This is my OTL.txt content. I cannot upload the file. Got this message "Upload failed. Please ask the administrator to ensure the uploads directory is writeable"
————————————————————————————————————————————————————————————————————————————————
OTL logfile created on: 4/20/2011 10:29:04 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = D:\download
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 56.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 54.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 74.53 Gb Total Space | 38.09 Gb Free Space | 51.11% Space Free | Partition Type: NTFS
Drive D: | 204.03 Gb Total Space | 10.67 Gb Free Space | 5.23% Space Free | Partition Type: NTFS
Drive E: | 4.28 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Computer Name: OUM-PC | User Name: FARRAZA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - D:\download\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
PRC - C:\Program Files (x86)\ClickPotatoLite\bin\10.0.668.0\ClickPotatoLiteSA.exe (Pinball Corporation.)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
PRC - C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - C:\Program Files\P1\P1 4G\GPCommonService.exe (Green Packet Inc.)
PRC - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
PRC - C:\Windows\AsScrPro.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe (asus)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
PRC - C:\Windows\SysWOW64\NLSSRV32.EXE (Nalpeiron Ltd.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\IBM\Lotus\Notes\ntmulti.exe (IBM Corp)
PRC - C:\Program Files (x86)\IBM\Lotus\Notes\nsd.exe (IBM)
PRC - C:\Users\FARRAZA\My Documents\Cryptload\CryptLoad.exe (
http://cryptload.info)
PRC - C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe (Boingo Wireless, Inc.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (Broadcom Corporation.)
PRC - C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (ASUS)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ASUS)
PRC - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
PRC - C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe ()
========== Modules (SafeList) ==========
MOD - D:\download\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Internet Download Manager\idmmkb.dll (Tonec Inc.)
========== Win32 Services (SafeList) ==========
SRV:
64bit: - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV:
64bit: - (GPCommonService(64)) – C:\Program Files\P1\P1 4G\GPCommonServicex64.exe (Green Packet Inc.)
SRV:
64bit: - (GPCommonService) – C:\Program Files\P1\P1 4G\GPCommonService.exe (Green Packet Inc.)
SRV:
64bit: - (UxTuneUp) – C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:
64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:
64bit: - (NitroDriverReadSpool) – C:\Program Files\Common Files\Nitro PDF\Professional\6.0\NitroPDFDriverServicex64.exe (Nitro PDF Software)
SRV:
64bit: - (AFBAgent) – C:\Windows\SysNative\FBAgent.exe (ASUSTeK Computer Inc.)
SRV:
64bit: - (btwdins) – C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV:
64bit: - (Canon Driver Information Assist Service) – C:\Program Files\Canon\DIAS\CnxDIAS.exe (CANON INC.)
SRV:
64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (ScanQuery Service) – C:\ProgramData\ScanQuery\scanquery117.exe ()
SRV - (Application Updater) – C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (TuneUp.Defrag) – C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) – C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) – C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (nlsX86cc) – C:\Windows\SysWOW64\NLSSRV32.EXE (Nalpeiron Ltd.)
SRV - (ATKGFNEXSrv) – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUS)
SRV - (Multi-user Cleanup Service) – C:\Program Files (x86)\IBM\Lotus\Notes\ntmulti.exe (IBM Corp)
SRV - (Lotus Notes Diagnostics) – C:\Program Files (x86)\IBM\Lotus\Notes\nsd.exe (IBM)
SRV - (ASLDRService) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (wampmysqld) – c:\wamp\mysql\bin\mysqld-nt.exe ()
SRV - (wampapache) – c:\wamp\apache2\bin\httpd.exe (Apache Software Foundation)
========== Driver Services (SafeList) ==========
DRV:
64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:
64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:
64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:
64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:
64bit: - (MT7118VU) – C:\Windows\SysNative\drivers\mt7118vu_x64.sys (MediaTek Inc.)
DRV:
64bit: - (MTKWMPROT) – C:\Windows\SysNative\drivers\mtkwmptv_x64.sys (MediaTek Inc.)
DRV:
64bit: - (ETD) – C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronic Corp.)
DRV:
64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:
64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:
64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:
64bit: - (JME) JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits) – C:\Windows\SysNative\drivers\JME.sys (JMicron Technology Corp.)
DRV:
64bit: - (usbfilter) – C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
DRV:
64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:
64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:
64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:
64bit: - (JMCR) – C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
DRV:
64bit: - (kbfiltr) – C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:
64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:
64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:
64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:
64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:
64bit: - (btusbflt) – C:\Windows\SysNative\drivers\btusbflt.sys (Broadcom Corporation.)
DRV:
64bit: - (btwaudio) – C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:
64bit: - (btwavdt) – C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:
64bit: - (btwrchid) – C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:
64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:
64bit: - (SiSGbeLH) – C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:
64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:
64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:
64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:
64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:
64bit: - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) – C:\Windows\SysNative\drivers\snp2uvc.sys ()
DRV:
64bit: - (MTsensor) – C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:
64bit: - (AtiPcie) AMD PCI Express (3GIO) – C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV:
64bit: - (btwl2cap) – C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:
64bit: - (fssfltr) – C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:
64bit: - (WimFltr) – C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV:
64bit: - (RimUsb) – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys (Research In Motion Limited)
DRV - (TuneUpUtilitiesDrv) – C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (ASMMAP64) – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys (ASUS)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchPage =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/405
IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKCU\..\URLSearchHook: {F08555B0-9CC3-11D2-AA8E-000000000567} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\AutocompletePro\[removed] [2010/08/01 18:56:33 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files (x86)\Google\Google Gears\Firefox\ [2010/11/22 23:35:20 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011/03/23 12:51:49 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\ClickPotatoLite\bin\10.0.668.0\firefox\extensions [2011/04/07 23:35:28 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\ShopperReports3\bin\3.1.69.0\firefox\firefoxtoolbar\extensions
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/04/03 22:37:21 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/04/14 21:10:37 | 000,000,000 | —D | M]
[2011/03/31 18:43:01 | 000,000,000 | —D | M] (No name found) – C:\Users\FARRAZA\AppData\Roaming\Mozilla\Extensions
[2011/02/09 00:58:50 | 000,000,000 | —D | M] (No name found) – C:\Users\FARRAZA\AppData\Roaming\Mozilla\Extensions\{ea278cf8-93cd-484f-b951-57360482d33a}
[2011/04/09 11:28:47 | 000,000,000 | —D | M] (No name found) – C:\Users\FARRAZA\AppData\Roaming\Mozilla\Firefox\Profiles\bn7und4w.default\extensions
[2011/02/06 14:32:02 | 000,000,000 | —D | M] (FireShot) – C:\Users\FARRAZA\AppData\Roaming\Mozilla\Firefox\Profiles\bn7und4w.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011/04/02 15:36:37 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\FARRAZA\AppData\Roaming\Mozilla\Firefox\Profiles\bn7und4w.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/03/31 18:42:51 | 000,000,000 | —D | M] (Searchqu Toolbar) – C:\Users\FARRAZA\AppData\Roaming\Mozilla\Firefox\Profiles\bn7und4w.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2011/04/14 21:10:37 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/08/02 02:01:15 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/25 10:25:49 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/02/07 10:08:44 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/04/11 10:21:47 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/04/07 23:41:05 | 000,000,000 | —D | M] (ScanQuery) – C:\Program Files (x86)\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}
[2011/03/19 01:53:24 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/03/23 04:30:20 | 000,087,344 | —- | M] (Pinball Corporation.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll
[2011/02/02 21:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/01 16:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
[2010/12/09 23:17:40 | 000,005,529 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
O1 HOSTS File: ([2009/06/11 05:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:
64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:
64bit: - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\x64\IEBHO.dll (Discordia, LTD)
O2:
64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:
64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll ()
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Windows Savevid Toolbar\ToolBar\searchqudtx.dll ()
O2 - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O3:
64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:
64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:
64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Windows Savevid Toolbar\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:
64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:
64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [ClickPotatoLiteSA] C:\Program Files (x86)\ClickPotatoLite\bin\10.0.668.0\ClickPotatoLiteSA.exe (Pinball Corporation.)
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [RemoteControl9] C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWow64\Macromed\Flash\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:
64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:
64bit: - Extra context menu item: Download FLV video content with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm ()
O8:
64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:
64bit: - Extra context menu item: Save video on Savevid.com - C:\Program Files (x86)\Savevid\redirect.htm ()
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Save video on Savevid.com - C:\Program Files (x86)\Savevid\redirect.htm ()
O9 - Extra 'Tools' menuitem : &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: ClickPotato - {B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} - C:\Program Files (x86)\ClickPotatoLite\bin\10.0.668.0\ClickPotatoLiteSABHO.dll (Pinball Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E008A543-CEFB-4559-912F-C27C2B89F13B}
http://mlk3.bdrmelaka.uitm.edu.my/dwa7W.cab (Domino Web Access 7 Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.8.19
O18:
64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:
64bit: - AppInit_DLLs: (C:\PROGRA~2\WI5C88~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\x64\datamngr.dll (Discordia, LTD)
O20:
64bit: - AppInit_DLLs: (C:\PROGRA~2\WI5C88~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\x64\IEBHO.dll (Discordia, LTD)
O20 - AppInit_DLLs: (C:\PROGRA~2\WI5C88~1\Datamngr\datamngr.dll) - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\datamngr.dll (Discordia, LTD)
O20 - AppInit_DLLs: (C:\PROGRA~2\WI5C88~1\Datamngr\IEBHO.dll) - C:\Program Files (x86)\Windows Savevid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{814df243-6252-11e0-883d-485b39e84dbb}\Shell - "" = AutoRun
O33 - MountPoints2\{814df243-6252-11e0-883d-485b39e84dbb}\Shell\AutoRun\command - "" = F:\P14GSetup.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:
64bit: - HKLM\..comfile [open] – "%1" %*
O35:
64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:
64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:
64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs:
64bit: UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
Drivers32:
64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:
64bit: msacm.voxacm160 - vct3216.acm (Voxware, Inc.)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (
http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011/04/15 12:38:11 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Roaming\UseNeXT
[2011/04/15 12:38:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT
[2011/04/15 12:37:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\UseNeXT
[2011/04/13 17:52:00 | 000,476,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/04/13 17:51:59 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/04/13 16:20:31 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/04/13 16:20:31 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/04/13 15:49:58 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/04/13 15:49:11 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2011/04/13 15:49:10 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2011/04/13 15:49:09 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2011/04/13 15:49:08 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/04/13 15:49:04 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/04/13 15:49:04 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/04/13 15:49:04 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/04/13 15:49:03 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2011/04/13 15:49:03 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2011/04/13 15:49:03 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2011/04/13 15:49:02 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/04/13 15:48:58 | 000,367,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2011/04/13 15:48:58 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2011/04/13 15:48:58 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2011/04/13 15:48:58 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2011/04/13 15:48:54 | 000,919,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/04/13 15:48:54 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/04/13 15:48:53 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/04/13 15:48:50 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/04/13 15:48:49 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2011/04/13 15:48:48 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/04/11 10:21:41 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/04/11 10:21:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/04/11 10:21:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/04/09 16:05:38 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\P1 4G Connection Manager
[2011/04/09 16:05:37 | 000,000,000 | —D | C] – C:\Users\FARRAZA\Documents\P1 4G Update
[2011/04/09 16:05:37 | 000,000,000 | —D | C] – C:\Users\FARRAZA\Documents\P1 4G
[2011/04/09 16:05:17 | 000,018,432 | —- | C] (MediaTek Inc.) – C:\Windows\SysNative\drivers\mtkwmptv_x64.sys
[2011/04/09 16:04:41 | 000,154,112 | —- | C] (MediaTek Inc.) – C:\Windows\SysNative\drivers\mt7118vu_x64.sys
[2011/04/09 16:04:36 | 000,000,000 | —D | C] – C:\Program Files\P1
[2011/04/08 19:29:46 | 000,000,000 | —D | C] – C:\Users\FARRAZA\Desktop\Keyword_lists TTW
[2011/04/08 17:20:24 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Traffic Travis v3
[2011/04/08 17:20:20 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Roaming\Affilorama
[2011/04/08 17:20:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\Traffic Travis v3
[2011/04/08 16:59:42 | 000,000,000 | —D | C] – C:\Users\FARRAZA\Documents\Micro Niche Finder
[2011/04/08 16:59:12 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Micro Niche Finder 5.0
[2011/04/08 16:59:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Micro Niche Finder 5.0
[2011/04/07 23:43:38 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
[2011/04/07 23:43:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Xvid
[2011/04/07 23:41:04 | 000,000,000 | —D | C] – C:\ProgramData\ScanQuery
[2011/04/07 23:41:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\ScanQuery
[2011/04/07 23:40:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports
[2011/04/07 23:40:36 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Roaming\ShopperReports3
[2011/04/07 23:35:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato
[2011/04/07 23:35:28 | 000,000,000 | —D | C] – C:\ProgramData\ClickPotatoLiteSA
[2011/04/07 23:35:28 | 000,000,000 | —D | C] – C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[2011/04/07 23:35:27 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Roaming\ClickPotatoLite
[2011/04/07 23:35:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\ClickPotatoLite
[2011/04/04 22:53:59 | 000,000,000 | —D | C] – C:\Users\FARRAZA\Desktop\TDSSKiller
[2011/04/04 15:21:42 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2011/04/04 15:21:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2011/04/04 14:28:05 | 000,000,000 | —D | C] – C:\Windows\pss
[2011/04/03 22:51:48 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Roaming\Malwarebytes
[2011/04/03 22:51:35 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/04/03 22:51:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/04/03 22:51:34 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/04/03 22:51:31 | 000,024,152 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2011/04/03 22:51:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/03/31 18:42:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Savevid Toolbar
[2011/03/31 18:42:39 | 000,000,000 | -H-D | C] – C:\ProgramData\{4DC9D39F-E342-4826-8E99-5A0EFA8682D7}
[2011/03/31 18:42:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Savevid
[2011/03/31 18:42:16 | 000,000,000 | —D | C] – C:\Users\FARRAZA\AppData\Local\PackageAware
[2011/03/28 23:40:46 | 000,000,000 | —D | C] – C:\Users\FARRAZA\Documents\UseNeXT
[2011/03/24 11:00:36 | 001,076,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/03/24 11:00:36 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/03/24 11:00:35 | 001,544,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/03/24 11:00:34 | 000,739,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2011/03/23 12:51:50 | 000,505,176 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSnx.sys
========== Files - Modified Within 30 Days ==========
[2011/04/20 10:18:01 | 000,000,912 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/20 10:07:44 | 000,730,320 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/04/20 10:07:44 | 000,627,082 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/04/20 10:07:44 | 000,107,366 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/04/20 10:03:17 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/04/19 22:44:27 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/18 21:03:15 | 000,010,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/18 21:03:15 | 000,010,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/18 20:55:55 | 000,045,056 | —- | M] () – C:\Windows\SysNative\acovcnt.exe
[2011/04/18 20:55:18 | 1608,896,512 | -HS- | M] () – C:\hiberfil.sys
[2011/04/15 19:03:15 | 000,009,266 | —- | M] () – C:\Users\FARRAZA\Desktop\DDS_attach_txt.zip
[2011/04/15 12:38:06 | 000,001,859 | —- | M] () – C:\Users\FARRAZA\Desktop\UseNeXT.lnk
[2011/04/15 11:19:17 | 000,068,617 | —- | M] () – C:\Users\FARRAZA\Documents\streamyx march 2011 tertunggak.pdf
[2011/04/13 17:38:34 | 000,417,528 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/04/10 15:02:52 | 000,001,454 | —- | M] () – C:\Windows\SysNative\ServiceFilter.ini
[2011/04/10 15:02:50 | 000,001,978 | —- | M] () – C:\Windows\SysNative\AutoRunFilter.ini
[2011/04/09 16:05:38 | 000,001,741 | —- | M] () – C:\Users\Public\Desktop\P1 4G.lnk
[2011/04/08 17:20:24 | 000,001,039 | —- | M] () – C:\Users\FARRAZA\Application Data\Microsoft\Internet Explorer\Quick Launch\Traffic Travis.lnk
[2011/04/08 17:20:24 | 000,001,015 | —- | M] () – C:\Users\FARRAZA\Desktop\Traffic Travis.lnk
[2011/04/08 16:59:13 | 000,002,167 | —- | M] () – C:\Users\Public\Desktop\Micro Niche Finder 5.0.lnk
[2011/04/04 15:21:42 | 000,002,985 | —- | M] () – C:\Users\FARRAZA\Desktop\HiJackThis.lnk
[2011/04/03 22:51:36 | 000,001,135 | —- | M] () – C:\Users\FARRAZA\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/04/03 22:37:24 | 000,001,136 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/03/29 18:43:03 | 000,092,205 | —- | M] () – C:\Users\FARRAZA\Documents\Rumah_keta_CTbank_streamyx_march2011.pdf
[2011/03/28 16:34:21 | 000,002,016 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2011/03/23 12:53:39 | 000,081,672 | —- | M] () – C:\Users\FARRAZA\Documents\FPX Google Adwords Vemma.pdf
[2011/03/23 12:51:50 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
========== Files Created - No Company Name ==========
[2011/04/18 22:38:06 | 000,301,568 | —- | C] () – C:\Users\FARRAZA\Desktop\gmer.exe
[2011/04/15 19:03:15 | 000,009,266 | —- | C] () – C:\Users\FARRAZA\Desktop\DDS_attach_txt.zip
[2011/04/15 12:38:06 | 000,001,859 | —- | C] () – C:\Users\FARRAZA\Desktop\UseNeXT.lnk
[2011/04/15 11:19:15 | 000,068,617 | —- | C] () – C:\Users\FARRAZA\Documents\streamyx march 2011 tertunggak.pdf
[2011/04/09 16:05:38 | 000,001,741 | —- | C] () – C:\Users\Public\Desktop\P1 4G.lnk
[2011/04/09 16:05:17 | 001,896,488 | —- | C] () – C:\Windows\SysNative\drivers\mt7118u.bin
[2011/04/08 17:20:24 | 000,001,039 | —- | C] () – C:\Users\FARRAZA\Application Data\Microsoft\Internet Explorer\Quick Launch\Traffic Travis.lnk
[2011/04/08 17:20:24 | 000,001,015 | —- | C] () – C:\Users\FARRAZA\Desktop\Traffic Travis.lnk
[2011/04/08 16:59:13 | 000,002,167 | —- | C] () – C:\Users\Public\Desktop\Micro Niche Finder 5.0.lnk
[2011/04/07 23:43:38 | 000,077,824 | —- | C] () – C:\Windows\SysWow64\xvid.ax
[2011/04/04 15:21:42 | 000,002,985 | —- | C] () – C:\Users\FARRAZA\Desktop\HiJackThis.lnk
[2011/04/03 22:51:36 | 000,001,135 | —- | C] () – C:\Users\FARRAZA\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/04/03 22:37:24 | 000,001,148 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/04/03 22:37:24 | 000,001,136 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/03/29 18:43:01 | 000,092,205 | —- | C] () – C:\Users\FARRAZA\Documents\Rumah_keta_CTbank_streamyx_march2011.pdf
[2011/03/23 12:53:37 | 000,081,672 | —- | C] () – C:\Users\FARRAZA\Documents\FPX Google Adwords Vemma.pdf
[2010/12/16 22:51:39 | 000,000,038 | —- | C] () – C:\Windows\avisplitter.ini
[2010/12/16 22:51:29 | 000,815,104 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2010/12/16 22:51:29 | 000,180,224 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2010/12/16 22:51:28 | 000,108,032 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/12/16 22:08:22 | 000,165,376 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2010/11/20 17:36:25 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/11/15 16:32:07 | 000,053,248 | —- | C] () – C:\Windows\SysWow64\LogonStart.dll
[2010/11/04 17:22:23 | 000,001,024 | —- | C] () – C:\Windows\SysWow64\grcauth2.dll
[2010/11/04 17:22:23 | 000,001,024 | —- | C] () – C:\Windows\SysWow64\grcauth1.dll
[2010/11/04 17:22:23 | 000,000,100 | —- | C] () – C:\Windows\SysWow64\prsgrc.dll
[2010/11/04 17:19:12 | 000,001,025 | —- | C] () – C:\Windows\SysWow64\sysprs7.dll
[2010/11/04 17:19:12 | 000,000,205 | —- | C] () – C:\Windows\SysWow64\lsprst7.dll
[2010/08/04 18:00:33 | 000,345,518 | —- | C] () – C:\Windows\uninstall Windows_.exe
[2010/07/31 21:58:37 | 000,000,024 | —- | C] () – C:\Windows\ATKPF.ini
[2010/07/10 16:49:50 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/07/10 16:29:30 | 000,002,023 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2010/07/10 16:08:22 | 000,131,368 | —- | C] () – C:\ProgramData\FullRemove.exe
[2009/10/26 11:38:22 | 000,000,176 | —- | C] () – C:\Windows\explorer.exe.config
[2009/08/19 16:33:09 | 000,020,480 | —- | C] () – C:\Windows\OOBEPlayer.exe
[2009/08/19 16:33:09 | 000,000,232 | —- | C] () – C:\Windows\OOBEPlayer.ini
[2009/07/29 13:20:40 | 000,000,010 | —- | C] () – C:\Windows\SysWow64\ABLKSR.ini
[2009/07/14 13:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/14 10:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 10:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/14 08:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/14 07:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/14 05:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/17 11:13:30 | 000,508,224 | —- | C] () – C:\Windows\SysWow64\ICCProfiles.dll
[2009/06/11 05:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
========== LOP Check ==========
[2011/04/08 17:20:20 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\Affilorama
[2010/07/31 21:53:45 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\Asus WebStorage
[2011/04/07 23:35:27 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\ClickPotatoLite
[2011/04/18 20:55:58 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\DMCache
[2010/08/02 02:20:20 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\Downloaded Installations
[2011/02/13 09:42:45 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\EeeStorageUploader
[2010/08/05 18:21:43 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\FFSJ
[2011/01/20 03:19:17 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\FileZilla
[2011/02/06 14:34:52 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\FireShot
[2011/04/05 17:55:21 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\FrostWire
[2011/03/09 12:58:36 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\IDM
[2011/01/29 00:39:29 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\Nitro PDF
[2011/04/07 23:40:36 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\ShopperReports3
[2010/08/03 21:44:47 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\TuneUp Software
[2011/04/15 12:42:06 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\UseNeXT
[2011/04/18 21:56:52 | 000,000,000 | —D | M] – C:\Users\FARRAZA\AppData\Roaming\uTorrent
[2011/04/14 20:45:07 | 000,032,638 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2009/06/15 19:11:59 | 000,000,054 | —- | M] () – C:\AdobeReader.log
[2010/11/20 20:40:07 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2009/07/29 14:03:37 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2010/07/10 17:00:00 | 000,014,624 | —- | M] () – C:\devlist.txt
[2010/07/10 16:59:59 | 000,000,009 | —- | M] () – C:\Finish.log
[2011/04/18 20:55:18 | 1608,896,512 | -HS- | M] () – C:\hiberfil.sys
[2010/05/31 18:58:47 | 002,097,152 | -H– | M] () – C:\K42Dr.BIN
[2010/06/07 18:11:28 | 000,000,019 | —- | M] () – C:\K42DR_WIN7.20
[2010/11/04 17:14:37 | 000,000,000 | —- | M] () – C:\law.sp
[2005/09/23 00:39:38 | 000,894,976 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/04/18 20:55:21 | 2145,198,080 | -HS- | M] () – C:\pagefile.sys
[2010/07/10 04:50:13 | 000,000,233 | —- | M] () – C:\Pass.txt
[2010/06/07 18:11:28 | 000,000,007 | —- | M] () – C:\RECOVERY.DAT
[2010/07/10 16:36:31 | 000,002,483 | —- | M] () – C:\RHDSetup.log
[2010/07/10 16:47:42 | 000,000,090 | —- | M] () – C:\setup.log
[2006/05/14 00:22:24 | 000,000,005 | —- | M] () – C:\store.log
[2010/07/10 15:20:38 | 000,000,166 | —- | M] () – C:\SumHidd.txt
[2010/07/10 15:19:22 | 000,000,098 | —- | M] () – C:\SumOS.txt
[2011/04/04 22:57:29 | 000,068,628 | —- | M] () – C:\TDSSKiller.2.4.21.0_04.04.2011_22.56.41_log.txt
< %systemroot%\Fonts\*.com >
[2009/07/14 13:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 13:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 13:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 13:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2009/06/11 04:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2011/02/23 23:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2010/08/04 18:06:23 | 001,170,312 | —- | M] () – C:\Windows\Windows_.scr
[2008/12/04 22:55:20 | 000,307,560 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2009/07/14 12:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
[2009/10/26 11:38:22 | 000,000,176 | —- | M] () – C:\Windows\explorer.exe.config
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/07/31 21:42:18 | 000,000,221 | -HS- | M] () – C:\Users\FARRAZA\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
< %USERPROFILE%\Desktop\*.exe >
[2010/10/18 11:49:46 | 011,080,021 | —- | M] () – C:\Users\FARRAZA\Desktop\Email Sender Deluxe.exe
[2010/08/05 18:21:20 | 000,404,992 | —- | M] (Eagle Free Software) – C:\Users\FARRAZA\Desktop\FFSJ.exe
[2011/03/20 17:07:56 | 000,301,568 | —- | M] () – C:\Users\FARRAZA\Desktop\gmer.exe
[2003/05/19 23:59:02 | 000,166,400 | —- | M] () – C:\Users\FARRAZA\Desktop\zspoof V2.41.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
========== Alternate Data Streams ==========
@Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:2F370DA6
@Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:115CEE00
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:A724744F
< End of report >