Not sure if infected but something's up.

In a community I associate with there is much talk of a corrupt dll files and the 'Ping.exe'
I'd like to be sure that my system is clean. I cannot find any function in the Task Manager that I don't know and the only odd hiccup is two or three Firefox Crashes over the last two days.
I'd like to make any errors on the side of caution.

Scans are as follows.

OTL SCAN

OTL logfile created on: 11/20/2011 11:07:01 AM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Mad-Hamlet\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 1.63 Gb Available Physical Memory | 40.76% Memory free
8.00 Gb Paging File | 5.55 Gb Available in Paging File | 69.38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 59.90 Gb Total Space | 25.17 Gb Free Space | 42.02% Space Free | Partition Type: NTFS
Drive D: | 126.31 Gb Total Space | 20.53 Gb Free Space | 16.25% Space Free | Partition Type: NTFS
Drive E: | 47.86 Gb Total Space | 7.10 Gb Free Space | 14.84% Space Free | Partition Type: NTFS
Drive F: | 95.41 Gb Total Space | 6.42 Gb Free Space | 6.73% Space Free | Partition Type: NTFS
Drive G: | 229.33 Gb Total Space | 7.27 Gb Free Space | 3.17% Space Free | Partition Type: NTFS
Drive H: | 5.63 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: MONOLITH | User Name: Mad-Hamlet | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Mad-Hamlet\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Java\jre6\bin\javaw.exe (Sun Microsystems, Inc.)
PRC - d:\ware-util\PS3 Media Server\win32\mencoder_mt.exe ()
PRC - D:\ware-com\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - D:\ware-util\OOOfice\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - D:\ware-util\OOOfice\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - D:\ware-util\OOOfice\OpenOffice.org 3\program\swriter.exe (OpenOffice.org)
PRC - C:\Program Files (x86)\COMODO\COMODO livePCsupport\CLPSLS.exe (COMODO)
PRC - D:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe ()
PRC - C:\Windows\SysWOW64\CtHelper.exe (Creative Technology Ltd)
PRC - D:\ware-util\Razer\Diamondback\Razer\Diamondback\razerofa.exe (Razer Inc.)
PRC - D:\ware-util\Razer\Diamondback\Razer\Diamondback\razertra.exe ()


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
MOD - d:\ware-util\PS3 Media Server\win32\mencoder_mt.exe ()
MOD - D:\ware-util\OOOfice\OpenOffice.org 3\program\libxml2.dll ()
MOD - D:\ware-util\OOOfice\OpenOffice.org 3\program\libxslt.dll ()
MOD - D:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe ()
MOD - D:\ware-util\Razer\Diamondback\Razer\Diamondback\razertra.exe ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (cmdAgent) – C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (PnkBstrA) – C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (CLPSLS) – C:\Program Files (x86)\COMODO\COMODO livePCsupport\CLPSLS.exe (COMODO)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (cmderd) – C:\Windows\SysNative\drivers\cmderd.sys (COMODO)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (truecrypt) – C:\Windows\SysNative\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (bulkadi) – C:\Windows\SysNative\drivers\bulkrazer_x64.sys (Windows ® Codename Longhorn DDK provider)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ROOTMODEM) – C:\Windows\SysNative\drivers\rootmdm.sys (Microsoft Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (WmXlCore) – C:\Windows\SysNative\drivers\WmXlCore.sys (Logitech Inc.)
DRV:64bit: - (WmVirHid) – C:\Windows\SysNative\drivers\WmVirHid.sys (Logitech Inc.)
DRV:64bit: - (WmFilter) – C:\Windows\SysNative\drivers\WmFilter.sys (Logitech Inc.)
DRV:64bit: - (WmBEnum) – C:\Windows\SysNative\drivers\WmBEnum.sys (Logitech Inc.)
DRV:64bit: - (JRAID) – C:\Windows\SysNative\drivers\jraid.sys (JMicron Technology Corp.)
DRV:64bit: - (COMMONFX.DLL) – C:\Windows\SysNative\COMMONFX.DLL (Creative Technology Ltd)
DRV:64bit: - (ctac32k) – C:\Windows\SysNative\drivers\ctac32k.sys (Creative Technology Ltd)
DRV:64bit: - (hap17v2k) – C:\Windows\SysNative\drivers\haP17v2k.sys (Creative Technology Ltd)
DRV:64bit: - (hap16v2k) – C:\Windows\SysNative\drivers\haP16v2k.sys (Creative Technology Ltd)
DRV:64bit: - (ha10kx2k) – C:\Windows\SysNative\drivers\ha10kx2k.sys (Creative Technology Ltd)
DRV:64bit: - (emupia) – C:\Windows\SysNative\drivers\emupia2k.sys (Creative Technology Ltd)
DRV:64bit: - (ctsfm2k) – C:\Windows\SysNative\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV:64bit: - (ctprxy2k) – C:\Windows\SysNative\drivers\ctprxy2k.sys (Creative Technology Ltd)
DRV:64bit: - (ossrv) – C:\Windows\SysNative\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV:64bit: - (ctaud2k) Creative Audio Driver (WDM) – C:\Windows\SysNative\drivers\ctaud2k.sys (Creative Technology Ltd)
DRV:64bit: - (CTHWIUT.DLL) – C:\Windows\SysNative\CTHWIUT.DLL (Creative Technology Ltd.)
DRV:64bit: - (CT20XUT.DLL) – C:\Windows\SysNative\CT20XUT.DLL (Creative Technology Ltd.)
DRV:64bit: - (CTEXFIFX.DLL) – C:\Windows\SysNative\CTEXFIFX.DLL (Creative Technology Ltd.)
DRV:64bit: - (CTEDSPSY.DLL) – C:\Windows\SysNative\CTEDSPSY.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEDSPIO.DLL) – C:\Windows\SysNative\CTEDSPIO.DLL (Creative Technology Ltd)
DRV:64bit: - (CTERFXFX.DLL) – C:\Windows\SysNative\CTERFXFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEDSPFX.DLL) – C:\Windows\SysNative\CTEDSPFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTEAPSFX.DLL) – C:\Windows\SysNative\CTEAPSFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTSBLFX.DLL) – C:\Windows\SysNative\CTSBLFX.DLL (Creative Technology Ltd)
DRV:64bit: - (CTAUDFX.DLL) – C:\Windows\SysNative\CTAUDFX.DLL (Creative Technology Ltd)
DRV:64bit: - (Razerlow) – C:\Windows\SysNative\drivers\Razerlow.sys (Razer (Asia-Pacific) Pte Ltd)
DRV - (DrvAgent64) – C:\Windows\SysWOW64\drivers\DrvAgent64.SYS (Phoenix Technologies)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 61 4A DF 79 9E 69 CC 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "GoogleFeed.net"
FF - prefs.js..browser.startup.homepage: "www.google.co.uk"
FF - prefs.js..extensions.enabledItems: [removed]:1.0.3
FF - prefs.js..extensions.enabledItems: [removed]:1.4.3
FF - prefs.js..extensions.enabledItems: [removed]:1.5
FF - prefs.js..extensions.enabledItems: {5e594888-3e8e-47da-b2c6-b0b545112f84}:1.3.3
FF - prefs.js..extensions.enabledItems: {6AC85730-7D0F-4de0-B3FA-21142DD85326}:[removed]
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:[removed]
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..network.proxy.backup.ftp: "[removed]"
FF - prefs.js..network.proxy.backup.ftp_port: 8080
FF - prefs.js..network.proxy.backup.gopher: "[removed]"
FF - prefs.js..network.proxy.backup.gopher_port: 8080
FF - prefs.js..network.proxy.backup.socks: "[removed]"
FF - prefs.js..network.proxy.backup.socks_port: 8080
FF - prefs.js..network.proxy.backup.ssl: "[removed]"
FF - prefs.js..network.proxy.backup.ssl_port: 8080
FF - prefs.js..network.proxy.ftp: "[removed]"
FF - prefs.js..network.proxy.ftp_port: 8080
FF - prefs.js..network.proxy.gopher: "[removed]"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "[removed]"
FF - prefs.js..network.proxy.http_port: 8080
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "[removed]"
FF - prefs.js..network.proxy.socks_port: 8080
FF - prefs.js..network.proxy.ssl: "69.169.145.80"
FF - prefs.js..network.proxy.ssl_port: 8080
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.96.0: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files (x86)\thriXXX\WebLaunch\Binaries\npWebLaunch.dll ( )
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@thrixxx.com/WebLaunch: C:\Program Files (x86)\thriXXX\WebLaunch\Binaries\npWebLaunch.dll ( )

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/11/10 14:14:41 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/08/17 01:55:17 | 000,000,000 | —D | M]

[2010/05/28 23:07:30 | 000,000,000 | —D | M] (No name found) – C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Extensions
[2011/11/19 13:05:32 | 000,000,000 | —D | M] (No name found) – C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\extensions
[2011/11/13 00:45:06 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011/09/02 20:09:52 | 000,000,000 | —D | M] (Roomy Bookmarks Toolbarv) – C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\extensions\[removed]
[2011/08/09 17:35:51 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\extensions\[removed]
[2009/11/15 19:51:36 | 000,000,003 | —- | M] () – C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\searchplugins\GoogleFeed.xml
[2011/10/22 23:31:55 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/10/22 23:31:55 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
() (No name found) – C:\USERS\MAD-HAMLET\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BNCEXF64.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
() (No name found) – C:\USERS\MAD-HAMLET\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BNCEXF64.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
() (No name found) – C:\USERS\MAD-HAMLET\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BNCEXF64.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
[2011/11/10 14:14:41 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/10/03 04:06:04 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/05/25 17:09:48 | 000,063,488 | —- | M] (Nullsoft, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2006/08/09 11:16:08 | 000,030,408 | —- | M] ( ) – C:\Program Files (x86)\mozilla firefox\plugins\npWebLaunch.dll
[2011/11/10 14:14:38 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/11/10 14:14:38 | 000,002,040 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2011/06/30 20:08:57 | 000,435,542 | R— | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14986 more lines…
O4:64bit: - HKLM..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL File not found
O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4:64bit: - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWow64\ctasio.dll (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\Windows\SysWow64\CtHelper.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Diamondback] d:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe ()
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shock…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B2C77B7-F18F-4667-B63F-F0D85009DB9C}: DhcpNameServer = 192.168.1.1
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\guard64.dll) - C:\Windows\SysNative\guard64.dll (COMODO)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\guard32.dll) -C:\Windows\SysWOW64\guard32.dll (COMODO)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/09/09 20:35:07 | 000,206,657 | R— | M] () - H:\Autorun.ico – [ CDFS ]
O32 - AutoRun File - [2011/10/07 23:43:22 | 000,000,106 | R— | M] () - H:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{d2490020-6d32-11df-b56d-001a4d56d3f8}\Shell - "" = AutoRun
O33 - MountPoints2\{d2490020-6d32-11df-b56d-001a4d56d3f8}\Shell\AutoRun\command - "" = J:\setup\rsrc\Autorun.exe
O33 - MountPoints2\{d2490020-6d32-11df-b56d-001a4d56d3f8}\Shell\dinstall\command - "" = J:\Directx\dxsetup.exe
O33 - MountPoints2\{ea0ac81c-ccc9-11df-8a80-001a4d56d3f8}\Shell - "" = AutoRun
O33 - MountPoints2\{ea0ac81c-ccc9-11df-8a80-001a4d56d3f8}\Shell\AutoRun\command - "" = J:\Setup.exe
O33 - MountPoints2\{eb343bd8-6aa1-11df-9e2c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{eb343bd8-6aa1-11df-9e2c-806e6f6e6963}\Shell\AutoRun\command - "" = H:\AutoRunCD.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv31 - C:\Windows\SysWow64\ir32_32.dll (Intel® Corporation)
Drivers32: vidc.iv32 - C:\Windows\SysWow64\ir32_32.dll (Intel® Corporation)
Drivers32: vidc.iv41 - C:\Windows\SysWow64\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yvu9 - C:\Windows\SysWow64\iyvu9_32.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/11/20 10:52:27 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Mad-Hamlet\Desktop\OTL.exe
[2011/11/20 10:48:44 | 000,607,260 | —- | C] (Swearware) – C:\Users\Mad-Hamlet\Desktop\dds.scr
[2011/11/20 10:44:23 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\Mad-Hamlet\Desktop\HijackThis.exe
[2011/11/19 13:19:58 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab
[2011/11/19 12:08:11 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
[2011/11/18 14:21:00 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2011/11/18 14:13:24 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\AppData\Roaming\Media Player Classic
[2011/11/18 14:12:57 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player Classic - Home Cinema x64
[2011/11/13 14:26:58 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\AppData\Local\Skyrim
[2011/11/13 14:02:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
[2011/11/13 14:02:17 | 000,530,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_6.dll
[2011/11/13 14:02:17 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_6.dll
[2011/11/13 14:02:17 | 000,078,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_4.dll
[2011/11/13 14:02:17 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_4.dll
[2011/11/13 14:02:14 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_6.dll
[2011/11/13 14:02:14 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_6.dll
[2011/11/12 17:33:11 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\Desktop\tools
[2011/11/04 16:29:13 | 001,452,648 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvhdagenco6420102.dll
[2011/11/04 16:29:13 | 000,174,184 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\drivers\nvhda64v.sys
[2011/11/04 16:29:13 | 000,029,288 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvhdap64.dll
[2011/11/04 01:49:33 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\Desktop\[ByunByunHouse] Exposure Class Flower Garden in After-school
[2011/11/04 01:30:54 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\Desktop\Waka
[2011/11/02 11:43:40 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\Documents\EVEREST Reports
[2011/10/27 19:38:30 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\AppData\Local\Logitech
[2011/10/27 19:35:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2011/10/27 19:35:36 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Logitech
[2011/10/27 14:33:28 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\Documents\Battlefield 3
[2011/10/27 14:27:32 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\AppData\Local\ESN Sonar
[2011/10/26 21:32:33 | 000,000,000 | —D | C] – C:\Users\Mad-Hamlet\AppData\Roaming\ts3overlay
[2011/10/25 21:04:20 | 024,796,992 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcompiler.dll
[2011/10/25 21:04:20 | 024,742,720 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvoglv64.dll
[2011/10/25 21:04:20 | 018,871,616 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvoglv32.dll
[2011/10/25 21:04:20 | 017,248,576 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcompiler.dll
[2011/10/25 21:04:20 | 015,693,120 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvd3dumx.dll
[2011/10/25 21:04:20 | 007,581,504 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuda.dll
[2011/10/25 21:04:20 | 007,041,856 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvwgf2um.dll
[2011/10/25 21:04:20 | 005,578,560 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuda.dll
[2011/10/25 21:04:20 | 002,542,912 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvid.dll
[2011/10/25 21:04:20 | 002,458,432 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvapi.dll
[2011/10/25 21:04:20 | 002,401,088 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvid.dll
[2011/10/25 21:04:20 | 002,232,128 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvenc.dll
[2011/10/25 21:04:20 | 002,099,520 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvenc.dll
[2011/10/25 21:04:20 | 000,068,928 | —- | C] (Khronos Group) – C:\Windows\SysNative\OpenCL.dll
[2011/10/25 21:04:20 | 000,061,248 | —- | C] (Khronos Group) – C:\Windows\SysWow64\OpenCL.dll
[2011/10/25 17:07:19 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
[2011/10/22 23:32:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/10/22 23:31:51 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/10/22 23:31:51 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/10/22 23:31:51 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/10/21 12:51:24 | 000,041,200 | —- | C] (COMODO) – C:\Windows\SysNative\cmdcsr.dll
[2007/04/09 11:32:58 | 000,034,816 | —- | C] ( ) – C:\Windows\SysWow64\a3d.dll
[2007/04/09 11:19:16 | 000,010,240 | —- | C] ( ) – C:\Windows\SysWow64\killapps.exe
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/11/20 11:02:53 | 001,474,832 | —- | M] () – C:\Windows\SysNative\drivers\sfi.dat
[2011/11/20 10:52:29 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Mad-Hamlet\Desktop\OTL.exe
[2011/11/20 10:49:04 | 000,607,260 | —- | M] (Swearware) – C:\Users\Mad-Hamlet\Desktop\dds.scr
[2011/11/20 10:44:27 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\Mad-Hamlet\Desktop\HijackThis.exe
[2011/11/20 00:10:09 | 000,019,568 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/20 00:10:09 | 000,019,568 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/20 00:02:55 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/11/20 00:02:52 | 3220,037,632 | -HS- | M] () – C:\hiberfil.sys
[2011/11/19 12:08:15 | 000,000,814 | —- | M] () – C:\Users\Public\Desktop\Saints Row The Third.lnk
[2011/11/19 11:00:38 | 001,545,858 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\tdsskiller.zip
[2011/11/19 01:34:17 | 000,280,904 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2011/11/19 01:34:17 | 000,280,904 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.exe
[2011/11/19 01:00:24 | 000,280,904 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.ex0
[2011/11/18 16:14:19 | 001,480,040 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/11/18 16:14:19 | 000,631,152 | —- | M] () – C:\Windows\SysNative\perfh00E.dat
[2011/11/18 16:14:19 | 000,615,122 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/11/18 16:14:19 | 000,144,210 | —- | M] () – C:\Windows\SysNative\perfc00E.dat
[2011/11/18 16:14:19 | 000,103,496 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/11/13 20:28:36 | 000,036,232 | —- | M] () – C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000000-00001102-00000008-10011102}.rfx
[2011/11/13 20:28:36 | 000,036,232 | —- | M] () – C:\Windows\SysNative\BMXState-{00000005-00000000-00000000-00001102-00000008-10011102}.rfx
[2011/11/13 20:28:36 | 000,031,392 | —- | M] () – C:\Windows\SysNative\BMXCtrlState-{00000005-00000000-00000000-00001102-00000008-10011102}.rfx
[2011/11/13 20:28:36 | 000,031,392 | —- | M] () – C:\Windows\SysNative\BMXBkpCtrlState-{00000005-00000000-00000000-00001102-00000008-10011102}.rfx
[2011/11/13 20:28:36 | 000,011,564 | —- | M] () – C:\Windows\SysNative\DVCState-{00000005-00000000-00000000-00001102-00000008-10011102}.rfx
[2011/11/13 20:28:22 | 004,958,588 | —- | M] () – C:\Windows\{00000005-00000000-00000000-00001102-00000008-10011102}.CDF
[2011/11/13 20:28:22 | 004,958,588 | —- | M] () – C:\Windows\{00000005-00000000-00000000-00001102-00000008-10011102}.BAK
[2011/11/12 01:23:39 | 013,429,027 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\passionone.swf
[2011/11/11 17:03:13 | 000,000,069 | —- | M] () – C:\Windows\NeroDigital.ini
[2011/11/11 13:43:31 | 016,536,479 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\Kallen.rar
[2011/11/10 22:35:12 | 000,000,193 | —- | M] () – C:\Windows\WORDPAD.INI
[2011/11/10 14:16:52 | 000,002,052 | —- | M] () – C:\Users\Mad-Hamlet\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/11/07 21:57:54 | 000,060,095 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\tumblr_ltztipecIY1qjhyjdo1_500.jpg
[2011/11/07 17:12:21 | 000,090,421 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\anonymous-poster.jpg
[2011/11/03 11:59:33 | 000,140,676 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\Our-Discussion.jpg
[2011/11/02 15:11:29 | 000,245,001 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\sssmadhamlet02aq0.gif
[2011/11/02 09:38:48 | 000,308,389 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\3d40f.gif
[2011/10/31 10:12:27 | 000,600,331 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\c8b45ea0953b21b808d32744ef8ae1ca1a812dee.jpg
[2011/10/28 22:19:02 | 000,007,457 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\bookmarks.html
[2011/10/27 19:37:43 | 000,001,365 | —- | M] () – C:\Users\Mad-Hamlet\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/10/26 15:57:31 | 000,308,389 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\lamscensia0rr7.gif
[2011/10/25 17:22:19 | 000,075,136 | —- | M] () – C:\Windows\SysWow64\PnkBstrA.exe
[2011/10/23 13:57:11 | 006,098,856 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\Smokin Hot Unitologist - Samara v1.0.rar
[2011/10/23 13:52:32 | 007,543,734 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\Smokin Hot Unitologist - Kasumi v1.0.rar
[2011/10/23 13:45:47 | 006,533,026 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\Miranda with Cerberus Logo v1.1.rar
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/11/20 10:52:49 | 000,302,592 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\gmer.exe
[2011/11/19 12:08:15 | 000,000,814 | —- | C] () – C:\Users\Public\Desktop\Saints Row The Third.lnk
[2011/11/19 11:00:35 | 001,545,858 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\tdsskiller.zip
[2011/11/18 14:21:00 | 000,175,616 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2011/11/12 01:23:09 | 013,429,027 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\passionone.swf
[2011/11/11 13:43:14 | 016,536,479 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\Kallen.rar
[2011/11/10 22:31:42 | 000,000,193 | —- | C] () – C:\Windows\WORDPAD.INI
[2011/11/07 21:57:51 | 000,060,095 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\tumblr_ltztipecIY1qjhyjdo1_500.jpg
[2011/11/07 17:12:19 | 000,090,421 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\anonymous-poster.jpg
[2011/11/03 11:59:30 | 000,140,676 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\Our-Discussion.jpg
[2011/11/02 15:11:28 | 000,245,001 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\sssmadhamlet02aq0.gif
[2011/11/02 09:38:05 | 000,308,389 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\3d40f.gif
[2011/11/02 08:43:32 | 004,958,588 | —- | C] () – C:\Windows\{00000005-00000000-00000000-00001102-00000008-10011102}.BAK
[2011/10/31 10:12:25 | 000,600,331 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\c8b45ea0953b21b808d32744ef8ae1ca1a812dee.jpg
[2011/10/28 22:19:02 | 000,007,457 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\bookmarks.html
[2011/10/26 15:57:29 | 000,308,389 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\lamscensia0rr7.gif
[2011/10/23 13:57:04 | 006,098,856 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\Smokin Hot Unitologist - Samara v1.0.rar
[2011/10/23 13:52:26 | 007,543,734 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\Smokin Hot Unitologist - Kasumi v1.0.rar
[2011/10/23 13:45:42 | 006,533,026 | —- | C] () – C:\Users\Mad-Hamlet\Desktop\Miranda with Cerberus Logo v1.1.rar
[2011/10/15 00:54:52 | 000,321,856 | —- | C] () – C:\Windows\SysWow64\nvStreaming.exe
[2011/10/08 09:11:46 | 000,036,892 | —- | C] () – C:\Windows\SysWow64\bassmod.dll
[2011/10/05 22:37:43 | 000,280,904 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2011/09/03 11:13:32 | 000,000,000 | —- | C] () – C:\Windows\TMonitor64.INI
[2011/08/11 02:17:37 | 000,007,602 | —- | C] () – C:\Users\Mad-Hamlet\AppData\Local\Resmon.ResmonCfg
[2011/06/30 19:41:45 | 000,000,258 | —- | C] () – C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2011/03/13 11:13:05 | 000,000,040 | —- | C] () – C:\ProgramData\ra3.ini
[2011/01/30 15:42:03 | 000,000,110 | —- | C] () – C:\Windows\PV.ini
[2010/10/31 01:41:47 | 000,000,056 | —- | C] () – C:\Windows\kgt2k.INI
[2010/08/07 02:38:36 | 000,056,320 | —- | C] () – C:\Windows\SysWow64\iyvu9_32.dll
[2010/06/30 18:28:25 | 000,003,584 | —- | C] () – C:\Users\Mad-Hamlet\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/19 15:31:59 | 000,075,136 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2010/06/19 15:31:58 | 002,419,568 | —- | C] () – C:\Windows\SysWow64\pbsvc_apb.exe
[2010/06/06 14:06:10 | 000,000,069 | —- | C] () – C:\Windows\NeroDigital.ini
[2010/06/05 09:07:08 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/05/28 23:07:26 | 000,000,000 | —- | C] () – C:\Windows\nsreg.dat
[2010/04/02 17:17:34 | 000,179,091 | —- | C] () – C:\Windows\SysWow64\xlive.dll.cat
[2009/07/14 06:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/14 03:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 03:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/14 01:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/14 00:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 22:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 22:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2007/04/12 07:10:28 | 000,105,728 | —- | C] () – C:\Windows\SysWow64\APOMgrH.dll
[2007/04/09 11:55:14 | 000,097,785 | —- | C] () – C:\Windows\SysWow64\instwdm.ini
[2007/04/09 11:55:14 | 000,000,054 | —- | C] () – C:\Windows\SysWow64\ctzapxx.ini
[2007/04/09 11:33:50 | 000,043,520 | —- | C] () – C:\Windows\SysWow64\CTBurst.dll
[2007/04/09 11:32:32 | 000,037,888 | —- | C] () – C:\Windows\SysWow64\psconv.exe
[2007/04/09 11:24:30 | 000,325,821 | —- | C] () – C:\Windows\SysWow64\ctdlang.dat
[2007/04/09 11:24:30 | 000,046,273 | —- | C] () – C:\Windows\SysWow64\ctdnlstr.dat
[2007/04/09 11:19:20 | 000,313,207 | —- | C] () – C:\Windows\SysWow64\ctstatic.dat
[2007/04/09 11:19:20 | 000,053,932 | —- | C] () – C:\Windows\SysWow64\ctdaught.dat
[2007/04/09 11:19:18 | 000,005,120 | —- | C] () – C:\Windows\SysWow64\enlocstr.exe
[2006/10/02 08:25:18 | 000,000,307 | —- | C] () – C:\Windows\SysWow64\kill.ini
[2005/06/16 09:17:16 | 000,071,680 | —- | C] () – C:\Windows\SysWow64\ctmmactl.dll

========== LOP Check ==========

[2010/08/22 20:56:11 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\AnvSoft
[2011/08/23 08:43:40 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Armagetron
[2011/09/04 01:23:32 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Auslogics
[2011/11/12 11:24:10 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\DAEMON Tools Lite
[2011/07/08 18:04:25 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\go
[2010/08/22 21:06:33 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\HandBrake
[2011/01/03 08:39:01 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\I2P
[2011/10/22 12:11:15 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Jumping Bytes
[2010/05/28 23:25:56 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Leadertech
[2010/06/08 15:53:03 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\MAGIX
[2010/05/29 16:17:01 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\OpenOffice.org
[2011/10/25 16:34:40 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Origin
[2011/10/07 18:38:53 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\PunkBuster
[2011/03/13 21:31:58 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Red Alert 3
[2010/11/17 00:18:34 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\RenPy
[2010/06/27 15:50:33 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\SEGA Corporation
[2010/09/27 18:27:21 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\Team K17
[2010/08/14 01:05:22 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\thriXXX
[2010/12/16 23:17:35 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\TrueCrypt
[2011/11/18 20:34:06 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\TS3Client
[2011/10/26 22:40:40 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\ts3overlay
[2011/11/20 11:10:22 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\uTorrent
[2011/07/11 12:34:46 | 000,000,000 | —D | M] – C:\Users\Mad-Hamlet\AppData\Roaming\WindSolutions
[2011/09/02 14:13:51 | 000,032,576 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/11/15 23:14:50 | 001,391,104 | —- | M] () – C:\apploc.msi
[2011/11/20 00:02:52 | 3220,037,632 | -HS- | M] () – C:\hiberfil.sys
[2011/11/20 00:03:00 | 4293,386,240 | -HS- | M] () – C:\pagefile.sys
[2011/11/19 01:41:25 | 000,974,060 | —- | M] () – C:\shared.log

< %systemroot%\Fonts\*.com >
[2009/07/14 06:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 06:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 06:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 06:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 21:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 05:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/10/27 19:37:43 | 000,000,221 | -HS- | M] () – C:\Users\Mad-Hamlet\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/10/13 17:41:53 | 1272,222,488 | —- | M] (BioWare) – C:\Users\Mad-Hamlet\Desktop\DA2_MarkOfTheAssassin.exe
[2011/06/19 10:23:44 | 000,074,752 | —- | M] (KelSat Presents) – C:\Users\Mad-Hamlet\Desktop\Dragon_Age_2_V1.03_Plus_9_Trainer_By_KelSat.exe
[2011/07/16 22:21:04 | 000,302,592 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\gmer.exe
[2011/11/20 10:44:27 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\Mad-Hamlet\Desktop\HijackThis.exe
[2009/07/10 13:39:00 | 000,350,720 | —- | M] () – C:\Users\Mad-Hamlet\Desktop\hjsplit.exe
[2011/11/20 10:52:29 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Mad-Hamlet\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >
[2007/10/10 18:53:06 | 000,000,750 | R— | M] () – C:\Windows\AppPatch\Custom\{75d2897c-87aa-4a06-8710-3ebda9f02de0}.sdb
[2003/06/13 16:23:00 | 000,004,304 | —- | M] () – C:\Windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 627 bytes -> C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVV
X4VM
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:0C232DFB

< End of report >

DDS Scan

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_29
Run by [removed] at 11:16:12 on 2011-11-20
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1038.18.4094.1577 [GMT 1:00]
.
AV: COMODO Antivirus *Enabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: COMODO Defense+ *Enabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\COMODO\COMODO livePCsupport\CLPSLS.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
D:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe
C:\Windows\SysWOW64\CtHelper.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
D:\ware-util\Razer\Diamondback\Razer\Diamondback\razertra.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Windows Media Player\wmpnetwk.exe
D:\ware-util\Razer\Diamondback\Razer\Diamondback\razerofa.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
C:\Windows\System32\svchost.exe -k secsvcs
D:\ware-com\uTorrent\uTorrent.exe
D:\ware-util\OOOfice\OpenOffice.org 3\program\swriter.exe
D:\ware-util\OOOfice\OpenOffice.org 3\program\soffice.exe
D:\ware-util\OOOfice\OpenOffice.org 3\program\soffice.bin
C:\Windows\splwow64.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Java\jre6\bin\javaw.exe
C:\Windows\notepad.exe
C:\Users\Mad-Hamlet\Desktop\gmer.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
mRun: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
mRun: [Diamondback] d:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe
mRun: [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL
mRun: [CTHelper] CTHELPER.EXE
mRun: [CTxfiHlp] CTXFIHLP.EXE
dRun: [DevconDefaultDB] C:\Windows\system32\READREG /SILENT /FAIL=1
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{3B2C77B7-F18F-4667-B63F-F0D85009DB9C} : DhcpNameServer = 192.168.1.1
AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
mRun-x64: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
mRun-x64: [Diamondback] d:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe
mRun-x64: [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL
mRun-x64: [CTHelper] CTHELPER.EXE
mRun-x64: [CTxfiHlp] CTXFIHLP.EXE
AppInit_DLLs-X64: C:\Windows\SysWOW64\guard32.dll
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\
FF - prefs.js: browser.startup.homepage - www.google.co.uk
FF - prefs.js: network.proxy.ftp - 69.169.145.80
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.gopher - [removed]
FF - prefs.js: network.proxy.gopher_port - 3128
FF - prefs.js: network.proxy.http - [removed]
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - [removed]
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - 69.169.145.80
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
FF - component: C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}\platform\WINNT\components\ColorZilla.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll
FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll
FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npWebLaunch.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\thriXXX\WebLaunch\Binaries\npWebLaunch.dll
FF - plugin: C:\Users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\extensions\[removed]\plugins\npLogitechDeviceDetection.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin2.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin3.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin4.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin5.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin6.dll
FF - plugin: D:\ware-util\QuickTime\Plugins\npqtplugin7.dll
.
============= SERVICES / DRIVERS ===============
.
R1 cmderd;COMODO Internet Security Eradication Driver;C:\Windows\system32\DRIVERS\cmderd.sys –> C:\Windows\system32\DRIVERS\cmderd.sys [?]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys –> C:\Windows\system32\DRIVERS\cmdguard.sys [?]
R1 cmdHlp;COMODO Internet Security Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys –> C:\Windows\system32\DRIVERS\cmdhlp.sys [?]
R2 CLPSLS;COMODO livePCsupport Service;C:\Program Files (x86)\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-2-19 148744]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-9-2 2253120]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-15 381248]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys –> C:\Windows\system32\drivers\nvhda64v.sys [?]
R3 Razerlow;Razer Pro|Solutions;C:\Windows\system32\drivers\Razerlow.sys –> C:\Windows\system32\drivers\Razerlow.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys –> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
S3 bulkadi;Razer Megalodon DFU;C:\Windows\system32\DRIVERS\bulkrazer_x64.sys –> C:\Windows\system32\DRIVERS\bulkrazer_x64.sys [?]
S3 DrvAgent64;DrvAgent64;C:\Windows\SysWOW64\drivers\DrvAgent64.SYS [2011-9-3 21712]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys –> C:\Windows\system32\Drivers\usbaapl64.sys [?]
.
=============== Created Last 30 ================
.
2011-11-19 12:19:58 ——– d—–w- C:\ProgramData\Kaspersky Lab
2011-11-18 13:21:00 175616 —-a-w- C:\Windows\SysWow64\unrar.dll
2011-11-13 13:26:58 ——– d—–w- C:\Users\Mad-Hamlet\AppData\Local\Skyrim
2011-11-13 13:02:17 78680 —-a-w- C:\Windows\System32\XAPOFX1_4.dll
2011-11-13 13:02:17 74072 —-a-w- C:\Windows\SysWow64\XAPOFX1_4.dll
2011-11-13 13:02:17 530776 —-a-w- C:\Windows\System32\XAudio2_6.dll
2011-11-13 13:02:17 528216 —-a-w- C:\Windows\SysWow64\XAudio2_6.dll
2011-11-13 13:02:14 238936 —-a-w- C:\Windows\SysWow64\xactengine3_6.dll
2011-11-13 13:02:14 176984 —-a-w- C:\Windows\System32\xactengine3_6.dll
2011-11-04 15:29:13 29288 —-a-w- C:\Windows\System32\nvhdap64.dll
2011-11-04 15:29:13 174184 —-a-w- C:\Windows\System32\drivers\nvhda64v.sys
2011-11-04 15:29:13 1452648 —-a-w- C:\Windows\System32\nvhdagenco6420102.dll
2011-10-27 18:38:30 ——– d—–w- C:\Users\Mad-Hamlet\AppData\Local\Logitech
2011-10-27 18:35:36 ——– d—–w- C:\Program Files\Common Files\Logitech
2011-10-27 13:27:32 ——– d—–w- C:\Users\Mad-Hamlet\AppData\Local\ESN Sonar
2011-10-26 20:32:33 ——– d—–w- C:\Users\Mad-Hamlet\AppData\Roaming\ts3overlay
2011-10-21 11:51:24 41200 —-a-w- C:\Windows\System32\cmdcsr.dll
.
==================== Find3M ====================
.
2011-11-19 00:34:17 280904 —-a-w- C:\Windows\SysWow64\PnkBstrB.xtr
2011-11-19 00:34:17 280904 —-a-w- C:\Windows\SysWow64\PnkBstrB.exe
2011-11-19 00:00:24 280904 —-a-w- C:\Windows\SysWow64\PnkBstrB.ex0
2011-10-25 16:22:19 75136 —-a-w- C:\Windows\SysWow64\PnkBstrA.exe
2011-10-14 23:54:52 321856 —-a-w- C:\Windows\SysWow64\nvStreaming.exe
2011-10-07 17:47:57 43248 —-a-w- C:\Windows\System32\drivers\cmdhlp.sys
2011-10-07 17:47:56 574216 —-a-w- C:\Windows\System32\drivers\cmdGuard.sys
2011-10-07 17:47:54 16528 —-a-w- C:\Windows\System32\drivers\cmderd.sys
2011-10-07 17:47:10 300200 —-a-w- C:\Windows\SysWow64\guard32.dll
2011-10-07 17:47:08 388280 —-a-w- C:\Windows\System32\guard64.dll
2011-10-05 15:24:31 414368 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-03 03:06:03 472808 —-a-w- C:\Windows\SysWow64\deployJava1.dll
2011-09-03 08:14:37 21712 —-a-w- C:\Windows\SysWow64\drivers\DrvAgent64.SYS
.
============= FINISH: 11:18:22.47 ===============

Not sure how to attach a file on this forum, I can do it later if asked (And informed how)

Hope this is just another paranoid user though.

Thanks for your time.

Log is as follows:

ComboFix 11-11-20.02 - Mad-Hamlet 11/21/2011 6:30.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1038.18.4094.1591 [GMT 1:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: COMODO Antivirus *Enabled/Updated* {7554F4C5-5EC0-2FC6-8192-8DF831DBED51}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: COMODO Defense+ *Enabled/Updated* {CE351521-78FA-2048-BB22-B68A4A5CA7EC}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\MAD-HA~1\AppData\Local\Temp\jna6169607876061261352.dll
c:\users\Mad-Hamlet\AppData\Local\Temp\jna6169607876061261352.dll
c:\windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb
c:\windows\usgwmt
c:\windows\usgwmt\BReWErS.dll
D:\install.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-10-21 to 2011-11-21 )))))))))))))))))))))))))))))))
.
.
2011-11-21 05:37 . 2011-11-21 05:37 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp
2011-11-21 05:37 . 2011-11-21 05:37 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-11-19 12:19 . 2011-11-19 12:19 ——– d—–w- c:\programdata\Kaspersky Lab
2011-11-18 13:21 . 2011-03-02 10:43 175616 —-a-w- c:\windows\SysWow64\unrar.dll
2011-11-18 13:13 . 2011-11-18 13:13 ——– d—–w- c:\users\Mad-Hamlet\AppData\Roaming\Media Player Classic
2011-11-13 13:26 . 2011-11-13 13:26 ——– d—–w- c:\users\Mad-Hamlet\AppData\Local\Skyrim
2011-11-13 13:02 . 2010-02-04 09:01 78680 —-a-w- c:\windows\system32\XAPOFX1_4.dll
2011-11-13 13:02 . 2010-02-04 09:01 74072 —-a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2011-11-13 13:02 . 2010-02-04 09:01 530776 —-a-w- c:\windows\system32\XAudio2_6.dll
2011-11-13 13:02 . 2010-02-04 09:01 528216 —-a-w- c:\windows\SysWow64\XAudio2_6.dll
2011-11-13 13:02 . 2010-02-04 09:01 238936 —-a-w- c:\windows\SysWow64\xactengine3_6.dll
2011-11-13 13:02 . 2010-02-04 09:01 176984 —-a-w- c:\windows\system32\xactengine3_6.dll
2011-11-04 15:29 . 2011-07-07 23:21 29288 —-a-w- c:\windows\system32\nvhdap64.dll
2011-11-04 15:29 . 2011-07-07 23:21 174184 —-a-w- c:\windows\system32\drivers\nvhda64v.sys
2011-11-04 15:29 . 2011-07-07 23:21 1452648 —-a-w- c:\windows\system32\nvhdagenco6420102.dll
2011-10-27 18:38 . 2011-10-27 18:38 ——– d—–w- c:\users\Mad-Hamlet\AppData\Local\Logitech
2011-10-27 18:35 . 2011-10-27 18:35 ——– d—–w- c:\program files\Common Files\Logitech
2011-10-27 13:27 . 2011-10-28 20:59 ——– d—–w- c:\users\Mad-Hamlet\AppData\Local\ESN Sonar
2011-10-26 20:32 . 2011-10-26 21:40 ——– d—–w- c:\users\Mad-Hamlet\AppData\Roaming\ts3overlay
2011-10-22 22:32 . 2011-10-22 22:32 ——– d—–w- c:\program files (x86)\Common Files\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-19 00:34 . 2011-10-05 21:51 280904 —-a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-11-19 00:34 . 2011-10-05 21:37 280904 —-a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-11-19 00:00 . 2011-10-05 21:37 280904 —-a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-10-25 16:22 . 2010-06-19 14:31 75136 —-a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-10-15 08:53 . 2011-09-02 18:57 837952 —-a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-10-15 08:53 . 2011-09-02 18:57 5067584 —-a-w- c:\windows\system32\nvsvc64.dll
2011-10-15 08:53 . 2011-09-02 18:57 222528 —-a-w- c:\windows\system32\nvmctray.dll
2011-10-15 08:53 . 2011-09-02 18:57 1640768 —-a-w- c:\windows\system32\nvvsvc.exe
2011-10-15 08:53 . 2011-09-02 18:57 137536 —-a-w- c:\windows\system32\nvshext.dll
2011-10-15 08:53 . 2011-09-02 18:57 10406208 —-a-w- c:\windows\system32\nvcpl.dll
2011-10-15 08:53 . 2011-09-02 18:56 8791360 —-a-w- c:\windows\system32\nvwgf2umx.dll
2011-10-15 08:53 . 2011-09-02 18:56 2808128 —-a-w- c:\windows\system32\nvapi64.dll
2011-10-15 08:53 . 2011-09-02 18:56 1533248 —-a-w- c:\windows\system32\nvdispco64.dll
2011-10-15 08:53 . 2011-09-02 18:56 1454400 —-a-w- c:\windows\system32\nvgenco64.dll
2011-10-15 08:53 . 2011-09-02 18:56 13205312 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2011-10-15 08:53 . 2011-04-07 21:19 3074368 —-a-w- c:\windows\system32\nvsvcr.dll
2011-10-14 23:54 . 2011-10-14 23:54 321856 —-a-w- c:\windows\SysWow64\nvStreaming.exe
2011-10-07 17:47 . 2010-04-08 23:25 93200 —-a-w- c:\windows\system32\drivers\inspect.sys
2011-10-07 17:47 . 2010-04-08 23:25 43248 —-a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-10-07 17:47 . 2010-04-08 23:25 574216 —-a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-10-07 17:47 . 2010-04-08 23:25 16528 —-a-w- c:\windows\system32\drivers\cmderd.sys
2011-10-07 17:47 . 2011-10-21 11:51 41200 —-a-w- c:\windows\system32\cmdcsr.dll
2011-10-07 17:47 . 2010-04-08 23:26 300200 —-a-w- c:\windows\SysWow64\guard32.dll
2011-10-07 17:47 . 2010-04-08 23:26 388280 —-a-w- c:\windows\system32\guard64.dll
2011-10-05 15:24 . 2011-06-15 07:53 414368 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-03 03:06 . 2010-05-30 13:51 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll
2011-09-03 08:14 . 2011-09-03 08:14 21712 —-a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"Diamondback"="d:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe" [2009-10-09 226816]
"AsioThk32Reg"="CTASIO.DLL" [2007-04-09 80896]
"CTHelper"="CTHELPER.EXE" [2007-04-09 19456]
"CTxfiHlp"="CTXFIHLP.EXE" [2007-04-09 19968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DevconDefaultDB"="c:\windows\system32\READREG" [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
R3 bulkadi;Razer Megalodon DFU;c:\windows\system32\DRIVERS\bulkrazer_x64.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2011-09-03 21712]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files (x86)\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-02-19 148744]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 Razerlow;Razer Pro|Solutions;c:\windows\system32\drivers\Razerlow.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-10-20 9264456]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2009-01-21 123400]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\guard64.dll
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\
FF - prefs.js: browser.startup.homepage - www.google.co.uk
FF - prefs.js: network.proxy.ftp - 69.169.145.80
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.gopher - [removed]
FF - prefs.js: network.proxy.gopher_port - 3128
FF - prefs.js: network.proxy.http - [removed]
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - [removed]
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - [removed]
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-AsioReg - CTASIO.DLL
AddRemove-Dragon Age Redesigned© - c:\users\Mad-Hamlet\Documents\BioWare\Dragon Age\packages\core\override\Uninstall Aesthetic settings.exe
AddRemove-Dragon Age Redesigned© Sten - c:\users\Mad-Hamlet\Documents\BioWare\Dragon Age\packages\core\override\Uninstall Sten.exe
AddRemove-Dragon Age Redesigned© Wynne - c:\users\Mad-Hamlet\Documents\BioWare\Dragon Age\packages\core\override\Uninstall Wynne.exe
AddRemove-Game Organizer - c:\programdata\Easybits GO\EasyBitsGO.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-3761962010-3474219249-2641042084-1000\Software\KISS\«0¹0¿0à0á0¤0É03*D*]
"InstallPath"="g:\\games\\KISS\\CustomMaid3D"
.
[HKEY_USERS\S-1-5-21-3761962010-3474219249-2641042084-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:c8,32,30,cd,69,1a,97,83,b5,28,04,a6,0f,8b,8b,84,b2,56,df,ec,35,73,c8,
86,cb,cb,64,93,38,61,1f,59,8b,cc,33,35,e5,32,90,ae,c3,b4,27,be,1b,36,1f,21,\
"??"=hex:65,34,23,f1,ac,3e,ae,99,14,20,f8,2a,53,ca,02,2f
.
[HKEY_USERS\S-1-5-21-3761962010-3474219249-2641042084-1000\Software\SecuROM\License information*]
"datasecu"=hex:04,35,6c,16,2d,7b,36,de,3e,3b,d1,0d,ce,36,81,86,6c,b3,e8,50,5c,
7b,24,56,69,a8,74,6d,58,e6,fe,b4,4b,e9,9f,bb,4a,1f,53,f1,0f,39,88,85,3f,b5,\
"rkeysecu"=hex:a1,16,a9,09,d4,22,da,bc,24,2e,fc,bd,2a,42,8e,e0
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\windows\SysWOW64\PnkBstrA.exe
d:\ware-util\Razer\Diamondback\Razer\Diamondback\razertra.exe
d:\ware-util\Razer\Diamondback\Razer\Diamondback\razerofa.exe
.
**************************************************************************
.
Completion time: 2011-11-21 06:42:44 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-21 05:42
.
Pre-Run: 27,792,809,984 bytes free
Post-Run: 28,149,047,296 bytes free
.
- - End Of File - - D05534E85CA29A03D0117DD11964AB63

The log you requested is below but first please be aware of the following due to the possibility of aberrations.
Per your instructions I attempted to shut down all real time anti-virus and malware programs. I then dragged the text file to the ComboFix icon. Combo fix then informed me that COMODO Real Time functions were still operating. I consulted the manager but couldn't find anything and continued. ComboFix repeated its warning so I DID NOT HIT OKAY THE SECOND TIME thus leaving Combofix hanging and some further consulting in Manager, with the all users check-marked, resulted in finding the COMODO function still active. I attempted to shut down its process tree but access was denied.

Because I have some appreciaton for the warnings of ComboFix's power I uninstalled COMODO completely. This required a system reboot. After the reboot I dragged the CFScript.txt back to ComboFix and things preceded what I assume is normally.

I inform you of this because I assume in your profession, among others, its better to know than not know. Myself, I make no conclusions.

ComboFix Report as follows.

ComboFix 11-11-20.02 - Mad-Hamlet 11/21/2011 19:13:20.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1038.18.4094.2933 [GMT 1:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\users\Mad-Hamlet\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2011-10-21 to 2011-11-21 )))))))))))))))))))))))))))))))
.
.
2011-11-21 18:17 . 2011-11-21 18:17 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp
2011-11-21 18:17 . 2011-11-21 18:17 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-11-19 12:19 . 2011-11-19 12:19 ——– d—–w- c:\programdata\Kaspersky Lab
2011-11-18 13:21 . 2011-03-02 10:43 175616 —-a-w- c:\windows\SysWow64\unrar.dll
2011-11-18 13:13 . 2011-11-18 13:13 ——– d—–w- c:\users\Mad-Hamlet\AppData\Roaming\Media Player Classic
2011-11-13 13:26 . 2011-11-13 13:26 ——– d—–w- c:\users\Mad-Hamlet\AppData\Local\Skyrim
2011-11-13 13:02 . 2010-02-04 09:01 78680 —-a-w- c:\windows\system32\XAPOFX1_4.dll
2011-11-13 13:02 . 2010-02-04 09:01 74072 —-a-w- c:\windows\SysWow64\XAPOFX1_4.dll
2011-11-13 13:02 . 2010-02-04 09:01 530776 —-a-w- c:\windows\system32\XAudio2_6.dll
2011-11-13 13:02 . 2010-02-04 09:01 528216 —-a-w- c:\windows\SysWow64\XAudio2_6.dll
2011-11-13 13:02 . 2010-02-04 09:01 238936 —-a-w- c:\windows\SysWow64\xactengine3_6.dll
2011-11-13 13:02 . 2010-02-04 09:01 176984 —-a-w- c:\windows\system32\xactengine3_6.dll
2011-11-04 15:29 . 2011-07-07 23:21 29288 —-a-w- c:\windows\system32\nvhdap64.dll
2011-11-04 15:29 . 2011-07-07 23:21 174184 —-a-w- c:\windows\system32\drivers\nvhda64v.sys
2011-11-04 15:29 . 2011-07-07 23:21 1452648 —-a-w- c:\windows\system32\nvhdagenco6420102.dll
2011-10-27 18:38 . 2011-10-27 18:38 ——– d—–w- c:\users\Mad-Hamlet\AppData\Local\Logitech
2011-10-27 18:35 . 2011-10-27 18:35 ——– d—–w- c:\program files\Common Files\Logitech
2011-10-27 13:27 . 2011-10-28 20:59 ——– d—–w- c:\users\Mad-Hamlet\AppData\Local\ESN Sonar
2011-10-26 20:32 . 2011-10-26 21:40 ——– d—–w- c:\users\Mad-Hamlet\AppData\Roaming\ts3overlay
2011-10-22 22:32 . 2011-10-22 22:32 ——– d—–w- c:\program files (x86)\Common Files\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-19 00:34 . 2011-10-05 21:51 280904 —-a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-11-19 00:34 . 2011-10-05 21:37 280904 —-a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-11-19 00:00 . 2011-10-05 21:37 280904 —-a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-10-25 16:22 . 2010-06-19 14:31 75136 —-a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-10-15 08:53 . 2011-09-02 18:57 837952 —-a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-10-15 08:53 . 2011-09-02 18:57 5067584 —-a-w- c:\windows\system32\nvsvc64.dll
2011-10-15 08:53 . 2011-09-02 18:57 222528 —-a-w- c:\windows\system32\nvmctray.dll
2011-10-15 08:53 . 2011-09-02 18:57 1640768 —-a-w- c:\windows\system32\nvvsvc.exe
2011-10-15 08:53 . 2011-09-02 18:57 137536 —-a-w- c:\windows\system32\nvshext.dll
2011-10-15 08:53 . 2011-09-02 18:57 10406208 —-a-w- c:\windows\system32\nvcpl.dll
2011-10-15 08:53 . 2011-09-02 18:56 8791360 —-a-w- c:\windows\system32\nvwgf2umx.dll
2011-10-15 08:53 . 2011-09-02 18:56 2808128 —-a-w- c:\windows\system32\nvapi64.dll
2011-10-15 08:53 . 2011-09-02 18:56 1533248 —-a-w- c:\windows\system32\nvdispco64.dll
2011-10-15 08:53 . 2011-09-02 18:56 1454400 —-a-w- c:\windows\system32\nvgenco64.dll
2011-10-15 08:53 . 2011-09-02 18:56 13205312 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2011-10-15 08:53 . 2011-04-07 21:19 3074368 —-a-w- c:\windows\system32\nvsvcr.dll
2011-10-14 23:54 . 2011-10-14 23:54 321856 —-a-w- c:\windows\SysWow64\nvStreaming.exe
2011-10-07 17:47 . 2011-10-21 11:51 41200 —-a-w- c:\windows\system32\cmdcsr.dll
2011-10-05 15:24 . 2011-06-15 07:53 414368 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-03 03:06 . 2010-05-30 13:51 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll
2011-09-03 08:14 . 2011-09-03 08:14 21712 —-a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS
.
.
((((((((((((((((((((((((((((( SnapShot@2011-11-21_05.39.10 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-05-28 21:18 . 2011-11-21 18:11 38156 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-11-21 18:11 40670 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-05-28 20:55 . 2011-11-21 18:11 13628 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3761962010-3474219249-2641042084-1000_UserData.bin
+ 2010-05-28 20:44 . 2011-11-21 05:38 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-28 20:44 . 2011-11-19 23:02 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-28 20:44 . 2011-11-21 05:38 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-05-28 20:44 . 2011-11-19 23:02 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-11-19 23:02 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-11-21 05:38 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-05-28 20:59 . 2011-11-21 18:09 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-28 20:59 . 2011-11-19 23:03 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-05-28 20:59 . 2011-11-21 18:09 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-05-28 20:59 . 2011-11-19 23:03 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-05-28 20:59 . 2011-11-21 18:09 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-05-28 20:59 . 2011-11-19 23:03 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-05-28 20:59 . 2011-11-21 18:09 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-28 20:59 . 2011-11-19 23:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-05-28 20:59 . 2011-11-19 23:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-05-28 20:59 . 2011-11-21 18:09 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-11-21 18:09 . 2011-11-21 18:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-11-21 18:09 . 2011-11-21 18:09 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-11-21 05:38 . 2011-11-21 05:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-07-14 05:12 . 2011-11-21 05:38 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 05:12 . 2011-11-19 23:02 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 05:01 . 2011-11-21 05:37 352932 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-11-21 18:08 352932 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2010-05-28 22:00 . 2011-11-21 18:08 1474832 c:\windows\system32\drivers\sfi.dat
- 2010-05-28 22:00 . 2011-11-21 05:37 1474832 c:\windows\system32\drivers\sfi.dat
+ 2011-05-07 04:37 . 2011-11-21 18:08 39051981 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3761962010-3474219249-2641042084-1000-12288.dat
- 2011-05-07 04:37 . 2011-11-21 05:37 39051981 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3761962010-3474219249-2641042084-1000-12288.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"Diamondback"="d:\ware-util\Razer\Diamondback\Razer\Diamondback\razerhid.exe" [2009-10-09 226816]
"AsioThk32Reg"="CTASIO.DLL" [2007-04-09 80896]
"CTHelper"="CTHELPER.EXE" [2007-04-09 19456]
"CTxfiHlp"="CTXFIHLP.EXE" [2007-04-09 19968]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DevconDefaultDB"="c:\windows\system32\READREG" [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R3 bulkadi;Razer Megalodon DFU;c:\windows\system32\DRIVERS\bulkrazer_x64.sys [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [2011-09-03 21712]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 Razerlow;Razer Pro|Solutions;c:\windows\system32\drivers\Razerlow.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AsioReg"="CTASIO.DLL" [BU]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2009-01-21 123400]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\users\Mad-Hamlet\AppData\Roaming\Mozilla\Firefox\Profiles\bncexf64.default\
FF - prefs.js: network.proxy.type - 0
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-3761962010-3474219249-2641042084-1000\Software\KISS\«0¹0¿0à0á0¤0É03*D*]
"InstallPath"="g:\\games\\KISS\\CustomMaid3D"
.
[HKEY_USERS\S-1-5-21-3761962010-3474219249-2641042084-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:c8,32,30,cd,69,1a,97,83,b5,28,04,a6,0f,8b,8b,84,b2,56,df,ec,35,73,c8,
86,cb,cb,64,93,38,61,1f,59,8b,cc,33,35,e5,32,90,ae,c3,b4,27,be,1b,36,1f,21,\
"??"=hex:65,34,23,f1,ac,3e,ae,99,14,20,f8,2a,53,ca,02,2f
.
[HKEY_USERS\S-1-5-21-3761962010-3474219249-2641042084-1000\Software\SecuROM\License information*]
"datasecu"=hex:04,35,6c,16,2d,7b,36,de,3e,3b,d1,0d,ce,36,81,86,6c,b3,e8,50,5c,
7b,24,56,69,a8,74,6d,58,e6,fe,b4,4b,e9,9f,bb,4a,1f,53,f1,0f,39,88,85,3f,b5,\
"rkeysecu"=hex:a1,16,a9,09,d4,22,da,bc,24,2e,fc,bd,2a,42,8e,e0
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-11-21 19:19:07
ComboFix-quarantined-files.txt 2011-11-21 18:19
ComboFix2.txt 2011-11-21 05:42
.
Pre-Run: 28,815,482,880 bytes free
Post-Run: 28,609,880,064 bytes free
.
- - End Of File - - 2501CBE6652C5C7B548C46BF25426861