Account Compromised [Solved]

Hello everyone. It's been a very long time since I have had to visit the site. I have not noticed anything with my pc until today. I noticed on Tuesday that in my banking account there were 2 unauthorized online purchases from Walmart dot com. This evening I am watching the NBA game and I happened to look over to my pc and noticed a couple of icons on my display that were flickering and I immediately on plugged the ethernet cable. I then tried tick the start button and it would not respond, not even ticking the show hidden icons button near the clock would respond. I then started a scan with Malwarebytes and it did not find anything even in safe mode it did not find anything. So I decided to come here and check things out. I have connected the ethernet cable back and do not see the icons flickering anymore. Here are the results from the scans..

OTL logfile created on: 5/30/2013 9:38:42 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:UsersViperDesktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16576)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.99 Gb Total Physical Memory | 4.40 Gb Available Physical Memory | 73.47% Memory free
11.98 Gb Paging File | 10.23 Gb Available in Paging File | 85.40% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 111.70 Gb Total Space | 7.53 Gb Free Space | 6.74% Space Free | Partition Type: NTFS
Drive D: | 372.61 Gb Total Space | 288.16 Gb Free Space | 77.33% Space Free | Partition Type: NTFS
Drive E: | 931.51 Gb Total Space | 930.96 Gb Free Space | 99.94% Space Free | Partition Type: NTFS
Drive F: | 931.51 Gb Total Space | 912.30 Gb Free Space | 97.94% Space Free | Partition Type: NTFS

Computer Name: VIPER-PC | User Name: Viper | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/30 21:35:42 | 000,602,112 | —- | M] (OldTimer Tools) – C:UsersViperDesktopOTL.exe
PRC - [2013/05/16 21:13:27 | 000,920,472 | —- | M] (Mozilla Corporation) – C:Program Files (x86)Mozilla Firefoxfirefox.exe
PRC - [2013/05/10 03:57:22 | 000,065,640 | —- | M] (Adobe Systems Incorporated) – C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
PRC - [2013/03/21 15:19:46 | 001,341,664 | —- | M] (ESET) – C:Program FilesESETESET Smart Securityx86ekrn.exe
PRC - [2013/03/14 22:07:46 | 000,383,264 | —- | M] (NVIDIA Corporation) – C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe
PRC - [2013/02/12 22:37:16 | 001,263,952 | —- | M] () – C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe
PRC - [2012/11/26 21:02:43 | 000,076,888 | —- | M] () – C:WindowsSysWOW64PnkBstrA.exe
PRC - [2012/07/23 20:33:58 | 001,000,760 | —- | M] (Logitech Inc.) – C:Program FilesLogitech Gaming SoftwareAppletsLCDYT.exe
PRC - [2012/07/23 20:33:52 | 000,485,176 | —- | M] (Logitech Inc.) – C:Program FilesLogitech Gaming SoftwareAppletsLCDWebCam.exe
PRC - [2012/07/23 20:33:28 | 000,835,896 | —- | M] (Logitech Inc.) – C:Program FilesLogitech Gaming SoftwareAppletsLCDMovieViewer.exe
PRC - [2012/07/23 20:33:22 | 000,661,304 | —- | M] (Logitech Inc.) – C:Program FilesLogitech Gaming SoftwareAppletsLCDMedia.exe
PRC - [2012/07/19 15:18:38 | 002,568,120 | —- | M] (WIBU-SYSTEMS AG) – C:Program Files (x86)CodeMeterRuntimebinCodeMeter.exe
PRC - [2010/03/03 20:16:06 | 000,013,336 | —- | M] (Intel Corporation) – C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe
PRC - [2010/03/03 20:16:04 | 000,284,696 | —- | M] (Intel Corporation) – C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
PRC - [2010/01/22 13:29:40 | 000,106,496 | —- | M] (NEC Electronics Corporation) – C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe
PRC - [2009/11/11 10:55:36 | 001,257,472 | —- | M] (CMedia) – C:Program FilesASUS Xonar D2X AudioCustomappAsusAudioCenter.exe
PRC - [2008/07/11 15:04:22 | 000,200,704 | —- | M] () – C:WindowsSysWOW64HsMgr.exe


========== Modules (No Company Name) ==========

MOD - [2013/05/16 21:13:26 | 003,128,728 | —- | M] () – C:Program Files (x86)Mozilla Firefoxmozjs.dll
MOD - [2013/05/16 20:09:54 | 012,436,480 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32System.Windows.Forms30e3a2120200
0677d0a9270572251477System.Windows.Forms.ni.dll
MOD - [2013/05/16 20:09:44 | 003,347,968 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32WindowsBase716959df79685a1eae0fc
14275a32b0fWindowsBase.ni.dll
MOD - [2013/05/16 20:09:42 | 000,971,264 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32System.Configuration764f15e86c82
662e977bd418bd6318c1System.Configuration.ni.dll
MOD - [2013/02/12 22:38:06 | 000,100,688 | —- | M] () – C:Program Files (x86)DivXDivX UpdateDivXUpdateCheck.dll
MOD - [2013/02/12 22:37:16 | 001,263,952 | —- | M] () – C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe
MOD - [2013/01/10 21:40:19 | 000,452,608 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtilf7cb3ae5de64f8cbde3ccc
57c780743aIAStorUtil.ni.dll
MOD - [2013/01/10 19:56:27 | 000,771,584 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32System.Runtime.Remo#90b89f6e8032
310e9ac72a309fd49e83System.Runtime.Remoting.ni.dll
MOD - [2013/01/10 19:56:10 | 001,592,832 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32System.Drawingeead6629e384a5b69f
9ae35284b7eeedSystem.Drawing.ni.dll
MOD - [2013/01/10 19:56:01 | 005,453,312 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32System.Xmlf687c43e9fdec031988b33
ae722c4613System.Xml.ni.dll
MOD - [2013/01/10 19:55:58 | 007,989,760 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32System369f8bdca364e2b4936d18dea5
82912cSystem.ni.dll
MOD - [2013/01/10 19:55:56 | 011,493,376 | —- | M] () – C:WindowsassemblyNativeImages_v2.0.50727_32mscorlib7150b9136fad5b79e88f6c7f
9d3d2c39mscorlib.ni.dll
MOD - [2011/11/02 00:26:32 | 000,087,912 | —- | M] () – C:Program Files (x86)Common FilesAppleApple Application Supportzlib1.dll
MOD - [2011/11/02 00:26:12 | 001,242,472 | —- | M] () – C:Program Files (x86)Common FilesAppleApple Application Supportlibxml2.dll
MOD - [2009/05/11 18:01:13 | 000,143,360 | —- | M] () – C:Program FilesASUS Xonar D2X AudioCustomappVmixP8.dll
MOD - [2008/07/11 15:04:22 | 000,200,704 | —- | M] () – C:WindowsSysWOW64HsMgr.exe


========== Services (SafeList) ==========

SRV:64bit: - [2013/03/21 15:19:46 | 001,341,664 | —- | M] (ESET) [Auto | Running] – C:Program FilesESETESET Smart Securityx86ekrn.exe – (ekrn)
SRV:64bit: - [2011/03/15 15:18:32 | 002,610,952 | —- | M] (Raxco Software, Inc.) [Auto | Running] – C:Program FilesRaxcoPerfectDiskPDAgent.exe – (PDAgent)
SRV:64bit: - [2011/03/15 15:18:22 | 002,266,376 | —- | M] (Raxco Software, Inc.) [On_Demand | Stopped] – C:Program FilesRaxcoPerfectDiskPDEngine.exe – (PDEngine)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [Auto | Running] – C:Program FilesWindows DefenderMpSvc.dll – (WinDefend)
SRV:64bit: - [2009/07/13 21:40:01 | 000,193,536 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:WindowsSysNativeappmgmts.dll – (AppMgmt)
SRV - [2013/05/16 21:13:27 | 000,117,144 | —- | M] (Mozilla Foundation) [On_Demand | Stopped] – C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe – (MozillaMaintenance)
SRV - [2013/05/14 17:11:06 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/10 03:57:22 | 000,065,640 | —- | M] (Adobe Systems Incorporated) [Auto | Running] – C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe – (AdobeARMservice)
SRV - [2013/03/15 01:53:06 | 001,266,464 | —- | M] (NVIDIA Corporation) [Auto | Stopped] – C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe – (nvUpdatusService)
SRV - [2013/03/14 22:07:46 | 000,383,264 | —- | M] (NVIDIA Corporation) [Auto | Running] – C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe – (Stereo Service)
SRV - [2012/11/26 21:02:43 | 000,076,888 | —- | M] () [Auto | Running] – C:WindowsSysWOW64PnkBstrA.exe – (PnkBstrA)
SRV - [2012/07/19 15:18:38 | 002,568,120 | —- | M] (WIBU-SYSTEMS AG) [Auto | Running] – C:Program Files (x86)CodeMeterRuntimebinCodeMeter.exe – (CodeMeter.exe)
SRV - [2011/01/13 18:23:02 | 000,129,440 | —- | M] (Futuremark Corporation) [On_Demand | Stopped] – C:Program Files (x86)Common FilesFuturemark SharedFuturemark SystemInfoFMSISvc.exe – (Futuremark SystemInfo Service)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2010/03/03 20:16:06 | 000,013,336 | —- | M] (Intel Corporation) [Auto | Running] – C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe – (IAStorDataMgrSvc)
SRV - [2010/02/19 13:37:14 | 000,517,096 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe – (SwitchBoard)
SRV - [2009/09/20 11:55:20 | 001,037,824 | —- | M] (Hewlett-Packard Co.) [Auto | Running] – C:Program Files (x86)HPDigital ImagingbinHPSLPSVC64.DLL – (HPSLPSVC)
SRV - [2009/06/10 17:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe – (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/02/20 11:07:40 | 000,058,416 | —- | M] (ESET) [Kernel | Boot | Running] – C:WindowsSysNativedriversepfwwfp.sys – (epfwwfp)
DRV:64bit: - [2013/02/20 11:07:38 | 000,213,416 | —- | M] (ESET) [File_System | System | Running] – C:WindowsSysNativedriverseamonm.sys – (eamonm)
DRV:64bit: - [2013/01/10 15:08:16 | 000,190,232 | —- | M] (ESET) [Kernel | Auto | Running] – C:WindowsSysNativedriversepfw.sys – (epfw)
DRV:64bit: - [2013/01/10 15:08:16 | 000,059,440 | —- | M] (ESET) [Kernel | System | Running] – C:WindowsSysNativedriversEpfwLWF.sys – (EpfwLWF)
DRV:64bit: - [2013/01/10 15:08:14 | 000,150,616 | —- | M] (ESET) [Kernel | System | Running] – C:WindowsSysNativedriversehdrv.sys – (ehdrv)
DRV:64bit: - [2012/12/19 01:41:52 | 000,194,488 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversnvhda64v.sys – (NVHDA)
DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | —- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] – C:WindowsSysNativedriversfs_rec.sys – (Fs_Rec)
DRV:64bit: - [2011/05/13 04:21:04 | 000,177,640 | —- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversssadmdm.sys – (ssadmdm)
DRV:64bit: - [2011/05/13 04:21:04 | 000,146,920 | —- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversssadserd.sys – (ssadserd)
DRV:64bit: - [2011/05/13 04:21:02 | 000,157,672 | —- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversssadbus.sys – (ssadbus)
DRV:64bit: - [2011/05/13 04:21:02 | 000,036,328 | —- | M] (Google Inc) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversssadadb.sys – (androidusb)
DRV:64bit: - [2011/05/13 04:21:02 | 000,016,872 | —- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversssadmdfl.sys – (ssadmdfl)
DRV:64bit: - [2011/04/11 15:01:00 | 000,341,832 | —- | M] (Logitech) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversladfGSRamd64.sys – (LADF_RenderOnly)
DRV:64bit: - [2011/04/11 15:00:18 | 000,410,184 | —- | M] (Logitech) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversladfGSCamd64.sys – (LADF_CaptureOnly)
DRV:64bit: - [2011/03/11 02:41:12 | 000,107,904 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversamdsata.sys – (amdsata)
DRV:64bit: - [2011/03/11 02:41:12 | 000,027,008 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:WindowsSysNativedriversamdxata.sys – (amdxata)
DRV:64bit: - [2011/01/01 13:23:55 | 000,082,816 | —- | M] (VSO Software) [Kernel | On_Demand | Running] – C:WindowsSysNativedriverspcouffin.sys – (pcouffin)
DRV:64bit: - [2010/11/20 09:33:35 | 000,078,720 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversHpSAMD.sys – (HpSAMD)
DRV:64bit: - [2010/11/20 07:07:05 | 000,059,392 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversTsUsbFlt.sys – (TsUsbFlt)
DRV:64bit: - [2010/11/19 18:02:42 | 000,029,288 | —- | M] (Wondershare) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWsAudio_DeviceS(5).sys – (WsAudio_DeviceS(5)
DRV:64bit: - [2010/11/19 18:02:42 | 000,029,288 | —- | M] (Wondershare) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWsAudio_DeviceS(4).sys – (WsAudio_DeviceS(4)
DRV:64bit: - [2010/11/19 18:02:42 | 000,029,288 | —- | M] (Wondershare) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWsAudio_DeviceS(3).sys – (WsAudio_DeviceS(3)
DRV:64bit: - [2010/11/19 18:02:42 | 000,029,288 | —- | M] (Wondershare) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWsAudio_DeviceS(2).sys – (WsAudio_DeviceS(2)
DRV:64bit: - [2010/11/19 18:02:42 | 000,029,288 | —- | M] (Wondershare) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWsAudio_DeviceS(1).sys – (WsAudio_DeviceS(1)
DRV:64bit: - [2010/11/09 16:46:34 | 000,261,712 | —- | M] (Jungo) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversSCTDriverV1011.sys – (SCTDriverV1011)
DRV:64bit: - [2010/11/09 15:35:24 | 000,021,992 | —- | M] (CPUID) [Kernel | Auto | Running] – C:WindowsSysNativedriverscpuz135_x64.sys – (cpuz135)
DRV:64bit: - [2010/09/29 12:34:50 | 000,377,176 | —- | M] (Logitech) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversladfSBVMamd64.sys – (LADF_SBVM)
DRV:64bit: - [2010/09/29 12:34:48 | 000,062,168 | —- | M] (Logitech) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversladfDHP2amd64.sys – (LADF_DHP2)
DRV:64bit: - [2010/08/11 09:10:06 | 000,138,256 | —- | M] (Raxco Software, Inc.) [File_System | Auto | Running] – C:WindowsSysNativedriversDefragFs.sys – (DefragFS)
DRV:64bit: - [2010/04/27 16:57:20 | 000,016,200 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWmVirHid.sys – (WmVirHid)
DRV:64bit: - [2010/04/27 16:57:12 | 000,026,440 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversWmBEnum.sys – (WmBEnum)
DRV:64bit: - [2010/04/27 14:03:12 | 000,077,512 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversWmXlCore.sys – (WmXlCore)
DRV:64bit: - [2010/04/27 14:02:42 | 000,043,976 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversWmFilter.sys – (WmFilter)
DRV:64bit: - [2010/03/03 19:51:40 | 000,540,696 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:WindowsSysNativedriversiaStor.sys – (iaStor)
DRV:64bit: - [2010/01/22 13:22:22 | 000,180,224 | —- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversnusb3xhc.sys – (nusb3xhc)
DRV:64bit: - [2010/01/22 13:22:18 | 000,077,824 | —- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversnusb3hub.sys – (nusb3hub)
DRV:64bit: - [2009/11/23 17:38:00 | 000,016,008 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversLGVirHid.sys – (LGVirHid)
DRV:64bit: - [2009/11/23 17:37:50 | 000,022,408 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversLGBusEnum.sys – (LGBusEnum)
DRV:64bit: - [2009/10/19 17:10:54 | 001,257,472 | —- | M] (C-Media Inc) [Kernel | On_Demand | Running] – C:WindowsSysNativedriverscmudaxp.sys – (cmudaxp)
DRV:64bit: - [2009/09/05 08:01:16 | 000,023,176 | R— | M] (SCT LLC) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriverssctusb.sys – (SCTUSB)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversamdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriverslsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversstexstor.sys – (stexstor)
DRV:64bit: - [2009/07/13 20:35:32 | 000,012,288 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversserscan.sys – (StillCam)
DRV:64bit: - [2009/07/13 20:10:47 | 000,011,264 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversrootmdm.sys – (ROOTMODEM)
DRV:64bit: - [2009/07/01 11:54:54 | 000,030,728 | —- | M] (Logitech Inc.) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversLGPBTDD.sys – (LGPBTDD)
DRV:64bit: - [2009/06/10 16:35:33 | 000,389,120 | —- | M] (Marvell) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversyk62x64.sys – (yukonw7)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversevbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversbxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversb57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedrivershcw85cir.sys – (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | —- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:WindowsSysNativedriversGEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2009/01/09 15:02:08 | 000,031,744 | —- | M] (Research in Motion Ltd) [Kernel | On_Demand | Stopped] – C:WindowsSysNativedriversRimSerial_AMD64.sys – (RimVSerPort)
DRV:64bit: - [2005/03/29 01:30:38 | 000,008,192 | —- | M] () [Kernel | On_Demand | Running] – C:WindowsSysNativedriversASACPI.sys – (MTsensor)
DRV - [2009/07/13 21:19:10 | 000,019,008 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:WindowsSysWOW64driverswimmount.sys – (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
IE - HKLM..SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC

IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.google.com/
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page Redirect Cache = http://www.msn.com/
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page Redirect Cache_TIMESTAMP = 55 61 8F 87 32 24 CB 01 [binary data]
IE - HKCU..SearchScopes,DefaultScope = {7B8AD9F8-647C-4346-8722-99B4B8F9C291}
IE - HKCU..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE10SR
IE - HKCU..SearchScopes{7B8AD9F8-647C-4346-8722-99B4B8F9C291}: "URL" = http://www.google.com/search?q={searchTerm…age={startPage}
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyOverride" = *.local;192.168.*.*

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledAddons: DeviceDetection%40logitech.com:1.23.0.5
FF - prefs.js..extensions.enabledAddons: %7B195A3098-0BD5-4e90-AE22-BA1C540AFD1E%7D:4.0.4
FF - prefs.js..extensions.enabledAddons: %7B27c60876-b5c9-4335-b4f3-52b26782220c%7D:0.9.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF:64bit: - [removed]/FlashPlayer: C:Windowssystem32MacromedFlashNPSWF64_11_7_700_202.dll File not found
FF:64bit: - [removed]/DivX VOD Helper,version=1.0.0: C:Program FilesDivXDivX OVS Helpernpovshelper.dll (DivX, LLC.)
FF:64bit: - [removed]/DTPlugin,version=10.5.0: C:Windowssystem32npDeployJava1.dll (Oracle Corporation)
FF:64bit: - [removed]/JavaPlugin,version=10.5.0: C:Program FilesJavajre7binplugin2npjp2.dll (Oracle Corporation)
FF:64bit: - [removed]/GENUINE: disabled File not found
FF:64bit: - [removed]/NpCtrl,version=1.0: C:Program FilesMicrosoft Silverlight5.1.20125.0npctrl.dll ( Microsoft Corporation)
FF:64bit: - [removed]/OfficeAuthz,version=14.0: C:PROGRA~1MICROS~1Office14NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLMSoftwareMozillaPluginsadobe.com/AdobeAAMDetect: C:Program Files (x86)Common FilesAdobeOOBEPDAppCCMUtilitiesnpAdobeAAMDetect64.dll (Adobe Systems)
FF - [removed]/FlashPlayer: C:WindowsSysWOW64MacromedFlashNPSWF32_11_7_700_202.dll ()
FF - [removed]/ShockwavePlayer: C:Windowssystem32AdobeDirectornp32dsw.dll (Adobe Systems, Inc.)
FF - [removed]/iTunes,version=: File not found
FF - [removed]/iTunes,version=1.0: C:Program Files (x86)iTunesMozilla Pluginsnpitunes.dll ()
FF - [removed]/DivX Browser Plugin,version=1.0.0: C:Program Files (x86)DivXDivX Plus Web Playernpdivx32.dll (DivX, LLC)
FF - [removed]/DivX VOD Helper,version=1.0.0: C:Program Files (x86)DivXDivX OVS Helpernpovshelper.dll (DivX, LLC.)
FF - [removed]/esnsonar,version=0.70.0: C:Program Files (x86)Battlelog Web PluginsSonar\0.70.0npesnsonar.dll File not found
FF - [removed]/esnsonar,version=0.70.4: C:Program Files (x86)Battlelog Web PluginsSonar\0.70.4npesnsonar.dll (ESN Social Software AB)
FF - HKLMSoftwareMozillaPlugins@esn/esnlaunch,version=1.104.0: C:Program Files (x86)Battlelog Web Plugins1.104.0npesnlaunch.dll File not found
FF - HKLMSoftwareMozillaPlugins@esn/esnlaunch,version=1.116.0: C:Program Files (x86)Battlelog Web Plugins1.116.0npesnlaunch.dll File not found
FF - HKLMSoftwareMozillaPlugins@esn/esnlaunch,version=1.122.0: C:Program Files (x86)Battlelog Web Plugins1.122.0npesnlaunch.dll File not found
FF - HKLMSoftwareMozillaPlugins@esn/esnlaunch,version=1.138.0: C:Program Files (x86)Battlelog Web Plugins1.138.0npesnlaunch.dll (ESN Social Software AB)
FF - HKLMSoftwareMozillaPlugins@esn/esnlaunch,version=1.96.0: C:Program Files (x86)Battlelog Web Plugins1.96.0npesnlaunch.dll File not found
FF - HKLMSoftwareMozillaPlugins@esn/esnlaunch,version=2.1.2: C:Program Files (x86)Battlelog Web Plugins2.1.2npesnlaunch.dll (ESN Social Software AB)
FF - [removed]/JavaPlugin,version=10.21.2: C:Program Files (x86)Javajre7binplugin2npjp2.dll (Oracle Corporation)
FF - [removed]/GENUINE: disabled File not found
FF - [removed]/NpCtrl,version=1.0: C:Program Files (x86)Microsoft Silverlight5.1.20125.0npctrl.dll ( Microsoft Corporation)
FF - [removed]/OfficeAuthz,version=14.0: C:PROGRA~2MICROS~1Office14NPAUTHZ.DLL (Microsoft Corporation)
FF - [removed]/SharePoint,version=14.0: C:PROGRA~2MICROS~1Office14NPSPWRAP.DLL (Microsoft Corporation)
FF - [removed]/3DVision: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dv.dll (NVIDIA Corporation)
FF - [removed]/3DVisionStreaming: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLMSoftwareMozillaPluginsAdobe Reader: C:Program Files (x86)AdobeReader 10.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)
FF - HKLMSoftwareMozillaPluginsadobe.com/AdobeAAMDetect: C:Program Files (x86)Common FilesAdobeOOBEPDAppCCMUtilitiesnpAdobeAAMDetect32.dll (Adobe Systems)
FF - [removed]/Google Update;version=3: C:UsersViperAppDataLocalGoogleUpdate1.3.21.145npGoogleUpdate3.dll (Google Inc.)
FF - [removed]/Google Update;version=9: C:UsersViperAppDataLocalGoogleUpdate1.3.21.145npGoogleUpdate3.dll (Google Inc.)

64bit-FF - [removed]: C:PROGRAM FILESESETESET SMART SECURITYMOZILLA THUNDERBIRD [2013/04/10 19:26:52 | 000,000,000 | —D | M]
FF - [removed]: C:Program Files (x86)HPDigital ImagingSmart Web PrintingMozillaAddOn3 [2012/04/04 21:59:56 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:Program Files (x86)DivXDivX Plus Web PlayerfirefoxDivXHTML5 [2013/02/18 14:05:36 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 21.0extensionsComponents: C:Program Files (x86)Mozilla Firefoxcomponents [2013/05/16 21:13:27 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 21.0extensionsPlugins: C:Program Files (x86)Mozilla Firefoxplugins [2013/05/16 21:13:22 | 000,000,000 | —D | M]
FF - [removed]: C:Program FilesESETESET Smart SecurityMozilla Thunderbird [2013/04/10 19:26:52 | 000,000,000 | —D | M]
FF - [removed]: C:Program Files (x86)HPDigital ImagingSmart Web PrintingMozillaAddOn3 [2012/04/04 21:59:56 | 000,000,000 | —D | M]

[2010/07/16 04:29:33 | 000,000,000 | —D | M] (No name found) – C:UsersViperAppDataRoamingMozillaExtensions
[2012/12/04 11:27:36 | 000,000,000 | —D | M] (No name found) – C:UsersViperAppDataRoamingMozillaFirefoxProfiles\0deowket.defaultextensions
[2012/12/04 11:27:36 | 000,000,000 | —D | M] (Garmin Communicator) – C:UsersViperAppDataRoamingMozillaFirefoxProfiles\0deowket.defaultextensions{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011/08/24 19:32:17 | 000,000,000 | —D | M] (Battlefield Play4Free) – C:UsersViperAppDataRoamingMozillaFirefoxProfiles\[removed]
[2011/10/31 21:52:36 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:UsersViperAppDataRoamingMozillaFirefoxProfiles\[removed]
[2011/07/06 22:58:15 | 000,007,532 | —- | M] () (No name found) – C:UsersViperAppDataRoamingMozillaFirefoxProfiles\0deowket.defaultextensions{27c60876-b5c9-4335-b4f3-52b26782220c}.xpi
[2013/05/16 21:13:27 | 000,000,000 | —D | M] (No name found) – C:Program Files (x86)Mozilla Firefoxextensions
[2013/05/16 21:13:21 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013/05/16 21:13:21 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013/05/16 21:13:27 | 000,000,000 | —D | M] (No name found) – C:Program Files (x86)Mozilla Firefoxbrowserextensions
[2013/05/16 21:13:27 | 000,000,000 | —D | M] (Default) – C:Program Files (x86)Mozilla Firefoxbrowserextensions{972ce4c6-7e08-4474-a285-3208198ce6fd}

O1 HOSTS File: ([2011/12/06 22:23:45 | 000,000,822 | —- | M]) - C:WindowsSysNativedriversetchosts
O1 - Hosts:
O1 - Hosts:
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre7binssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre7binjp2ssv.dll (Oracle Corporation)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:Program Files (x86)DivXDivX Plus Web PlayerieDivXHTML5DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll (Oracle Corporation)
O3 - HKCU..ToolbarWebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..Run: [AdobeAAMUpdater-1.0] C:Program Files (x86)Common FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..Run: [Cmaudio8788] C:WindowsSyswow64cmicnfgp.dll (C-Media Corporation)
O4:64bit: - HKLM..Run: [Cmaudio8788GX] C:Windowssyswow64HsMgr.exe ()
O4:64bit: - HKLM..Run: [Cmaudio8788GX64] C:WindowssystemHsMgr64.exe ()
O4:64bit: - HKLM..Run: [egui] C:Program FilesESETESET Smart Securityegui.exe (ESET)
O4:64bit: - HKLM..Run: [Launch LCore] C:Program FilesLogitech Gaming SoftwareLCore.exe (Logitech Inc.)
O4 - HKLM..Run: [AdobeCS5.5ServiceManager] "C:Program Files (x86)Common FilesAdobeCS5.5ServiceManagerCS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..Run: [APSDaemon] C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe (Apple Inc.)
O4 - HKLM..Run: [DivXMediaServer] C:Program Files (x86)DivXDivX Media ServerDivXMediaServer.exe (DivX, LLC)
O4 - HKLM..Run: [DivXUpdate] C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe ()
O4 - HKLM..Run: [IAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe (Intel Corporation)
O4 - HKLM..Run: [NUSB3MON] C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe (NEC Electronics Corporation)
O4 - HKLM..Run: [SwitchBoard] C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe (Adobe Systems Incorporated)
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktop = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktopChanges = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: ConsentPromptBehaviorAdmin = 0
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: ConsentPromptBehaviorUser = 3
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: EnableLUA = 0
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: PromptOnSecureDesktop = 0
O7 - HKCUSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O10:64bit: - NameSpace_Catalog5Catalog_Entries64\000000000007 [] - C:Program FilesBonjourmdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5Catalog_Entries\000000000007 [] - C:Program Files (x86)BonjourmdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownlo…sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab (Shockwave Flash Object)
O17 - HKLMSystemCCSServicesTcpipParameters: DhcpNameServer = 192.168.0.1
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{284F9DC2-116B-4471-AA57-3A19EF1497C0}: DhcpNameServer = 192.168.0.1
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{548E6D7E-E698-4C59-988E-57C7C1BAF8AD}: DhcpNameServer = [removed] [removed]
O18 - ProtocolHandlerms-help - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:Windowsexplorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:Windowssystem32userinit.exe) - C:WindowsSysNativeuserinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:WindowsSysWow64explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:Windowssystem32userinit.exe) - C:WindowsSysWOW64userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2{7b4c3856-60c2-11e1-bc50-485b39744ca6}Shell - "" = AutoRun
O33 - MountPoints2{7b4c3856-60c2-11e1-bc50-485b39744ca6}ShellAutoRuncommand - "" = I:ToolLauncher-Bootstrap.exe
O33 - MountPoints2{81da7dd1-4a49-11e2-abc1-485b39744ca6}Shell - "" = AutoRun
O33 - MountPoints2{81da7dd1-4a49-11e2-abc1-485b39744ca6}ShellAutoRuncommand - "" = I:MotoCastSetup.exe -a
O34 - HKLM BootExecute: (PDBoot.exe)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM..comfile [open] – "%1" %*
O35:64bit: - HKLM..exefile [open] – "%1" %*
O35 - HKLM..comfile [open] – "%1" %*
O35 - HKLM..exefile [open] – "%1" %*
O37:64bit: - HKLM…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM…exe [@ = exefile] – "%1" %*
O37 - HKLM…com [@ = comfile] – "%1" %*
O37 - HKLM…exe [@ = exefile] – "%1" %*
O38 - SubSystemsWindows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystemsWindows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystemsWindows: (ServerDll=sxssrv,4)

NetSvcs:64bit: AppMgmt - C:WindowsSysNativeappmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:WindowsSystem32l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.CFHD - CFHD.dll (CineForm Inc.)
Drivers32:64bit: VIDC.CSCD - File not found
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.l3acm - C:WindowsSysWOW64l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: VIDC.CFHD - C:WindowsSysWow64CFHD.dll (CineForm Inc.)
Drivers32: vidc.cvid - C:WindowsSysWow64iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:WindowsSysWow64DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:WindowsSysWow64frapsvid.dll (Beepa P/L)
Drivers32: VIDC.RTV1 - rtvcvfw32.dll File not found
Drivers32: vidc.yv12 - C:WindowsSysWow64DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/05/30 21:35:56 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:UsersViperDesktopHiJackThis.exe
[2013/05/30 21:35:41 | 000,602,112 | —- | C] (OldTimer Tools) – C:UsersViperDesktopOTL.exe
[2013/05/16 21:13:21 | 000,000,000 | —D | C] – C:Program Files (x86)Mozilla Firefox
[2013/05/14 22:52:54 | 000,603,136 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemsfeeds.dll
[2013/05/14 22:52:54 | 000,526,336 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeieui.dll
[2013/05/14 22:52:54 | 000,391,168 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ieui.dll
[2013/05/14 22:52:54 | 000,136,704 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiesysprep.dll
[2013/05/14 22:52:54 | 000,109,056 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64iesysprep.dll
[2013/05/14 22:52:54 | 000,089,600 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeRegisterIEPKEYs.exe
[2013/05/14 22:52:54 | 000,071,680 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64RegisterIEPKEYs.exe
[2013/05/14 22:52:54 | 000,067,072 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiesetup.dll
[2013/05/14 22:52:54 | 000,061,440 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64iesetup.dll
[2013/05/14 22:52:54 | 000,051,712 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeie4uinit.exe
[2013/05/14 22:52:54 | 000,039,936 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeiernonce.dll
[2013/05/14 22:52:54 | 000,033,280 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64iernonce.dll
[2013/05/14 22:52:53 | 000,855,552 | —- | C] (Microsoft Corporation) – C:WindowsSysNativejscript.dll
[2013/05/14 22:52:53 | 000,690,688 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64jscript.dll
[2013/05/14 22:52:52 | 003,958,784 | —- | C] (Microsoft Corporation) – C:WindowsSysNativejscript9.dll
[2013/05/14 20:17:38 | 000,265,064 | —- | C] (Microsoft Corporation) – C:WindowsSysNativedriversdxgmms1.sys
[2013/05/14 20:17:38 | 000,144,384 | —- | C] (Microsoft Corporation) – C:WindowsSysNativecdd.dll
[2013/05/14 20:17:36 | 001,930,752 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeauthui.dll
[2013/05/14 20:17:36 | 001,796,096 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64authui.dll
[2013/05/14 20:17:36 | 000,197,120 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeshdocvw.dll
[2013/05/14 20:17:36 | 000,111,448 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeconsent.exe
[2013/05/14 20:17:34 | 000,048,640 | —- | C] (Microsoft Corporation) – C:WindowsSysNativewwanprotdim.dll
[2013/05/04 18:40:42 | 000,000,000 | —D | C] – C:UsersViperDocumentsHOMEWORK
[2011/01/01 13:23:55 | 000,082,816 | —- | C] (VSO Software) – C:UsersViperAppDataRoamingpcouffin.sys
[1 C:WindowsSysWow64*.tmp files -> C:WindowsSysWow64*.tmp -> ]
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/05/30 21:36:12 | 000,625,664 | —- | M] () – C:UsersViperDesktopdds.scr
[2013/05/30 21:35:57 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:UsersViperDesktopHiJackThis.exe
[2013/05/30 21:35:42 | 000,602,112 | —- | M] (OldTimer Tools) – C:UsersViperDesktopOTL.exe
[2013/05/30 21:35:00 | 000,000,908 | —- | M] () – C:WindowstasksGoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000UA.job
[2013/05/30 21:31:33 | 000,015,888 | -H– | M] () – C:WindowsSysNative7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/05/30 21:31:33 | 000,015,888 | -H– | M] () – C:WindowsSysNative7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/05/30 21:28:54 | 009,141,546 | —- | M] () – C:WindowsSysNativeperfh009.dat
[2013/05/30 21:28:54 | 003,129,720 | —- | M] () – C:WindowsSysNativePerfStringBackup.INI
[2013/05/30 21:28:54 | 003,008,976 | —- | M] () – C:WindowsSysNativeperfc009.dat
[2013/05/30 21:24:32 | 000,000,064 | RHS- | M] () – C:WindowsSysNativedriversWsAudio_DeviceS(3).winsecurity
[2013/05/30 21:24:31 | 000,000,064 | RHS- | M] () – C:WindowsSysNativedriversvolsnap.winsecurity
[2013/05/30 21:24:29 | 000,000,000 | -H– | M] () – C:ProgramDatacm-lock
[2013/05/30 21:24:27 | 000,067,584 | –S- | M] () – C:Windowsbootstat.dat
[2013/05/30 21:24:26 | 529,854,463 | -HS- | M] () – C:hiberfil.sys
[2013/05/30 21:11:00 | 000,000,830 | —- | M] () – C:WindowstasksAdobe Flash Player Updater.job
[2013/05/30 19:57:56 | 000,338,819 | —- | M] () – C:UsersViperDesktop2DCC568B4AFFBFF_N_4302013_235227_651.pdf
[2013/05/25 11:35:00 | 000,000,856 | —- | M] () – C:WindowstasksGoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000Core.job
[2013/05/16 22:07:53 | 000,002,048 | —- | M] () – C:UsersViperApplication DataMicrosoftInternet ExplorerQuick LaunchMozilla Firefox.lnk
[2013/05/16 20:08:44 | 005,532,160 | —- | M] () – C:WindowsSysNativeFNTCACHE.DAT
[2013/05/14 17:11:06 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerApp.exe
[2013/05/14 17:11:06 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerCPLApp.cpl
[2013/05/02 18:14:23 | 000,000,628 | —- | M] () – C:UsersPublicDesktopMalwarebytes Anti-Malware.lnk
[1 C:WindowsSysWow64*.tmp files -> C:WindowsSysWow64*.tmp -> ]
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/05/30 21:36:11 | 000,625,664 | —- | C] () – C:UsersViperDesktopdds.scr
[2013/05/30 21:24:29 | 000,000,000 | -H– | C] () – C:ProgramDatacm-lock
[2013/05/30 19:57:55 | 000,338,819 | —- | C] () – C:UsersViperDesktop2DCC568B4AFFBFF_N_4302013_235227_651.pdf
[2012/11/21 21:30:11 | 000,000,110 | —- | C] () – .dir
[2012/07/15 15:13:24 | 002,580,552 | —- | C] () – C:WindowsSysWow64pbsvc.exe
[2012/06/25 20:05:08 | 000,000,956 | —- | C] () – C:UsersViperRPDLX2011.lic
[2012/04/04 22:12:23 | 000,005,355 | —- | C] () – C:Windowshpomdl18.dat.temp
[2012/04/04 21:57:36 | 000,202,584 | —- | C] () – C:Windowshpoins18.dat
[2012/04/04 21:57:36 | 000,005,355 | —- | C] () – C:Windowshpomdl18.dat
[2012/02/26 17:51:46 | 000,946,890 | —- | C] () – C:WindowsSysWow64PerfStringBackup.INI
[2011/12/04 13:48:26 | 000,001,456 | —- | C] () – C:UsersViperAppDataLocalAdobe Save for Web 12.0 Prefs
[2011/10/01 16:02:27 | 000,000,664 | —- | C] () – C:UsersViperAppDataLocalFASTWiz.html
[2011/06/08 19:53:26 | 000,007,602 | —- | C] () – C:UsersViperAppDataLocalResmon.ResmonCfg
[2011/04/05 23:19:20 | 000,003,584 | —- | C] () – C:UsersViperAppDataLocalDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/16 21:08:02 | 000,000,358 | RHS- | C] () – C:ProgramDatantuser.pol
[2011/01/02 23:16:28 | 000,003,424 | —- | C] () – C:UsersViperunigine_20110102_2216.html
[2011/01/01 13:23:55 | 000,099,384 | —- | C] () – C:UsersViperAppDataRoaminginst.exe
[2011/01/01 13:23:55 | 000,007,859 | —- | C] () – C:UsersViperAppDataRoamingpcouffin.cat
[2011/01/01 13:23:55 | 000,001,167 | —- | C] () – C:UsersViperAppDataRoamingpcouffin.inf
[2010/12/23 20:48:14 | 000,001,057 | —- | C] () – C:UsersViperAppDataRoamingvso_ts_preview.xml
[2010/12/04 23:52:15 | 000,003,424 | —- | C] () – C:UsersViperunigine_20101204_2252.html
[2010/08/14 22:46:34 | 000,000,132 | —- | C] () – C:UsersViperAppDataRoamingAdobe PNG Format CS5 Prefs
[2010/07/15 14:17:51 | 529,854,463 | -HS- | C] () – hiberfil.sys

========== ZeroAccess Check ==========

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () – C:WindowsassemblyDesktop.ini

[HKEY_CURRENT_USERSoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32] /64

[HKEY_CURRENT_USERSoftwareClassesWow6432nodeclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]

[HKEY_CURRENT_USERSoftwareClassesclsid{fbeb8a05-beee-4442-804e-409d6c4515e9}InProcServer32] /64

[HKEY_CURRENT_USERSoftwareClassesWow6432nodeclsid{fbeb8a05-beee-4442-804e-409d6c4515e9}InProcServer32]

[HKEY_LOCAL_MACHINESoftwareClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32] /64
"" = C:WindowsSysNativeshell32.dll – [2013/02/27 01:52:56 | 014,172,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINESoftwareWow6432NodeClassesclsid{42aedc87-2188-41fd-b9a3-0c966feabec1}InProcServer32]
"" = %SystemRoot%system32shell32.dll – [2013/02/27 00:55:05 | 012,872,704 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINESoftwareClassesclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F}InProcServer32] /64
"" = C:WindowsSysNativewbemfastprox.dll – [2009/07/13 21:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINESoftwareWow6432NodeClassesclsid{5839FCA9-774D-42A1-ACDA-D6A79037F57F}InProcServer32]
"" = %systemroot%system32wbemfastprox.dll – [2010/11/20 08:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINESoftwareClassesclsid{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}InProcServer32] /64
"" = C:WindowsSysNativewbemwbemess.dll – [2009/07/13 21:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINESoftwareWow6432NodeClassesclsid{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}InProcServer32]

========== LOP Check ==========

[2013/02/06 16:23:18 | 000,000,000 | —D | M] – C:UsersViperAppDataRoaming.minecraft
[2011/03/16 21:10:53 | 000,000,000 | —D | M] – C:UsersViperAppDataRoaming.oit
[2010/07/18 14:04:49 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingASUS
[2010/09/25 22:16:10 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingchc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/10/09 17:17:10 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingCompanionLink
[2012/01/30 22:38:12 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingDriverCure
[2010/07/18 13:37:59 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingESET
[2011/04/01 10:05:04 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingGARMIN
[2011/06/08 20:50:12 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingGlarySoft
[2012/06/26 21:07:56 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingGoPro
[2010/07/18 13:57:28 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingLeadertech
[2013/01/10 20:14:21 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingMotorola
[2012/12/19 22:08:37 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingMotorola Mobility
[2013/04/16 22:28:20 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingNotepad++
[2011/03/16 21:10:11 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingNuance
[2012/11/29 21:01:58 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingOrigin
[2012/06/25 21:31:27 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingPublish Providers
[2012/06/25 21:31:26 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingSony
[2012/01/30 22:38:12 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingSpeedMaxPc
[2010/07/20 22:05:13 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingStageManager.BD092818F67280F4B42B04877600987F0111
B594.1
[2011/09/24 18:20:55 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingSystemRequirementsLab
[2012/09/14 19:35:11 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingTeamViewer
[2013/04/05 20:56:47 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingTS3Client
[2012/04/06 19:27:16 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingVso
[2011/03/16 21:06:32 | 000,000,000 | —D | M] – C:UsersViperAppDataRoamingZeon

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%..|smtmp;true;true;true /FP >

< %temp%smtmp*.* /s > >

< MD5 for: EXPLORER.ADML >
[2009/07/13 22:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:WindowsPolicyDefinitionsen-USExplorer.adml
[2009/07/13 22:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:Windowswinsxsamd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 16:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:WindowsPolicyDefinitionsExplorer.admx
[2009/06/10 16:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:Windowswinsxsamd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7Explorer.admx

< MD5 for: EXPLORER.EXE >
[2011/02/26 02:23:14 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25explorer.exe
[2011/02/26 01:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652dexplorer.exe
[2009/07/13 21:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761explorer.exe
[2011/02/26 01:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4explorer.exe
[2009/10/31 01:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202explorer.exe
[2011/02/26 01:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:Windowsexplorer.exe
[2011/02/25 02:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0baexplorer.exe
[2011/02/26 02:14:34 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332explorer.exe
[2010/11/20 08:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafbexplorer.exe
[2009/08/03 02:19:07 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41cexplorer.exe
[2011/02/25 01:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:WindowsSysWOW64explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5explorer.exe
[2009/10/31 02:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007explorer.exe
[2009/08/03 01:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617explorer.exe
[2010/11/20 09:24:45 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900explorer.exe
[2009/10/31 02:38:38 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7explorer.exe
[2009/08/03 01:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9explorer.exe
[2009/07/13 21:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566explorer.exe
[2009/10/31 02:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:Windowswinsxswow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2explorer.exe
[2011/02/26 02:26:45 | 002,870,784 | —- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9explorer.exe
[2009/08/03 02:17:37 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:Windowswinsxsamd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79aeexplorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2009/07/13 22:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:Windowsen-USexplorer.exe.mui
[2009/07/13 22:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:Windowswinsxsamd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19bexplorer.exe.mui
[2009/07/13 22:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:WindowsSysWOW64en-USexplorer.exe.mui
[2009/07/13 22:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:Windowswinsxswow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396explorer.exe.mui

< MD5 for: IEXPLORE.EXE >
[2012/06/02 07:47:54 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=004640AB259C1572EBD5FB0A32F63686 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_0dbfc836999db0caiexplore.exe
[2013/01/08 21:53:45 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=0100BCF23941C83462E4A70F94C3392E – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16464_none_0d2c5bc980874648iexplore.exe
[2012/05/17 19:21:54 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=0129BB16161C2FD9A6B19111AB047198 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_1798a687b4d6030fiexplore.exe
[2012/11/13 22:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16457_none_178ed6e5b4dd3857iexplore.exe
[2012/06/29 01:02:52 | 000,754,784 | —- | M] (Microsoft Corporation) MD5=1223ACBFC1093852DFF039E189599BBD – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_0d45fcc9807373c2iexplore.exe
[2010/09/08 00:36:39 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=14803EA3E5DD7CB37CB446C74CFDA38F – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_1a39121b8bff3c23iexplore.exe
[2012/08/24 03:34:41 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=22CC6CDBA678790046693654C3B212E4 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_1787d4dfb4e386f6iexplore.exe
[2012/05/17 18:59:46 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=268982F1FD671A077C6A2AF41E351436 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20551_none_181271f4ce004017iexplore.exe
[2012/10/08 04:37:24 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=270A1342BD5AF95CA25A586B4C2F1522 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_178cd651b4df05a9iexplore.exe
[2011/04/22 16:15:52 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=281C23EC5BCB1853A5D571F1A6E52FB1 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20949_none_101e7c5957724e1diexplore.exe
[2013/04/04 23:26:27 | 000,770,560 | —- | M] (Microsoft Corporation) MD5=2859EBC065D2E1CCC94161CE28BAC085 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16521_none_20e4a040529a2792iexplore.exe
[2013/02/24 20:58:09 | 000,775,232 | —- | M] (Microsoft Corporation) MD5=28F93BAFB3EB407E99A7ED3D9DBDE04C – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20644_none_ffb93ba237e760ceiexplore.exe
[2009/07/13 21:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3iexplore.exe
[2012/08/24 07:23:44 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=2D53C5F71653EF94E7829846405D4ED2 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_0d332a8d8082c4fbiexplore.exe
[2013/04/05 01:55:38 | 000,770,624 | —- | M] (Microsoft Corporation) MD5=2DC6BD1047553611DAEF97C751131A5D – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20681_none_0a122b746c443b42iexplore.exe
[2012/06/02 05:08:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=34B01BBD8F00B6B9C9248DC4F1E3CD01 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_1799a6d1b4d51c66iexplore.exe
[2010/09/08 01:37:57 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=4879CB864E290BED38C5BDB641144B1B – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_0fe467c9579e7a28iexplore.exe
[2012/10/08 08:29:46 | 000,754,848 | —- | M] (Microsoft Corporation) MD5=49442BA6DCE4B4E3C1CB0AB193FE29AD – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_0d382bff807e43aeiexplore.exe
[2010/09/08 01:49:01 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=498035ABCCF1ED47AE6791D239187587 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_0f6c69ae3e743d20iexplore.exe
[2012/05/17 22:51:05 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=4E99F42504A99D5024C2EFA015001937 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_0d43fc3580754114iexplore.exe
[2010/11/04 01:54:54 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=58CF468D3FF4CF830339FE5E45356355 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16700_none_1a0bc510729d1f54iexplore.exe
[2012/08/24 06:49:07 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=5A150AFABB25BEA50CEDC8650A7B8A9E – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_0dc3c95e999a1626iexplore.exe
[2012/06/28 22:45:31 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=5D03518409F37D1483C98869D86E23FF – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_0dc0c880999cca21iexplore.exe
[2012/06/02 08:52:21 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=610F6596921C4BAA8834ADBB9BE272EE – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_0d44fc7f80745a6biexplore.exe
[2010/09/08 00:31:24 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=61EDBCE47ADF3E52AB0B9F49EE4AEBB8 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_19c1140072d4ff1biexplore.exe
[2012/08/24 03:49:25 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=62188720CE27B982B4285C03163C9FB3 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_181873b0cdfad821iexplore.exe
[2011/04/22 15:29:16 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=64EFAF916C4009F1B84153D0BB491FB0 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16800_none_1a0bc6f6729d1c7biexplore.exe
[2013/02/21 08:59:57 | 000,775,216 | —- | M] (Microsoft Corporation) MD5=6554208814632C25C77EE02355EB8E95 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16540_none_16920d4a1e377ea4iexplore.exe
[2013/04/04 23:26:26 | 000,775,184 | —- | M] (Microsoft Corporation) MD5=681B380492ACB571ED6CCC1F37F53343 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16521_none_168ff5ee1e396597iexplore.exe
[2013/01/08 18:42:06 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=698EB1E5F8C66344D97C00B5699E871D – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16464_none_1781061bb4e80843iexplore.exe
[2010/11/04 01:54:59 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=6B2258FF6D2332073FE9E90122FA4168 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20831_none_1a75f2618bd22c48iexplore.exe
[2010/12/18 02:17:48 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=700B40EA39DFB25517A81032F03D6D20 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_0fa37b7a3e4ac7e9iexplore.exe
[2013/02/02 04:09:12 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=7C2923004FFC497E54F38E835F108EE8 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_0d9c579499b8b898iexplore.exe
[2010/11/20 09:28:25 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92iexplore.exe
[2010/12/18 02:11:10 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=8C6C32E4AF8A3D7155656F5897C504E0 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_1000d84b5789be20iexplore.exe
[2011/07/12 18:27:10 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7aiexplore.exe
[2010/12/18 01:32:25 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=9321CF0D023528C71E3645F8433C86C8 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_1a55829d8bea801biexplore.exe
[2012/06/28 21:00:47 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=93569D46D79F9756ED077156496AFE23 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_179aa71bb4d435bdiexplore.exe
[2013/02/24 19:52:40 | 000,770,624 | —- | M] (Microsoft Corporation) MD5=A11C5E3E288256C540B7ED8BE3A04B01 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20644_none_0a0de5f46c4822c9iexplore.exe
[2013/02/02 00:19:03 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=A285E1965C115031DA02B777EE9D7689 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_17f101e6ce197a93iexplore.exe
[2013/02/02 03:37:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=A8EBEBCD9F5C49475194099FCD276992 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_0d1d8ab58092fcddiexplore.exe
[2010/12/18 01:33:54 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AA08B68EF4E35EFA170CF85A44B23B70 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_19f825cc72ab89e4iexplore.exe
[2013/04/05 02:02:26 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=AAD90795E84E710543C6C7C2F7048E30 – C:Program Files (x86)Internet Exploreriexplore.exe
[2013/04/05 02:02:26 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=AAD90795E84E710543C6C7C2F7048E30 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16576_none_20e92fca5296266aiexplore.exe
[2011/02/24 01:45:11 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AB2BB40A5FE49AD236791AC22BD08869 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_1a9d66118bb386fdiexplore.exe
[2012/11/15 23:08:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=AC4957E154F750DF54F36ADC8E3E040D – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20565_none_0db6f8de99a3ff69iexplore.exe
[2011/02/24 02:29:19 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=B4881B8F6EDB48CABD44BCC9FB5475C4 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_1048bbbf5752c502iexplore.exe
[2012/06/02 04:51:58 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=BE967C74B89577B78FB57C061E12B04C – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_18147288cdfe72c5iexplore.exe
[2010/11/20 08:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8diexplore.exe
[2011/02/24 01:32:52 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C6697A46554E36541E81182B258A19D6 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_19d0e74472c85f04iexplore.exe
[2013/04/05 03:53:33 | 000,775,232 | —- | M] (Microsoft Corporation) MD5=CEA304830B4770BDA3572B87D0841848 – C:Program FilesInternet Exploreriexplore.exe
[2013/04/05 03:53:33 | 000,775,232 | —- | M] (Microsoft Corporation) MD5=CEA304830B4770BDA3572B87D0841848 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16576_none_169485781e35646fiexplore.exe
[2012/10/08 04:22:05 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=CECB15F834FC2B4B150449717ADE18DD – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_1808a252ce07755fiexplore.exe
[2011/04/22 16:16:25 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=D6F57A9ECB4606076FB9519D1698FCBA – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16800_none_0fb71ca43e3c5a80iexplore.exe
[2010/11/04 02:37:41 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=D8E00EA671A1EFE95C69C7566C505AD4 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16700_none_0fb71abe3e3c5d59iexplore.exe
[2013/02/02 00:19:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=DDE5A0DFAF7C6370FB36402D7A746ED3 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_17723507b4f3bed8iexplore.exe
[2013/04/05 03:23:03 | 000,775,216 | —- | M] (Microsoft Corporation) MD5=DE751E18F8DBF7BCCE46989CBA4A9828 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20681_none_ffbd812237e37947iexplore.exe
[2011/02/24 02:32:09 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=E1BBDE0F187194D4B08335234A4B9FC7 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_0f7c3cf23e679d09iexplore.exe
[2010/11/04 02:42:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=E220FB009F54AAF649C6A278A5156764 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20831_none_1021480f57716a4diexplore.exe
[2013/02/21 07:28:11 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=E4F6125ED5185F8FA37CC4F449B85526 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16540_none_20e6b79c5298409fiexplore.exe
[2012/06/28 19:35:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=EB4105348272018D096FEB655CD1608C – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_181572d2cdfd8c1ciexplore.exe
[2013/01/08 20:51:57 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=EF1F6F41FB2C9BBB484B21017F380201 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20573_none_0daa285e99ade8aciexplore.exe
[2013/01/08 17:32:42 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F05982E56ABD835AA8DF260EEC873E5B – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20573_none_17fed2b0ce0eaaa7iexplore.exe
[2011/07/12 18:27:09 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7fiexplore.exe
[2009/07/13 21:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8iexplore.exe
[2012/10/08 07:09:10 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=F61714ABCF9BF0CEF0A6249AD4FD490B – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_0db3f80099a6b364iexplore.exe
[2012/11/13 22:19:28 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F691418EE9A6344AEB5C1B0518FBF8AE – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20565_none_180ba330ce04c164iexplore.exe
[2012/05/17 21:37:57 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=F8B2D47ED17C1D087D14EC747E5AC57A – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20551_none_0dbdc7a2999f7e1ciexplore.exe
[2011/04/22 15:11:29 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=F94877A94996B3C12BB31AD722840457 – C:Windowswinsxswow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20949_none_1a7326ab8bd31018iexplore.exe
[2012/11/14 03:11:18 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=FD0D2E1FAEBAE5031BE2EB8000D973F1 – C:Windowswinsxsamd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16457_none_0d3a2c93807c765ciexplore.exe

< MD5 for: IEXPLORE.EXE.CFG >
[2008/10/09 20:14:56 | 000,000,029 | —- | M] () MD5=14C57B5BD3C8168436AAC8858DCF0FCE – C:Program Files (x86)EVGA PrecisionBundleOSDServerProfileTemplatesIExplore.exe.cfg
[2008/10/09 04:14:56 | 000,000,029 | —- | M] () MD5=14C57B5BD3C8168436AAC8858DCF0FCE – C:Program Files (x86)MSI AfterburnerBundleOSDServerProfileTemplatesIExplore.exe.cfg

< MD5 for: IEXPLORE.EXE.MUI >
[2011/07/12 18:27:10 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:Windowswinsxsamd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66iexplore.exe.mui
[2011/07/12 18:27:10 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:Windowswinsxswow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61iexplore.exe.mui
[2013/04/04 23:26:27 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:Program Files (x86)Internet Exploreren-USiexplore.exe.mui
[2013/04/04 23:26:26 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:Program FilesInternet Exploreren-USiexplore.exe.mui
[2013/04/04 23:26:26 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:Windowswinsxsamd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_103c8b6555e6a67eiexplore.exe.mui
[2013/04/04 23:26:27 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:Windowswinsxswow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_1a9135b78a476879iexplore.exe.mui
[2009/07/13 22:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:Windowswinsxsamd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607dfiexplore.exe.mui
[2009/07/13 22:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:Windowswinsxswow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9daiexplore.exe.mui

< MD5 for: SERVICES >
[2009/06/10 17:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:Windowswinsxsamd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210services

< MD5 for: SERVICES.CFG >
[2013/05/10 03:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:Program Files (x86)AdobeReader 10.0ReaderServicesServices.cfg
[2011/06/06 13:55:30 | 000,584,045 | R— | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:WindowsInstaller$PatchCache$Managed68AB67CA7DA73301B744AA010000001010.1.0services.cfg

< MD5 for: SERVICES.EXE >
[2009/07/13 21:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:WindowsSysNativeservices.exe
[2009/07/13 21:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:Windowswinsxsamd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1services
.exe

< MD5 for: SERVICES.EXE.MUI >
[2009/07/13 22:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:WindowsSysNativeen-USservices.exe.mui
[2009/07/13 22:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:Windowswinsxsamd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468services.exe.mui

< MD5 for: SERVICES.LNK >
[2009/07/14 00:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:ProgramDataMicrosoftWindowsStart MenuProgramsAdministrative Toolsservices.lnk
[2009/07/14 00:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:UsersAll UsersMicrosoftWindowsStart MenuProgramsAdministrative Toolsservices.lnk

< MD5 for: SERVICES.MOF >
[2009/06/10 16:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:WindowsSysNativewbemservices.mof
[2009/06/10 16:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:Windowswinsxsamd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1services
.mof

< MD5 for: SERVICES.MSC >
[2009/07/13 22:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:WindowsSysNativeen-USservices.msc
[2009/06/10 16:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:WindowsSysNativeservices.msc
[2009/07/13 22:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:WindowsSysWOW64en-USservices.msc
[2009/06/10 17:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:WindowsSysWOW64services.msc
[2009/07/13 22:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:Windowswinsxsamd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5bservices.msc
[2009/06/10 16:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:Windowswinsxsamd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8aservices.ms
c
[2009/07/13 22:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:Windowswinsxsx86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25services.msc
[2009/06/10 17:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:Windowswinsxsx86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54services.ms
c

< MD5 for: SERVICES.PTXML >
[2009/07/13 16:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:WindowsSysNativewdiperftrackServices.ptxml
[2009/07/13 16:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:Windowswinsxsamd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1Services
.ptxml

< MD5 for: WINLOGON.ADML >
[2009/07/13 22:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:WindowsPolicyDefinitionsen-USWinLogon.adml
[2009/07/13 22:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:Windowswinsxsamd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 17:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:WindowsPolicyDefinitionsWinLogon.admx
[2009/06/10 17:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:Windowswinsxsamd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424dWinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 09:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:WindowsSysNativewinlogon.exe
[2010/11/20 09:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:Windowswinsxsamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636winlogon.exe
[2009/07/13 21:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:Windowswinsxsamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829cwinlogon.exe
[2009/10/28 03:01:57 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:Windowswinsxsamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8winlogon.exe
[2009/10/28 02:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:Windowswinsxsamd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042adwinlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2010/11/20 09:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:WindowsSysNativeen-USwinlogon.exe.mui
[2010/11/20 09:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:Windowswinsxsamd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7bwinlogon.exe.mui
[2009/07/13 22:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:Windowswinsxsamd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2009/07/13 22:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:WindowsSysNativewbemen-USwinlogon.mfl
[2009/07/13 22:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:Windowswinsxsamd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 16:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:WindowsSysNativewbemwinlogon.mof
[2009/07/13 16:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:Windowswinsxsamd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40fwinlogon.mof

< %SYSTEMDRIVE%*.* >
[2013/01/19 09:59:22 | 000,000,110 | —- | M] () – C:.dir
[2013/05/30 21:24:26 | 529,854,463 | -HS- | M] () – C:hiberfil.sys
[2011/10/22 17:37:57 | 000,000,057 | —- | M] () – C:OnOneErrorLog.txt
[2013/05/30 21:24:26 | 2138,128,383 | -HS- | M] () – C:pagefile.sys
[2012/02/13 22:29:02 | 000,757,220 | —- | M] () – C:shared.log

< %systemroot%Fonts*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:WindowsFontsGlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:WindowsFontsGlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:WindowsFontsGlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:WindowsFontsGlobalUserInterface.CompositeFont

< %systemroot%Fonts*.dll >

< %systemroot%Fonts*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:WindowsFontsdesktop.ini

< %systemroot%Fonts*.ini2 >

< %systemroot%Fonts*.exe >

< %systemroot%system32spoolprtprocsw32x86*.* >

< %systemroot%REPAIR*.bak1 >

< %systemroot%REPAIR*.ini >

< %systemroot%system32*.jpg >

< %systemroot%*.jpg >

< %systemroot%*.png >

< %systemroot%*.scr >

< %systemroot%*._sy >

< %APPDATA%AdobeUpdate*.* >

< %ALLUSERSPROFILE%Favorites*.* >

< %APPDATA%Microsoft*.* >

< %PROGRAMFILES%*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:Program Files (x86)desktop.ini

< %APPDATA%Update*.* >

< %systemroot%*. /mp /s >

< %systemroot%System32config*.sav >

< %PROGRAMFILES%bak. /s >

< %systemroot%system32bak. /s >

< %ALLUSERSPROFILE%Start Menu*.lnk /x >

< %systemroot%system32configsystemprofile*.dat /x >

< %systemroot%*.config >

< %systemroot%system32*.db >

< %PROGRAMFILES%Internet Explorer*.dat >

< %APPDATA%MicrosoftInternet ExplorerQuick Launch*.lnk /x >
[2011/07/12 18:29:38 | 000,000,221 | -HS- | M] () – C:UsersViperAppDataRoamingMicrosoftInternet ExplorerQuick Launchdesktop.ini

< %USERPROFILE%Desktop*.exe >
[2009/11/24 21:07:32 | 000,432,160 | —- | M] (ATTO Technology Inc.) – C:UsersViperDesktopBench32.exe
[2011/04/01 10:04:51 | 004,143,544 | —- | M] (Garmin International) – C:UsersViperDesktopGarminMapUpdater_v2.5.17.exe
[2013/05/30 21:35:57 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:UsersViperDesktopHiJackThis.exe
[2013/05/30 21:35:42 | 000,602,112 | —- | M] (OldTimer Tools) – C:UsersViperDesktopOTL.exe
[2008/11/12 17:10:46 | 000,846,336 | —- | M] () – C:UsersViperDesktoppbsetup.exe

< %PROGRAMFILES%Common Files*.* >

< %systemroot%*.src >

< %systemroot%install*.* >

< %systemroot%system32DLL*.* >

< %systemroot%system32HelpFiles*.* >

< %systemroot%system32rundll*.* >

< %systemroot%winn32*.* >

< %systemroot%Java*.* >

< %systemroot%system32test*.* >

< %systemroot%system32Rundll32*.* >

< %systemroot%AppPatchCustom*.* >

< HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU >

< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 32 bytes -> C:Windows:CM_55bb00cbbcce259ca15e454a9563319582b6a2d0002e5e90e4b542af70016e32
@Alternate Data Stream - 32 bytes -> C:Windows:CM_113c11af91eb50f8d24004326ca1f87468ccbb5d32a9da8d563908c9a202150e
@Alternate Data Stream - 32 bytes -> Windows:CM_55bb00cbbcce259ca15e454a9563319582b6a2d0002e5e90e4b542af70016e32
@Alternate Data Stream - 32 bytes -> Windows:CM_113c11af91eb50f8d24004326ca1f87468ccbb5d32a9da8d563908c9a202150e
@Alternate Data Stream - 144 bytes -> C:ProgramDataTEMP:01C66DD9
@Alternate Data Stream - 132 bytes -> C:ProgramDataTEMP:0B9FB94D

< End of report >

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows 7 Professional
Boot Device: DeviceHarddiskVolume3
Install Date: 7/15/2010 11:25:33 AM
System Uptime: 5/30/2013 9:24:17 PM (0 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | P6X58D PREMIUM
Processor: Intel® Core™ i7 CPU 930 @ 2.80GHz | LGA1366 | 4000/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 112 GiB total, 8.141 GiB free.
D: is FIXED (NTFS) - 373 GiB total, 288.157 GiB free.
E: is FIXED (NTFS) - 932 GiB total, 930.958 GiB free.
F: is FIXED (NTFS) - 932 GiB total, 912.303 GiB free.
G: is CDROM ()
H: is CDROM ()
J: is Removable
K: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}
Description: Photosmart C6100 series
Device ID: ROOTMULTIFUNCTION\0000
Manufacturer: HP
Name: Photosmart C6100 series
PNP Device ID: ROOTMULTIFUNCTION\0000
Service:
.
==== System Restore Points ===================
.
RP414: 4/23/2013 6:12:17 PM - Windows Update
RP415: 4/23/2013 8:59:40 PM - Windows Update
RP416: 4/30/2013 6:40:50 PM - Windows Update
RP417: 5/3/2013 9:52:04 PM - Windows Update
RP418: 5/7/2013 6:30:06 PM - Windows Update
RP419: 5/14/2013 8:16:55 PM - Windows Update
RP420: 5/14/2013 10:52:44 PM - Windows Update
RP421: 5/22/2013 9:42:24 PM - Windows Update
RP422: 5/29/2013 8:47:16 PM - Windows Update
RP423: 5/30/2013 9:39:37 PM - OTL Restore Point - 5/30/2013 9:39:37 PM
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Community Help
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Media Player
Adobe Photoshop CS5.1
Adobe Reader X (10.1.7)
Adobe Shockwave Player 11.6
AIO_CDA_ProductContext
AIO_CDA_Software
AIO_Scan
Apple Application Support
Apple Software Update
Battlefield 3™
Battlefield: Bad Company™ 2
Battlelog Web Plugins
BufferChm
C6100
c6100_Help
ConvertXtoDVD 4.1.9.347
Copy
Destinations
DeviceDiscovery
DivX Setup
DocProc
ESN Sonar
EVGA Precision 2.0.0
Fax
Fraps (remove only)
Futuremark SystemInfo
G15_TeamSpeak (NSIS)
gamelauncher-ps2-live
Geeks3D.com FurMark 1.9.1
GoPro CineForm Studio 1.3.2
GPBaseService2
HP Update
HPPhotoGadget
HPPhotoSmartDiscLabelContent1
HPPhotosmartEssential
HPProductAssistant
HPSSupply
Intel® Rapid Storage Technology
Java 7 Update 21
Java Auto Updater
Java™ 6 Update 37
LightScribe System Software
Malwarebytes Anti-Malware version 1.75.0.1300
MarketResearch
Medal of Honor™ Warfighter
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft_VC80_ATL_x86
Microsoft_VC80_CRT_x86
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFCLOC_x86
Microsoft_VC90_ATL_x86
Microsoft_VC90_CRT_x86
Microsoft_VC90_MFC_x86
Microsoft_VC90_MFCLOC_x86
Mozilla Firefox 21.0 (x86 en-US)
Mozilla Maintenance Service
MSI Afterburner 2.1.0
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2721691)
MSXML 4.0 SP3 Parser (KB2758694)
MSXML 4.0 SP3 Parser (KB973685)
Music Manager
NEC Electronics USB 3.0 Host Controller Driver
Notepad++
NVIDIA 3D Vision Controller Driver
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
OpenAL
Origin
Outlook2007DataExport
PDF Settings CS5
PlanetSide 2
PunkBuster Services
QuickTime
Recover My Files
RescuePRO Deluxe 5.0
RightMark Audio Analyzer 6.0.6
Scan
SCT Device Updater
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
SmartWebPrinting
SolutionCenter
Status
swMSM
System Requirements Lab
System Requirements Lab CYRI
Toolbox
Topaz Adjust 4
Topaz Clean 3
Topaz DeJpeg 4
Topaz DeNoise 5
Topaz Detail 2
Topaz ReMask 2
Topaz Simplify 3
TrayApp
Unigine Heaven Benchmark v2.1
UnloadSupport
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
VC80CRTRedist - 8.0.50727.6195
Visual Studio-Tools für Office System 3.0 Runtime Language Pack - DEU
Visual Studio-Tools für Office System 3.0 Runtime Language Pack - DEU Service Pack 1 (KB949258)
Visual Studio Tools for the Office system 3.0 Runtime
Visual Studio Tools for the Office system 3.0 Runtime Language Pack - DEU
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258)
VSO CopyToDVD 4
WebReg
.
==== Event Viewer Messages From Past Week ========
.
5/30/2013 9:26:31 PM, Error: Service Control Manager [7038] - The nvUpdatusService service was unable to log on as .UpdatusUser with the currently configured password due to the following error: Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).
5/30/2013 9:26:31 PM, Error: Service Control Manager [7000] - The NVIDIA Update Service Daemon service failed to start due to the following error: The service did not start due to a logon failure.
5/30/2013 9:20:29 PM, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
5/30/2013 9:18:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
5/30/2013 9:18:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
5/30/2013 9:18:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
5/30/2013 9:18:22 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
5/30/2013 9:18:21 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
5/30/2013 9:18:16 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
5/30/2013 9:18:15 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD CSC DfsC discache eamonm ehdrv EpfwLWF NetBIOS NetBT nsiproxy Psched rdbss spldr tdx Wanarpv6 WfpLwf
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
5/30/2013 9:18:15 PM, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
.
==== End Of File ===========================

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:44:50 PM, on 5/30/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:WindowsSysWOW64HsMgr.exe
C:Program FilesASUS Xonar D2X AudioCustomappASUSAUDIOCENTER.EXE
C:Program Files (x86)HPDigital Imagingbinhpqtra08.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe
C:Program Files (x86)iTunesiTunesHelper.exe
C:Program Files (x86)HPHP Software UpdatehpwuSchd2.exe
C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe
C:Program Files (x86)Common FilesJavaJava Updatejusched.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDMovieViewer.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDYT.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDMedia.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDWebCam.exe
C:Program Files (x86)HPDigital ImagingbinhpqSTE08.exe
C:Program Files (x86)HPDigital Imagingbinhpqbam08.exe
C:Program Files (x86)HPDigital Imagingbinhpqgpc01.exe
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:UsersViperDesktopHiJackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local;192.168.*.*
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_printenhancer.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:Program Files (x86)DivXDivX Plus Web PlayerieDivXHTML5DivXHTML5.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:PROGRA~2MICROS~1Office14URLREDIR.DLL
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_BHO.dll
O4 - HKLM..Run: [IAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
O4 - HKLM..Run: [NUSB3MON] "C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"
O4 - HKLM..Run: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe"
O4 - HKLM..Run: [APSDaemon] "C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe"
O4 - HKLM..Run: [iTunesHelper] "C:Program Files (x86)iTunesiTunesHelper.exe"
O4 - HKLM..Run: [hpqSRMon] C:Program Files (x86)HPDigital ImagingbinhpqSRMon.exe
O4 - HKLM..Run: [HP Software Update] C:Program Files (x86)HPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [SwitchBoard] C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe
O4 - HKLM..Run: [AdobeCS5.5ServiceManager] "C:Program Files (x86)Common FilesAdobeCS5.5ServiceManagerCS5.5ServiceManager.exe" -launchedbylogin
O4 - HKLM..Run: [DivXMediaServer] C:Program Files (x86)DivXDivX Media ServerDivXMediaServer.exe
O4 - HKLM..Run: [DivXUpdate] "C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe" /CHECKNOW
O4 - HKLM..Run: [QuickTime Task] "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe"
O4 - HKCU..Run: [Google Update] "C:UsersViperAppDataLocalGoogleUpdateGoogleUpdate.exe" /c
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-20..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: CineForm Status.lnk = C:Program Files (x86)CineFormToolsGoProCineFormStatusViewer.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program Files (x86)HPDigital Imagingbinhpqtra08.exe
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:PROGRA~1MICROS~1Office14EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd; to OneNote - res://C:PROGRA~1MICROS~1Office14ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked; Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo…sreqlab_nvd.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program Files (x86)Common FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%system32Alg.exe,-112 (ALG) - Unknown owner - C:WindowsSystem32alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program Files (x86)Common FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:Program Files (x86)CodeMeterRuntimebinCodeMeter.exe
O23 - Service: @%SystemRoot%system32efssvc.dll,-100 (EFS) - Unknown owner - C:WindowsSystem32lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:Program FilesESETESET Smart Securityx86ekrn.exe
O23 - Service: @%systemroot%system32fxsresm.dll,-118 (Fax) - Unknown owner - C:Windowssystem32fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:Program Files (x86)Common FilesFuturemark SharedFuturemark SystemInfoFMSISvc.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program Files (x86)Common FilesLightScribeLSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:WindowsSystem32msdtc.exe (file missing)
O23 - Service: @%SystemRoot%System32netlogon.dll,-102 (Netlogon) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:Windowssystem32nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:Program FilesRaxcoPerfectDiskPDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:Program FilesRaxcoPerfectDiskPDEngine.exe
O23 - Service: PnkBstrA - Unknown owner - C:Windowssystem32PnkBstrA.exe
O23 - Service: @%systemroot%system32psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @%systemroot%system32Locator.exe,-2 (RpcLocator) - Unknown owner - C:Windowssystem32locator.exe (file missing)
O23 - Service: @%SystemRoot%system32samsrv.dll,-1 (SamSs) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @%SystemRoot%system32snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:WindowsSystem32snmptrap.exe (file missing)
O23 - Service: @%systemroot%system32spoolsv.exe,-1 (Spooler) - Unknown owner - C:WindowsSystem32spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%system32sppsvc.exe,-101 (sppsvc) - Unknown owner - C:Windowssystem32sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe
O23 - Service: @%SystemRoot%system32ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:Windowssystem32UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%system32vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @%SystemRoot%system32vds.exe,-100 (vds) - Unknown owner - C:WindowsSystem32vds.exe (file missing)
O23 - Service: @%systemroot%system32vssvc.exe,-102 (VSS) - Unknown owner - C:Windowssystem32vssvc.exe (file missing)
O23 - Service: @%SystemRoot%system32WatWatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:Windowssystem32WatWatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%system32wbengine.exe,-104 (wbengine) - Unknown owner - C:Windowssystem32wbengine.exe (file missing)
O23 - Service: @%Systemroot%system32wbemwmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:Windowssystem32wbemWmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%Windows Media Playerwmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:Program Files (x86)Windows Media Playerwmpnetwk.exe (file missing)

–
End of file - 12044 bytes


.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 21:46:13.74 on Thu 05/30/2013
Internet Explorer: 9.10.9200.16576 BrowserJavaVersion: 10.21.2
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.6135.4187 [GMT -4:00]
.
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
.
============== Running Processes ===============
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32nvvsvc.exe
C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe
C:Windowssystem32svchost.exe -k RPCSS
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k LocalService
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k NetworkService
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
C:Program Files (x86)Common FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesESETESET Smart Securityx86ekrn.exe
C:WindowsSysWOW64svchost.exe -k hpdevmgmt
C:Program Files (x86)Common FilesLightScribeLSSrvc.exe
C:WindowsSystem32svchost.exe -k HPZ12
C:Program FilesRaxcoPerfectDiskPDAgent.exe
C:WindowsSystem32svchost.exe -k HPZ12
C:WindowsSysWOW64PnkBstrA.exe
C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted
C:Windowssystem32svchost.exe -k imgsvc
C:Program Files (x86)CodeMeterRuntimebinCodeMeter.exe
C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe
C:Windowssystem32nvvsvc.exe
C:Windowssystem32taskhost.exe
C:WindowsExplorer.EXE
C:WindowsSysWOW64HsMgr.exe
C:WindowssystemHsMgr64.exe
C:Program FilesLogitech Gaming SoftwareLCore.exe
C:Program FilesESETESET Smart Securityegui.exe
C:Program FilesASUS Xonar D2X AudioCustomappASUSAUDIOCENTER.EXE
C:Program Files (x86)CineFormToolsGoProCineFormStatusViewer.exe
C:Program Files (x86)HPDigital Imagingbinhpqtra08.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe
C:Program Files (x86)iTunesiTunesHelper.exe
C:Program Files (x86)HPHP Software UpdatehpwuSchd2.exe
C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe
C:Program Files (x86)Common FilesJavaJava Updatejusched.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32svchost.exe -k HPService
C:WindowsSystem32svchost.exe -k secsvcs
C:Program FilesNVIDIA CorporationDisplaynvtray.exe
C:Program FilesRaxcoPerfectDiskPDAgentS1.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDPictureViewer.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDMovieViewer.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDClock.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDYT.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDMedia.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDCountdown.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDPop3.exe
C:Program FilesLogitech Gaming SoftwareAppletsLCDWebCam.exe
C:Program FilesiPodbiniPodService.exe
C:WindowsSystem32WUDFHost.exe
C:Program Files (x86)HPDigital ImagingbinhpqSTE08.exe
C:Program Files (x86)HPDigital Imagingbinhpqbam08.exe
C:Program Files (x86)HPDigital Imagingbinhpqgpc01.exe
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:Program FilesWindows Media Playerwmpnetwk.exe
C:WindowsSystem32svchost.exe -k LocalServicePeerNet
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe
C:Windowsnotepad.exe
C:Windowssystem32wbemwmiprvse.exe
C:UsersViperDesktopdds.scr
C:Windowssystem32conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local;192.168.*.*
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_printenhancer.dll
BHO: DivX Plus Web Player HTML5 : {326e768d-4182-46fd-9c16-1449a49795f4} - C:Program Files (x86)DivXDivX Plus Web PlayerieDivXHTML5DivXHTML5.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:Program Files (x86)Javajre7binssv.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:PROGRA~2MICROS~1Office14URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:Program Files (x86)Javajre7binjp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_BHO.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_bho.dll
uRun: [Google Update] "C:UsersViperAppDataLocalGoogleUpdateGoogleUpdate.exe" /c
mRun: [IAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
mRun: [NUSB3MON] "C:Program Files (x86)NEC ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"
mRun: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe"
mRun: [APSDaemon] "C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe"
mRun: [iTunesHelper] "C:Program Files (x86)iTunesiTunesHelper.exe"
mRun: [hpqSRMon] C:Program Files (x86)HPDigital ImagingbinhpqSRMon.exe
mRun: [HP Software Update] C:Program Files (x86)HPHP Software UpdateHPWuSchd2.exe
mRun: [SwitchBoard] C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe
mRun: [AdobeCS5.5ServiceManager] "C:Program Files (x86)Common FilesAdobeCS5.5ServiceManagerCS5.5ServiceManager.exe" -launchedbylogin
mRun: [DivXMediaServer] C:Program Files (x86)DivXDivX Media ServerDivXMediaServer.exe
mRun: [DivXUpdate] "C:Program Files (x86)DivXDivX UpdateDivXUpdate.exe" /CHECKNOW
mRun: [QuickTime Task] "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime
mRun: [SunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe"
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupCINEFO~1.LNK - C:Program Files (x86)CineFormToolsGoProCineFormStatusViewer.exe
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupHPDIGI~1.LNK - C:Program Files (x86)HPDigital Imagingbinhpqtra08.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xport; to Microsoft Excel - C:PROGRA~1MICROS~1Office14EXCEL.EXE/3000
IE: Se&nd; to OneNote - C:PROGRA~1MICROS~1Office14ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:Program Files (x86)Microsoft OfficeOffice14ONBttnIELinkedNotes.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:Program Files (x86)HPDigital ImagingSmart Web Printinghpswp_BHO.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program Files (x86)Common Filesmicrosoft sharedOFFICE14MSOXMLMF.DLL
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:Program Files (x86)Common FilesLightScribeLSRunOnce.exe"
mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:Windowssystem32cmd.exe /D /C start C:Windowssystem32ie4uinit.exe -ClearIconCache
BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre7binssv.dll
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:PROGRA~1MICROS~1Office14URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre7binjp2ssv.dll
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [Cmaudio8788] C:Windowssyswow64RunDll32.exe C:WindowsSyswow64cmicnfgp.dll,CMICtrlWnd
mRun-x64: [Cmaudio8788GX] C:Windowssyswow64HsMgr.exe Envoke
mRun-x64: [Cmaudio8788GX64] C:WindowssystemHsMgr64.exe Envoke
mRun-x64: [AdobeAAMUpdater-1.0] "C:Program Files (x86)Common FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe"
mRun-x64: [Launch LCore] C:Program FilesLogitech Gaming SoftwareLCore.exe /minimized
mRun-x64: [egui] "C:Program FilesESETESET Smart Securityegui.exe" /hide /waitservice
.
================= FIREFOX ===================
.
FF - ProfilePath - C:UsersViperAppDataRoamingMozillaFirefoxProfiles\0deowket.default
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:PROGRA~2MICROS~1Office14NPAUTHZ.DLL
FF - plugin: C:PROGRA~2MICROS~1Office14NPSPWRAP.DLL
FF - plugin: C:Program Files (x86)AdobeReader 10.0ReaderAIRnppdf32.dll
FF - plugin: C:Program Files (x86)Battlelog Web Plugins1.138.0npesnlaunch.dll
FF - plugin: C:Program Files (x86)Battlelog Web Plugins2.1.2npesnlaunch.dll
FF - plugin: C:Program Files (x86)Battlelog Web PluginsSonar\0.70.4npesnsonar.dll
FF - plugin: C:Program Files (x86)Common FilesAdobeOOBEPDAppCCMUtilitiesnpAdobeAAMDetect32.dll
FF - plugin: C:Program Files (x86)Common FilesAdobeOOBEPDAppCCMUtilitiesnpAdobeAAMDetect64.dll
FF - plugin: C:Program Files (x86)DivXDivX OVS Helpernpovshelper.dll
FF - plugin: C:Program Files (x86)DivXDivX Plus Web Playernpdivx32.dll
FF - plugin: C:Program Files (x86)Javajre7binplugin2npjp2.dll
FF - plugin: C:Program Files (x86)Microsoft Silverlight5.1.20125.0npctrlui.dll
FF - plugin: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dv.dll
FF - plugin: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dvstreaming.dll
FF - plugin: C:UsersViperAppDataLocalGoogleUpdate1.3.21.145npGoogleUpdate3.dll
FF - plugin: C:UsersViperAppDataRoamingMozillaFirefoxProfiles\0deowket.defaultextensions{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}pluginsnpGarmin.dll
FF - plugin: C:UsersViperAppDataRoamingMozillaFirefoxProfiles\[removed]
viceDetection.dll
FF - plugin: C:WindowsSysWOW64MacromedFlashNPSWF32_11_7_700_202.dll
.
============= SERVICES / DRIVERS ===============
.
R0 epfwwfp;epfwwfp;C:WindowsSystem32driversepfwwfp.sys [2013-2-20 58416]
R1 eamonm;eamonm;C:WindowsSystem32driverseamonm.sys [2013-2-20 213416]
R1 EpfwLWF;Epfw NDIS LightWeight Filter;C:WindowsSystem32driversEpfwLWF.sys [2013-1-10 59440]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe [2013-5-10 65640]
R2 CodeMeter.exe;CodeMeter Runtime Server;C:Program Files (x86)CodeMeterRuntimebinCodeMeter.exe [2012-8-26 2568120]
R2 cpuz135;cpuz135;C:WindowsSystem32driverscpuz135_x64.sys [2010-12-30 21992]
R2 ekrn;ESET Service;C:Program FilesESETESET Smart Securityx86ekrn.exe [2013-3-21 1341664]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2010-7-16 13336]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:Program Files (x86)NVIDIA Corporation3D VisionnvSCPAPISvr.exe [2013-3-14 383264]
R3 cmudaxp;ASUS Xonar D2X Audio Interface;C:WindowsSystem32driverscmudaxp.sys [2010-7-18 1257472]
R3 LADF_CaptureOnly;LADF Capture Filter Driver;C:WindowsSystem32driversladfGSCamd64.sys [2011-4-11 410184]
R3 LADF_RenderOnly;LADF Render Filter Driver;C:WindowsSystem32driversladfGSRamd64.sys [2011-4-11 341832]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;C:WindowsSystem32driversLGBusEnum.sys [2009-11-23 22408]
R3 LGPBTDD;LGPBTDD.sys Display Driver;C:WindowsSystem32driversLGPBTDD.sys [2009-7-1 30728]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;C:WindowsSystem32driversLGVirHid.sys [2009-11-23 16008]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:WindowsSystem32driversnusb3hub.sys [2010-1-22 77824]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:WindowsSystem32driversnusb3xhc.sys [2010-1-22 180224]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:WindowsSystem32driversnvhda64v.sys [2013-4-14 194488]
R3 SCTDriverV1011;SCTDriverV1011;C:WindowsSystem32driversSCTDriverV1011.sys [2010-11-9 261712]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:WindowsSystem32driversyk62x64.sys [2009-6-10 389120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]
S2 nvUpdatusService;NVIDIA Update Service Daemon;C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe [2012-2-21 1266464]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe [2012-4-4 256904]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:WindowsSystem32driversssadadb.sys [2011-5-13 36328]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;C:Program Files (x86)Common FilesFuturemark SharedFuturemark SystemInfoFMSISvc.exe [2011-3-15 129440]
S3 LADF_DHP2;G35 DHP2 Filter Driver;C:WindowsSystem32driversladfDHP2amd64.sys [2010-9-29 62168]
S3 LADF_SBVM;G35 SBVM Filter Driver;C:WindowsSystem32driversladfSBVMamd64.sys [2010-9-29 377176]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe [2012-4-25 117144]
S3 ose64;Office 64 Source Engine;C:Program FilesCommon FilesMicrosoft SharedSource EngineOSE.EXE [2010-1-9 174440]
S3 osppsvc;Office Software Protection Platform;C:Program FilesCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE [2010-1-9 4925184]
S3 SCTUSB;SCT USB Driver;C:WindowsSystem32driverssctusb.sys [2009-9-5 23176]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:WindowsSystem32driversssadbus.sys [2011-5-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:WindowsSystem32driversssadmdfl.sys [2011-5-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:WindowsSystem32driversssadmdm.sys [2011-5-13 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:WindowsSystem32driversssadserd.sys [2011-5-13 146920]
S3 StorSvc;Storage Service;C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]
S3 SwitchBoard;Adobe SwitchBoard;C:Program Files (x86)Common FilesAdobeSwitchBoardSwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2011-3-8 59392]
S3 WatAdminSvc;Windows Activation Technologies Service;C:WindowsSystem32WatWatAdminSvc.exe [2010-7-16 1255736]
S3 WsAudio_DeviceS(1);WsAudio_DeviceS(1);C:WindowsSystem32driversWsAudio_Device
S(1).sys [2011-6-20 29288]
S3 WsAudio_DeviceS(2);WsAudio_DeviceS(2);C:WindowsSystem32driversWsAudio_Device
S(2).sys [2011-6-20 29288]
S3 WsAudio_DeviceS(3);WsAudio_DeviceS(3);C:WindowsSystem32driversWsAudio_Device
S(3).sys [2011-6-20 29288]
S3 WsAudio_DeviceS(4);WsAudio_DeviceS(4);C:WindowsSystem32driversWsAudio_Device
S(4).sys [2011-6-20 29288]
S3 WsAudio_DeviceS(5);WsAudio_DeviceS(5);C:WindowsSystem32driversWsAudio_Device
S(5).sys [2011-6-20 29288]
.
=============== Created Last 30 ================
.
2013-05-31 01:35:44 76232 —-a-w- C:PROGRA~3MicrosoftWindows DefenderDefinition Updates{675D4DC0-E7E4-447B-8F45-B1CB83E431FA}offreg.dll
2013-05-30 00:47:20 9460464 —-a-w- C:PROGRA~3MicrosoftWindows DefenderDefinition Updates{675D4DC0-E7E4-447B-8F45-B1CB83E431FA}mpengine.dll
2013-05-15 02:52:55 2706432 —-a-w- C:WindowsSystem32mshtml.tlb
2013-05-15 00:17:38 983400 —-a-w- C:WindowsSystem32driversdxgkrnl.sys
.
==================== Find3M ====================
.
2013-05-14 21:11:06 71048 —-a-w- C:WindowsSysWow64FlashPlayerCPLApp.cpl
2013-05-14 21:11:06 692104 —-a-w- C:WindowsSysWow64FlashPlayerApp.exe
2013-05-02 06:06:08 278800 ——w- C:WindowsSystem32MpSigStub.exe
2013-04-13 05:49:23 135168 —-a-w- C:WindowsapppatchAppPatch64AcXtrnal.dll
2013-04-13 05:49:19 350208 —-a-w- C:WindowsapppatchAppPatch64AcLayers.dll
2013-04-13 05:49:19 308736 —-a-w- C:WindowsapppatchAppPatch64AcGenral.dll
2013-04-13 05:49:19 111104 —-a-w- C:WindowsapppatchAppPatch64acspecfc.dll
2013-04-13 04:45:16 474624 —-a-w- C:WindowsapppatchAcSpecfc.dll
2013-04-13 04:45:15 2176512 —-a-w- C:WindowsapppatchAcGenral.dll
2013-04-12 14:45:08 1656680 —-a-w- C:WindowsSystem32driversntfs.sys
2013-04-10 06:01:54 265064 —-a-w- C:WindowsSystem32driversdxgmms1.sys
2013-04-10 03:30:50 3153920 —-a-w- C:WindowsSystem32win32k.sys
2013-04-05 06:52:14 2242048 —-a-w- C:WindowsSystem32wininet.dll
2013-04-05 06:50:36 3958784 —-a-w- C:WindowsSystem32jscript9.dll
2013-04-05 06:50:31 67072 —-a-w- C:WindowsSystem32iesetup.dll
2013-04-05 06:50:31 136704 —-a-w- C:WindowsSystem32iesysprep.dll
2013-04-05 05:28:24 1767424 —-a-w- C:WindowsSysWow64wininet.dll
2013-04-05 05:26:26 2877440 —-a-w- C:WindowsSysWow64jscript9.dll
2013-04-05 05:26:21 61440 —-a-w- C:WindowsSysWow64iesetup.dll
2013-04-05 05:26:21 109056 —-a-w- C:WindowsSysWow64iesysprep.dll
2013-04-05 04:29:45 2706432 —-a-w- C:WindowsSysWow64mshtml.tlb
2013-04-05 03:51:11 89600 —-a-w- C:WindowsSystem32RegisterIEPKEYs.exe
2013-04-05 03:38:25 71680 —-a-w- C:WindowsSysWow64RegisterIEPKEYs.exe
2013-04-04 18:50:32 25928 —-a-w- C:WindowsSystem32driversmbam.sys
2013-04-04 09:35:05 95648 —-a-w- C:WindowsSysWow64WindowsAccessBridge-32.dll
2013-03-19 06:04:06 5550424 —-a-w- C:WindowsSystem32ntoskrnl.exe
2013-03-19 05:53:58 48640 —-a-w- C:WindowsSystem32wwanprotdim.dll
2013-03-19 05:53:58 230400 —-a-w- C:WindowsSystem32wwansvc.dll
2013-03-19 05:46:56 43520 —-a-w- C:WindowsSystem32csrsrv.dll
2013-03-19 05:04:13 3968856 —-a-w- C:WindowsSysWow64ntkrnlpa.exe
2013-03-19 05:04:10 3913560 —-a-w- C:WindowsSysWow64ntoskrnl.exe
2013-03-19 04:47:50 6656 —-a-w- C:WindowsSysWow64apisetschema.dll
2013-03-19 03:06:33 112640 —-a-w- C:WindowsSystem32smss.exe
2013-03-15 04:16:18 3477280 —-a-w- C:WindowsSystem32nvsvc64.dll
2013-03-15 04:16:17 6398240 —-a-w- C:WindowsSystem32nvcpl.dll
2013-03-15 04:16:10 877856 —-a-w- C:WindowsSystem32nvvsvc.exe
2013-03-15 04:16:10 63776 —-a-w- C:WindowsSystem32nvshext.dll
2013-03-15 04:16:10 237856 —-a-w- C:WindowsSystem32nvmctray.dll
2013-03-15 02:07:52 559904 —-a-w- C:WindowsSysWow64nvStreaming.exe
2013-03-13 16:24:01 3065455 —-a-w- C:WindowsSystem32nvcoproc.bin
2013-03-11 17:11:44 861088 —-a-w- C:WindowsSysWow64npdeployJava1.dll
2013-03-11 17:11:44 782240 —-a-w- C:WindowsSysWow64deployJava1.dll
.
============= FINISH: 21:46:22.65 ===============

Hello and

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:

• Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
• Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
• Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
• Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
• Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
• Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
• Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
• Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!

Please give me a bit to work through the logs you've provided. I'd also like to ask you for one more scan please.




Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.

• Download TDSSKiller and save it to your Desktop.
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  🖼Click to load external image (Posted Image)
  
  
• If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.
  
  
  🖼Click to load external image (Posted Image)
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  🖼Click to load external image (Posted Image)
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  🖼Click to load external image (Posted Image)
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Since you had unauthorized charges on your bank account you should follow the precautions listed below. While we may or may not find an infection on this machine, it's possible you may have used another computer that may have been compromised (such as a computer at work or a friend's house for example). To minimize your risk, I'd go ahead and follow these instructions to minimize your exposure to further risk:

1. Call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts or change all your account numbers.

2. From a known clean computer, change ALL your on-line passwords for email, banks, financial accounts, PayPal, eBay, on-line companies, any on-line forums or groups you belong to.

Do NOT change passwords or do any transactions while using the possibly infected computer until we determine it is clear because the attacker could get the new passwords and transaction information.

Please read the following for more information:
How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

Hi patndoris. The ComboFix txt as needed below. Thank you for the info on HD with too little space. I am planning on removing or moving over data to other drives after we are done here. I have not seen anymore flickering lately.

Thank You & sorry for the delay.


ComboFix 13-06-06.04 - Viper 06/06/2013 20:38:45.1.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.6135.4397 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
ADS - Windows: deleted 64 bytes in 2 streams.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Recover Keys
c:\program files (x86)\Recover Keys\RecoverKeys.exe.backup
c:\users\Viper\AppData\Local\assembly\tmp
c:\users\Viper\AppData\Roaming\inst.exe
c:\users\Viper\AppData\Roaming\vso_ts_preview.xml
c:\windows\SysWow64\frapsvid.dll
.
.
((((((((((((((((((((((((( Files Created from 2013-05-07 to 2013-06-07 )))))))))))))))))))))))))))))))
.
.
2013-06-07 00:41 . 2013-06-07 00:41 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-07 00:41 . 2013-06-07 00:41 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-06-05 00:48 . 2013-05-13 06:37 9460464 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{63272547-EB28-4F0F-8223-A06B3A30AB8C}\mpengine.dll
2013-05-15 00:17 . 2013-04-10 06:01 265064 —-a-w- c:\windows\system32\drivers\dxgmms1.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-15 02:54 . 2010-07-18 04:22 75016696 —-a-w- c:\windows\system32\MRT.exe
2013-05-14 21:11 . 2012-04-04 18:39 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-14 21:11 . 2011-05-16 22:56 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-02 06:06 . 2010-07-16 03:19 278800 ——w- c:\windows\system32\MpSigStub.exe
2013-05-01 00:19 . 2013-05-01 00:19 2876528 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-05-01 00:19 . 2013-05-01 00:19 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-05-01 00:18 . 2013-05-01 00:18 539984 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-04-13 05:49 . 2013-05-15 00:17 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 00:17 350208 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 00:17 308736 —-a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 00:17 111104 —-a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 00:17 474624 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 00:17 2176512 —-a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-23 22:12 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-05 03:26 . 2013-04-05 03:26 226304 —-a-w- c:\windows\system32\elshyph.dll
2013-04-05 03:26 . 2013-04-05 03:26 185344 —-a-w- c:\windows\SysWow64\elshyph.dll
2013-04-05 03:26 . 2013-04-05 03:26 158720 —-a-w- c:\windows\SysWow64\msls31.dll
2013-04-05 03:26 . 2013-04-05 03:26 1054720 —-a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-05 03:26 . 2013-04-05 03:26 97280 —-a-w- c:\windows\system32\mshtmled.dll
2013-04-05 03:26 . 2013-04-05 03:26 92160 —-a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-05 03:26 . 2013-04-05 03:26 905728 —-a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-05 03:26 . 2013-04-05 03:26 81408 —-a-w- c:\windows\system32\icardie.dll
2013-04-05 03:26 . 2013-04-05 03:26 77312 —-a-w- c:\windows\system32\tdc.ocx
2013-04-05 03:26 . 2013-04-05 03:26 762368 —-a-w- c:\windows\system32\ieapfltr.dll
2013-04-05 03:26 . 2013-04-05 03:26 73728 —-a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-05 03:26 . 2013-04-05 03:26 719360 —-a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-05 03:26 . 2013-04-05 03:26 62976 —-a-w- c:\windows\system32\pngfilt.dll
2013-04-05 03:26 . 2013-04-05 03:26 61952 —-a-w- c:\windows\SysWow64\tdc.ocx
2013-04-05 03:26 . 2013-04-05 03:26 599552 —-a-w- c:\windows\system32\vbscript.dll
2013-04-05 03:26 . 2013-04-05 03:26 523264 —-a-w- c:\windows\SysWow64\vbscript.dll
2013-04-05 03:26 . 2013-04-05 03:26 52224 —-a-w- c:\windows\system32\msfeedsbs.dll
2013-04-05 03:26 . 2013-04-05 03:26 51200 —-a-w- c:\windows\system32\imgutil.dll
2013-04-05 03:26 . 2013-04-05 03:26 48640 —-a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-05 03:26 . 2013-04-05 03:26 48640 —-a-w- c:\windows\system32\mshtmler.dll
2013-04-05 03:26 . 2013-04-05 03:26 452096 —-a-w- c:\windows\system32\dxtmsft.dll
2013-04-05 03:26 . 2013-04-05 03:26 441856 —-a-w- c:\windows\system32\html.iec
2013-04-05 03:26 . 2013-04-05 03:26 38400 —-a-w- c:\windows\SysWow64\imgutil.dll
2013-04-05 03:26 . 2013-04-05 03:26 361984 —-a-w- c:\windows\SysWow64\html.iec
2013-04-05 03:26 . 2013-04-05 03:26 281600 —-a-w- c:\windows\system32\dxtrans.dll
2013-04-05 03:26 . 2013-04-05 03:26 27648 —-a-w- c:\windows\system32\licmgr10.dll
2013-04-05 03:26 . 2013-04-05 03:26 270848 —-a-w- c:\windows\system32\iedkcs32.dll
2013-04-05 03:26 . 2013-04-05 03:26 247296 —-a-w- c:\windows\system32\webcheck.dll
2013-04-05 03:26 . 2013-04-05 03:26 235008 —-a-w- c:\windows\system32\url.dll
2013-04-05 03:26 . 2013-04-05 03:26 23040 —-a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-05 03:26 . 2013-04-05 03:26 216064 —-a-w- c:\windows\system32\msls31.dll
2013-04-05 03:26 . 2013-04-05 03:26 197120 —-a-w- c:\windows\system32\msrating.dll
2013-04-05 03:26 . 2013-04-05 03:26 173568 —-a-w- c:\windows\system32\ieUnatt.exe
2013-04-05 03:26 . 2013-04-05 03:26 167424 —-a-w- c:\windows\system32\iexpress.exe
2013-04-05 03:26 . 2013-04-05 03:26 1509376 —-a-w- c:\windows\system32\inetcpl.cpl
2013-04-05 03:26 . 2013-04-05 03:26 150528 —-a-w- c:\windows\SysWow64\iexpress.exe
2013-04-05 03:26 . 2013-04-05 03:26 149504 —-a-w- c:\windows\system32\occache.dll
2013-04-05 03:26 . 2013-04-05 03:26 144896 —-a-w- c:\windows\system32\wextract.exe
2013-04-05 03:26 . 2013-04-05 03:26 1441280 —-a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-05 03:26 . 2013-04-05 03:26 1400416 —-a-w- c:\windows\system32\ieapfltr.dat
2013-04-05 03:26 . 2013-04-05 03:26 138752 —-a-w- c:\windows\SysWow64\wextract.exe
2013-04-05 03:26 . 2013-04-05 03:26 13824 —-a-w- c:\windows\system32\mshta.exe
2013-04-05 03:26 . 2013-04-05 03:26 137216 —-a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-05 03:26 . 2013-04-05 03:26 136192 —-a-w- c:\windows\system32\iepeers.dll
2013-04-05 03:26 . 2013-04-05 03:26 135680 —-a-w- c:\windows\system32\IEAdvpack.dll
2013-04-05 03:26 . 2013-04-05 03:26 12800 —-a-w- c:\windows\SysWow64\mshta.exe
2013-04-05 03:26 . 2013-04-05 03:26 12800 —-a-w- c:\windows\system32\msfeedssync.exe
2013-04-05 03:26 . 2013-04-05 03:26 110592 —-a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-05 03:26 . 2013-04-05 03:26 102912 —-a-w- c:\windows\system32\inseng.dll
2013-04-04 18:50 . 2010-07-17 06:48 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-04-04 09:35 . 2013-03-11 17:11 95648 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-19 06:04 . 2013-04-10 22:37 5550424 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 22:37 43520 —-a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 22:37 3968856 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 22:37 3913560 —-a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 22:37 6656 —-a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 22:37 112640 —-a-w- c:\windows\system32\smss.exe
2013-03-15 05:53 . 2013-04-14 13:23 968408 —-a-w- c:\windows\SysWow64\nvumdshim.dll
2013-03-15 05:53 . 2013-04-14 13:23 9414456 —-a-w- c:\windows\system32\nvcuda.dll
2013-03-15 05:53 . 2013-04-14 13:23 7959000 —-a-w- c:\windows\SysWow64\nvcuda.dll
2013-03-15 05:53 . 2013-04-14 13:23 7573816 —-a-w- c:\windows\system32\nvopencl.dll
2013-03-15 05:53 . 2013-04-14 13:23 6271872 —-a-w- c:\windows\SysWow64\nvopencl.dll
2013-03-15 05:53 . 2013-04-14 13:23 2913056 —-a-w- c:\windows\system32\nvcuvid.dll
2013-03-15 05:53 . 2013-04-14 13:23 2728736 —-a-w- c:\windows\SysWow64\nvcuvid.dll
2013-03-15 05:53 . 2013-04-14 13:23 26956576 —-a-w- c:\windows\system32\nvoglv64.dll
2013-03-15 05:53 . 2013-04-14 13:23 250504 —-a-w- c:\windows\system32\nvinitx.dll
2013-03-15 05:53 . 2013-04-14 13:23 2355488 —-a-w- c:\windows\system32\nvcuvenc.dll
2013-03-15 05:53 . 2013-04-14 13:23 20542752 —-a-w- c:\windows\SysWow64\nvoglv32.dll
2013-03-15 05:53 . 2013-04-14 13:23 205184 —-a-w- c:\windows\SysWow64\nvinit.dll
2013-03-15 05:53 . 2013-04-14 13:23 1995552 —-a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-03-15 05:53 . 2013-04-14 13:23 1807136 —-a-w- c:\windows\system32\nvdispco6431422.dll
2013-03-15 05:53 . 2013-04-14 13:23 17990800 —-a-w- c:\windows\system32\nvd3dumx.dll
2013-03-15 05:53 . 2013-04-14 13:23 15508512 —-a-w- c:\windows\system32\nvwgf2umx.dll
2013-03-15 05:53 . 2013-04-14 13:23 1510176 —-a-w- c:\windows\system32\nvdispgenco6431422.dll
2013-03-15 05:53 . 2013-04-14 13:23 15042928 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2013-03-15 05:53 . 2013-04-14 13:23 13088000 —-a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-03-15 05:53 . 2013-04-14 13:23 11048736 —-a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-03-15 05:53 . 2013-04-14 13:23 2539128 —-a-w- c:\windows\SysWow64\nvapi.dll
2013-03-15 05:53 . 2013-04-14 13:23 25256736 —-a-w- c:\windows\system32\nvcompiler.dll
2013-03-15 05:53 . 2013-04-14 13:23 17560352 —-a-w- c:\windows\SysWow64\nvcompiler.dll
2013-03-15 05:53 . 2012-10-11 02:23 2864144 —-a-w- c:\windows\system32\nvapi64.dll
2013-03-15 05:53 . 2012-10-11 02:23 1118776 —-a-w- c:\windows\system32\nvumdshimx.dll
2013-03-15 04:16 . 2011-01-08 00:49 3477280 —-a-w- c:\windows\system32\nvsvc64.dll
2013-03-15 04:16 . 2011-01-08 00:49 6398240 —-a-w- c:\windows\system32\nvcpl.dll
2013-03-15 04:16 . 2011-01-08 00:48 877856 —-a-w- c:\windows\system32\nvvsvc.exe
2013-03-15 04:16 . 2011-01-08 00:48 63776 —-a-w- c:\windows\system32\nvshext.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-12 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-01-30 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
CineForm Status.lnk - c:\program files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe [2012-10-28 152064]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfDHP2amd64.sys [x]
R3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfSBVMamd64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SCTUSB;SCT USB Driver;c:\windows\system32\DRIVERS\sctusb.sys;c:\windows\SYSNATIVE\DRIVERS\sctusb.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1);c:\windows\system32\drivers\WsAudio_DeviceS(1).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(1).sys [x]
R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2);c:\windows\system32\drivers\WsAudio_DeviceS(2).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(2).sys [x]
R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3);c:\windows\system32\drivers\WsAudio_DeviceS(3).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(3).sys [x]
R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4);c:\windows\system32\drivers\WsAudio_DeviceS(4).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(4).sys [x]
R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5);c:\windows\system32\drivers\WsAudio_DeviceS(5).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(5).sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 CodeMeter.exe;CodeMeter Runtime Server;c:\program files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe;c:\program files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [x]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys;c:\windows\SYSNATIVE\drivers\cpuz135_x64.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 cmudaxp;ASUS Xonar D2X Audio Interface;c:\windows\system32\drivers\cmudaxp.sys;c:\windows\SYSNATIVE\drivers\cmudaxp.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
S3 SCTDriverV1011;SCTDriverV1011;c:\windows\system32\drivers\SCTDriverV1011.sys;c:\windows\SYSNATIVE\drivers\SCTDriverV1011.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 16:11 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 21:11]
.
2013-05-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000Core.job
- c:\users\Viper\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-21 02:10]
.
2013-06-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000UA.job
- c:\users\Viper\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-21 02:10]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio8788"="c:\windows\Syswow64\cmicnfgp.dll" [2009-10-30 8151040]
"Cmaudio8788GX"="c:\windows\syswow64\HsMgr.exe" [2008-07-11 200704]
"Cmaudio8788GX64"="c:\windows\system\HsMgr64.exe" [2008-07-11 282112]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;192.168.*.*
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{284F9DC2-116B-4471-AA57-3A19EF1497C0}: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Viper\AppData\Roaming\Mozilla\Firefox\Profiles\0deowket.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2012-04-04 21:59; [removed]; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - ORPHANS REMOVED - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-06-06 20:42:31
ComboFix-quarantined-files.txt 2013-06-07 00:42
.
Pre-Run: 8,444,456,960 bytes free
Post-Run: 9,203,884,032 bytes free
.
- - End Of File - - 528ABAC8084E2A1DF22C7538EFEA68DD

Here is the CFScript.txt


ComboFix 13-06-07.03 - Viper 06/07/2013 21:01:39.2.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.6135.4523 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\users\Viper\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET Personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
ADS - Windows: deleted 64 bytes in 2 streams.
.
((((((((((((((((((((((((( Files Created from 2013-05-08 to 2013-06-08 )))))))))))))))))))))))))))))))
.
.
2013-06-08 01:03 . 2013-06-08 01:03 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-08 01:03 . 2013-06-08 01:03 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-06-08 00:26 . 2013-05-13 06:37 9460464 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{493500C1-2703-4447-A35D-CE5ECF5C24C8}\mpengine.dll
2013-05-15 00:17 . 2013-04-10 06:01 265064 —-a-w- c:\windows\system32\drivers\dxgmms1.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-15 02:54 . 2010-07-18 04:22 75016696 —-a-w- c:\windows\system32\MRT.exe
2013-05-14 21:11 . 2012-04-04 18:39 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-14 21:11 . 2011-05-16 22:56 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-02 06:06 . 2010-07-16 03:19 278800 ——w- c:\windows\system32\MpSigStub.exe
2013-05-01 00:19 . 2013-05-01 00:19 2876528 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-05-01 00:19 . 2013-05-01 00:19 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-05-01 00:18 . 2013-05-01 00:18 539984 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-04-13 05:49 . 2013-05-15 00:17 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 00:17 350208 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 00:17 308736 —-a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 00:17 111104 —-a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 00:17 474624 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 00:17 2176512 —-a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-23 22:12 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-05 03:26 . 2013-04-05 03:26 226304 —-a-w- c:\windows\system32\elshyph.dll
2013-04-05 03:26 . 2013-04-05 03:26 185344 —-a-w- c:\windows\SysWow64\elshyph.dll
2013-04-05 03:26 . 2013-04-05 03:26 158720 —-a-w- c:\windows\SysWow64\msls31.dll
2013-04-05 03:26 . 2013-04-05 03:26 1054720 —-a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-05 03:26 . 2013-04-05 03:26 97280 —-a-w- c:\windows\system32\mshtmled.dll
2013-04-05 03:26 . 2013-04-05 03:26 92160 —-a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-05 03:26 . 2013-04-05 03:26 905728 —-a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-05 03:26 . 2013-04-05 03:26 81408 —-a-w- c:\windows\system32\icardie.dll
2013-04-05 03:26 . 2013-04-05 03:26 77312 —-a-w- c:\windows\system32\tdc.ocx
2013-04-05 03:26 . 2013-04-05 03:26 762368 —-a-w- c:\windows\system32\ieapfltr.dll
2013-04-05 03:26 . 2013-04-05 03:26 73728 —-a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-05 03:26 . 2013-04-05 03:26 719360 —-a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-05 03:26 . 2013-04-05 03:26 62976 —-a-w- c:\windows\system32\pngfilt.dll
2013-04-05 03:26 . 2013-04-05 03:26 61952 —-a-w- c:\windows\SysWow64\tdc.ocx
2013-04-05 03:26 . 2013-04-05 03:26 599552 —-a-w- c:\windows\system32\vbscript.dll
2013-04-05 03:26 . 2013-04-05 03:26 523264 —-a-w- c:\windows\SysWow64\vbscript.dll
2013-04-05 03:26 . 2013-04-05 03:26 52224 —-a-w- c:\windows\system32\msfeedsbs.dll
2013-04-05 03:26 . 2013-04-05 03:26 51200 —-a-w- c:\windows\system32\imgutil.dll
2013-04-05 03:26 . 2013-04-05 03:26 48640 —-a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-05 03:26 . 2013-04-05 03:26 48640 —-a-w- c:\windows\system32\mshtmler.dll
2013-04-05 03:26 . 2013-04-05 03:26 452096 —-a-w- c:\windows\system32\dxtmsft.dll
2013-04-05 03:26 . 2013-04-05 03:26 441856 —-a-w- c:\windows\system32\html.iec
2013-04-05 03:26 . 2013-04-05 03:26 38400 —-a-w- c:\windows\SysWow64\imgutil.dll
2013-04-05 03:26 . 2013-04-05 03:26 361984 —-a-w- c:\windows\SysWow64\html.iec
2013-04-05 03:26 . 2013-04-05 03:26 281600 —-a-w- c:\windows\system32\dxtrans.dll
2013-04-05 03:26 . 2013-04-05 03:26 27648 —-a-w- c:\windows\system32\licmgr10.dll
2013-04-05 03:26 . 2013-04-05 03:26 270848 —-a-w- c:\windows\system32\iedkcs32.dll
2013-04-05 03:26 . 2013-04-05 03:26 247296 —-a-w- c:\windows\system32\webcheck.dll
2013-04-05 03:26 . 2013-04-05 03:26 235008 —-a-w- c:\windows\system32\url.dll
2013-04-05 03:26 . 2013-04-05 03:26 23040 —-a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-05 03:26 . 2013-04-05 03:26 216064 —-a-w- c:\windows\system32\msls31.dll
2013-04-05 03:26 . 2013-04-05 03:26 197120 —-a-w- c:\windows\system32\msrating.dll
2013-04-05 03:26 . 2013-04-05 03:26 173568 —-a-w- c:\windows\system32\ieUnatt.exe
2013-04-05 03:26 . 2013-04-05 03:26 167424 —-a-w- c:\windows\system32\iexpress.exe
2013-04-05 03:26 . 2013-04-05 03:26 1509376 —-a-w- c:\windows\system32\inetcpl.cpl
2013-04-05 03:26 . 2013-04-05 03:26 150528 —-a-w- c:\windows\SysWow64\iexpress.exe
2013-04-05 03:26 . 2013-04-05 03:26 149504 —-a-w- c:\windows\system32\occache.dll
2013-04-05 03:26 . 2013-04-05 03:26 144896 —-a-w- c:\windows\system32\wextract.exe
2013-04-05 03:26 . 2013-04-05 03:26 1441280 —-a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-05 03:26 . 2013-04-05 03:26 1400416 —-a-w- c:\windows\system32\ieapfltr.dat
2013-04-05 03:26 . 2013-04-05 03:26 138752 —-a-w- c:\windows\SysWow64\wextract.exe
2013-04-05 03:26 . 2013-04-05 03:26 13824 —-a-w- c:\windows\system32\mshta.exe
2013-04-05 03:26 . 2013-04-05 03:26 137216 —-a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-05 03:26 . 2013-04-05 03:26 136192 —-a-w- c:\windows\system32\iepeers.dll
2013-04-05 03:26 . 2013-04-05 03:26 135680 —-a-w- c:\windows\system32\IEAdvpack.dll
2013-04-05 03:26 . 2013-04-05 03:26 12800 —-a-w- c:\windows\SysWow64\mshta.exe
2013-04-05 03:26 . 2013-04-05 03:26 12800 —-a-w- c:\windows\system32\msfeedssync.exe
2013-04-05 03:26 . 2013-04-05 03:26 110592 —-a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-05 03:26 . 2013-04-05 03:26 102912 —-a-w- c:\windows\system32\inseng.dll
2013-04-04 18:50 . 2010-07-17 06:48 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-04-04 09:35 . 2013-03-11 17:11 95648 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-19 06:04 . 2013-04-10 22:37 5550424 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 22:37 43520 —-a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 22:37 3968856 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 22:37 3913560 —-a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 22:37 6656 —-a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 22:37 112640 —-a-w- c:\windows\system32\smss.exe
2013-03-15 05:53 . 2013-04-14 13:23 968408 —-a-w- c:\windows\SysWow64\nvumdshim.dll
2013-03-15 05:53 . 2013-04-14 13:23 9414456 —-a-w- c:\windows\system32\nvcuda.dll
2013-03-15 05:53 . 2013-04-14 13:23 7959000 —-a-w- c:\windows\SysWow64\nvcuda.dll
2013-03-15 05:53 . 2013-04-14 13:23 7573816 —-a-w- c:\windows\system32\nvopencl.dll
2013-03-15 05:53 . 2013-04-14 13:23 6271872 —-a-w- c:\windows\SysWow64\nvopencl.dll
2013-03-15 05:53 . 2013-04-14 13:23 2913056 —-a-w- c:\windows\system32\nvcuvid.dll
2013-03-15 05:53 . 2013-04-14 13:23 2728736 —-a-w- c:\windows\SysWow64\nvcuvid.dll
2013-03-15 05:53 . 2013-04-14 13:23 26956576 —-a-w- c:\windows\system32\nvoglv64.dll
2013-03-15 05:53 . 2013-04-14 13:23 250504 —-a-w- c:\windows\system32\nvinitx.dll
2013-03-15 05:53 . 2013-04-14 13:23 2355488 —-a-w- c:\windows\system32\nvcuvenc.dll
2013-03-15 05:53 . 2013-04-14 13:23 20542752 —-a-w- c:\windows\SysWow64\nvoglv32.dll
2013-03-15 05:53 . 2013-04-14 13:23 205184 —-a-w- c:\windows\SysWow64\nvinit.dll
2013-03-15 05:53 . 2013-04-14 13:23 1995552 —-a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-03-15 05:53 . 2013-04-14 13:23 1807136 —-a-w- c:\windows\system32\nvdispco6431422.dll
2013-03-15 05:53 . 2013-04-14 13:23 17990800 —-a-w- c:\windows\system32\nvd3dumx.dll
2013-03-15 05:53 . 2013-04-14 13:23 15508512 —-a-w- c:\windows\system32\nvwgf2umx.dll
2013-03-15 05:53 . 2013-04-14 13:23 1510176 —-a-w- c:\windows\system32\nvdispgenco6431422.dll
2013-03-15 05:53 . 2013-04-14 13:23 15042928 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2013-03-15 05:53 . 2013-04-14 13:23 13088000 —-a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-03-15 05:53 . 2013-04-14 13:23 11048736 —-a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-03-15 05:53 . 2013-04-14 13:23 2539128 —-a-w- c:\windows\SysWow64\nvapi.dll
2013-03-15 05:53 . 2013-04-14 13:23 25256736 —-a-w- c:\windows\system32\nvcompiler.dll
2013-03-15 05:53 . 2013-04-14 13:23 17560352 —-a-w- c:\windows\SysWow64\nvcompiler.dll
2013-03-15 05:53 . 2012-10-11 02:23 2864144 —-a-w- c:\windows\system32\nvapi64.dll
2013-03-15 05:53 . 2012-10-11 02:23 1118776 —-a-w- c:\windows\system32\nvumdshimx.dll
2013-03-15 04:16 . 2011-01-08 00:49 3477280 —-a-w- c:\windows\system32\nvsvc64.dll
2013-03-15 04:16 . 2011-01-08 00:49 6398240 —-a-w- c:\windows\system32\nvcpl.dll
2013-03-15 04:16 . 2011-01-08 00:48 877856 —-a-w- c:\windows\system32\nvvsvc.exe
2013-03-15 04:16 . 2011-01-08 00:48 63776 —-a-w- c:\windows\system32\nvshext.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-12 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-01-30 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
CineForm Status.lnk - c:\program files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe [2012-10-28 152064]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfDHP2amd64.sys [x]
R3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfSBVMamd64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SCTUSB;SCT USB Driver;c:\windows\system32\DRIVERS\sctusb.sys;c:\windows\SYSNATIVE\DRIVERS\sctusb.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1);c:\windows\system32\drivers\WsAudio_DeviceS(1).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(1).sys [x]
R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2);c:\windows\system32\drivers\WsAudio_DeviceS(2).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(2).sys [x]
R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3);c:\windows\system32\drivers\WsAudio_DeviceS(3).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(3).sys [x]
R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4);c:\windows\system32\drivers\WsAudio_DeviceS(4).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(4).sys [x]
R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5);c:\windows\system32\drivers\WsAudio_DeviceS(5).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(5).sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 CodeMeter.exe;CodeMeter Runtime Server;c:\program files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe;c:\program files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [x]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys;c:\windows\SYSNATIVE\drivers\cpuz135_x64.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 cmudaxp;ASUS Xonar D2X Audio Interface;c:\windows\system32\drivers\cmudaxp.sys;c:\windows\SYSNATIVE\drivers\cmudaxp.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
S3 SCTDriverV1011;SCTDriverV1011;c:\windows\system32\drivers\SCTDriverV1011.sys;c:\windows\SYSNATIVE\drivers\SCTDriverV1011.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 16:11 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 21:11]
.
2013-05-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000Core.job
- c:\users\Viper\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-21 02:10]
.
2013-06-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000UA.job
- c:\users\Viper\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-21 02:10]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio8788"="c:\windows\Syswow64\cmicnfgp.dll" [2009-10-30 8151040]
"Cmaudio8788GX"="c:\windows\syswow64\HsMgr.exe" [2008-07-11 200704]
"Cmaudio8788GX64"="c:\windows\system\HsMgr64.exe" [2008-07-11 282112]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{284F9DC2-116B-4471-AA57-3A19EF1497C0}: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Viper\AppData\Roaming\Mozilla\Firefox\Profiles\0deowket.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2012-04-04 21:59; [removed]; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-06-07 21:04:48
ComboFix-quarantined-files.txt 2013-06-08 01:04
ComboFix2.txt 2013-06-07 00:42
.
Pre-Run: 9,263,456,256 bytes free
Post-Run: 9,405,800,448 bytes free
.
- - End Of File - - 83F75CA73F805E051682BCEE6B176DE1

Hi patndoris. I am very sorry for the delay. A lot of work lately.. Here are the results of combo fix. The computer seems to be running fine with no glitches.

ComboFix 13-06-12.02 - Viper 06/12/2013 19:50:27.3.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.6135.4079 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\users\Viper\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET Personal firewall *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
ADS - Windows: deleted 64 bytes in 2 streams.
.
((((((((((((((((((((((((( Files Created from 2013-05-12 to 2013-06-12 )))))))))))))))))))))))))))))))
.
.
2013-06-12 23:52 . 2013-06-12 23:52 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-12 23:52 . 2013-06-12 23:52 ——– d—–w- c:\users\Default\AppData\Local\temp
2013-06-12 23:45 . 2013-05-13 06:37 9460464 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F7291007-A099-4FB0-843E-9EF449473E0A}\mpengine.dll
2013-05-15 00:17 . 2013-04-10 06:01 265064 —-a-w- c:\windows\system32\drivers\dxgmms1.sys
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 16:11 . 2012-04-04 18:39 692104 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 16:11 . 2011-05-16 22:56 71048 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-15 02:54 . 2010-07-18 04:22 75016696 —-a-w- c:\windows\system32\MRT.exe
2013-05-02 06:06 . 2010-07-16 03:19 278800 ——w- c:\windows\system32\MpSigStub.exe
2013-05-01 00:19 . 2013-05-01 00:19 2876528 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-05-01 00:19 . 2013-05-01 00:19 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-05-01 00:18 . 2013-05-01 00:18 539984 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-04-13 05:49 . 2013-05-15 00:17 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 00:17 350208 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 00:17 308736 —-a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 00:17 111104 —-a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 00:17 474624 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 00:17 2176512 —-a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-23 22:12 1656680 —-a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-05 03:26 . 2013-04-05 03:26 226304 —-a-w- c:\windows\system32\elshyph.dll
2013-04-05 03:26 . 2013-04-05 03:26 185344 —-a-w- c:\windows\SysWow64\elshyph.dll
2013-04-05 03:26 . 2013-04-05 03:26 158720 —-a-w- c:\windows\SysWow64\msls31.dll
2013-04-05 03:26 . 2013-04-05 03:26 1054720 —-a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-05 03:26 . 2013-04-05 03:26 97280 —-a-w- c:\windows\system32\mshtmled.dll
2013-04-05 03:26 . 2013-04-05 03:26 92160 —-a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-05 03:26 . 2013-04-05 03:26 905728 —-a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-05 03:26 . 2013-04-05 03:26 81408 —-a-w- c:\windows\system32\icardie.dll
2013-04-05 03:26 . 2013-04-05 03:26 77312 —-a-w- c:\windows\system32\tdc.ocx
2013-04-05 03:26 . 2013-04-05 03:26 762368 —-a-w- c:\windows\system32\ieapfltr.dll
2013-04-05 03:26 . 2013-04-05 03:26 73728 —-a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-04-05 03:26 . 2013-04-05 03:26 719360 —-a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-04-05 03:26 . 2013-04-05 03:26 62976 —-a-w- c:\windows\system32\pngfilt.dll
2013-04-05 03:26 . 2013-04-05 03:26 61952 —-a-w- c:\windows\SysWow64\tdc.ocx
2013-04-05 03:26 . 2013-04-05 03:26 599552 —-a-w- c:\windows\system32\vbscript.dll
2013-04-05 03:26 . 2013-04-05 03:26 523264 —-a-w- c:\windows\SysWow64\vbscript.dll
2013-04-05 03:26 . 2013-04-05 03:26 52224 —-a-w- c:\windows\system32\msfeedsbs.dll
2013-04-05 03:26 . 2013-04-05 03:26 51200 —-a-w- c:\windows\system32\imgutil.dll
2013-04-05 03:26 . 2013-04-05 03:26 48640 —-a-w- c:\windows\SysWow64\mshtmler.dll
2013-04-05 03:26 . 2013-04-05 03:26 48640 —-a-w- c:\windows\system32\mshtmler.dll
2013-04-05 03:26 . 2013-04-05 03:26 452096 —-a-w- c:\windows\system32\dxtmsft.dll
2013-04-05 03:26 . 2013-04-05 03:26 441856 —-a-w- c:\windows\system32\html.iec
2013-04-05 03:26 . 2013-04-05 03:26 38400 —-a-w- c:\windows\SysWow64\imgutil.dll
2013-04-05 03:26 . 2013-04-05 03:26 361984 —-a-w- c:\windows\SysWow64\html.iec
2013-04-05 03:26 . 2013-04-05 03:26 281600 —-a-w- c:\windows\system32\dxtrans.dll
2013-04-05 03:26 . 2013-04-05 03:26 27648 —-a-w- c:\windows\system32\licmgr10.dll
2013-04-05 03:26 . 2013-04-05 03:26 270848 —-a-w- c:\windows\system32\iedkcs32.dll
2013-04-05 03:26 . 2013-04-05 03:26 247296 —-a-w- c:\windows\system32\webcheck.dll
2013-04-05 03:26 . 2013-04-05 03:26 235008 —-a-w- c:\windows\system32\url.dll
2013-04-05 03:26 . 2013-04-05 03:26 23040 —-a-w- c:\windows\SysWow64\licmgr10.dll
2013-04-05 03:26 . 2013-04-05 03:26 216064 —-a-w- c:\windows\system32\msls31.dll
2013-04-05 03:26 . 2013-04-05 03:26 197120 —-a-w- c:\windows\system32\msrating.dll
2013-04-05 03:26 . 2013-04-05 03:26 173568 —-a-w- c:\windows\system32\ieUnatt.exe
2013-04-05 03:26 . 2013-04-05 03:26 167424 —-a-w- c:\windows\system32\iexpress.exe
2013-04-05 03:26 . 2013-04-05 03:26 1509376 —-a-w- c:\windows\system32\inetcpl.cpl
2013-04-05 03:26 . 2013-04-05 03:26 150528 —-a-w- c:\windows\SysWow64\iexpress.exe
2013-04-05 03:26 . 2013-04-05 03:26 149504 —-a-w- c:\windows\system32\occache.dll
2013-04-05 03:26 . 2013-04-05 03:26 144896 —-a-w- c:\windows\system32\wextract.exe
2013-04-05 03:26 . 2013-04-05 03:26 1441280 —-a-w- c:\windows\SysWow64\inetcpl.cpl
2013-04-05 03:26 . 2013-04-05 03:26 1400416 —-a-w- c:\windows\system32\ieapfltr.dat
2013-04-05 03:26 . 2013-04-05 03:26 138752 —-a-w- c:\windows\SysWow64\wextract.exe
2013-04-05 03:26 . 2013-04-05 03:26 13824 —-a-w- c:\windows\system32\mshta.exe
2013-04-05 03:26 . 2013-04-05 03:26 137216 —-a-w- c:\windows\SysWow64\ieUnatt.exe
2013-04-05 03:26 . 2013-04-05 03:26 136192 —-a-w- c:\windows\system32\iepeers.dll
2013-04-05 03:26 . 2013-04-05 03:26 135680 —-a-w- c:\windows\system32\IEAdvpack.dll
2013-04-05 03:26 . 2013-04-05 03:26 12800 —-a-w- c:\windows\SysWow64\mshta.exe
2013-04-05 03:26 . 2013-04-05 03:26 12800 —-a-w- c:\windows\system32\msfeedssync.exe
2013-04-05 03:26 . 2013-04-05 03:26 110592 —-a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-04-05 03:26 . 2013-04-05 03:26 102912 —-a-w- c:\windows\system32\inseng.dll
2013-04-04 18:50 . 2010-07-17 06:48 25928 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-04-04 09:35 . 2013-03-11 17:11 95648 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-19 06:04 . 2013-04-10 22:37 5550424 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 22:37 43520 —-a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 22:37 3968856 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 22:37 3913560 —-a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 22:37 6656 —-a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 22:37 112640 —-a-w- c:\windows\system32\smss.exe
2013-03-15 05:53 . 2013-04-14 13:23 968408 —-a-w- c:\windows\SysWow64\nvumdshim.dll
2013-03-15 05:53 . 2013-04-14 13:23 9414456 —-a-w- c:\windows\system32\nvcuda.dll
2013-03-15 05:53 . 2013-04-14 13:23 7959000 —-a-w- c:\windows\SysWow64\nvcuda.dll
2013-03-15 05:53 . 2013-04-14 13:23 7573816 —-a-w- c:\windows\system32\nvopencl.dll
2013-03-15 05:53 . 2013-04-14 13:23 6271872 —-a-w- c:\windows\SysWow64\nvopencl.dll
2013-03-15 05:53 . 2013-04-14 13:23 2913056 —-a-w- c:\windows\system32\nvcuvid.dll
2013-03-15 05:53 . 2013-04-14 13:23 2728736 —-a-w- c:\windows\SysWow64\nvcuvid.dll
2013-03-15 05:53 . 2013-04-14 13:23 26956576 —-a-w- c:\windows\system32\nvoglv64.dll
2013-03-15 05:53 . 2013-04-14 13:23 250504 —-a-w- c:\windows\system32\nvinitx.dll
2013-03-15 05:53 . 2013-04-14 13:23 2355488 —-a-w- c:\windows\system32\nvcuvenc.dll
2013-03-15 05:53 . 2013-04-14 13:23 20542752 —-a-w- c:\windows\SysWow64\nvoglv32.dll
2013-03-15 05:53 . 2013-04-14 13:23 205184 —-a-w- c:\windows\SysWow64\nvinit.dll
2013-03-15 05:53 . 2013-04-14 13:23 1995552 —-a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-03-15 05:53 . 2013-04-14 13:23 1807136 —-a-w- c:\windows\system32\nvdispco6431422.dll
2013-03-15 05:53 . 2013-04-14 13:23 17990800 —-a-w- c:\windows\system32\nvd3dumx.dll
2013-03-15 05:53 . 2013-04-14 13:23 15508512 —-a-w- c:\windows\system32\nvwgf2umx.dll
2013-03-15 05:53 . 2013-04-14 13:23 1510176 —-a-w- c:\windows\system32\nvdispgenco6431422.dll
2013-03-15 05:53 . 2013-04-14 13:23 15042928 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2013-03-15 05:53 . 2013-04-14 13:23 13088000 —-a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-03-15 05:53 . 2013-04-14 13:23 11048736 —-a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-03-15 05:53 . 2013-04-14 13:23 2539128 —-a-w- c:\windows\SysWow64\nvapi.dll
2013-03-15 05:53 . 2013-04-14 13:23 25256736 —-a-w- c:\windows\system32\nvcompiler.dll
2013-03-15 05:53 . 2013-04-14 13:23 17560352 —-a-w- c:\windows\SysWow64\nvcompiler.dll
2013-03-15 05:53 . 2012-10-11 02:23 2864144 —-a-w- c:\windows\system32\nvapi64.dll
2013-03-15 05:53 . 2012-10-11 02:23 1118776 —-a-w- c:\windows\system32\nvumdshimx.dll
2013-03-15 04:16 . 2011-01-08 00:49 3477280 —-a-w- c:\windows\system32\nvsvc64.dll
2013-03-15 04:16 . 2011-01-08 00:49 6398240 —-a-w- c:\windows\system32\nvcpl.dll
2013-03-15 04:16 . 2011-01-08 00:48 877856 —-a-w- c:\windows\system32\nvvsvc.exe
2013-03-15 04:16 . 2011-01-08 00:48 63776 —-a-w- c:\windows\system32\nvshext.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"NUSB3MON"="c:\program files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-12 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-12-08 421736]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-01-30 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2013-02-13 1263952]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
CineForm Status.lnk - c:\program files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe [2012-10-28 152064]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]
R3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe;c:\program files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [x]
R3 LADF_DHP2;G35 DHP2 Filter Driver;c:\windows\system32\DRIVERS\ladfDHP2amd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfDHP2amd64.sys [x]
R3 LADF_SBVM;G35 SBVM Filter Driver;c:\windows\system32\DRIVERS\ladfSBVMamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfSBVMamd64.sys [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 SCTUSB;SCT USB Driver;c:\windows\system32\DRIVERS\sctusb.sys;c:\windows\SYSNATIVE\DRIVERS\sctusb.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1);c:\windows\system32\drivers\WsAudio_DeviceS(1).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(1).sys [x]
R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2);c:\windows\system32\drivers\WsAudio_DeviceS(2).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(2).sys [x]
R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3);c:\windows\system32\drivers\WsAudio_DeviceS(3).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(3).sys [x]
R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4);c:\windows\system32\drivers\WsAudio_DeviceS(4).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(4).sys [x]
R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5);c:\windows\system32\drivers\WsAudio_DeviceS(5).sys;c:\windows\SYSNATIVE\drivers\WsAudio_DeviceS(5).sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 CodeMeter.exe;CodeMeter Runtime Server;c:\program files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe;c:\program files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [x]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys;c:\windows\SYSNATIVE\drivers\cpuz135_x64.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 cmudaxp;ASUS Xonar D2X Audio Interface;c:\windows\system32\drivers\cmudaxp.sys;c:\windows\SYSNATIVE\drivers\cmudaxp.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys;c:\windows\SYSNATIVE\Drivers\LGPBTDD.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys;c:\windows\SYSNATIVE\Drivers\pcouffin.sys [x]
S3 SCTDriverV1011;SCTDriverV1011;c:\windows\system32\drivers\SCTDriverV1011.sys;c:\windows\SYSNATIVE\drivers\SCTDriverV1011.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 16:11 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 16:11]
.
2013-05-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000Core.job
- c:\users\Viper\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-21 02:10]
.
2013-06-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1809344733-3001522086-2463620086-1000UA.job
- c:\users\Viper\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-21 02:10]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio8788"="c:\windows\Syswow64\cmicnfgp.dll" [2009-10-30 8151040]
"Cmaudio8788GX"="c:\windows\syswow64\HsMgr.exe" [2008-07-11 200704]
"Cmaudio8788GX64"="c:\windows\system\HsMgr64.exe" [2008-07-11 282112]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 6900024]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{284F9DC2-116B-4471-AA57-3A19EF1497C0}: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Viper\AppData\Roaming\Mozilla\Firefox\Profiles\0deowket.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2012-04-04 21:59; [removed]; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-06-12 19:53:43
ComboFix-quarantined-files.txt 2013-06-12 23:53
ComboFix2.txt 2013-06-08 01:04
ComboFix3.txt 2013-06-07 00:42
.
Pre-Run: 9,123,573,760 bytes free
Post-Run: 8,978,759,680 bytes free
.
- - End Of File - - C25E34CD43D6F2956930677465EDE9A0
D41D8CD98F00B204E9800998ECF8427E