PC | Source = MCUpdate | ID = 0
Description = 6:07:39 AM - Error connecting to the internet. 6:07:39 AM - Unable
to contact server..

Error - 11/16/2010 9:07:48 AM | Computer Name = Dominus-PC | Source = MCUpdate | ID = 0
Description = 6:07:44 AM - Error connecting to the internet. 6:07:44 AM - Unable
to contact server..

Error - 11/16/2010 10:08:06 AM | Computer Name = Dominus-PC | Source = MCUpdate | ID = 0
Description = 7:08:06 AM - Error connecting to the internet. 7:08:06 AM - Unable
to contact server..

Error - 11/16/2010 10:08:13 AM | Computer Name = Dominus-PC | Source = MCUpdate | ID = 0
Description = 7:08:11 AM - Error connecting to the internet. 7:08:11 AM - Unable
to contact server..

Error - 11/16/2010 11:08:30 AM | Computer Name = Dominus-PC | Source = MCUpdate | ID = 0
Description = 8:08:30 AM - Error connecting to the internet. 8:08:30 AM - Unable
to contact server..

Error - 11/16/2010 11:08:36 AM | Computer Name = Dominus-PC | Source = MCUpdate | ID = 0
Description = 8:08:35 AM - Error connecting to the internet. 8:08:35 AM - Unable
to contact server..

[ OSession Events ]
Error - 11/26/2010 12:57:46 AM | Computer Name = Dominus-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 2, Application Name: Microsoft Office Access, Application Version:
12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 741
seconds with 720 seconds of active time. This session ended with a crash.

Error - 11/26/2010 1:15:00 AM | Computer Name = Dominus-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 2, Application Name: Microsoft Office Access, Application Version:
12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 1023
seconds with 1020 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 12/1/2010 11:15:27 AM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the lxdfCATSCustConnectService
service to connect.

Error - 12/1/2010 11:15:27 AM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7000
Description = The lxdfCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 12/1/2010 11:18:34 AM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the COM+
System Application service to connect.

Error - 12/1/2010 11:18:34 AM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7000
Description = The COM+ System Application service failed to start due to the following
error: %%1053

Error - 12/1/2010 11:18:34 AM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7001
Description = The Intel® IT Director service depends on the COM+ System Application
service which failed to start because of the following error: %%1053

Error - 12/1/2010 2:50:31 PM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the lxdfCATSCustConnectService
service to connect.

Error - 12/1/2010 2:50:31 PM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7000
Description = The lxdfCATSCustConnectService service failed to start due to the
following error: %%1053

Error - 12/1/2010 3:06:19 PM | Computer Name = Dominus-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 12/1/2010 3:26:43 PM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the lxdfCATSCustConnectService
service to connect.

Error - 12/1/2010 3:26:43 PM | Computer Name = Dominus-PC | Source = Service Control Manager | ID = 7000
Description = The lxdfCATSCustConnectService service failed to start due to the
following error: %%1053

< End of report >

afterburner

Post #6December 1, 2010, 8:35 PM UTC

Here is the OTL log

OTL logfile created on: 12/1/2010 12:36:55 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Dominus\Downloads
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

8.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 73.00% Memory free
16.00 Gb Paging File | 14.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 454.06 Gb Total Space | 353.66 Gb Free Space | 77.89% Space Free | Partition Type: NTFS
Drive D: | 465.76 Gb Total Space | 229.76 Gb Free Space | 49.33% Space Free | Partition Type: NTFS
Drive F: | 3.73 Gb Total Space | 3.36 Gb Free Space | 90.09% Space Free | Partition Type: FAT32

Computer Name: DOMINUS-PC | User Name: Dominus | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found – C:\Windows\SysWow64\DRIVERS\o2flash.exe
PRC - [2010/12/01 12:29:23 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Users\Dominus\Downloads\OTL.exe
PRC - [2010/11/12 13:44:30 | 000,394,616 | —- | M] (BitTorrent, Inc.) – C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2010/11/11 13:31:54 | 000,334,448 | —- | M] (VMware, Inc.) – C:\Windows\SysWOW64\vmnetdhcp.exe
PRC - [2010/11/11 13:31:50 | 000,404,080 | —- | M] (VMware, Inc.) – C:\Windows\SysWOW64\vmnat.exe
PRC - [2010/11/11 13:31:36 | 000,064,112 | —- | M] (VMware, Inc.) – C:\Program Files (x86)\VMware\VMware Player\hqtray.exe
PRC - [2010/11/11 13:30:44 | 000,113,264 | —- | M] (VMware, Inc.) – C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
PRC - [2010/11/11 12:31:44 | 000,539,248 | —- | M] (VMware, Inc.) – C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2010/11/11 05:39:40 | 000,195,072 | —- | M] (ArcSoft Inc.) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010/11/11 05:39:40 | 000,109,056 | —- | M] (ArcSoft Inc.) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2010/10/26 23:10:00 | 000,912,344 | —- | M] (Mozilla Corporation) – C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/09/07 09:12:02 | 002,838,912 | —- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 09:11:59 | 000,040,384 | —- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/04/04 11:44:10 | 000,095,560 | —- | M] (Sensible Vision ) – C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
PRC - [2010/04/04 11:44:08 | 001,992,008 | —- | M] (Sensible Vision ) – C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
PRC - [2010/04/04 11:43:38 | 002,409,800 | —- | M] (Sensible Vision ) – C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
PRC - [2010/01/12 10:41:00 | 003,168,216 | —- | M] (PC Tools) – C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
PRC - [2010/01/11 11:20:48 | 000,155,648 | —- | M] (Stardock Corporation) – C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2009/12/29 15:35:38 | 000,140,520 | —- | M] (CyberLink Corp.) – C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/12/15 21:14:22 | 000,498,160 | —- | M] () – C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2009/11/09 10:20:14 | 000,818,432 | —- | M] (PC Tools) – C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
PRC - [2009/08/17 20:09:54 | 000,013,600 | —- | M] (Broadcom Corporation.) – c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
PRC - [2009/06/24 15:21:38 | 000,409,744 | —- | M] (Creative Technology Ltd) – C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2009/05/21 07:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
PRC - [2009/05/21 07:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/02/23 12:43:56 | 000,307,200 | —- | M] (Creative Technology Ltd) – C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2007/05/28 09:57:54 | 000,275,968 | —- | M] (Rocket Division Software) – C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

========== Modules (SafeList) ==========

MOD - [2010/12/01 12:29:23 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Users\Dominus\Downloads\OTL.exe
MOD - [2010/08/20 22:21:32 | 001,680,896 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
MOD - [2010/07/14 12:30:14 | 000,018,688 | —- | M] (McAfee, Inc.) – c:\Program Files (x86)\McAfee\SiteAdvisor\sahook.dll
MOD - [2009/07/13 18:16:20 | 002,311,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\wpdshext.dll
MOD - [2009/07/13 18:15:48 | 000,035,328 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\mssprxy.dll
MOD - [2009/07/13 18:15:27 | 000,009,728 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\IconCodecService.dll
MOD - [2009/07/13 18:03:50 | 001,624,576 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf
861225ca\GdiPlus.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Running] – C:\Windows\SysNative\vmnat.exe – (VMware NAT Service)
SRV:64bit: - File not found [Auto | Running] – C:\Windows\SysNative\vmnetdhcp.exe – (VMnetDHCP)
SRV:64bit: - File not found [On_Demand | Stopped] – C:\Program Files\WinPcap\rpcapd.exe -d -f %ProgramFiles%\WinPcap\rpcapd.ini – (rpcapd)
SRV:64bit: - [2010/09/22 17:10:10 | 000,057,184 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe – (wlcrasvc)
SRV:64bit: - [2010/09/07 09:11:59 | 000,040,384 | —- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Web Scanner)
SRV:64bit: - [2010/09/07 09:11:59 | 000,040,384 | —- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Mail Scanner)
SRV:64bit: - [2010/09/07 09:11:59 | 000,040,384 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Antivirus)
SRV:64bit: - [2010/06/07 14:39:40 | 000,911,872 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe – (WiMAXAppSrv)
SRV:64bit: - [2010/06/07 14:34:20 | 000,408,576 | —- | M] (Red Bend Ltd.) [Auto | Running] – C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe – (DMAgent)
SRV:64bit: - [2010/05/21 11:37:32 | 000,134,928 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Intel\TurboBoost\TurboBoost.exe – (TurboBoost)
SRV:64bit: - [2010/04/12 15:14:08 | 000,202,752 | —- | M] (AMD) [Auto | Running] – C:\Windows\SysNative\atiesrxx.exe – (AMD External Events Utility)
SRV:64bit: - [2010/01/11 11:20:48 | 000,155,648 | —- | M] (Stardock Corporation) [Auto | Running] – C:\Program Files\Dell\DellDock\DockLogin.exe – (DockLoginService)
SRV:64bit: - [2009/09/21 14:24:40 | 001,420,560 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Intel\WiFi\bin\EvtEng.exe – (EvtEng)
SRV:64bit: - [2009/09/21 14:03:06 | 000,315,664 | —- | M] () [On_Demand | Stopped] – C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe – (MyWiFiDHCPDNS)
SRV:64bit: - [2009/09/21 14:00:44 | 000,831,760 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe – (RegSrvc)
SRV:64bit: - [2009/08/17 20:09:52 | 000,868,128 | —- | M] (Broadcom Corporation.) [Auto | Running] – c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe – (btwdins)
SRV:64bit: - [2009/07/16 02:47:00 | 000,240,128 | —- | M] (IDT, Inc.) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_fd9b60625db011f9\stacsv64.exe – (STacSV)
SRV:64bit: - [2009/07/13 18:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV:64bit: - [2009/07/13 18:40:01 | 000,193,536 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\appmgmts.dll – (AppMgmt)
SRV:64bit: - [2009/03/03 02:42:00 | 000,089,600 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_fd9b60625db011f9\AESTSr64.exe – (AESTFilters)
SRV:64bit: - [2007/05/29 05:06:06 | 001,053,104 | —- | M] ( ) [Auto | Running] – C:\Windows\SysNative\lxdfcoms.exe – (lxdf_device)
SRV:64bit: - [2007/05/29 05:05:48 | 000,033,712 | —- | M] () [Auto | Stopped] – C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxdfserv.exe – (lxdfCATSCustConnectService)
SRV:64bit: - [2007/02/12 17:43:00 | 000,065,536 | —- | M] (O2Micro International) [Auto | Running] – C:\Windows\SysNative\drivers\o2flash.exe – (O2FLASH)
SRV - [2010/11/17 11:51:57 | 000,403,240 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2010/11/11 13:31:54 | 000,334,448 | —- | M] (VMware, Inc.) [Auto | Running] – C:\Windows\SysWOW64\vmnetdhcp.exe – (VMnetDHCP)
SRV - [2010/11/11 13:31:50 | 000,404,080 | —- | M] (VMware, Inc.) [Auto | Running] – C:\Windows\SysWOW64\vmnat.exe – (VMware NAT Service)
SRV - [2010/11/11 13:30:44 | 000,113,264 | —- | M] (VMware, Inc.) [Auto | Running] – C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe – (VMAuthdService)
SRV - [2010/11/11 12:31:44 | 000,539,248 | —- | M] (VMware, Inc.) [Auto | Running] – C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe – (VMUSBArbService)
SRV - [2010/11/11 05:44:20 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe – (Creative ALchemy AL6 Licensing Service)
SRV - [2010/11/11 05:43:45 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2010/11/11 05:43:01 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe – (Sound Blaster X-Fi MB Licensing Service)
SRV - [2010/11/11 05:39:40 | 000,109,056 | —- | M] (ArcSoft Inc.) [Auto | Running] – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/11/11 05:30:16 | 000,016,680 | —- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe – (GoToAssist)
SRV - [2010/09/01 15:51:28 | 000,066,112 | —- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] – C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll – (nosGetPlusHelper) getPlus®
SRV - [2010/08/19 13:57:14 | 000,191,024 | —- | M] (VMware, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe – (ufad-ws60)
SRV - [2010/05/20 16:19:16 | 000,101,048 | —- | M] (McAfee, Inc.) [Auto | Running] – c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe – (McAfee SiteAdvisor Service)
SRV - [2010/04/04 11:43:38 | 002,409,800 | —- | M] (Sensible Vision ) [Auto | Running] – C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe – (FAService)
SRV - [2010/03/18 12:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/11/09 10:20:14 | 000,818,432 | —- | M] (PC Tools) [Auto | Running] – C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe – (PCToolsFirewallPlus)
SRV - [2009/06/10 14:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2009/05/21 07:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) [Auto | Running] – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe – (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter)
SRV - [2009/02/23 12:43:56 | 000,307,200 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)
SRV - [2008/11/09 13:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Disabled | Stopped] – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
SRV - [2007/05/31 16:11:54 | 000,443,784 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\WindowsMobile\wcescomm.dll – (WcesComm)
SRV - [2007/05/31 16:11:46 | 000,225,672 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\WindowsMobile\rapimgr.dll – (RapiMgr)
SRV - [2007/05/29 05:06:44 | 000,598,960 | —- | M] ( ) [Auto | Running] – C:\Windows\SysWow64\lxdfcoms.exe – (lxdf_device)
SRV - [2007/05/28 09:57:54 | 000,275,968 | —- | M] (Rocket Division Software) [Auto | Running] – C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe – (StarWindServiceAE)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2010/11/22 00:14:34 | 000,834,544 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\sptd.sys – (sptd)
DRV:64bit: - [2010/11/11 13:32:32 | 000,081,008 | —- | M] (VMware, Inc.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\vmci.sys – (vmci)
DRV:64bit: - [2010/11/11 13:32:20 | 000,068,720 | —- | M] (VMware, Inc.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\vmx86.sys – (vmx86)
DRV:64bit: - [2010/11/11 13:30:34 | 000,031,856 | —- | M] (VMware, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\VMkbd.sys – (vmkbd)
DRV:64bit: - [2010/11/11 13:30:18 | 000,030,320 | —- | M] (VMware, Inc.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\vmnetuserif.sys – (VMnetuserif)
DRV:64bit: - [2010/11/11 12:31:32 | 000,038,512 | —- | M] (VMware, Inc.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\hcmon.sys – (hcmon)
DRV:64bit: - [2010/11/11 10:04:52 | 000,045,104 | —- | M] (VMware, Inc.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\vmnetbridge.sys – (VMnetBridge)
DRV:64bit: - [2010/11/11 10:04:52 | 000,037,680 | —- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\vmusb.sys – (vmusb)
DRV:64bit: - [2010/11/11 10:04:52 | 000,020,016 | —- | M] (VMware, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\vmnetadapter.sys – (VMnetAdapter)
DRV:64bit: - [2010/11/11 06:45:54 | 000,187,904 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\vpchbus.sys – (vpcbus)
DRV:64bit: - [2010/11/11 06:45:54 | 000,095,232 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\vpcusb.sys – (vpcusb)
DRV:64bit: - [2010/11/11 06:45:54 | 000,066,304 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\vpcnfltr.sys – (vpcnfltr)
DRV:64bit: - [2010/11/11 06:45:25 | 000,109,056 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\sdbus.sys – (sdbus)
DRV:64bit: - [2010/09/29 06:01:46 | 000,695,400 | —- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\RTL8192su.sys – (RTL8192su)
DRV:64bit: - [2010/09/22 23:36:48 | 000,048,488 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\fssfltr.sys – (fssfltr)
DRV:64bit: - [2010/09/07 08:47:33 | 000,061,008 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt)
DRV:64bit: - [2010/07/21 15:59:28 | 000,045,456 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\point64.sys – (Point64)
DRV:64bit: - [2010/07/09 12:19:04 | 000,021,480 | —- | M] (Windows ® Win 7 DDK provider) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\cpuz134_x64.sys – (cpuz134)
DRV:64bit: - [2010/07/07 17:18:58 | 000,051,600 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\dc3d.sys – (dc3d) MS Hardware Device Detection Driver (USB)
DRV:64bit: - [2010/06/23 08:10:56 | 000,344,680 | —- | M] (Realtek ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Rt64win7.sys – (RTL8167)
DRV:64bit: - [2010/06/09 13:41:13 | 000,123,840 | —- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AnyDVD.sys – (AnyDVD)
DRV:64bit: - [2010/05/31 12:05:04 | 007,689,216 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\NETw5s64.sys – (NETw5s64) Intel®
DRV:64bit: - [2010/05/21 11:37:20 | 000,013,832 | —- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\TurboB.sys – (TurboB)
DRV:64bit: - [2010/05/16 16:28:38 | 000,175,104 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\bpmp.sys – (bpmp) Intel® Centrino®
DRV:64bit: - [2010/05/16 16:28:30 | 000,081,920 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\bpusb.sys – (bpusb)
DRV:64bit: - [2010/05/16 16:28:28 | 000,071,168 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\bpenum.sys – (bpenum)
DRV:64bit: - [2010/04/14 00:01:44 | 000,054,824 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btusbflt.sys – (btusbflt)
DRV:64bit: - [2010/04/12 15:28:34 | 006,405,120 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atipmdag.sys – (amdkmdag)
DRV:64bit: - [2010/04/12 14:18:44 | 000,188,928 | —- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atikmpag.sys – (amdkmdap)
DRV:64bit: - [2010/04/08 05:12:02 | 000,124,944 | —- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AtiHdmi.sys – (AtiHdmiService)
DRV:64bit: - [2010/01/13 07:59:28 | 000,164,496 | —- | M] (PC Tools) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\pctplfw64.sys – (pctplfw)
DRV:64bit: - [2010/01/12 08:34:16 | 000,095,504 | —- | M] (PC Tools) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys – (PCTFW-PacketFilter)
DRV:64bit: - [2010/01/07 11:40:24 | 000,306,648 | —- | M] (PC Tools) [Kernel | System | Running] – C:\Windows\SysNative\drivers\pctgntdi64.sys – (pctgntdi)
DRV:64bit: - [2010/01/07 10:35:10 | 000,081,584 | —- | M] (PC Tools) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\pctNdis64.sys – (pctNDIS)
DRV:64bit: - [2010/01/01 10:20:28 | 000,034,472 | —- | M] (Elaborate Bytes AG) [Kernel | System | Running] – C:\Windows\SysNative\drivers\ElbyCDIO.sys – (ElbyCDIO)
DRV:64bit: - [2009/12/30 12:21:24 | 000,031,800 | —- | M] (VS Revo Group) [File_System | On_Demand | Stopped] – C:\Windows\SysNative\drivers\revoflt.sys – (Revoflt)
DRV:64bit: - [2009/12/01 10:55:31 | 000,359,624 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\vpcvmm.sys – (vpcvmm)
DRV:64bit: - [2009/11/13 15:42:52 | 000,074,272 | —- | M] (O2Micro ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\o2mdgx64.sys – (O2MDGRDR)
DRV:64bit: - [2009/10/29 19:02:48 | 000,299,056 | —- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SynTP.sys – (SynTP)
DRV:64bit: - [2009/09/28 02:02:38 | 000,019,544 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Program Files\PeerBlock\pbfilter.sys – (pbfilter)
DRV:64bit: - [2009/09/18 03:33:00 | 000,023,912 | —- | M] (ST Microelectronics) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Acceler.sys – (Acceler)
DRV:64bit: - [2009/07/16 02:47:00 | 000,487,936 | —- | M] (IDT, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\stwrt64.sys – (STHDA)
DRV:64bit: - [2009/07/13 18:52:21 | 000,106,576 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:64bit: - [2009/07/13 18:52:21 | 000,028,752 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:64bit: - [2009/07/13 18:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/13 18:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/13 18:47:48 | 000,077,888 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:64bit: - [2009/07/13 18:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:64bit: - [2009/07/13 17:09:50 | 000,019,968 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usb8023x.sys – (usb_rndisx)
DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | —- | M] (Sonic Solutions) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\PxHlpa64.sys – (PxHlpa64)
DRV:64bit: - [2009/07/07 23:45:50 | 002,769,400 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\BCMWL664.SYS – (BCM43XX)
DRV:64bit: - [2009/07/01 13:46:52 | 000,098,344 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio)
DRV:64bit: - [2009/07/01 13:46:48 | 000,132,648 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt)
DRV:64bit: - [2009/07/01 13:46:40 | 000,021,160 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwrchid.sys – (btwrchid)
DRV:64bit: - [2009/06/15 12:06:42 | 000,172,704 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\CtClsFlt.sys – (CtClsFlt)
DRV:64bit: - [2009/06/10 13:38:56 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\wbem\ntfs.mof – (Ntfs)
DRV:64bit: - [2009/06/10 13:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 13:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 13:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 13:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:64bit: - [2009/04/08 14:28:46 | 000,068,992 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\xusb21.sys – (xusb21)
DRV:64bit: - [2009/04/07 16:33:08 | 000,035,104 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwl2cap.sys – (btwl2cap)
DRV:64bit: - [2009/02/24 17:35:44 | 000,255,552 | —- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\mcdbus.sys – (mcdbus)
DRV:64bit: - [2008/09/24 18:36:14 | 000,238,848 | —- | M] (Sensible Vision ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\facap.sys – (FACAP)
DRV:64bit: - [2007/11/06 13:23:14 | 000,040,464 | —- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\npf.sys – (NPF) WinPcap Packet Driver (NPF)
DRV:64bit: - [2006/11/01 12:51:00 | 000,151,656 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysNative\drivers\WimFltr.sys – (WimFltr)
DRV - [2010/08/19 13:56:38 | 000,032,816 | —- | M] (VMware, Inc.) [Kernel | Auto | Running] – C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys – (vstor2-ws60)
DRV - [2010/06/09 13:41:13 | 000,123,840 | —- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysWOW64\drivers\AnyDVD.sys – (AnyDVD)
DRV - [2009/12/29 15:35:40 | 000,146,928 | —- | M] (CyberLink Corp.) [2010/11/11 06:32:41] [Kernel | Auto | Running] – C:\Program Files (x86)\CyberLink\PowerDVD DX\000.fcl – ({1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7})
DRV - [2009/02/24 17:35:44 | 000,255,552 | —- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysWOW64\drivers\mcdbus.sys – (mcdbus)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://login.live.com/login.srf?wa=wsignin…=mai&snsc;=1
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Secure Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type;=302398"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.2
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=mcafee&p;="
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor [2010/11/23 15:31:46 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/11/12 21:11:17 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/12/01 00:31:30 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/12/01 00:08:44 | 000,000,000 | —D | M]

[2010/11/12 21:47:00 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Mozilla\Extensions
[2010/11/12 22:40:44 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Mozilla\Firefox\Profiles\1teisewd.default\extensions
[2010/11/23 19:24:07 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/11/12 21:48:08 | 000,002,024 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\McSiteAdvisor.xml

O1 HOSTS File: ([2009/06/10 14:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (FAIESSOHelper Class) - {A2F122DA-055F-4df7-8F24-7354DBDBA85B} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [IntelWirelessWiMAX] C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RunDLLEntry] C:\Windows\system32\AmbRunE.DLL File not found
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation)
O4 - HKLM..\Run: [00PCTFW] C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [FAStartup] File not found
O4 - HKLM..\Run: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe (Sensible Vision )
O4 - HKLM..\Run: [Lexmark 6500 Series] C:\Program Files (x86)\Lexmark 6500 Series\fm3032.exe ()
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UCam_Menu] C:\Program Files (x86)\Dell\Dell TouchCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateYouPaintShortCut] C:\Program Files (x86)\CyberLink\YouPaint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VMware hqtray] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team)
O4 - HKCU..\Run: [DefaultSystem] C:\ProgramData\Sys32c.exe (Avast Activators)
O4 - HKCU..\Run: [PeerBlock] C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC)
O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Users\Dominus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files (x86)\Dell\DellDock\DellDock.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: &NeoTrace; It! - C:\Program Files (x86)\NeoTracePro\NTXcontext.htm ()
O8:64bit: - Extra context menu item: Send image to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: &NeoTrace; It! - C:\Program Files (x86)\NeoTracePro\NTXcontext.htm ()
O8 - Extra context menu item: Send image to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth; Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab (PCPitstop Utility)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll File not found
O20 - Winlogon\Notify\FastAccess: DllName - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll ()
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{85ac3cb2-ee94-11df-93ac-c44619faa887}\Shell - "" = AutoRun
O33 - MountPoints2\{85ac3cb2-ee94-11df-93ac-c44619faa887}\Shell\AutoRun\command - "" = I:\WD SmartWare.exe – File not found
O33 - MountPoints2\{8f799a5b-eeb3-11df-9a73-0026b9f17f1a}\Shell - "" = AutoRun
O33 - MountPoints2\{8f799a5b-eeb3-11df-9a73-0026b9f17f1a}\Shell\AutoRun\command - "" = I:\WD SmartWare.exe – File not found
O33 - MountPoints2\{8ff5398b-f591-11df-98a8-8000600fe800}\Shell - "" = AutoRun
O33 - MountPoints2\{8ff5398b-f591-11df-98a8-8000600fe800}\Shell\AutoRun\command - "" = H:\WD SmartWare.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FFDS - ff_vfw.dll ()
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.VMnc - C:\Windows\SysWow64\vmnc.dll (VMware, Inc.)
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)

MsConfig:64bit - StartUpFolder: C:^Users^Dominus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk - C:\Program Files (x86)\MagicDisc\MagicDisc.exe - (MagicISO, Inc.)
MsConfig:64bit - StartUpFolder: C:^Users^Dominus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^peerblock - Shortcut (2).lnk - C:\Users\Dominus\Downloads\PeerBlock_r181__x64_Release_(Vista)\peerblock.exe - File not found
MsConfig:64bit - StartUpReg: DAEMON Tools Pro Agent - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Pro\DTProAgent.exe (DT Soft Ltd.)
MsConfig:64bit - StartUpReg: Desktop Disc Tool - hkey= - key= - c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
MsConfig:64bit - StartUpReg: lxdfamon - hkey= - key= - C:\Program Files (x86)\Lexmark 6500 Series\lxdfamon.exe ()
MsConfig:64bit - StartUpReg: lxdfmon.exe - hkey= - key= - C:\Program Files (x86)\Lexmark 6500 Series\lxdfmon.exe ()
MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.)
MsConfig:64bit - StartUpReg: SearchSettings - hkey= - key= - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe File not found
MsConfig:64bit - StartUpReg: TkBellExe - hkey= - key= - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.

SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: MCODS - Reg Error: Value error.
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: vmms - Service
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS - Reg Error: Value error.
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: MCODS - Reg Error: Value error.
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: vmms - Service
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SafeBootNet: HelpSvc - Service
SafeBootNet: MCODS - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {336DB497-7FC1-D2F8-CD3A-04368930CFB4} - Internet Explorer
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error.
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP

========== Files/Folders - Created Within 30 Days ==========

[2010/12/01 08:26:34 | 000,121,936 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSP.sys
[2010/12/01 08:26:34 | 000,020,048 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2010/12/01 08:26:31 | 000,028,752 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswRdr.sys
[2010/12/01 08:26:28 | 000,051,280 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswTdi.sys
[2010/12/01 08:26:26 | 000,061,008 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2010/12/01 08:26:13 | 000,167,592 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2010/12/01 08:26:13 | 000,038,848 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2010/11/30 23:44:43 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\DVD Flick
[2010/11/30 11:40:29 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Bitcricket
[2010/11/30 11:34:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bitcricket
[2010/11/30 10:06:45 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\TrojanHunter
[2010/11/30 03:43:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\TrojanHunter 5.3
[2010/11/30 03:42:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\ATS2
[2010/11/30 03:41:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\GridinSoft Trojan Killer
[2010/11/30 02:11:50 | 000,000,000 | —D | C] – C:\SMBX
[2010/11/29 23:40:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2010/11/29 23:11:21 | 000,385,024 | —- | C] (Avast Activators) – C:\ProgramData\Sys32c.exe
[2010/11/29 11:48:43 | 000,000,000 | —D | C] – C:\ProgramData\NOS
[2010/11/29 11:48:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\NOS
[2010/11/28 14:59:51 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\6500 Series
[2010/11/28 11:17:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2010/11/28 11:17:32 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Google
[2010/11/27 23:44:10 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Lexmark Productivity Studio
[2010/11/27 23:23:09 | 000,000,000 | —D | C] – C:\ProgramData\Lx_cats
[2010/11/27 23:22:15 | 000,000,000 | —D | C] – C:\logs
[2010/11/27 23:21:19 | 000,000,000 | —D | C] – C:\ProgramData\6500 Series
[2010/11/27 23:20:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\Lexmark 6500 Series
[2010/11/27 23:20:57 | 001,200,128 | —- | C] ( ) – C:\Windows\SysWow64\lxdfserv.dll
[2010/11/27 23:20:57 | 000,950,272 | —- | C] ( ) – C:\Windows\SysWow64\lxdfusb1.dll
[2010/11/27 23:20:57 | 000,860,160 | —- | C] ( ) – C:\Windows\SysWow64\lxdfcomc.dll
[2010/11/27 23:20:57 | 000,663,552 | —- | C] ( ) – C:\Windows\SysWow64\lxdfhbn3.dll
[2010/11/27 23:20:57 | 000,647,168 | —- | C] ( ) – C:\Windows\SysWow64\lxdfpmui.dll
[2010/11/27 23:20:57 | 000,598,960 | —- | C] ( ) – C:\Windows\SysWow64\lxdfcoms.exe
[2010/11/27 23:20:57 | 000,565,248 | —- | C] ( ) – C:\Windows\SysWow64\lxdflmpm.dll
[2010/11/27 23:20:57 | 000,365,488 | —- | C] ( ) – C:\Windows\SysWow64\lxdfcfg.exe
[2010/11/27 23:20:57 | 000,364,544 | —- | C] ( ) – C:\Windows\SysWow64\lxdfcomm.dll
[2010/11/27 23:20:57 | 000,356,352 | —- | C] ( ) – C:\Windows\SysWow64\lxdfinpa.dll
[2010/11/27 23:20:57 | 000,339,968 | —- | C] ( ) – C:\Windows\SysWow64\lxdfiesc.dll
[2010/11/27 23:20:57 | 000,320,432 | —- | C] ( ) – C:\Windows\SysWow64\lxdfih.exe
[2010/11/27 23:20:57 | 000,053,248 | —- | C] ( ) – C:\Windows\SysWow64\lxdfprox.dll
[2010/11/27 23:20:33 | 001,895,936 | —- | C] ( ) – C:\Windows\SysNative\lxdfserv.dll
[2010/11/27 23:20:33 | 001,501,696 | —- | C] ( ) – C:\Windows\SysNative\lxdfusb1.dll
[2010/11/27 23:20:33 | 001,065,984 | —- | C] ( ) – C:\Windows\SysNative\lxdfhbn3.dll
[2010/11/27 23:20:33 | 001,053,104 | —- | C] ( ) – C:\Windows\SysNative\lxdfcoms.exe
[2010/11/27 23:20:33 | 000,980,992 | —- | C] ( ) – C:\Windows\SysNative\lxdfpmui.dll
[2010/11/27 23:20:33 | 000,879,104 | —- | C] ( ) – C:\Windows\SysNative\lxdflmpm.dll
[2010/11/27 23:20:33 | 000,668,672 | —- | C] ( ) – C:\Windows\SysNative\lxdfhcp.dll
[2010/11/27 23:20:33 | 000,563,200 | —- | C] ( ) – C:\Windows\SysNative\lxdfcomm.dll
[2010/11/27 23:20:33 | 000,541,184 | —- | C] ( ) – C:\Windows\SysNative\lxdfinpa.dll
[2010/11/27 23:20:33 | 000,515,504 | —- | C] ( ) – C:\Windows\SysNative\lxdfih.exe
[2010/11/27 23:20:33 | 000,509,440 | —- | C] ( ) – C:\Windows\SysNative\lxdfiesc.dll
[2010/11/27 23:20:33 | 000,047,104 | —- | C] ( ) – C:\Windows\SysNative\lxdfprox.dll
[2010/11/27 23:20:32 | 001,489,408 | —- | C] ( ) – C:\Windows\SysNative\lxdfcomc.dll
[2010/11/27 23:20:31 | 000,598,960 | —- | C] ( ) – C:\Windows\SysNative\lxdfcfg.exe
[2010/11/27 23:20:28 | 000,000,000 | —D | C] – C:\Program Files\Lexmark 6500 Series
[2010/11/27 23:19:35 | 000,000,000 | —D | C] – C:\lexmark
[2010/11/25 19:47:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\GetData
[2010/11/25 17:36:35 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\OxelonMC
[2010/11/24 17:29:41 | 000,000,000 | —D | C] – C:\Users\Dominus\Documents\AnyDVDHD
[2010/11/24 17:26:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\SlySoft
[2010/11/24 01:39:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Alcohol Soft
[2010/11/24 01:38:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\Franzis
[2010/11/24 01:26:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Elaborate Bytes
[2010/11/24 01:13:17 | 000,000,000 | —D | C] – C:\ProgramData\SlySoft
[2010/11/23 12:54:02 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Apple Computer
[2010/11/23 12:53:37 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Apple Computer
[2010/11/23 12:52:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2010/11/23 12:52:38 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/11/23 12:51:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2010/11/23 12:51:45 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Apple
[2010/11/23 12:51:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2010/11/23 12:51:43 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2010/11/23 11:39:28 | 000,000,000 | —D | C] – C:\ProgramData\QuickTime
[2010/11/23 11:39:16 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Primal Pictures
[2010/11/23 11:38:23 | 000,098,304 | —- | C] (Sony DADC Austria AG.) – C:\Windows\SysWow64\CmdLineExt.dll
[2010/11/23 11:38:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Primal Pictures
[2010/11/22 20:01:09 | 000,000,000 | —D | C] – C:\Users\Dominus\Documents\Virtual Machines
[2010/11/22 16:11:36 | 000,081,008 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmci.sys
[2010/11/22 16:11:16 | 000,068,720 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmx86.sys
[2010/11/22 16:10:44 | 000,334,448 | —- | C] (VMware, Inc.) – C:\Windows\SysWow64\vmnetdhcp.exe
[2010/11/22 16:10:42 | 000,404,080 | —- | C] (VMware, Inc.) – C:\Windows\SysWow64\vmnat.exe
[2010/11/22 16:10:42 | 000,030,320 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetuserif.sys
[2010/11/22 16:10:36 | 000,968,816 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\vnetlib64.dll
[2010/11/22 16:10:25 | 000,031,856 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\VMkbd.sys
[2010/11/22 16:10:22 | 000,038,512 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\hcmon.sys
[2010/11/22 16:10:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\VMware
[2010/11/22 16:09:56 | 000,000,000 | —D | C] – C:\ProgramData\VMware
[2010/11/22 16:09:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\VMware
[2010/11/22 16:01:31 | 109,206,400 | —- | C] (VMware, Inc.) – C:\Users\Dominus\Documents\VMware-player-3.1.3-324285.exe
[2010/11/22 16:01:18 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Download Manager
[2010/11/22 10:47:58 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\My Games
[2010/11/22 10:47:57 | 000,000,000 | —D | C] – C:\Users\Dominus\Documents\My Games
[2010/11/22 00:28:38 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Pro
[2010/11/22 00:28:02 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools Pro
[2010/11/22 00:25:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\DAEMON Tools Pro
[2010/11/22 00:13:41 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools Lite
[2010/11/22 00:13:39 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Lite
[2010/11/21 23:52:13 | 000,000,000 | —D | C] – C:\## aswSnx private storage
[2010/11/21 23:35:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Roxio Shared
[2010/11/21 23:35:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\PX Storage Engine
[2010/11/21 23:33:52 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Roxio Log Files
[2010/11/21 23:31:28 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Macrovision
[2010/11/21 23:12:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\A.D.A.M. Software
[2010/11/21 11:31:07 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Xfire
[2010/11/21 11:31:06 | 000,000,000 | –SD | C] – C:\Program Files (x86)\Xfire
[2010/11/21 10:46:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\LucasArts
[2010/11/21 10:13:56 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools
[2010/11/21 00:21:00 | 000,000,000 | —D | C] – C:\ProgramData\Qwest
[2010/11/21 00:20:50 | 000,000,000 | —D | C] – C:\Windows\XSxS
[2010/11/21 00:20:50 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Xenocode
[2010/11/21 00:20:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Xenocode
[2010/11/19 23:48:13 | 000,839,680 | —- | C] (http://www.mp3dev.org/) – C:\Windows\SysWow64\lameACM.acm
[2010/11/19 23:48:13 | 000,217,088 | —- | C] (www.helixcommunity.org) – C:\Windows\SysWow64\yv12vfw.dll
[2010/11/19 23:48:13 | 000,151,552 | —- | C] (fccHandler) – C:\Windows\SysWow64\ac3acm.acm
[2010/11/19 23:48:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\K-Lite Codec Pack
[2010/11/19 23:27:34 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Media Player Classic
[2010/11/18 18:16:00 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\VS Revo Group
[2010/11/18 18:15:58 | 000,031,800 | —- | C] (VS Revo Group) – C:\Windows\SysNative\drivers\revoflt.sys
[2010/11/18 18:15:56 | 000,000,000 | —D | C] – C:\Program Files\VS Revo Group
[2010/11/18 14:11:17 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Yahoo!
[2010/11/18 12:08:25 | 000,000,000 | —D | C] – C:\ProgramData\Alwil Software
[2010/11/18 12:08:25 | 000,000,000 | —D | C] – C:\Program Files\Alwil Software
[2010/11/18 09:38:46 | 000,000,000 | —D | C] – C:\RECOVERY FILES
[2010/11/17 21:40:08 | 000,000,000 | —D | C] – C:\Windows\SysNative\appmgmt
[2010/11/17 21:07:27 | 000,000,000 | —D | C] – C:\Users\Dominus\My Backup Files
[2010/11/17 20:51:14 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\SoftThinks
[2010/11/17 20:36:38 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\ElevatedDiagnostics
[2010/11/17 13:25:07 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2010/11/17 08:30:53 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Malwarebytes
[2010/11/17 08:30:39 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/11/17 08:30:38 | 000,024,152 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2010/11/17 08:30:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/11/17 08:30:38 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2010/11/16 22:37:11 | 000,487,936 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\drivers\stwrt64.sys
[2010/11/16 22:37:10 | 001,431,552 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stapo64.dll
[2010/11/16 22:37:10 | 000,604,672 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stapi64.dll
[2010/11/16 22:37:10 | 000,431,616 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stcplx64.dll
[2010/11/16 22:37:09 | 000,209,920 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\st646224.dll
[2010/11/16 22:37:07 | 000,000,000 | —D | C] – C:\Program Files\IDT
[2010/11/16 17:42:38 | 000,000,000 | —D | C] – C:\Program Files\Recuva
[2010/11/16 17:40:20 | 000,000,000 | —D | C] – C:\Users\Dominus\Tracing
[2010/11/16 12:28:37 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Wireshark
[2010/11/16 11:17:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Xirrus
[2010/11/16 11:16:45 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Downloaded Installations
[2010/11/16 11:01:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\PDFCreator
[2010/11/16 11:00:12 | 000,000,000 | —D | C] – C:\Windows\pss
[2010/11/16 09:30:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\Foxit Software
[2010/11/16 09:22:05 | 000,000,000 | —D | C] – C:\Program Files\Foxit Software
[2010/11/16 09:11:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\PuTTY
[2010/11/16 09:11:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\WinPcap
[2010/11/16 09:11:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Wireshark
[2010/11/16 09:09:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\NeoTracePro
[2010/11/16 09:06:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\OxelonMedia
[2010/11/15 21:51:15 | 000,000,000 | —D | C] – C:\Program Files\PeerBlock
[2010/11/15 00:48:35 | 000,000,000 | —D | C] – C:\ProgramData\NCH Software
[2010/11/15 00:48:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\NCH Software
[2010/11/15 00:48:20 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\NCH Software
[2010/11/15 00:32:13 | 000,000,000 | —D | C] – C:\ProgramData\AVS4YOU
[2010/11/15 00:32:12 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\AVS4YOU
[2010/11/15 00:29:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\AVSMedia
[2010/11/15 00:29:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\AVS4YOU
[2010/11/13 18:46:05 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Activision
[2010/11/13 18:39:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\Activision
[2010/11/13 17:22:29 | 000,255,552 | —- | C] (MagicISO, Inc.) – C:\Windows\SysWow64\drivers\mcdbus.sys
[2010/11/13 17:22:29 | 000,255,552 | —- | C] (MagicISO, Inc.) – C:\Windows\SysNative\drivers\mcdbus.sys
[2010/11/13 17:22:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\MagicDisc
[2010/11/13 17:18:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\MagicISO
[2010/11/13 16:03:05 | 000,000,000 | —D | C] – C:\Program Files\Microsoft IntelliPoint
[2010/11/12 23:48:07 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ATI Technologies
[2010/11/12 23:48:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\ATI Technologies
[2010/11/12 23:46:43 | 000,000,000 | —D | C] – C:\Program Files\ATI Technologies
[2010/11/12 23:46:37 | 000,000,000 | —D | C] – C:\Program Files\ATI
[2010/11/12 23:45:40 | 000,000,000 | —D | C] – C:\ATI
[2010/11/12 23:30:41 | 000,000,000 | —D | C] – C:\AMD
[2010/11/12 23:13:01 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Deployment
[2010/11/12 23:13:01 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Apps
[2010/11/12 23:07:06 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Dell
[2010/11/12 22:59:59 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2010/11/12 22:56:48 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\PCToolsFirewallPlus
[2010/11/12 22:39:45 | 000,218,056 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\PCTCore64.sys
[2010/11/12 22:39:43 | 000,306,648 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctgntdi64.sys
[2010/11/12 22:39:43 | 000,133,072 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2010/11/12 22:38:59 | 000,095,504 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.sys
[2010/11/12 22:38:59 | 000,081,584 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctNdis64.sys
[2010/11/12 22:38:59 | 000,042,456 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctNdis-DNS64.sys
[2010/11/12 22:38:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\PC Tools
[2010/11/12 22:38:58 | 000,164,496 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctplfw64.sys
[2010/11/12 22:38:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\PC Tools Firewall Plus
[2010/11/12 22:35:02 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Yahoo
[2010/11/12 22:34:05 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Yahoo!
[2010/11/12 22:33:13 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo!
[2010/11/12 22:29:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Yahoo!
[2010/11/12 22:05:09 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\PowerDVD DX
[2010/11/12 22:05:09 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\CyberLink
[2010/11/12 21:53:04 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Reallusion
[2010/11/12 21:53:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Reallusion
[2010/11/12 21:49:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell Webcam
[2010/11/12 21:49:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Creative Live! Cam
[2010/11/12 21:46:51 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Mozilla
[2010/11/12 21:46:51 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Mozilla
[2010/11/12 21:46:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2010/11/12 21:37:55 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\skypePM
[2010/11/12 21:36:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2010/11/12 21:36:01 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2010/11/12 21:36:01 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Skype
[2010/11/12 21:35:58 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/11/12 21:23:31 | 000,000,000 | —D | C] – C:\Users\Dominus\.grasp_settings
[2010/11/12 21:11:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\xing shared
[2010/11/12 21:11:01 | 000,272,896 | —- | C] (Progressive Networks) – C:\Windows\SysWow64\pncrt.dll
[2010/11/12 21:10:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Real
[2010/11/12 21:10:49 | 000,000,000 | —D | C] – C:\ProgramData\Real
[2010/11/12 21:10:44 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Real
[2010/11/12 20:42:54 | 000,000,000 | —D | C] – C:\Windows\SysWow64\directx
[2010/11/12 20:30:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\jGRASP
[2010/11/12 20:11:18 | 000,000,000 | —D | C] – C:\Windows\WindowsMobile
[2010/11/12 17:12:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSECache
[2010/11/12 16:04:23 | 000,000,000 | —D | C] – C:\Windows\en
[2010/11/12 16:01:47 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2010/11/12 16:01:31 | 000,000,000 | —D | C] – C:\Program Files\Windows Live
[2010/11/12 15:59:43 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Windows Live
[2010/11/12 14:56:03 | 000,000,000 | —D | C] – C:\Program Files\KLCP64
[2010/11/12 14:50:28 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2010/11/12 14:50:12 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\WinRAR
[2010/11/12 14:42:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\WinRAR
[2010/11/12 14:15:19 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Western Digital
[2010/11/12 13:44:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\uTorrent
[2010/11/12 13:44:01 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\uTorrent
[2010/11/12 13:33:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio
[2010/11/12 13:33:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2010/11/12 13:30:56 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010/11/12 13:30:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio 8
[2010/11/12 13:30:10 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Microsoft Help
[2010/11/12 13:30:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2010/11/12 13:29:21 | 000,000,000 | RH-D | C] – C:\MSOCache
[2010/11/12 12:48:05 | 000,000,000 | —D | C] – C:\Users\Dominus\Documents\CoreTemp64[1]
[2010/11/12 12:44:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Steam
[2010/11/12 12:44:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Steam
[2010/11/12 12:01:10 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2010/11/12 12:01:10 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2010/11/12 11:59:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2010/11/12 11:37:37 | 000,000,000 | —D | C] – C:\ProgramData\PCPitstop
[2010/11/12 11:36:29 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Dell
[2010/11/12 11:34:28 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Stardock_Corporation
[2010/11/12 11:34:18 | 000,000,000 | -H-D | C] – C:\ProgramData\{CBCE2F73-24E4-481F-84B2-1A5EB720D187}
[2010/11/12 11:33:34 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\PackageAware
[2010/11/12 11:30:14 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\InstallShield
[2010/11/12 11:27:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/11/12 11:24:20 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Diagnostics
[2010/11/12 11:17:48 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\assembly
[2010/11/12 11:17:34 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\IsolatedStorage
[2010/11/12 11:16:14 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Microsoft Games
[2010/11/12 11:10:46 | 000,000,000 | —D | C] – C:\Users\Dominus\Documents\CyberLink
[2010/11/12 11:00:30 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Macromedia
[2010/11/12 11:00:30 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Adobe
[2010/11/12 10:35:52 | 000,021,480 | —- | C] (Windows ® Win 7 DDK provider) – C:\Windows\SysNative\drivers\cpuz134_x64.sys
[2010/11/12 10:35:51 | 000,000,000 | —D | C] – C:\Program Files\CPUID
[2010/11/12 10:26:15 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\ArcSoft
[2010/11/12 10:25:56 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Dell Touch Zone
[2010/11/12 10:25:44 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Roxio
[2010/11/12 10:25:43 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Broadcom
[2010/11/12 10:25:43 | 000,000,000 | —D | C] – C:\Users\Dominus\Documents\Bluetooth Exchange Folder
[2010/11/12 10:25:41 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\ATI
[2010/11/12 10:25:41 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\ATI
[2010/11/12 10:25:40 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Dell Touch Zone
[2010/11/12 10:25:38 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\SupportSoft
[2010/11/12 10:25:37 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Intel
[2010/11/12 10:25:36 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\ArcSoft
[2010/11/12 10:25:19 | 000,000,000 | R–D | C] – C:\Users\Dominus\Virtual Machines
[2010/11/12 10:25:19 | 000,000,000 | R–D | C] – C:\Users\Dominus\Searches
[2010/11/12 10:25:19 | 000,000,000 | -H-D | C] – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010/11/12 10:25:08 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Identities
[2010/11/12 10:25:05 | 000,000,000 | R–D | C] – C:\Users\Dominus\Contacts
[2010/11/12 10:25:02 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\VirtualStore
[2010/11/12 10:21:55 | 000,000,000 | –SD | C] – C:\Users\Dominus\AppData\Roaming\Microsoft
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Videos
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Saved Games
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Pictures
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Music
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Links
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Favorites
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Downloads
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\My Documents
[2010/11/12 10:21:55 | 000,000,000 | R–D | C] – C:\Users\Dominus\Desktop
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\AppData\Local\Temporary Internet Files
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Templates
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Start Menu
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\SendTo
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Recent
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\PrintHood
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\NetHood
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Documents\My Videos
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Documents\My Pictures
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Documents\My Music
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\My Documents
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Local Settings
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\AppData\Local\History
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Cookies
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\Application Data
[2010/11/12 10:21:55 | 000,000,000 | -HSD | C] – C:\Users\Dominus\AppData\Local\Application Data
[2010/11/12 10:21:55 | 000,000,000 | -H-D | C] – C:\Users\Dominus\AppData
[2010/11/12 10:21:55 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Temp
[2010/11/12 10:21:55 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Local\Microsoft
[2010/11/12 10:21:55 | 000,000,000 | —D | C] – C:\Users\Dominus\AppData\Roaming\Media Center Programs
[2010/11/11 12:04:36 | 000,252,528 | —- | C] (VMware, Inc.) – C:\Windows\SysWow64\vmnc.dll
[2010/11/11 10:04:52 | 000,056,880 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\vmnetbridge.dll
[2010/11/11 10:04:52 | 000,055,344 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\vnetinst.dll
[2010/11/11 10:04:52 | 000,045,104 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetbridge.sys
[2010/11/11 10:04:52 | 000,037,680 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmusb.sys
[2010/11/11 10:04:52 | 000,024,112 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnet.sys
[2010/11/11 10:04:52 | 000,020,016 | —- | C] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetadapter.sys
[2010/11/11 06:58:55 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/11/11 06:55:14 | 012,158,464 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\idtcpl64.cpl
[2010/11/11 06:55:14 | 003,593,216 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stlang64.dll
[2010/11/11 06:55:14 | 000,564,224 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\idt64mp1.exe
[2010/11/11 06:55:13 | 000,000,000 | —D | C] – C:\Windows\SysNative\SRSLabs
[2010/11/11 06:54:51 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2010/11/11 06:54:15 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/11/11 06:48:24 | 000,000,000 | —D | C] – C:\Program Files\Synaptics
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\zh-TW
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\zh-CN
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Virtual PC
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\tr-TR
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\th-TH
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\sv-SE
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\ru-RU
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\ro-RO
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\pt-PT
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\pt-BR
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\pl-PL
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\nl-NL
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\nb-NO
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\ko-KR
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\ja-JP
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\it-IT
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\hu-HU
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\he-IL
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\fr-FR
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\fi-FI
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\es-ES
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\el-GR
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\de-DE
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\da-DK
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\cs-CZ
[2010/11/11 06:46:45 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\ar-SA
[2010/11/11 06:41:03 | 000,000,000 | —D | C] – C:\apps
[2010/11/11 06:37:48 | 000,055,296 | —- | C] (AMD) – C:\Windows\SysNative\coinst.dll
[2010/11/11 06:37:47 | 000,120,320 | —- | C] (AMD) – C:\Windows\SysNative\atitmm64.dll
[2010/11/11 06:37:46 | 000,012,288 | —- | C] (AMD) – C:\Windows\SysNative\atimuixx.dll
[2010/11/11 06:37:39 | 000,023,912 | —- | C] (ST Microelectronics) – C:\Windows\SysNative\drivers\Acceler.sys
[2010/11/11 06:37:21 | 000,107,816 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynTPCOM.dll
[2010/11/11 06:37:20 | 000,396,584 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynCOM.dll
[2010/11/11 06:37:20 | 000,263,464 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynCtrl.dll
[2010/11/11 06:37:20 | 000,206,120 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCtrl.dll
[2010/11/11 06:37:20 | 000,173,352 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCOM.dll
[2010/11/11 06:37:20 | 000,147,752 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPCo4.dll
[2010/11/11 06:37:19 | 000,299,056 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\drivers\SynTP.sys
[2010/11/11 06:37:19 | 000,207,144 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPAPI.dll
[2010/11/11 06:37:18 | 001,171,456 | —- | C] (O2Micro) – C:\Windows\SysNative\O2Icon_2.dll
[2010/11/11 06:37:18 | 000,074,272 | —- | C] (O2Micro ) – C:\Windows\SysNative\drivers\o2mdgx64.sys
[2010/11/11 06:37:18 | 000,065,536 | —- | C] (O2Micro International) – C:\Windows\SysNative\drivers\o2flash.exe
[2010/11/11 06:37:14 | 000,209,920 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\st646267.dll
[2010/11/11 06:33:31 | 000,000,000 | —D | C] – C:\Windows\SysNative\oem
[2010/11/11 06:33:30 | 000,000,000 | —D | C] – C:\Windows\Panther
[2010/11/11 06:33:30 | 000,000,000 | —D | C] – C:\Drivers
[2010/11/11 06:28:02 | 000,000,000 | —D | C] – C:\dell
[2010/11/11 05:56:38 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Fingertapps
[2010/11/11 05:56:19 | 000,000,000 | —D | C] – C:\ProgramData\ATI
[2010/11/11 05:48:09 | 000,000,000 | —D | C] – C:\ProgramData\McAfee
[2010/11/11 05:48:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\McAfee
[2010/11/11 05:47:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\McAfee
[2010/11/11 05:47:36 | 000,000,000 | —D | C] – C:\ProgramData\Uninstall
[2010/11/11 05:47:29 | 000,000,000 | —D | C] – C:\ProgramData\Sonic
[2010/11/11 05:47:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Sonic Shared
[2010/11/11 05:47:22 | 000,000,000 | —D | C] – C:\ProgramData\Macrovision
[2010/11/11 05:47:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Roxio
[2010/11/11 05:44:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Creative
[2010/11/11 05:44:28 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Creative Installation Information
[2010/11/11 05:44:26 | 002,873,822 | —- | C] (Creative) – C:\Windows\SysWow64\Sens_oal.dll
[2010/11/11 05:44:26 | 001,910,272 | —- | C] (Creative) – C:\Windows\SysNative\Sens_oal.dll
[2010/11/11 05:44:26 | 000,466,456 | —- | C] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/11/11 05:44:26 | 000,444,952 | —- | C] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2010/11/11 05:43:36 | 000,000,000 | —D | C] – C:\Program Files\Creative
[2010/11/11 05:43:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Creative
[2010/11/11 05:43:06 | 000,000,000 | —D | C] – C:\ProgramData\Creative Labs
[2010/11/11 05:43:03 | 000,000,000 | —D | C] – C:\ProgramData\Creative
[2010/11/11 05:43:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Creative Labs Shared
[2010/11/11 05:41:39 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell Touch Zone
[2010/11/11 05:40:48 | 000,000,000 | —D | C] – C:\ProgramData\ArcSoft
[2010/11/11 05:40:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\ArcSoft
[2010/11/11 05:40:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\ArcSoft
[2010/11/11 05:39:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell
[2010/11/11 05:39:04 | 000,000,000 | —D | C] – C:\ProgramData\Temp
[2010/11/11 05:38:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Silverlight
[2010/11/11 05:37:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2010/11/11 05:35:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft
[2010/11/11 05:35:39 | 000,000,000 | —D | C] – C:\Users\Public\Documents\microsoft
[2010/11/11 05:35:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Live
[2010/11/11 05:34:54 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2010/11/11 05:32:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Windows Live
[2010/11/11 05:32:38 | 000,000,000 | —D | C] – C:\ProgramData\CyberLink
[2010/11/11 05:32:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\CyberLink
[2010/11/11 05:32:08 | 000,000,000 | —D | C] – C:\ProgramData\SupportSoft
[2010/11/11 05:32:06 | 000,000,000 | —D | C] – C:\ProgramData\PCDr
[2010/11/11 05:31:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\supportsoft
[2010/11/11 05:31:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell Support Center
[2010/11/11 05:31:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Sensible Vision
[2010/11/11 05:30:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Citrix
[2010/11/11 05:30:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2010/11/11 05:29:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Works
[2010/11/11 05:28:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2010/11/11 05:25:42 | 000,000,000 | —D | C] – C:\ProgramData\Intel
[2010/11/11 05:25:42 | 000,000,000 | —D | C] – C:\Program Files\Intel
[2010/11/11 05:25:42 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Intel
[2010/11/11 05:25:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Cisco
[2010/11/11 05:24:28 | 000,000,000 | —D | C] – C:\Program Files\WIDCOMM
[2010/11/11 05:22:23 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2010/11/11 05:22:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\ATI Technologies
[2010/11/11 05:22:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2010/11/11 05:22:10 | 000,000,000 | —D | C] – C:\ProgramData\Dell
[2010/11/11 05:22:10 | 000,000,000 | —D | C] – C:\Program Files\Dell
[2010/11/11 05:21:42 | 000,000,000 | —D | C] – C:\Program Files\Java
[2010/11/11 05:20:58 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/11/11 05:20:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2010/11/11 05:19:26 | 000,000,000 | —D | C] – C:\Program Files\Windows XP Mode
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\zh-CHT
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\zh-CHS
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\tr
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\sv
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\sk
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\ru
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\ro
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\pt
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\pl
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\no
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\nl
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\ko
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\ja
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\it
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\hu
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\fr
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\fi
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\es
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\el
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\de
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\da
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\cs
[2010/11/11 05:12:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\bg
[2010/11/11 05:12:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Touch Pack for Windows 7
[2010/11/11 05:11:33 | 000,000,000 | —D | C] – C:\ProgramData\Applications
[2010/11/11 05:10:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Virtual Earth 3D
[2010/11/11 05:10:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft XNA
[2010/11/11 05:09:48 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2010/11/11 05:09:44 | 000,000,000 | —D | C] – C:\Program Files\Dell Inc
[2010/11/11 05:09:41 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/12/01 12:35:59 | 000,015,345 | -H– | M] () – C:\Users\Dominus\AppData\Roaming\Dominuslog.dat
[2010/12/01 12:33:55 | 000,014,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/12/01 12:33:55 | 000,014,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/12/01 12:30:27 | 000,730,464 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/12/01 12:30:27 | 000,628,454 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/12/01 12:30:27 | 000,108,314 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/12/01 12:27:11 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/01 12:26:25 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/12/01 12:26:21 | 2138,447,871 | -HS- | M] () – C:\hiberfil.sys
[2010/12/01 10:22:02 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/01 08:26:26 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2010/11/29 23:10:40 | 000,385,024 | —- | M] (Avast Activators) – C:\ProgramData\Sys32c.exe
[2010/11/29 17:42:18 | 000,038,224 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/11/29 17:42:06 | 000,024,152 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2010/11/29 09:15:34 | 000,000,600 | —- | M] () – C:\Users\Dominus\AppData\Local\PUTTY.RND
[2010/11/27 23:23:07 | 000,082,453 | —- | M] () – C:\Windows\SysNative\LexFiles.ulf
[2010/11/25 23:16:22 | 000,925,696 | —- | M] () – C:\Users\Dominus\Documents\Christmas list.accdb
[2010/11/25 23:14:17 | 000,010,812 | —- | M] () – C:\Users\Dominus\Documents\ITEMS_BY_STORE_RPT.rtf
[2010/11/25 23:14:10 | 000,011,833 | —- | M] () – C:\Users\Dominus\Documents\Items_by_Person.rtf
[2010/11/25 22:14:25 | 000,851,968 | —- | M] () – C:\Users\Dominus\Documents\Christmas list_Backup2.accdb
[2010/11/25 21:57:54 | 000,655,360 | —- | M] () – C:\Users\Dominus\Documents\Christmas list_Backup.accdb
[2010/11/25 18:57:53 | 000,005,632 | —- | M] () – C:\Users\Dominus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/24 02:23:00 | 000,034,351 | —- | M] () – C:\Users\Dominus\Documents\new system performance.pdf
[2010/11/24 02:01:21 | 000,000,085 | -HS- | M] () – C:\ProgramData\.zreglib
[2010/11/24 00:39:32 | 000,000,016 | —- | M] () – C:\Windows\ADAMGO.INI
[2010/11/23 11:39:40 | 000,054,156 | -H– | M] () – C:\Windows\QTFont.qfn
[2010/11/23 11:39:40 | 000,001,409 | —- | M] () – C:\Windows\QTFont.for
[2010/11/23 11:38:23 | 000,098,304 | —- | M] (Sony DADC Austria AG.) – C:\Windows\SysWow64\CmdLineExt.dll
[2010/11/22 16:10:18 | 000,001,024 | —- | M] () – C:\.rnd
[2010/11/22 16:10:12 | 000,745,748 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/22 16:09:02 | 109,206,400 | —- | M] (VMware, Inc.) – C:\Users\Dominus\Documents\VMware-player-3.1.3-324285.exe
[2010/11/22 10:23:56 | 573,664,961 | —- | M] () – C:\Windows\MEMORY.DMP
[2010/11/22 00:14:34 | 000,834,544 | —- | M] () – C:\Windows\SysNative\drivers\sptd.sys
[2010/11/21 10:27:16 | 000,001,339 | —- | M] () – C:\WirelessDiagLog.csv
[2010/11/21 00:17:53 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_xusb21_01007.Wdf
[2010/11/18 18:15:58 | 000,000,999 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2010/11/17 17:45:52 | 000,167,786 | —- | M] () – C:\Users\Dominus\Documents\cc_20101117_174546.reg
[2010/11/17 10:24:10 | 000,007,599 | —- | M] () – C:\Users\Dominus\AppData\Local\Resmon.ResmonCfg
[2010/11/16 23:20:51 | 000,121,495 | —- | M] () – C:\Users\Dominus\Documents\C__Users_Dominus_AppData_Local_Microsoft_Windows_Temporary Internet Files_Low_Content.IE5_ZVZD51Y2_Step%203-Writing%20Your%20Re.pdf
[2010/11/16 16:51:09 | 000,429,512 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/11/16 11:04:55 | 000,037,587 | —- | M] () – C:\Users\Dominus\Documents\Free Email To SMS Gateways.pdf
[2010/11/16 09:30:18 | 000,001,256 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2010/11/16 09:06:48 | 000,000,764 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Oxelon Media Converter.lnk
[2010/11/13 16:03:27 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_point64_01009.Wdf
[2010/11/13 15:51:33 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2010/11/12 22:33:15 | 000,001,163 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2010/11/12 21:53:19 | 000,000,075 | RHS- | M] () – C:\Windows\CT4CET.bin
[2010/11/12 21:46:35 | 000,001,965 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/11/12 21:37:57 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/11/12 21:11:01 | 000,272,896 | —- | M] (Progressive Networks) – C:\Windows\SysWow64\pncrt.dll
[2010/11/12 20:15:32 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010/11/12 20:01:15 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/11/12 19:21:55 | 000,001,135 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2010/11/12 13:44:33 | 000,000,969 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/11/12 11:34:28 | 000,001,980 | —- | M] () – C:\Users\Dominus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2010/11/12 11:19:29 | 000,040,209 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2010/11/12 11:19:29 | 000,040,209 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/11/12 10:30:38 | 000,001,439 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/11/11 13:32:32 | 000,968,816 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vnetlib64.dll
[2010/11/11 13:32:32 | 000,081,008 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmci.sys
[2010/11/11 13:32:20 | 000,068,720 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmx86.sys
[2010/11/11 13:31:54 | 000,334,448 | —- | M] (VMware, Inc.) – C:\Windows\SysWow64\vmnetdhcp.exe
[2010/11/11 13:31:50 | 000,404,080 | —- | M] (VMware, Inc.) – C:\Windows\SysWow64\vmnat.exe
[2010/11/11 13:30:34 | 000,031,856 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\VMkbd.sys
[2010/11/11 13:30:18 | 000,030,320 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetuserif.sys
[2010/11/11 12:31:32 | 000,038,512 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\hcmon.sys
[2010/11/11 12:04:36 | 000,252,528 | —- | M] (VMware, Inc.) – C:\Windows\SysWow64\vmnc.dll
[2010/11/11 10:04:52 | 000,056,880 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vmnetbridge.dll
[2010/11/11 10:04:52 | 000,055,344 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vnetinst.dll
[2010/11/11 10:04:52 | 000,045,104 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetbridge.sys
[2010/11/11 10:04:52 | 000,037,680 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmusb.sys
[2010/11/11 10:04:52 | 000,024,112 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnet.sys
[2010/11/11 10:04:52 | 000,020,016 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetadapter.sys
[2010/11/11 06:58:25 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_NtrigDigi_01_09_00.Wdf
[2010/11/11 06:58:11 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01005.Wdf
[2010/11/11 06:57:25 | 000,000,000 | —- | M] () – C:\Windows\ativpsrm.bin
[2010/11/11 06:57:17 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010/11/11 06:56:08 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_bpenum_01007.Wdf
[2010/11/11 06:55:09 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_bpusb_01007.Wdf
[2010/11/11 06:50:18 | 000,005,772 | RH– | M] () – C:\dell.sdr
[2010/11/11 06:37:05 | 000,005,772 | —- | M] () – C:\Windows\SysWow64\drivers\1028_Dell_STU_1747.mrk
[2010/11/11 06:37:05 | 000,005,772 | —- | M] () – C:\Windows\SysNative\drivers\1028_Dell_STU_1747.mrk
[2010/11/11 05:54:06 | 001,130,546 | —- | M] () – C:\Windows\SysNative\chklogo6.wtl
[2010/11/11 05:44:28 | 000,000,159 | RH– | M] () – C:\Windows\ctfile.rfc
[2010/11/11 05:44:26 | 000,466,456 | —- | M] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/11/11 05:44:26 | 000,444,952 | —- | M] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2010/11/11 05:37:04 | 000,000,020 | —- | M] () – C:\Windows\„ô…
[2010/11/11 05:24:51 | 000,000,834 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/11/28 11:17:38 | 000,000,900 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/11/28 11:17:37 | 000,000,896 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/11/27 23:21:20 | 000,069,632 | —- | C] () – C:\Windows\SysNative\lxdfoem.dll
[2010/11/27 23:21:20 | 000,045,568 | —- | C] () – C:\Windows\SysNative\LXDFPMON.DLL
[2010/11/27 23:21:20 | 000,014,336 | —- | C] () – C:\Windows\SysNative\LXDFFXPU.DLL
[2010/11/27 23:21:20 | 000,003,584 | —- | C] () – C:\Windows\SysNative\LXDFPMRC.DLL
[2010/11/27 23:20:58 | 000,385,024 | —- | C] () – C:\Windows\SysWow64\lxdfcomx.dll
[2010/11/27 23:20:58 | 000,348,160 | —- | C] () – C:\Windows\SysWow64\lxdfinst.dll
[2010/11/27 23:20:57 | 001,450,859 | —- | C] () – C:\Windows\SysWow64\LXDFhelp.chm
[2010/11/27 23:20:57 | 000,002,003 | —- | C] () – C:\Windows\SysWow64\lxdf.loc
[2010/11/27 23:20:33 | 001,450,859 | —- | C] () – C:\Windows\SysNative\LXDFhelp.chm
[2010/11/27 23:20:33 | 000,524,288 | —- | C] () – C:\Windows\SysNative\lxdfinst.dll
[2010/11/27 23:20:33 | 000,299,520 | —- | C] () – C:\Windows\SysNative\lxdfgrd.dll
[2010/11/27 23:20:31 | 000,082,453 | —- | C] () – C:\Windows\SysNative\LexFiles.ulf
[2010/11/27 23:20:31 | 000,002,003 | —- | C] () – C:\Windows\SysNative\lxdf.loc
[2010/11/25 23:14:16 | 000,010,812 | —- | C] () – C:\Users\Dominus\Documents\ITEMS_BY_STORE_RPT.rtf
[2010/11/25 23:14:10 | 000,011,833 | —- | C] () – C:\Users\Dominus\Documents\Items_by_Person.rtf
[2010/11/25 22:15:22 | 000,851,968 | —- | C] () – C:\Users\Dominus\Documents\Christmas list_Backup2.accdb
[2010/11/25 21:57:57 | 000,655,360 | —- | C] () – C:\Users\Dominus\Documents\Christmas list_Backup.accdb
[2010/11/25 21:45:43 | 000,925,696 | —- | C] () – C:\Users\Dominus\Documents\Christmas list.accdb
[2010/11/24 02:23:00 | 000,034,351 | —- | C] () – C:\Users\Dominus\Documents\new system performance.pdf
[2010/11/24 01:26:26 | 000,000,085 | -HS- | C] () – C:\ProgramData\.zreglib
[2010/11/23 11:39:32 | 000,054,156 | -H– | C] () – C:\Windows\QTFont.qfn
[2010/11/23 11:39:32 | 000,001,409 | —- | C] () – C:\Windows\QTFont.for
[2010/11/23 10:36:54 | 000,000,600 | —- | C] () – C:\Users\Dominus\AppData\Local\PUTTY.RND
[2010/11/22 16:10:18 | 000,001,024 | —- | C] () – C:\.rnd
[2010/11/22 16:10:12 | 000,745,748 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/21 23:12:04 | 000,000,016 | —- | C] () – C:\Windows\ADAMGO.INI
[2010/11/21 09:57:35 | 000,834,544 | —- | C] () – C:\Windows\SysNative\drivers\sptd.sys
[2010/11/21 09:24:20 | 573,664,961 | —- | C] () – C:\Windows\MEMORY.DMP
[2010/11/21 00:17:53 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_xusb21_01007.Wdf
[2010/11/19 23:48:17 | 000,165,376 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2010/11/19 23:48:17 | 000,000,038 | —- | C] () – C:\Windows\avisplitter.ini
[2010/11/19 23:48:13 | 000,790,528 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2010/11/19 23:48:13 | 000,134,144 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2010/11/19 23:48:13 | 000,000,414 | —- | C] () – C:\Windows\SysWow64\lame_acm.xml
[2010/11/19 23:48:12 | 000,108,032 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/11/18 18:15:58 | 000,000,999 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2010/11/18 12:09:27 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\config.nt
[2010/11/17 17:45:48 | 000,167,786 | —- | C] () – C:\Users\Dominus\Documents\cc_20101117_174546.reg
[2010/11/16 23:20:49 | 000,121,495 | —- | C] () – C:\Users\Dominus\Documents\C__Users_Dominus_AppData_Local_Microsoft_Windows_Temporary Internet Files_Low_Content.IE5_ZVZD51Y2_Step%203-Writing%20Your%20Re.pdf
[2010/11/16 11:04:54 | 000,037,587 | —- | C] () – C:\Users\Dominus\Documents\Free Email To SMS Gateways.pdf
[2010/11/16 11:01:39 | 000,087,040 | —- | C] () – C:\Windows\SysNative\pdfcmnnt.dll
[2010/11/16 09:30:18 | 000,001,256 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2010/11/16 09:06:48 | 000,000,764 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Oxelon Media Converter.lnk
[2010/11/15 16:17:40 | 000,005,632 | —- | C] () – C:\Users\Dominus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/13 16:03:27 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_point64_01009.Wdf
[2010/11/13 15:51:33 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2010/11/12 23:41:37 | 000,007,599 | —- | C] () – C:\Users\Dominus\AppData\Local\Resmon.ResmonCfg
[2010/11/12 22:39:45 | 000,007,353 | —- | C] () – C:\Windows\SysNative\drivers\pctcore64.cat
[2010/11/12 22:39:43 | 000,007,357 | —- | C] () – C:\Windows\SysNative\drivers\pctgntdi64.cat
[2010/11/12 22:38:59 | 000,007,405 | —- | C] () – C:\Windows\SysNative\drivers\pctNdis-PacketFilter64.cat
[2010/11/12 22:38:59 | 000,007,382 | —- | C] () – C:\Windows\SysNative\drivers\pctNdis-DNS64.cat
[2010/11/12 22:38:58 | 000,007,366 | —- | C] () – C:\Windows\SysNative\drivers\pctplfw64.cat
[2010/11/12 22:33:15 | 000,001,163 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2010/11/12 21:53:19 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2010/11/12 21:51:21 | 000,024,995 | —- | C] () – C:\Windows\SysNative\drivers\FilterPC.jpg
[2010/11/12 21:51:20 | 000,057,656 | —- | C] () – C:\Windows\SysNative\drivers\FilterPC.bmp
[2010/11/12 21:46:35 | 000,001,965 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/11/12 21:37:57 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/11/12 20:15:32 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010/11/12 20:01:15 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/11/12 19:21:55 | 000,001,135 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2010/11/12 14:56:06 | 000,191,488 | —- | C] () – C:\Windows\SysNative\unrar.dll
[2010/11/12 14:56:05 | 000,136,704 | —- | C] () – C:\Windows\SysNative\ff_vfw.dll
[2010/11/12 13:50:22 | 000,001,339 | —- | C] () – C:\WirelessDiagLog.csv
[2010/11/12 13:44:33 | 000,000,969 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/11/12 11:34:28 | 000,001,980 | —- | C] () – C:\Users\Dominus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2010/11/12 10:30:38 | 000,001,439 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/11/12 10:21:55 | 000,000,290 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/11/12 10:21:55 | 000,000,272 | —- | C] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2010/11/11 06:58:25 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_NtrigDigi_01_09_00.Wdf
[2010/11/11 06:58:11 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01005.Wdf
[2010/11/11 06:57:25 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/11/11 06:57:17 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010/11/11 06:56:08 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_bpenum_01007.Wdf
[2010/11/11 06:55:09 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_bpusb_01007.Wdf
[2010/11/11 06:54:15 | 2138,447,871 | -HS- | C] () – C:\hiberfil.sys
[2010/11/11 06:50:18 | 000,005,772 | RH– | C] () – C:\dell.sdr
[2010/11/11 06:37:48 | 000,511,072 | —- | C] () – C:\Windows\SysWow64\atiumdva.cap
[2010/11/11 06:37:47 | 000,511,072 | —- | C] () – C:\Windows\SysNative\atiumd6a.cap
[2010/11/11 06:37:47 | 000,026,112 | —- | C] () – C:\Windows\SysNative\atitmp64.dll
[2010/11/11 06:37:47 | 000,002,093 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2010/11/11 06:37:47 | 000,002,093 | —- | C] () – C:\Windows\SysNative\atipblag.dat
[2010/11/11 06:37:46 | 000,332,288 | —- | C] () – C:\Windows\SysNative\ATIODE.exe
[2010/11/11 06:37:46 | 000,051,200 | —- | C] () – C:\Windows\SysNative\ATIODCLI.exe
[2010/11/11 06:37:46 | 000,020,692 | —- | C] () – C:\Windows\atiogl.xml
[2010/11/11 06:37:45 | 000,201,875 | —- | C] () – C:\Windows\SysNative\atiicdxx.dat
[2010/11/11 06:37:44 | 000,033,624 | —- | C] () – C:\Windows\SysNative\atiapfxx.blb
[2010/11/11 06:37:05 | 000,005,772 | —- | C] () – C:\Windows\SysWow64\drivers\1028_Dell_STU_1747.mrk
[2010/11/11 06:37:05 | 000,005,772 | —- | C] () – C:\Windows\SysNative\drivers\1028_Dell_STU_1747.mrk
[2010/11/11 05:54:06 | 001,130,546 | —- | C] () – C:\Windows\SysNative\chklogo6.wtl
[2010/11/11 05:44:43 | 000,005,037 | —- | C] () – C:\Windows\SysNative\cfgfx.ini
[2010/11/11 05:44:43 | 000,002,265 | —- | C] () – C:\Windows\FF08_Render_Spk_Hp.ini
[2010/11/11 05:44:43 | 000,001,650 | —- | C] () – C:\Windows\FF08_Capture.ini
[2010/11/11 05:44:43 | 000,001,540 | —- | C] () – C:\Windows\FF08_Render.ini
[2010/11/11 05:44:28 | 000,191,488 | —- | C] () – C:\Windows\SysNative\APOMgr64.DLL
[2010/11/11 05:44:28 | 000,148,480 | —- | C] () – C:\Windows\SysWow64\APOMngr.DLL
[2010/11/11 05:44:28 | 000,089,088 | —- | C] () – C:\Windows\SysNative\CmdRtr64.DLL
[2010/11/11 05:44:28 | 000,073,728 | —- | C] () – C:\Windows\SysWow64\CmdRtr.DLL
[2010/11/11 05:44:28 | 000,000,159 | RH– | C] () – C:\Windows\ctfile.rfc
[2010/11/11 05:37:03 | 000,000,020 | —- | C] () – C:\Windows\„ô…
[2010/11/11 05:24:31 | 000,000,834 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2010/04/04 11:45:06 | 000,089,416 | —- | C] () – C:\Windows\SysWow64\FAIEExtension.dll
[2010/04/04 11:44:12 | 000,059,208 | —- | C] () – C:\Windows\SysWow64\FAib.dll
[2010/04/04 11:42:44 | 000,247,624 | —- | C] () – C:\Windows\SysWow64\FACrashRpt.dll
[2009/07/13 16:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 14:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2007/11/06 13:19:28 | 000,053,299 | —- | C] () – C:\Windows\SysWow64\pthreadVC.dll
[2005/09/15 01:03:50 | 000,015,345 | -H– | C] () – C:\Users\Dominus\AppData\Roaming\Dominuslog.dat

========== LOP Check ==========

[2010/11/28 14:59:51 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\6500 Series
[2010/11/30 11:40:40 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Bitcricket
[2010/11/21 10:13:56 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools
[2010/11/22 00:19:12 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools Lite
[2010/11/22 00:28:38 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools Pro
[2010/11/27 23:44:10 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Lexmark Productivity Studio
[2010/11/25 17:36:35 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\OxelonMC
[2010/11/12 22:57:06 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\PCToolsFirewallPlus
[2010/12/01 12:04:08 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Primal Pictures
[2010/11/30 10:06:45 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\TrojanHunter
[2010/12/01 12:37:14 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\uTorrent
[2010/11/30 03:51:12 | 000,000,000 | RHSD | M] – C:\Users\Dominus\AppData\Roaming\wiinupdate
[2010/11/16 12:28:37 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Wireshark
[2009/07/13 22:08:49 | 000,017,036 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:63238B95
@Alternate Data Stream - 110 bytes -> C:\ProgramData\Temp:C31F31E6

< End of report >
[2010/12/01 12:30:27 | 000,730,464 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/12/01 12:30:27 | 000,628,454 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/12/01 12:30:27 | 000,108,314 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/12/01 00:07:15 | 000,000,000 | —D | M] – C:\Program Files\DVD Maker
[2010/11/27 23:23:07 | 000,082,453 | —- | M] () – C:\Windows\SysNative\LexFiles.ulf
[2010/11/27 23:21:44 | 000,000,000 | —D | M] – C:\Program Files\Lexmark 6500 Series
[2010/11/26 15:58:17 | 000,000,000 | —D | M] – C:\Program Files\PeerBlock
[2010/11/23 17:33:25 | 000,000,000 | —D | M] – C:\Program Files\Internet Explorer
[2010/11/18 18:15:56 | 000,000,000 | —D | M] – C:\Program Files\VS Revo Group
[2010/11/18 12:21:35 | 000,000,000 | —D | M] – C:\Program Files\Common Files
[2010/11/18 12:08:25 | 000,000,000 | —D | M] – C:\Program Files\Alwil Software
[2010/11/18 12:07:38 | 000,000,000 | —D | M] – C:\Program Files\CCleaner
[2010/11/16 22:38:30 | 000,000,000 | —D | M] – C:\Program Files\IDT
[2010/11/16 17:42:40 | 000,000,000 | —D | M] – C:\Program Files\Recuva
[2010/11/16 09:22:05 | 000,000,000 | —D | M] – C:\Program Files\Foxit Software
[2010/11/13 16:03:06 | 000,000,000 | —D | M] – C:\Program Files\Microsoft IntelliPoint
[2010/11/12 23:48:07 | 000,000,000 | —D | M] – C:\Program Files\Common Files\ATI Technologies
[2010/11/12 23:47:46 | 000,000,000 | —D | M] – C:\Program Files\ATI Technologies
[2010/11/12 23:46:37 | 000,000,000 | —D | M] – C:\Program Files\ATI
[2010/11/12 21:51:18 | 000,000,000 | —D | M] – C:\Program Files\Java
[2010/11/12 20:38:55 | 000,000,000 | —D | M] – C:\Program Files\KLCP64
[2010/11/12 16:01:46 | 000,000,000 | —D | M] – C:\Program Files\Windows Live
[2010/11/12 16:01:18 | 000,000,000 | —D | M] – C:\Program Files\Common Files\Microsoft Shared
[2010/11/12 14:50:32 | 000,000,000 | —D | M] – C:\Program Files\WinRAR
[2010/11/12 13:30:56 | 000,000,000 | —D | M] – C:\Program Files\Microsoft Office
[2010/11/12 12:00:56 | 000,000,000 | —D | M] – C:\Program Files\Windows Media Player
[2010/11/12 11:34:06 | 000,000,000 | —D | M] – C:\Program Files\Dell
[2010/11/12 11:19:29 | 000,040,209 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/11/12 10:35:51 | 000,000,000 | —D | M] – C:\Program Files\CPUID
[2010/11/11 13:32:32 | 000,968,816 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vnetlib64.dll
[2010/11/11 10:04:52 | 000,056,880 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vmnetbridge.dll
[2010/11/11 10:04:52 | 000,055,344 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vnetinst.dll
[2010/11/11 06:48:24 | 000,000,000 | —D | M] – C:\Program Files\Synaptics
[2010/11/11 06:46:46 | 000,000,000 | —D | M] – C:\Program Files\Windows Mail
[2010/11/11 06:45:54 | 004,513,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vpc.exe
[2010/11/11 06:45:54 | 002,262,016 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VPCWizard.exe
[2010/11/11 06:45:54 | 001,369,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VPCSettings.exe
[2010/11/11 06:45:54 | 001,209,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VMWindow.exe
[2010/11/11 06:45:54 | 000,936,448 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vmsal.exe
[2010/11/11 06:45:54 | 000,562,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VMCPropertyHandler.dll
[2010/11/11 06:45:54 | 000,015,872 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vpchbuspipe.dll
[2010/11/11 06:45:50 | 001,572,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/11/11 06:45:50 | 000,243,200 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2010/11/11 06:45:50 | 000,046,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2010/11/11 06:45:49 | 005,507,968 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/11/11 06:45:48 | 000,389,632 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2010/11/11 06:45:45 | 001,446,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2010/11/11 06:45:43 | 000,612,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2010/11/11 06:45:41 | 000,613,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2010/11/11 06:45:40 | 001,736,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2010/11/11 06:45:40 | 000,424,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/11/11 06:45:40 | 000,422,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/11/11 06:45:40 | 000,357,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/11/11 06:45:40 | 000,356,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/11/11 06:45:40 | 000,306,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/11/11 06:45:40 | 000,305,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/11/11 06:45:40 | 000,121,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/11/11 06:45:40 | 000,121,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/11/11 06:45:35 | 000,052,224 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2010/11/11 06:45:32 | 000,220,672 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2010/11/11 06:45:25 | 000,687,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2010/11/11 06:45:25 | 000,376,832 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2010/11/11 06:45:25 | 000,366,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2010/11/11 06:45:25 | 000,228,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2010/11/11 06:45:25 | 000,183,808 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2010/11/11 06:45:25 | 000,044,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2010/11/11 05:44:36 | 000,000,000 | —D | M] – C:\Program Files\Creative
[2010/11/11 05:44:26 | 000,466,456 | —- | M] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/11/11 05:44:26 | 000,122,904 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2010/11/11 05:28:50 | 000,000,000 | —D | M] – C:\Program Files\Intel
[2010/11/11 05:25:42 | 000,000,000 | —D | M] – C:\Program Files\Common Files\Intel
[2010/11/11 05:24:28 | 000,000,000 | —D | M] – C:\Program Files\WIDCOMM
[2010/11/11 05:19:26 | 000,000,000 | —D | M] – C:\Program Files\Windows XP Mode
[2010/11/11 05:09:44 | 000,000,000 | —D | M] – C:\Program Files\Dell Inc
[2009/07/13 21:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

========== Files - Modified Within 30 Days ==========

[2010/12/01 12:35:59 | 000,015,345 | -H– | M] () – C:\Users\Dominus\AppData\Roaming\Dominuslog.dat
[2010/12/01 12:33:55 | 000,014,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/12/01 12:33:55 | 000,014,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/12/01 12:30:27 | 000,730,464 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/12/01 12:30:27 | 000,628,454 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/12/01 12:30:27 | 000,108,314 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/12/01 12:27:11 | 000,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/01 12:26:25 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/12/01 12:26:21 | 2138,447,871 | -HS- | M] () – C:\hiberfil.sys
[2010/12/01 10:22:02 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/01 08:26:26 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2010/11/29 23:10:40 | 000,385,024 | —- | M] (Avast Activators) – C:\ProgramData\Sys32c.exe
[2010/11/29 17:42:18 | 000,038,224 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/11/29 17:42:06 | 000,024,152 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2010/11/29 09:15:34 | 000,000,600 | —- | M] () – C:\Users\Dominus\AppData\Local\PUTTY.RND
[2010/11/27 23:23:07 | 000,082,453 | —- | M] () – C:\Windows\SysNative\LexFiles.ulf
[2010/11/25 23:16:22 | 000,925,696 | —- | M] () – C:\Users\Dominus\Documents\Christmas list.accdb
[2010/11/25 23:14:17 | 000,010,812 | —- | M] () – C:\Users\Dominus\Documents\ITEMS_BY_STORE_RPT.rtf
[2010/11/25 23:14:10 | 000,011,833 | —- | M] () – C:\Users\Dominus\Documents\Items_by_Person.rtf
[2010/11/25 22:14:25 | 000,851,968 | —- | M] () – C:\Users\Dominus\Documents\Christmas list_Backup2.accdb
[2010/11/25 21:57:54 | 000,655,360 | —- | M] () – C:\Users\Dominus\Documents\Christmas list_Backup.accdb
[2010/11/25 18:57:53 | 000,005,632 | —- | M] () – C:\Users\Dominus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/24 02:23:00 | 000,034,351 | —- | M] () – C:\Users\Dominus\Documents\new system performance.pdf
[2010/11/24 02:01:21 | 000,000,085 | -HS- | M] () – C:\ProgramData\.zreglib
[2010/11/24 00:39:32 | 000,000,016 | —- | M] () – C:\Windows\ADAMGO.INI
[2010/11/23 11:39:40 | 000,054,156 | -H– | M] () – C:\Windows\QTFont.qfn
[2010/11/23 11:39:40 | 000,001,409 | —- | M] () – C:\Windows\QTFont.for
[2010/11/23 11:38:23 | 000,098,304 | —- | M] (Sony DADC Austria AG.) – C:\Windows\SysWow64\CmdLineExt.dll
[2010/11/22 16:10:18 | 000,001,024 | —- | M] () – C:\.rnd
[2010/11/22 16:10:12 | 000,745,748 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/22 16:09:02 | 109,206,400 | —- | M] (VMware, Inc.) – C:\Users\Dominus\Documents\VMware-player-3.1.3-324285.exe
[2010/11/22 10:23:56 | 573,664,961 | —- | M] () – C:\Windows\MEMORY.DMP
[2010/11/22 00:14:34 | 000,834,544 | —- | M] () – C:\Windows\SysNative\drivers\sptd.sys
[2010/11/21 10:27:16 | 000,001,339 | —- | M] () – C:\WirelessDiagLog.csv
[2010/11/21 00:17:53 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_xusb21_01007.Wdf
[2010/11/18 18:15:58 | 000,000,999 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2010/11/17 17:45:52 | 000,167,786 | —- | M] () – C:\Users\Dominus\Documents\cc_20101117_174546.reg
[2010/11/17 10:24:10 | 000,007,599 | —- | M] () – C:\Users\Dominus\AppData\Local\Resmon.ResmonCfg
[2010/11/16 23:20:51 | 000,121,495 | —- | M] () – C:\Users\Dominus\Documents\C__Users_Dominus_AppData_Local_Microsoft_Windows_Temporary Internet Files_Low_Content.IE5_ZVZD51Y2_Step%203-Writing%20Your%20Re.pdf
[2010/11/16 16:51:09 | 000,429,512 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/11/16 11:04:55 | 000,037,587 | —- | M] () – C:\Users\Dominus\Documents\Free Email To SMS Gateways.pdf
[2010/11/16 09:30:18 | 000,001,256 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2010/11/16 09:06:48 | 000,000,764 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Oxelon Media Converter.lnk
[2010/11/13 16:03:27 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_point64_01009.Wdf
[2010/11/13 15:51:33 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_dc3d_01009.Wdf
[2010/11/12 22:33:15 | 000,001,163 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2010/11/12 21:53:19 | 000,000,075 | RHS- | M] () – C:\Windows\CT4CET.bin
[2010/11/12 21:51:19 | 000,183,296 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaws.exe
[2010/11/12 21:51:19 | 000,165,888 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaw.exe
[2010/11/12 21:51:19 | 000,165,888 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\java.exe
[2010/11/12 21:51:18 | 000,468,480 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\deployJava1.dll
[2010/11/12 21:46:35 | 000,001,965 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/11/12 21:37:57 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/11/12 21:11:11 | 000,199,904 | —- | M] (RealNetworks, Inc.) – C:\Windows\SysWow64\rmoc3260.dll
[2010/11/12 21:11:02 | 000,006,656 | —- | M] (RealNetworks, Inc.) – C:\Windows\SysWow64\pndx5016.dll
[2010/11/12 21:11:02 | 000,005,632 | —- | M] (RealNetworks, Inc.) – C:\Windows\SysWow64\pndx5032.dll
[2010/11/12 21:11:01 | 000,272,896 | —- | M] (Progressive Networks) – C:\Windows\SysWow64\pncrt.dll
[2010/11/12 20:15:32 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
[2010/11/12 20:01:15 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/11/12 19:21:55 | 000,001,135 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2010/11/12 13:44:33 | 000,000,969 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/11/12 11:34:28 | 000,001,980 | —- | M] () – C:\Users\Dominus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2010/11/12 11:19:29 | 000,040,209 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2010/11/12 11:19:29 | 000,040,209 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/11/12 10:30:38 | 000,001,439 | —- | M] () – C:\Users\Dominus\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/11/11 13:32:32 | 000,968,816 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vnetlib64.dll
[2010/11/11 13:32:32 | 000,081,008 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmci.sys
[2010/11/11 13:32:20 | 000,068,720 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmx86.sys
[2010/11/11 13:31:54 | 000,334,448 | —- | M] (VMware, Inc.) – C:\Windows\SysWow64\vmnetdhcp.exe
[2010/11/11 13:31:50 | 000,404,080 | —- | M] (VMware, Inc.) – C:\Windows\SysWow64\vmnat.exe
[2010/11/11 13:30:34 | 000,031,856 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\VMkbd.sys
[2010/11/11 13:30:18 | 000,030,320 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetuserif.sys
[2010/11/11 12:31:32 | 000,038,512 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\hcmon.sys
[2010/11/11 12:04:36 | 000,252,528 | —- | M] (VMware, Inc.) – C:\Windows\SysWow64\vmnc.dll
[2010/11/11 10:04:52 | 000,056,880 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vmnetbridge.dll
[2010/11/11 10:04:52 | 000,055,344 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\vnetinst.dll
[2010/11/11 10:04:52 | 000,045,104 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetbridge.sys
[2010/11/11 10:04:52 | 000,037,680 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmusb.sys
[2010/11/11 10:04:52 | 000,024,112 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnet.sys
[2010/11/11 10:04:52 | 000,020,016 | —- | M] (VMware, Inc.) – C:\Windows\SysNative\drivers\vmnetadapter.sys
[2010/11/11 06:58:25 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_NtrigDigi_01_09_00.Wdf
[2010/11/11 06:58:11 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01005.Wdf
[2010/11/11 06:57:25 | 000,000,000 | —- | M] () – C:\Windows\ativpsrm.bin
[2010/11/11 06:57:17 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2010/11/11 06:56:08 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_bpenum_01007.Wdf
[2010/11/11 06:55:09 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_bpusb_01007.Wdf
[2010/11/11 06:50:18 | 000,005,772 | RH– | M] () – C:\dell.sdr
[2010/11/11 06:45:58 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\cs-CZ\vpcuxd.sys.mui
[2010/11/11 06:45:58 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\cs-CZ\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\it-IT\vpcvmm.sys.mui
[2010/11/11 06:45:57 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hu-HU\vpcvmm.sys.mui
[2010/11/11 06:45:57 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\cs-CZ\vpcvmm.sys.mui
[2010/11/11 06:45:57 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ar-SA\vpcvmm.sys.mui
[2010/11/11 06:45:57 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-TW\vpcvmm.sys.mui
[2010/11/11 06:45:57 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\he-IL\vpcvmm.sys.mui
[2010/11/11 06:45:57 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ru-RU\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\it-IT\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hu-HU\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\cs-CZ\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\he-IL\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ar-SA\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hu-HU\vpcuxd.sys.mui
[2010/11/11 06:45:57 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hu-HU\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-TW\vpchbus.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-TW\vpcuxd.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ru-RU\vpcuxd.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\it-IT\vpcuxd.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\he-IL\vpcuxd.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ar-SA\vpcuxd.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-TW\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ru-RU\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\it-IT\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\he-IL\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ar-SA\vpcusb.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-TW\vpcnfltr.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\it-IT\vpcnfltr.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hu-HU\vpcnfltr.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\he-IL\vpcnfltr.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\cs-CZ\vpcnfltr.sys.mui
[2010/11/11 06:45:57 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ar-SA\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tr-TR\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ru-RU\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nl-NL\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\es-ES\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\de-DE\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\da-DK\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sv-SE\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,013,312 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\en-US\vpcvmm.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tr-TR\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sv-SE\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nl-NL\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\es-ES\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\en-US\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\de-DE\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\da-DK\vpchbus.sys.mui
[2010/11/11 06:45:56 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nl-NL\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tr-TR\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sv-SE\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nl-NL\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\es-ES\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\en-US\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\de-DE\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\da-DK\vpcuxd.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tr-TR\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sv-SE\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\es-ES\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\en-US\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\de-DE\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\da-DK\vpcusb.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tr-TR\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sv-SE\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ru-RU\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nl-NL\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\es-ES\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\en-US\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\de-DE\vpcnfltr.sys.mui
[2010/11/11 06:45:56 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\da-DK\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 004,513,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vpc.exe
[2010/11/11 06:45:54 | 002,262,016 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VPCWizard.exe
[2010/11/11 06:45:54 | 001,369,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VPCSettings.exe
[2010/11/11 06:45:54 | 001,209,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VMWindow.exe
[2010/11/11 06:45:54 | 000,936,448 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vmsal.exe
[2010/11/11 06:45:54 | 000,852,480 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2010/11/11 06:45:54 | 000,793,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\vmsal.exe
[2010/11/11 06:45:54 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2010/11/11 06:45:54 | 000,562,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\VMCPropertyHandler.dll
[2010/11/11 06:45:54 | 000,187,904 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\vpchbus.sys
[2010/11/11 06:45:54 | 000,095,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\vpcusb.sys
[2010/11/11 06:45:54 | 000,066,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\vpcnfltr.sys
[2010/11/11 06:45:54 | 000,015,872 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vpchbuspipe.dll
[2010/11/11 06:45:54 | 000,014,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\el-GR\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\th-TH\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ro-RO\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-PT\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-BR\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pl-PL\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nb-NO\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fr-FR\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fi-FI\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-CN\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ko-KR\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ja-JP\vpcvmm.sys.mui
[2010/11/11 06:45:54 | 000,004,096 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pl-PL\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,004,096 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\el-GR\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ro-RO\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-PT\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-BR\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nb-NO\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fr-FR\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fi-FI\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\th-TH\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ko-KR\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ja-JP\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pl-PL\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fi-FI\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\el-GR\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pl-PL\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\el-GR\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-CN\vpchbus.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-CN\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\th-TH\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ro-RO\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-PT\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-BR\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nb-NO\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ko-KR\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ja-JP\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fr-FR\vpcuxd.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-CN\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\th-TH\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ro-RO\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-PT\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-BR\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nb-NO\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ko-KR\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ja-JP\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fr-FR\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fi-FI\vpcusb.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\zh-CN\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\th-TH\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ro-RO\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-PT\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pt-BR\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pl-PL\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\nb-NO\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ko-KR\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ja-JP\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fr-FR\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fi-FI\vpcnfltr.sys.mui
[2010/11/11 06:45:54 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\el-GR\vpcnfltr.sys.mui
[2010/11/11 06:45:50 | 001,572,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/11/11 06:45:50 | 001,328,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/11/11 06:45:50 | 000,366,080 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2010/11/11 06:45:50 | 000,293,888 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2010/11/11 06:45:50 | 000,243,200 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2010/11/11 06:45:50 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2010/11/11 06:45:50 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/11/11 06:45:50 | 000,084,480 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/11/11 06:45:50 | 000,070,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2010/11/11 06:45:50 | 000,046,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2010/11/11 06:45:50 | 000,046,080 | —- | M] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2010/11/11 06:45:50 | 000,034,304 | —- | M] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2010/11/11 06:45:50 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2010/11/11 06:45:50 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2010/11/11 06:45:50 | 000,007,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2010/11/11 06:45:50 | 000,005,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2010/11/11 06:45:50 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2010/11/11 06:45:49 | 005,507,968 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/11/11 06:45:49 | 003,955,080 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2010/11/11 06:45:49 | 003,899,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2010/11/11 06:45:48 | 002,870,272 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
[2010/11/11 06:45:48 | 002,614,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2010/11/11 06:45:48 | 000,389,632 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2010/11/11 06:45:48 | 000,082,944 | —- | M] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2010/11/11 06:45:45 | 001,446,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2010/11/11 06:45:43 | 000,612,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2010/11/11 06:45:43 | 000,144,384 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2010/11/11 06:45:41 | 000,613,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2010/11/11 06:45:41 | 000,465,408 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2010/11/11 06:45:40 | 001,736,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2010/11/11 06:45:40 | 000,424,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/11/11 06:45:40 | 000,422,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/11/11 06:45:40 | 000,369,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/11/11 06:45:40 | 000,365,568 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/11/11 06:45:40 | 000,357,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/11/11 06:45:40 | 000,356,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/11/11 06:45:40 | 000,324,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/11/11 06:45:40 | 000,320,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/11/11 06:45:40 | 000,306,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/11/11 06:45:40 | 000,305,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/11/11 06:45:40 | 000,280,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/11/11 06:45:40 | 000,277,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/11/11 06:45:40 | 000,121,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/11/11 06:45:40 | 000,121,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/11/11 06:45:40 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/11/11 06:45:40 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/11/11 06:45:36 | 001,975,296 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2010/11/11 06:45:36 | 001,320,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2010/11/11 06:45:35 | 000,052,224 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2010/11/11 06:45:35 | 000,037,376 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2010/11/11 06:45:32 | 000,220,672 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2010/11/11 06:45:32 | 000,172,032 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2010/11/11 06:45:32 | 000,139,264 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2010/11/11 06:45:32 | 000,132,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2010/11/11 06:45:25 | 000,687,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2010/11/11 06:45:25 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2010/11/11 06:45:25 | 000,514,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2010/11/11 06:45:25 | 000,488,448 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2010/11/11 06:45:25 | 000,376,832 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2010/11/11 06:45:25 | 000,366,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2010/11/11 06:45:25 | 000,292,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2010/11/11 06:45:25 | 000,228,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2010/11/11 06:45:25 | 000,183,808 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2010/11/11 06:45:25 | 000,109,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2010/11/11 06:45:25 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2010/11/11 06:45:25 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2010/11/11 06:45:25 | 000,044,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2010/11/11 06:37:05 | 000,005,772 | —- | M] () – C:\Windows\SysWow64\drivers\1028_Dell_STU_1747.mrk
[2010/11/11 06:37:05 | 000,005,772 | —- | M] () – C:\Windows\SysNative\drivers\1028_Dell_STU_1747.mrk
[2010/11/11 05:54:06 | 001,130,546 | —- | M] () – C:\Windows\SysNative\chklogo6.wtl
[2010/11/11 05:44:28 | 000,000,159 | RH– | M] () – C:\Windows\ctfile.rfc
[2010/11/11 05:44:26 | 000,466,456 | —- | M] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/11/11 05:44:26 | 000,444,952 | —- | M] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2010/11/11 05:44:26 | 000,122,904 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2010/11/11 05:44:26 | 000,109,080 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysWow64\OpenAL32.dll
[2010/11/11 05:37:04 | 000,000,020 | —- | M] () – C:\Windows\„ô…
[2010/11/11 05:24:51 | 000,000,834 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2010/11/02 16:47:16 | 035,758,536 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\MRT.exe
[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== LOP Check ==========

[2010/11/28 14:59:51 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\6500 Series
[2010/11/30 11:40:40 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Bitcricket
[2010/11/21 10:13:56 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools
[2010/11/22 00:19:12 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools Lite
[2010/11/22 00:28:38 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\DAEMON Tools Pro
[2010/11/27 23:44:10 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Lexmark Productivity Studio
[2010/11/25 17:36:35 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\OxelonMC
[2010/11/12 22:57:06 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\PCToolsFirewallPlus
[2010/12/01 12:04:08 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Primal Pictures
[2010/11/30 10:06:45 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\TrojanHunter
[2010/12/01 12:37:14 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\uTorrent
[2010/11/30 03:51:12 | 000,000,000 | RHSD | M] – C:\Users\Dominus\AppData\Roaming\wiinupdate
[2010/11/16 12:28:37 | 000,000,000 | —D | M] – C:\Users\Dominus\AppData\Roaming\Wireshark
[2009/07/13 22:08:49 | 000,017,036 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:63238B95
@Alternate Data Stream - 110 bytes -> C:\ProgramData\Temp:C31F31E6

< End of report >

Tomk

Post #7December 1, 2010, 9:26 PM UTC

afterburner,

Double click on OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Processes

:OTL
:otl
PRC - File not found – C:\Windows\SysWow64\DRIVERS\o2flash.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4:64bit: - HKLM..\Run: [RunDLLEntry] C:\Windows\system32\AmbRunE.DLL File not found
O4 - HKLM..\Run: [FAStartup] File not found
O4 - Startup: C:\Users\Dominus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files (x86)\Dell\DellDock\DellDock.exe File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
MsConfig:64bit - StartUpFolder: C:^Users^Dominus^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^peerblock - Shortcut (2).lnk - C:\Users\Dominus\Downloads\PeerBlock_r181__x64_Release_(Vista)\peerblock.exe - File not found
MsConfig:64bit - StartUpReg: SearchSettings - hkey= - key= - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe File not found
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.
Reboot your computer

Please post the OTL log.

Do you know what this file is: C:\Users\Dominus\Documents\cc_20101117_174546.reg

Download Rooter.exe to your desktop

Then doubleclick it to start the tool
Click on Scan and let it run unhindered
A Notepad file containing the report will open, also found at %systemdrive%\Rooter.txt. Post that here

afterburner

Post #8December 1, 2010, 10:58 PM UTC

TomK, thanks a lot for your help. I am unfamiliar with that process. I have also been getting a lot of activity from a process I will post with my next logs. It appears at startup as un untrusted file attempting to run. sysc32.exe or something like that. I reinstalled PC tolls firewall and this process was attempting to access the internet through firefox as a child event. the PID was not showing under either processes or services. I am also getting starwind. I apologize for not writing down the sys process, I will post next. Thanks

Tomk

Post #9December 2, 2010, 12:55 AM UTC

That file is not actually a process. It is a file that if executed will effect your registry. Don't do anything with it at this point.

afterburner

Post #10December 2, 2010, 7:08 AM UTC

Thanks for the clarification Tomk. OTL will not run the fix. It froze all three times I tried to run it. Please find attached the Log from Rooter
Rooter.exe (v1.0.2) by Eric_71
.
The token does not have the SeDebugPrivilege privilege ! (error:1300)
Can not acquire SeDebugPrivilege !
Please run the tool as administrator ..
.
Windows 7 . (6.1.7600)
[32_bits] - Intel64 Family 6 Model 30 Stepping 5, GenuineIntel
.
Error OpenService (wscsvc) : 6
Error OpenSCManager : 5
Error OpenService (MpsSvc) : 6
Windows Defender -> Enabled
User Account Control (UAC) -> Enabled
.
Internet Explorer 8.0.7600.16385
Mozilla Firefox 3.6.12 (en-US)
.
C:\ [Fixed-NTFS] .. ( Total:454 Go - Free:353 Go )
D:\ [Fixed-NTFS] .. ( Total:465 Go - Free:229 Go )
E:\ [CD_Rom]
F:\ [Removable]
K:\ [CD_Rom]
L:\ [CD_Rom]
.
Scan : 16:16.39
Path : C:\Users\Dominus\Downloads\Rooter.exe
User : Dominus ( Administrator -> YES )
.
———————-\\ Processes
.
Locked [System Process] (0)
Locked System (4)
Locked smss.exe (352)
Locked csrss.exe (452)
Locked wininit.exe (520)
Locked csrss.exe (540)
Locked services.exe (584)
Locked lsass.exe (600)
Locked lsm.exe (608)
Locked svchost.exe (708)
Locked winlogon.exe (780)
Locked svchost.exe (844)
Locked atiesrxx.exe (920)
Locked svchost.exe (964)
Locked svchost.exe (1000)
Locked svchost.exe (408)
Locked stacsv64.exe (464)
Locked svchost.exe (1296)
Locked atieclxx.exe (1404)
Locked DockLogin.exe (1492)
Locked wisptis.exe (1544)
Locked WUDFHost.exe (1556)
Locked svchost.exe (1728)
Locked AvastSvc.exe (1908)
Locked wlanext.exe (1916)
Locked conhost.exe (1924)
Locked wisptis.exe (1848)
Locked TabTip.exe (1900)
______ ???N?????? (1336)
______ ???N?????? (1380)
Locked spoolsv.exe (2172)
Locked svchost.exe (2212)
______ ???N?????? (2240)
Locked TabTip32.exe (2508)
Locked ACService.exe (2656)
Locked AESTSr64.exe (2676)
Locked btwdins.exe (2704)
Locked taskeng.exe (2844)
Locked Core Temp.exe (2944)
Locked EvtEng.exe (3044)
______ ???N?????? (1172)
______ ???N?????? (2728)
______ ???N?????? (1832)
______ ???N?????? (3124)
______ ???N?????? (3156)
______ ???N?????? (3184)
______ ???N?????? (3232)
______ ???N?????? (3280)
______ ???N?????? (3288)
Locked svchost.exe (3452)
Locked lxdfcoms.exe (3528)
Locked mcsacore.exe (3560)
Locked o2flash.exe (3704)
Locked FWService.exe (3736)
Locked RegSrvc.exe (3064)
Locked SeaPort.exe (1124)
Locked rundll32.exe (1464)
Locked rundll32.exe (1164)
Locked StarWindServiceAE.exe (3324)
Locked svchost.exe (4004)
Locked TurboBoost.exe (4124)
Locked vmware-usbarbitrator.exe (4480)
Locked vmnat.exe (4604)
Locked AppSrv.exe (4632)
Locked WLIDSVC.EXE (4660)
Locked vmware-authd.exe (4720)
Locked WLIDSVCM.EXE (4864)
Locked vmnetdhcp.exe (4908)
Locked DMAgent.exe (4928)
Locked unsecapp.exe (5128)
Locked WmiPrvSE.exe (5164)
Locked WmiPrvSE.exe (5176)
______ ???N?????? (5236)
Locked svchost.exe (5524)
Locked SearchIndexer.exe (5560)
Locked WUDFHost.exe (5852)
Locked svchost.exe (3200)
Locked svchost.exe (6148)
Locked SynTPHelper.exe (6280)
Locked wmpnetwk.exe (6340)
Locked svchost.exe (2108)
______ ???N?????? (6572)
Locked dllhost.exe (2952)
______ ???N?????? (3916)
Locked sprtsvc.exe (3224)
Locked svchost.exe (5512)
Locked svchost.exe (6248)
______ ???N?????? (1096)
______ ???N?????? (264)
______ ???N?????? (6892)
______ ???N?????? (5688)
______ C:\Program Files\Alwil Software\Avast5\AvastUI.exe (6792)
______ ???N?????? (4784)
______ ???N?????? (7464)
Locked audiodg.exe (7424)
Locked OTL.exe (6056)
______ C:\Program Files (x86)\Mozilla Firefox\firefox.exe (6732)
______ C:\Users\Dominus\Downloads\Rooter.exe (2928)
.
———————-\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 (Start_Offset:1048576 | Length:500104691712)
.
———————-\\ Scheduled Tasks
.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\SA.DAT
C:\Windows\Tasks\SCHEDLGU.TXT
.
C:\Rooter$\Rooter_1.txt - (02/12/2010 | 00:06.29)

Tomk

Post #11December 2, 2010, 4:15 PM UTC

afterburner,

Please download TDSSKiller.zip

Extract it to your desktop
Double click TDSSKiller.exe
Press Start Scan
- Only if Malicious objects are found then ensure Cure is selected
- Then click Continue > Reboot now
Copy and paste the log in your next reply
- A copy of the log will be saved automatically to the root of the drive (typically C:\)

afterburner

Post #12December 2, 2010, 5:38 PM UTC

Tomk, your the man, thanks for all the help. Here is the tdsskiller log, I skipped one file because I am unsure as to what is what. The log notates which file at the very end. 2010/12/02 10:30:27.0023 TDSS rootkit removing tool 2.4.10.1 Dec 2 2010 12:28:01 2010/12/02 10:30:27.0024 ================================================================================ 2010/12/02 10:30:27.0024 SystemInfo: 2010/12/02 10:30:27.0024 2010/12/02 10:30:27.0024 OS Version: 6.1.7600 ServicePack: 0.0 2010/12/02 10:30:27.0024 Product type: Workstation 2010/12/02 10:30:27.0024 ComputerName: DOMINUS-PC 2010/12/02 10:30:27.0024 UserName: Dominus 2010/12/02 10:30:27.0024 Windows directory: C:\Windows 2010/12/02 10:30:27.0024 System windows directory: C:\Windows 2010/12/02 10:30:27.0024 Running under WOW64 2010/12/02 10:30:27.0024 Processor architecture: Intel x64 2010/12/02 10:30:27.0024 Number of processors: 8 2010/12/02 10:30:27.0024 Page size: 0x1000 2010/12/02 10:30:27.0024 Boot type: Normal boot 2010/12/02 10:30:27.0024 ================================================================================ 2010/12/02 10:30:27.0025 Utility is running under WOW64 2010/12/02 10:30:31.0565 Initialize success 2010/12/02 10:30:46.0617 ================================================================================ 2010/12/02 10:30:46.0617 Scan started 2010/12/02 10:30:46.0617 Mode: Manual; 2010/12/02 10:30:46.0617 ================================================================================ 2010/12/02 10:30:48.0713 1394ohci (969c91060cbb5d17cb8440b5f78b4c51) C:\Windows\system32\DRIVERS\1394ohci.sys 2010/12/02 10:30:48.0743 Acceler (c49c56b35bfc6cda8d1fdcad2885568f) C:\Windows\system32\DRIVERS\Acceler.sys 2010/12/02 10:30:48.0785 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 2010/12/02 10:30:48.0809 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 2010/12/02 10:30:48.0844 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 2010/12/02 10:30:48.0867 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 2010/12/02 10:30:48.0937 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 2010/12/02 10:30:48.0990 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys 2010/12/02 10:30:49.0023 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 2010/12/02 10:30:49.0047 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 2010/12/02 10:30:49.0153 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 2010/12/02 10:30:49.0208 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 2010/12/02 10:30:49.0317 amdkmdag (1d79cc1e4ed5f4d80a13bee7a26dfd6a) C:\Windows\system32\DRIVERS\atipmdag.sys 2010/12/02 10:30:49.0449 amdkmdap (791b17bbde5ae66df3518f19890d9b83) C:\Windows\system32\DRIVERS\atikmpag.sys 2010/12/02 10:30:49.0488 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 2010/12/02 10:30:49.0510 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys 2010/12/02 10:30:49.0535 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 2010/12/02 10:30:49.0554 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys 2010/12/02 10:30:49.0621 AnyDVD (ace1f390f0398e7b3fe36c98fba67575) C:\Windows\system32\Drivers\AnyDVD.sys 2010/12/02 10:30:49.0703 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 2010/12/02 10:30:49.0750 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 2010/12/02 10:30:49.0774 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 2010/12/02 10:30:49.0811 aswFsBlk (b76182f203e0bd5eb6a5f6538f0faee4) C:\Windows\system32\drivers\aswFsBlk.sys 2010/12/02 10:30:49.0851 aswMonFlt (a88e9544edda1ce83825dd22d6a8b5f9) C:\Windows\system32\drivers\aswMonFlt.sys 2010/12/02 10:30:49.0895 aswRdr (cfad2fb33b22e7039c9dc233baacbf8b) C:\Windows\system32\drivers\aswRdr.sys 2010/12/02 10:30:49.0918 aswSP (594365e887f4a5ad3970870b352eb887) C:\Windows\system32\drivers\aswSP.sys 2010/12/02 10:30:50.0022 aswTdi (4ba0a0e1d36f88f536180ffe5efd8b7c) C:\Windows\system32\drivers\aswTdi.sys 2010/12/02 10:30:50.0055 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 2010/12/02 10:30:50.0074 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 2010/12/02 10:30:50.0126 AtiHdmiService (637e0753bd6deb8ea5314a5c357ec1a0) C:\Windows\system32\drivers\AtiHdmi.sys 2010/12/02 10:30:50.0274 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 2010/12/02 10:30:50.0309 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 2010/12/02 10:30:50.0386 BCM43XX (fb4fda64f2e8552eaeb5986c3f34462c) C:\Windows\system32\DRIVERS\bcmwl664.sys 2010/12/02 10:30:50.0498 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 2010/12/02 10:30:50.0544 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 2010/12/02 10:30:50.0566 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 2010/12/02 10:30:50.0598 bpenum (f46dd257fad7d2d097ef32e72220a06c) C:\Windows\system32\DRIVERS\bpenum.sys 2010/12/02 10:30:50.0628 bpmp (e82060aed0f28ed8909f2b07fa276185) C:\Windows\system32\DRIVERS\bpmp.sys 2010/12/02 10:30:50.0671 bpusb (fc6313a5a45c1ae53d0491f0057d5a4d) C:\Windows\system32\Drivers\bpusb.sys 2010/12/02 10:30:50.0694 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 2010/12/02 10:30:50.0767 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 2010/12/02 10:30:50.0795 Bridge (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 2010/12/02 10:30:50.0812 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 2010/12/02 10:30:50.0844 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 2010/12/02 10:30:50.0858 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 2010/12/02 10:30:50.0870 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 2010/12/02 10:30:50.0884 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 2010/12/02 10:30:50.0934 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys 2010/12/02 10:30:50.0946 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 2010/12/02 10:30:50.0967 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 2010/12/02 10:30:50.0996 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys 2010/12/02 10:30:51.0096 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys 2010/12/02 10:30:51.0128 btusbflt (2641a3fe3d7b0646308f33b67f3b5300) C:\Windows\system32\drivers\btusbflt.sys 2010/12/02 10:30:51.0156 btwaudio (6bcfdc2b5b7f66d484486d4bd4b39a6b) C:\Windows\system32\drivers\btwaudio.sys 2010/12/02 10:30:51.0192 btwavdt (82dc8b7c626e526681c1bebed2bc3ff9) C:\Windows\system32\DRIVERS\btwavdt.sys 2010/12/02 10:30:51.0217 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys 2010/12/02 10:30:51.0234 btwrchid (28e105ad3b79f440bf94780f507bf66a) C:\Windows\system32\DRIVERS\btwrchid.sys 2010/12/02 10:30:51.0268 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 2010/12/02 10:30:51.0351 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 2010/12/02 10:30:51.0386 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 2010/12/02 10:30:51.0419 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 2010/12/02 10:30:51.0479 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 2010/12/02 10:30:51.0514 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 2010/12/02 10:30:51.0542 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys 2010/12/02 10:30:51.0624 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 2010/12/02 10:30:51.0654 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 2010/12/02 10:30:51.0704 cpuz134 (17719a7f571d4cd08223f0b30f71b8b8) C:\Windows\system32\drivers\cpuz134_x64.sys 2010/12/02 10:30:51.0725 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 2010/12/02 10:30:51.0784 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys 2010/12/02 10:30:51.0843 CtClsFlt (ed5cf92396a62f4c15110dcdb5e854d9) C:\Windows\system32\DRIVERS\CtClsFlt.sys 2010/12/02 10:30:51.0938 dc3d (76e02db615a03801d698199a2bc4a06a) C:\Windows\system32\DRIVERS\dc3d.sys 2010/12/02 10:30:51.0986 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys 2010/12/02 10:30:52.0009 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 2010/12/02 10:30:52.0057 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 2010/12/02 10:30:52.0182 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 2010/12/02 10:30:52.0277 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys 2010/12/02 10:30:52.0358 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 2010/12/02 10:30:52.0477 ElbyCDIO (a14d6e3ef78f6d6ac42f98d633f2400a) C:\Windows\system32\Drivers\ElbyCDIO.sys 2010/12/02 10:30:52.0527 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 2010/12/02 10:30:52.0546 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 2010/12/02 10:30:52.0587 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 2010/12/02 10:30:52.0628 FACAP (2c1d443e14f376e8331f52f135dca9ef) C:\Windows\system32\DRIVERS\facap.sys 2010/12/02 10:30:52.0682 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 2010/12/02 10:30:52.0751 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 2010/12/02 10:30:52.0781 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 2010/12/02 10:30:52.0793 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 2010/12/02 10:30:52.0806 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 2010/12/02 10:30:52.0822 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 2010/12/02 10:30:52.0854 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 2010/12/02 10:30:52.0908 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys 2010/12/02 10:30:52.0959 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 2010/12/02 10:30:52.0991 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 2010/12/02 10:30:53.0020 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 2010/12/02 10:30:53.0172 hcmon (ba207b48aa3d9d73fd4856400f852458) C:\Windows\system32\drivers\hcmon.sys 2010/12/02 10:30:53.0203 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 2010/12/02 10:30:53.0238 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 2010/12/02 10:30:53.0249 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 2010/12/02 10:30:53.0267 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 2010/12/02 10:30:53.0279 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 2010/12/02 10:30:53.0322 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 2010/12/02 10:30:53.0373 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 2010/12/02 10:30:53.0407 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 2010/12/02 10:30:53.0470 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 2010/12/02 10:30:53.0515 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 2010/12/02 10:30:53.0549 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys 2010/12/02 10:30:53.0586 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 2010/12/02 10:30:53.0615 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 2010/12/02 10:30:53.0626 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 2010/12/02 10:30:53.0672 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2010/12/02 10:30:53.0703 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 2010/12/02 10:30:53.0716 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 2010/12/02 10:30:53.0741 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 2010/12/02 10:30:53.0754 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 2010/12/02 10:30:53.0779 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 2010/12/02 10:30:53.0835 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 2010/12/02 10:30:53.0859 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 2010/12/02 10:30:53.0882 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys 2010/12/02 10:30:53.0920 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys 2010/12/02 10:30:53.0943 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 2010/12/02 10:30:53.0996 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 2010/12/02 10:30:54.0045 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 2010/12/02 10:30:54.0057 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 2010/12/02 10:30:54.0070 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 2010/12/02 10:30:54.0091 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 2010/12/02 10:30:54.0136 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 2010/12/02 10:30:54.0207 mcdbus (79d51e7f5926e8ce1b3ebecebae28cff) C:\Windows\system32\DRIVERS\mcdbus.sys 2010/12/02 10:30:54.0254 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 2010/12/02 10:30:54.0277 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 2010/12/02 10:30:54.0306 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 2010/12/02 10:30:54.0325 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 2010/12/02 10:30:54.0342 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 2010/12/02 10:30:54.0394 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 2010/12/02 10:30:54.0420 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 2010/12/02 10:30:54.0445 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 2010/12/02 10:30:54.0470 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 2010/12/02 10:30:54.0496 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 2010/12/02 10:30:54.0534 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys 2010/12/02 10:30:54.0560 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2010/12/02 10:30:54.0585 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2010/12/02 10:30:54.0622 msahci (bccf16d5fb1109162380e3e28dc9e4e5) C:\Windows\system32\DRIVERS\msahci.sys 2010/12/02 10:30:54.0681 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 2010/12/02 10:30:54.0727 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 2010/12/02 10:30:54.0751 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 2010/12/02 10:30:54.0771 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 2010/12/02 10:30:54.0803 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 2010/12/02 10:30:54.0846 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 2010/12/02 10:30:54.0860 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 2010/12/02 10:30:54.0889 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 2010/12/02 10:30:54.0922 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 2010/12/02 10:30:54.0945 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 2010/12/02 10:30:54.0994 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 2010/12/02 10:30:55.0020 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 2010/12/02 10:30:55.0072 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 2010/12/02 10:30:55.0119 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 2010/12/02 10:30:55.0157 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 2010/12/02 10:30:55.0188 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 2010/12/02 10:30:55.0217 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 2010/12/02 10:30:55.0230 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 2010/12/02 10:30:55.0297 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 2010/12/02 10:30:55.0315 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 2010/12/02 10:30:55.0340 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 2010/12/02 10:30:55.0498 NETw5s64 (18555f48844c2861d9dce8f2b7223ae5) C:\Windows\system32\DRIVERS\NETw5s64.sys 2010/12/02 10:30:55.0643 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 2010/12/02 10:30:55.0699 NPF (3ceee0be85d24d911b9c02714817774c) C:\Windows\system32\drivers\NPF.sys 2010/12/02 10:30:55.0720 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 2010/12/02 10:30:55.0745 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 2010/12/02 10:30:55.0790 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys 2010/12/02 10:30:55.0820 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 2010/12/02 10:30:55.0912 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys 2010/12/02 10:30:55.0926 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys 2010/12/02 10:30:55.0940 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 2010/12/02 10:30:55.0983 O2MDGRDR (8c2953537ca19dfaa67d612407e0f33e) C:\Windows\system32\DRIVERS\o2mdgx64.sys 2010/12/02 10:30:56.0016 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 2010/12/02 10:30:56.0069 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 2010/12/02 10:30:56.0092 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys 2010/12/02 10:30:56.0173 pbfilter (55223eefabfdb84a926515febab50d9a) C:\Program Files\PeerBlock\pbfilter.sys 2010/12/02 10:30:56.0255 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 2010/12/02 10:30:56.0290 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 2010/12/02 10:30:56.0321 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 2010/12/02 10:30:56.0377 PCTFW-PacketFilter (de7df8c2421d6d3114b00f9cacc7380d) C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys 2010/12/02 10:30:56.0434 pctgntdi (eb2bdc42da35aa136c495492756c800e) C:\Windows\system32\drivers\pctgntdi64.sys 2010/12/02 10:30:56.0475 pctNDIS (92c2ed950633bc69f16c577e5388b287) C:\Windows\system32\DRIVERS\pctNdis64.sys 2010/12/02 10:30:56.0557 pctplfw (f4fc4e068ded79c568a344fd68376b7d) C:\Windows\System32\drivers\pctplfw64.sys 2010/12/02 10:30:56.0584 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 2010/12/02 10:30:56.0620 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 2010/12/02 10:30:56.0732 Point64 (b8d8ec78b0f9ed8e220506181274f3d3) C:\Windows\system32\DRIVERS\point64.sys 2010/12/02 10:30:56.0770 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 2010/12/02 10:30:56.0793 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 2010/12/02 10:30:56.0875 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 2010/12/02 10:30:56.0917 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys 2010/12/02 10:30:56.0983 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 2010/12/02 10:30:57.0011 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 2010/12/02 10:30:57.0027 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 2010/12/02 10:30:57.0060 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 2010/12/02 10:30:57.0093 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 2010/12/02 10:30:57.0129 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 2010/12/02 10:30:57.0203 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 2010/12/02 10:30:57.0218 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 2010/12/02 10:30:57.0233 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 2010/12/02 10:30:57.0258 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 2010/12/02 10:30:57.0273 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 2010/12/02 10:30:57.0310 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys 2010/12/02 10:30:57.0335 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 2010/12/02 10:30:57.0362 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 2010/12/02 10:30:57.0386 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys 2010/12/02 10:30:57.0401 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 2010/12/02 10:30:57.0454 Revoflt (9c3ac71a9934b884fac567a8807e9c4d) C:\Windows\system32\DRIVERS\revoflt.sys 2010/12/02 10:30:57.0554 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 2010/12/02 10:30:57.0604 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 2010/12/02 10:30:57.0649 RTL8167 (4b42bc58294e83a6a92ec8b88c14c4a3) C:\Windows\system32\DRIVERS\Rt64win7.sys 2010/12/02 10:30:57.0708 RTL8192su (a332db1dac07e95667a57aaeec236c37) C:\Windows\system32\DRIVERS\RTL8192su.sys 2010/12/02 10:30:57.0744 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys 2010/12/02 10:30:57.0820 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 2010/12/02 10:30:57.0838 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 2010/12/02 10:30:57.0876 sdbus (84e00908975faf79e91282ed8fb88c2f) C:\Windows\system32\DRIVERS\sdbus.sys 2010/12/02 10:30:57.0921 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 2010/12/02 10:30:57.0947 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 2010/12/02 10:30:57.0976 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 2010/12/02 10:30:58.0000 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 2010/12/02 10:30:58.0052 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 2010/12/02 10:30:58.0078 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 2010/12/02 10:30:58.0099 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys 2010/12/02 10:30:58.0170 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 2010/12/02 10:30:58.0204 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 2010/12/02 10:30:58.0218 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 2010/12/02 10:30:58.0249 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 2010/12/02 10:30:58.0306 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 2010/12/02 10:30:58.0373 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys 2010/12/02 10:30:58.0373 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb 2010/12/02 10:30:58.0377 sptd - detected Locked file (1) 2010/12/02 10:30:58.0410 srv (de6f5658da951c4bc8e498570b5b0d5f) C:\Windows\system32\DRIVERS\srv.sys 2010/12/02 10:30:58.0489 srv2 (4d33d59c0b930c523d29f9bd40cda9d2) C:\Windows\system32\DRIVERS\srv2.sys 2010/12/02 10:30:58.0524 srvnet (5a663fd67049267bc5c3f3279e631ffb) C:\Windows\system32\DRIVERS\srvnet.sys 2010/12/02 10:30:58.0626 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 2010/12/02 10:30:58.0675 STHDA (c79f5cbc47b19a068d8936df8332e3e6) C:\Windows\system32\DRIVERS\stwrt64.sys 2010/12/02 10:30:58.0781 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys 2010/12/02 10:30:58.0803 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys 2010/12/02 10:30:58.0827 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 2010/12/02 10:30:58.0865 SynTP (29ad5ff846e8939c10112f34cb2e334a) C:\Windows\system32\DRIVERS\SynTP.sys 2010/12/02 10:30:58.0939 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\drivers\tcpip.sys 2010/12/02 10:30:59.0022 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\Windows\system32\DRIVERS\tcpip.sys 2010/12/02 10:30:59.0065 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 2010/12/02 10:30:59.0101 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 2010/12/02 10:30:59.0112 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 2010/12/02 10:30:59.0145 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 2010/12/02 10:30:59.0163 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 2010/12/02 10:30:59.0192 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 2010/12/02 10:30:59.0216 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 2010/12/02 10:30:59.0255 TurboB (f37d49111a12a97de4bb5d8ff444bd2c) C:\Windows\system32\DRIVERS\TurboB.sys 2010/12/02 10:30:59.0283 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 2010/12/02 10:30:59.0319 udfs (31ba4a33afab6a69ea092b18017f737f) C:\Windows\system32\DRIVERS\udfs.sys 2010/12/02 10:30:59.0358 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 2010/12/02 10:30:59.0376 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 2010/12/02 10:30:59.0430 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 2010/12/02 10:30:59.0507 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys 2010/12/02 10:30:59.0531 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys 2010/12/02 10:30:59.0556 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 2010/12/02 10:30:59.0587 usbehci (cb490987a7f6928a04bb838e3bd8a936) C:\Windows\system32\DRIVERS\usbehci.sys 2010/12/02 10:30:59.0610 usbhub (18124ef0a881a00ee222d02a3ee30270) C:\Windows\system32\DRIVERS\usbhub.sys 2010/12/02 10:30:59.0644 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 2010/12/02 10:30:59.0670 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 2010/12/02 10:30:59.0704 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 2010/12/02 10:30:59.0768 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2010/12/02 10:30:59.0816 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 2010/12/02 10:30:59.0858 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\system32\Drivers\usbvideo.sys 2010/12/02 10:30:59.0911 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys 2010/12/02 10:30:59.0943 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 2010/12/02 10:30:59.0967 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 2010/12/02 10:30:59.0986 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 2010/12/02 10:31:00.0040 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 2010/12/02 10:31:00.0074 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 2010/12/02 10:31:00.0140 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys 2010/12/02 10:31:00.0167 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys 2010/12/02 10:31:00.0199 vmci (3d810a11c3e7fd4682a8824f54c1a04f) C:\Windows\system32\drivers\vmci.sys 2010/12/02 10:31:00.0250 vmkbd (1af6462718e5ab0ed55014a6ef3790ef) C:\Windows\system32\drivers\VMkbd.sys 2010/12/02 10:31:00.0283 VMnetAdapter (9d54f1339e78c95bf3d9939ebcb66378) C:\Windows\system32\DRIVERS\vmnetadapter.sys 2010/12/02 10:31:00.0351 VMnetBridge (fb54ef3aa613d2832fd3812e7cb2fc75) C:\Windows\system32\DRIVERS\vmnetbridge.sys 2010/12/02 10:31:00.0397 VMnetuserif (daf5e04eb56cd0ed945fb2fdd94812db) C:\Windows\system32\drivers\vmnetuserif.sys 2010/12/02 10:31:00.0456 vmusb (415b167695c4b5960a13098622ef3d80) C:\Windows\system32\Drivers\vmusb.sys 2010/12/02 10:31:00.0504 vmx86 (ae7f667db83e108e83c86a56b821e9a6) C:\Windows\system32\drivers\vmx86.sys 2010/12/02 10:31:00.0535 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 2010/12/02 10:31:00.0550 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 2010/12/02 10:31:00.0586 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 2010/12/02 10:31:00.0626 vpcbus (abd9b4a7e2d0ae51a3b8df1af3152d61) C:\Windows\system32\DRIVERS\vpchbus.sys 2010/12/02 10:31:00.0699 vpcnfltr (8acda395841538ce9713a67fe8b2a3eb) C:\Windows\system32\DRIVERS\vpcnfltr.sys 2010/12/02 10:31:00.0739 vpcusb (31924e31bc315773e6d149b157db46d5) C:\Windows\system32\DRIVERS\vpcusb.sys 2010/12/02 10:31:00.0793 vpcvmm (a5d16559d80cfa1dcb98f46410be5551) C:\Windows\system32\drivers\vpcvmm.sys 2010/12/02 10:31:00.0825 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 2010/12/02 10:31:00.0879 vstor2-ws60 (e61c910e2ddf4797c1b1f9239636e894) C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys 2010/12/02 10:31:00.0918 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 2010/12/02 10:31:00.0946 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 2010/12/02 10:31:00.0998 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 2010/12/02 10:31:01.0045 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 2010/12/02 10:31:01.0088 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 2010/12/02 10:31:01.0107 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 2010/12/02 10:31:01.0171 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 2010/12/02 10:31:01.0203 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 2010/12/02 10:31:01.0243 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 2010/12/02 10:31:01.0283 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys 2010/12/02 10:31:01.0344 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 2010/12/02 10:31:01.0422 WinUSB (4d52c872018af7e18d078978dcc3f6f2) C:\Windows\system32\DRIVERS\WinUSB.sys 2010/12/02 10:31:01.0468 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 2010/12/02 10:31:01.0513 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 2010/12/02 10:31:01.0548 WudfPf (c63907207b837a5c05cf6d1606aa0008) C:\Windows\system32\drivers\WudfPf.sys 2010/12/02 10:31:01.0569 WUDFRd (d885a873d733020f8b9b9ff4b1666158) C:\Windows\system32\DRIVERS\WUDFRd.sys 2010/12/02 10:31:01.0639 xusb21 (38f55d07b1d3391065c40ec065f984e2) C:\Windows\system32\DRIVERS\xusb21.sys 2010/12/02 10:31:01.0692 {1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7} (74983addca2d9618512c088d856d6615) C:\Program Files (x86)\CyberLink\PowerDVD DX\000.fcl 2010/12/02 10:31:02.0071 ================================================================================ 2010/12/02 10:31:02.0071 Scan finished 2010/12/02 10:31:02.0071 ================================================================================ 2010/12/02 10:31:02.0080 Detected object count: 1 2010/12/02 10:33:07.0919 Locked file(sptd) - User select action: Skip Also, the file that wants to open which may be corrupted or ccleaner may have removed a registry entry on, is C:\ProgramData\Sys32c.exe This file once allowed to run opens the Dell dock and seems to be a normal part of the startup process. Can you advise how to remedy this? Thanks a lot.

Tomk

Post #13December 2, 2010, 6:30 PM UTC

afterburner,

That file should have nothing to do with Dell dock.

It claims to be related to Avast… but Avast has no such file.

Let's check on it a bit further.

Submit a file to VirusTotal for analysis

Use the browse button on that page to navigate to the location of the file to be scanned.
In the right hand panel,
click on the file C:\ProgramData\Sys32c.exe
then click the open button.
The file will now be displayed in the submit box.
Scroll down a bit and click "send file", wait for the results
If you get a message saying File has already been analyzed: click Reanalyze file now
Once scanned, copy and paste the link to the results page in your next reply.

afterburner

Post #14December 2, 2010, 7:37 PM UTC

Okay, obviously I screwed up in DLing that particular torrent. Here is the results. I am anxious to remove this as soon as you adivse. Also, my flash player and PDF reader has been crashing and I have been getting random lock ups with MPC. It seems that this particular malware has really spread throughout my system. I am a starving student and torrenting certain files has been financially equitable, but it seems not so much when it ruins a 2400.00 dollar computer, lol. Thanks Tomk for all your help. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware. File name: Sys32c.exe Submission date: 2010-12-02 19:30:46 (UTC) Current status: queued (#3) queued (#3) analysing finished Result: 10/ 43 (23.3%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2010.12.02.07 2010.12.02 - AntiVir 7.10.14.171 2010.12.02 TR/Dropper.Gen Antiy-AVL 2.0.3.7 2010.12.02 - Avast 4.8.1351.0 2010.12.02 Win32:Malware-gen Avast5 5.0.677.0 2010.12.02 Win32:Malware-gen AVG 9.0.0.851 2010.12.02 - BitDefender 7.2 2010.12.02 - CAT-QuickHeal 11.00 2010.12.02 - ClamAV 0.96.4.0 2010.12.02 - Command 5.2.11.5 2010.12.01 - Comodo 6929 2010.12.02 - DrWeb 5.0.2.03300 2010.12.02 Trojan.Inject.15295 Emsisoft 5.0.0.50 2010.12.02 Backdoor.Win32.Fynloski!IK eSafe 7.0.17.0 2010.12.02 Win32.TRDropper eTrust-Vet 36.1.8014 2010.12.02 - F-Prot 4.6.2.117 2010.12.01 - F-Secure 9.0.16160.0 2010.12.02 - Fortinet 4.2.254.0 2010.12.02 - GData 21 2010.12.02 Win32:Malware-gen Ikarus T3.1.1.90.0 2010.12.02 Backdoor.Win32.Fynloski Jiangmin 13.0.900 2010.12.02 - K7AntiVirus 9.70.3146 2010.12.02 - Kaspersky 7.0.0.125 2010.12.02 - McAfee 5.400.0.1158 2010.12.02 Artemis!16AB0D438B1F McAfee-GW-Edition 2010.1C 2010.12.02 Heuristic.LooksLike.Heuristic.BehavesLike.Win32.Dropper.B Microsoft 1.6402 2010.12.02 - NOD32 5667 2010.12.02 - Norman 6.06.10 2010.12.02 - nProtect 2010-12-02.01 2010.12.02 - Panda 10.0.2.7 2010.12.02 - PCTools 7.0.3.5 2010.12.02 - Prevx 3.0 2010.12.02 - Rising 22.76.02.04 2010.12.02 - Sophos 4.60.0 2010.12.02 - SUPERAntiSpyware 4.40.0.1006 2010.12.02 - Symantec 20101.2.0.161 2010.12.02 - TheHacker 6.7.0.1.094 2010.12.01 - TrendMicro 9.120.0.1004 2010.12.02 - TrendMicro-HouseCall 9.120.0.1004 2010.12.02 - VBA32 3.12.14.2 2010.12.02 - VIPRE 7480 2010.12.02 - ViRobot 2010.12.2.4181 2010.12.02 - VirusBuster 13.6.71.0 2010.12.02 - Additional information Show all MD5 : 16ab0d438b1f04860f709a0c895116d2 SHA1 : d53b7e5c631335c06961be3fe475a6e46f78dbc9 SHA256: c909786315333ec79735daa70bc97850d4d0a67115794bcd46cc74cfd5202b45 ssdeep: 6144:oNjOJt8Egjo3qB+P/lo8OpPdlzT811VfMYQhPmeyn8DnSFT36wx1mM:QSJtv3jPdofpPdZ syhPmeu3KwSM File size : 385024 bytes First seen: 2010-11-29 22:55:16 Last seen : 2010-12-02 19:30:46 TrID: Generic CIL Executable (.NET, Mono, etc.) (83.3%) Win32 Executable Generic (9.7%) Win16/32 Executable Delphi generic (2.3%) Generic Win/DOS Executable (2.2%) DOS Executable Generic (2.2%) sigcheck: publisher….: Avast Activators copyright….: product……: n/a description..: original name: Avast Pro 5.0.677 Activator.exe internal name: Avast Pro 5.0.677 Activator.exe file version.: 0.0.0.0 comments…..: n/a signers……: - signing date.: - verified…..: Unsigned PEInfo: PE structure information [[ basic data ]] entrypointaddress: 0x4D7AE timedatestamp….: 0x4CF3F345 (Mon Nov 29 18:39:01 2010) machinetype……: 0x14c (I386) [[ 3 section(s) ]] name, viradd, virsiz, rawdsiz, ntropy, md5 .text, 0x2000, 0x4B7B4, 0x4C000, 7.97, 14563e6ced5670907319bcb81f11eff1 .rsrc, 0x4E000, 0xF6D0, 0x10000, 6.27, d01ccb7ed15bd5ebc18fa7b6a95c33cd .reloc, 0x5E000, 0xC, 0x1000, 0.02, e96f070316b138892036994eb11714ce [[ 1 import(s) ]] mscoree.dll: _CorExeMain ExifTool: file metadata AssemblyVersion: 0.0.0.0 CharacterSet: Unicode CodeSize: 311296 CompanyName: Avast Activators EntryPoint: 0x4d7ae FileDescription: FileFlagsMask: 0x003f FileOS: Win32 FileSize: 376 kB FileSubtype: 0 FileType: Win32 EXE FileVersion: 0.0.0.0 FileVersionNumber: 0.0.0.0 ImageVersion: 0.0 InitializedDataSize: 69632 InternalName: Avast Pro 5.0.677 Activator.exe LanguageCode: Neutral LegalCopyright: LinkerVersion: 8.0 MIMEType: application/octet-stream MachineType: Intel 386 or later, and compatibles OSVersion: 4.0 ObjectFileType: Executable application OriginalFilename: Avast Pro 5.0.677 Activator.exe PEType: PE32 ProductVersion: 0.0.0.0 ProductVersionNumber: 0.0.0.0 Subsystem: Windows GUI SubsystemVersion: 4.0 TimeStamp: 2010:11:29 19:39:01+01:00 UninitializedDataSize: 0 Symantec reputation:Suspicious.Insight F-Secure DeepGuard:Suspicious:W32/Malware!Online VT Community

Attachments:

📎VirusTotal___Free_Online_Vi....pdf

Tomk

Post #15December 2, 2010, 7:50 PM UTC

afterburner,

If I'm reading this correctly, you've downloaded a "cracked" version of Avast and this file is supposed to validate it for you?

Are you aware that AVAST provides an Anti-Virus program for free?

Something to think about… Trusting a hacked program to protect you from hackers??? Does that really make sense to you?

To continue…

Your computer appears to have been infected by a backdoor trojan. These programs have the ability to steal passwords and other information from your system. If you use your computer for sensitive purposes such as internet banking then I recommend you take the following steps immediately:

Use another, uninfected computer to change all your internet passwords, especially ones with financial implications such as banks, paypal, ebay, etc. You should also change the passwords for any other site you use.
Call your bank(s), credit card company or any other institution which may be affected and advise them that your login/password or credit card information may have been stolen and ask what steps to take with regard to your account.
Consider what other private information could possibly have been taken from your computer and take appropriate steps

This infection can almost certainly be cleaned, but as the malware could be configured to run any program a remote attacker requires, it will be impossible to be 100% sure that the machine is clean, if this is unacceptable to you then you should consider reformatting the system partition and reinstalling Windows as this is the only 100% sure answer.

If you wish to reformat then please let me know in your next response, I'll now continue with instructions for cleaning.

Please uninstall your Avast program using Add or remove programs in your control panel. (In one of the links I give you when we are done you will find info on free anti-virus programs)

Then…

Double click on OTL

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Processes

:OTL
O4 - HKCU..\Run: [DefaultSystem] C:\ProgramData\Sys32c.exe (Avast Activators)
[2010/11/29 23:11:21 | 000,385,024 | —- | C] (Avast Activators) – C:\ProgramData\Sys32c.exe


:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.
Reboot your computer

Please post the OTL log.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Hijack This Log

✨ Ask AI

Ask AI