OTL logfile created on: 1/2/2010 8:13:46 AM - Run 1
OTL by OldTimer - Version 3.1.20.1     Folder = C:\Users\Cristi\Desktop\New folder
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 64.00% Memory free
7.00 Gb Paging File | 6.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149.04 Gb Total Space | 47.72 Gb Free Space | 32.02% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: CRISTI-PC
Current User Name: Cristi
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010/01/02 07:24:07 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Cristi\Desktop\New folder\OTL.exe
PRC - [2010/01/01 07:22:27 | 00,066,872 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe
PRC - [2010/01/01 06:19:46 | 00,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2010/01/01 06:19:41 | 00,126,976 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
PRC - [2009/12/30 14:55:18 | 00,235,344 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2009/12/18 07:55:34 | 01,622,320 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
PRC - [2009/12/18 07:55:29 | 01,085,720 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe
PRC - [2009/12/18 07:54:59 | 01,118,144 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe
PRC - [2009/12/18 07:54:55 | 00,130,560 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\upgrepl.exe
PRC - [2009/12/18 07:54:54 | 00,309,088 | ---- | M] (BitDefender S.R.L.) -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
PRC - [2009/12/18 04:36:45 | 00,289,584 | -H-- | M] (BitTorrent, Inc.) -- C:\Users\Cristi\Desktop\utorrent.exe
PRC - [2009/12/17 16:31:52 | 01,551,712 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winamp.exe
PRC - [2009/12/17 16:30:48 | 00,039,424 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winampa.exe
PRC - [2009/11/20 20:33:00 | 00,122,984 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvvsvc.exe
PRC - [2009/11/20 19:17:00 | 00,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2009/11/17 10:17:38 | 00,486,216 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2009/11/17 10:15:36 | 01,021,256 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2009/11/10 15:39:26 | 05,244,216 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
PRC - [2009/10/30 03:57:08 | 00,369,200 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2009/09/23 13:38:18 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009/08/02 21:35:50 | 02,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/07/13 17:14:50 | 00,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
PRC - [2009/07/13 17:14:42 | 00,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2008/11/09 12:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/07 10:15:10 | 00,241,734 | R--- | M] () -- C:\Program Files\CyberLink\Shared files\RichVideo.exe
PRC - [2007/09/02 13:58:52 | 00,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010/01/02 07:24:07 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Cristi\Desktop\New folder\OTL.exe
MOD - [2009/07/13 17:17:54 | 00,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
MOD - [2009/07/13 17:16:15 | 00,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
MOD - [2009/07/13 17:16:13 | 00,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
MOD - [2009/07/13 17:16:13 | 00,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
MOD - [2009/07/13 17:16:13 | 00,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
MOD - [2009/07/13 17:16:12 | 00,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
MOD - [2009/07/13 17:16:03 | 00,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
MOD - [2009/07/13 17:15:48 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
MOD - [2009/07/13 17:15:35 | 00,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
MOD - [2009/07/13 17:15:21 | 00,093,696 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
MOD - [2009/07/13 17:15:13 | 00,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
MOD - [2009/07/13 17:15:11 | 00,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
MOD - [2009/07/13 17:15:07 | 00,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
MOD - [2009/07/13 17:15:07 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
MOD - [2009/07/13 17:15:02 | 00,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
MOD - [2009/07/13 17:03:50 | 01,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2007/09/02 13:57:36 | 00,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010/01/01 07:22:27 | 00,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010/01/01 06:19:51 | 00,135,664 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Google Update Service (gupdate)
SRV - [2010/01/01 06:19:37 | 00,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009/12/30 14:55:18 | 00,235,344 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2009/12/19 12:30:41 | 00,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/12/19 12:25:17 | 00,435,016 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2009/12/18 07:56:06 | 00,311,296 | ---- | M] (S.C. BitDefender S.R.L) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll -- (scan)
SRV - [2009/12/18 07:56:04 | 00,183,880 | ---- | M] (BitDefender S.R.L. http://www.bitdefender.com) [On_Demand | Stopped] -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Arrakis3)
SRV - [2009/12/18 07:55:34 | 01,622,320 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- (VSSERV)
SRV - [2009/12/18 07:54:54 | 00,309,088 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)
SRV - [2009/11/20 20:33:00 | 00,122,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Windows\System32\nvvsvc.exe -- (nvsvc)
SRV - [2009/11/20 19:17:00 | 00,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009/11/17 10:15:36 | 01,021,256 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009/11/17 10:12:10 | 00,030,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009/10/27 09:26:36 | 00,657,408 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009/09/26 05:28:22 | 04,639,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2009/09/26 04:31:58 | 00,149,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009/09/23 13:38:18 | 00,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009/07/13 17:16:21 | 00,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc)
SRV - [2009/07/13 17:16:17 | 00,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc)
SRV - [2009/07/13 17:16:17 | 00,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power)
SRV - [2009/07/13 17:16:16 | 00,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\themeservice.dll -- (Themes)
SRV - [2009/07/13 17:16:15 | 00,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify)
SRV - [2009/07/13 17:16:13 | 00,043,520 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper)
SRV - [2009/07/13 17:16:13 | 00,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 17:16:12 | 01,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 17:16:12 | 00,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc)
SRV - [2009/07/13 17:16:12 | 00,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc)
SRV - [2009/07/13 17:16:12 | 00,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider)
SRV - [2009/07/13 17:16:12 | 00,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg)
SRV - [2009/07/13 17:15:41 | 00,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/07/13 17:15:36 | 00,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener)
SRV - [2009/07/13 17:15:21 | 00,797,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/07/13 17:15:11 | 00,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp)
SRV - [2009/07/13 17:15:10 | 00,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc)
SRV - [2009/07/13 17:14:59 | 00,076,800 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC)
SRV - [2009/07/13 17:14:58 | 00,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) ActiveX Installer (AxInstSV)
SRV - [2009/07/13 17:14:53 | 00,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc)
SRV - [2009/07/13 17:14:29 | 03,179,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\sppsvc.exe -- (sppsvc)
SRV - [2008/11/09 12:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/04/07 10:15:10 | 00,241,734 | R--- | M] () [Auto | Running] -- C:\Program Files\CyberLink\Shared files\RichVideo.exe -- (RichVideo) Cyberlink RichVideo Service(CRVS)
SRV - [2005/04/04 00:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr9/*http://www.yahoo.com/ext/search/search.html
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 80 9B EF DA 77 80 CA 01  [binary data]
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[2009/12/18 04:40:51 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Mozilla\Extensions
[2009/12/18 04:40:51 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
 
O1 HOSTS File: (794 bytes) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O1 - Hosts: 127.0.0.1				activate.adobe.com
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (BitDefender Toolbar) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\ietoolbar.dll (BitDefender S.R.L.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [UVS12 Preload] C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe (Ulead Systems, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [uTorrent] C:\Users\Cristi\Desktop\utorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_5F1A57F0B9B89E2E.dll (Google Inc.)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Value error. File not found
O13 - gopher Prefix: missing
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} http://www.systemrequirementslab.com/srl_bin/sysreqlab_srl.cab (System Requirements Lab Class)
O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} http://srtest-cdn.systemrequirementslab.com.s3.amazonaws.com/bin/sysreqlabdetect.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.96.184.17 80.96.184.18
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 13:42:20 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{a2cc9c7a-ed81-11de-b685-00241d153668}\Shell - "" = AutoRun
O33 - MountPoints2\{a2cc9c7a-ed81-11de-b685-00241d153668}\Shell\AutoRun\command - "" = I:\AutoRunCD.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (sasnative32) -  File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 14 Days ==========[/color]
 
[2010/01/02 07:25:34 | 00,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/01/02 07:25:14 | 00,000,000 | -HSD | C] -- C:\Windows\System32\%APPDATA%
[2010/01/02 07:25:05 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2010/01/02 07:22:01 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Desktop\New folder
[2010/01/01 13:53:12 | 00,000,000 | ---D | C] -- C:\Windows\System32\URTTEMP
[2010/01/01 13:27:40 | 00,000,000 | ---D | C] -- C:\Program Files\Electronic Arts
[2010/01/01 06:20:16 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Google
[2010/01/01 05:55:47 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Malwarebytes
[2010/01/01 05:55:42 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/01/01 05:55:41 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/01/01 05:55:40 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/01/01 05:55:40 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/01 05:50:12 | 00,034,304 | ---- | C] (AMD, Inc.) -- C:\Windows\System32\drivers\AmdLLD.sys
[2010/01/01 05:50:10 | 00,000,000 | ---D | C] -- C:\Program Files\AMD
[2010/01/01 05:49:24 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Downloaded Installations
[2010/01/01 01:21:33 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\Corel VideoStudio
[2010/01/01 01:21:26 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Ulead Systems
[2010/01/01 01:20:17 | 00,000,000 | ---D | C] -- C:\ProgramData\InterVideo
[2010/01/01 01:19:46 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Components
[2010/01/01 01:18:23 | 00,000,000 | ---D | C] -- C:\ProgramData\Ulead Systems
[2010/01/01 01:18:23 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Ulead Systems
[2010/01/01 01:00:29 | 00,140,800 | ---- | C] (The Duck Corporation) -- C:\Windows\System32\tm20dec.ax
[2010/01/01 00:57:15 | 00,000,000 | ---D | C] -- C:\Program Files\Corel
[2009/12/31 09:01:15 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Desktop\Guitar
[2009/12/31 07:47:26 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Desktop\Corel.VideoStudio.Pro.X2.v12.0.98.0
[2009/12/31 07:44:07 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\CyberLink
[2009/12/31 07:00:17 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Microsoft Corporation
[2009/12/31 06:27:40 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2009/12/31 06:27:09 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive
[2009/12/31 06:25:41 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2009/12/31 06:19:23 | 00,000,000 | ---D | C] -- C:\Program Files\SEGA
[2009/12/31 06:18:38 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2009/12/31 06:17:08 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2009/12/31 04:57:06 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2009/12/31 04:57:03 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2009/12/31 04:56:40 | 00,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2009/12/31 04:56:40 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2009/12/31 04:56:40 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2009/12/31 04:53:37 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2009/12/31 04:52:59 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Microsoft Help
[2009/12/31 04:52:53 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2009/12/31 04:52:52 | 00,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2009/12/31 03:39:43 | 00,000,000 | ---D | C] -- C:\Program Files\SpeedFan
[2009/12/31 01:58:13 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Desktop\715
[2009/12/31 01:50:24 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\PassMark
[2009/12/31 01:48:13 | 11,940,768 | ---- | C] (Passmark Software                                           ) -- C:\Users\Cristi\Desktop\petst.exe
[2009/12/31 01:04:25 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\Sega
[2009/12/31 00:08:26 | 00,000,000 | ---D | C] -- C:\Program Files\DAMN NFO Viewer
[2009/12/31 00:02:24 | 00,000,000 | ---D | C] -- C:\Program Files\Power Tab Software
[2009/12/30 11:41:17 | 00,000,000 | ---D | C] -- C:\Program Files\DOOM 3
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\zh-TW
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\zh-CN
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Virtual PC
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\tr-TR
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\th-TH
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\sv-SE
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\ru-RU
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\ro-RO
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\pt-PT
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\pt-BR
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\pl-PL
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\nl-NL
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\nb-NO
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\ko-KR
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\ja-JP
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\it-IT
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\hu-HU
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\he-IL
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\fr-FR
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\fi-FI
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\es-ES
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\el-GR
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\de-DE
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\da-DK
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\cs-CZ
[2009/12/30 07:07:59 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\ar-SA
[2009/12/30 06:52:53 | 00,000,000 | ---D | C] -- C:\ProgramData\Nokia
[2009/12/30 06:37:48 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\PC Suite
[2009/12/30 06:37:47 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Suite
[2009/12/30 06:37:47 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Nokia
[2009/12/30 06:35:48 | 00,018,816 | ---- | C] (Nokia) -- C:\Windows\System32\drivers\pccsmcfd.sys
[2009/12/30 06:35:48 | 00,000,000 | ---D | C] -- C:\Program Files\DIFX
[2009/12/30 06:35:45 | 00,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2009/12/30 06:35:41 | 00,000,000 | ---D | C] -- C:\Program Files\PC Connectivity Solution
[2009/12/30 06:35:30 | 00,091,136 | ---- | C] (Nokia) -- C:\Windows\System32\nmwcdcls.dll
[2009/12/30 06:35:30 | 00,000,000 | ---D | C] -- C:\Program Files\Nokia
[2009/12/30 06:34:52 | 00,000,000 | ---D | C] -- C:\ProgramData\Installations
[2009/12/30 05:20:40 | 00,000,000 | ---D | C] -- C:\ProgramData\NimiVisuals
[2009/12/30 05:20:36 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Nimi
[2009/12/30 04:00:33 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\Stardock
[2009/12/30 04:00:32 | 00,042,672 | ---- | C] (Stardock.Net, Inc) -- C:\Windows\System32\wbsys.dll
[2009/12/30 03:33:41 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Stardock_Corporation
[2009/12/30 03:32:58 | 00,000,000 | -H-D | C] -- C:\Users\Cristi\AppData\Local\{BD7D695E-E266-4E2C-983E-21EEEDEF5F8D}
[2009/12/30 03:32:58 | 00,000,000 | ---D | C] -- C:\Program Files\Stardock
[2009/12/30 03:32:46 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\PackageAware
[2009/12/29 23:56:39 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\InstallShield
[2009/12/29 03:40:47 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\Remote Assistance Logs
[2009/12/27 22:30:05 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\fretsonfire
[2009/12/27 22:21:58 | 00,000,000 | ---D | C] -- C:\Program Files\Frets on Fire
[2009/12/27 07:38:58 | 00,000,000 | ---D | C] -- C:\Windows\Minidump
[2009/12/27 06:40:37 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\HTC
[2009/12/27 06:06:54 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\kaneandlynch
[2009/12/27 05:10:24 | 00,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\System32\CmdLineExt.dll
[2009/12/27 05:10:24 | 00,000,000 | RH-D | C] -- C:\Users\Cristi\AppData\Roaming\SecuROM
[2009/12/27 01:22:40 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\Axialis Librarian
[2009/12/27 01:12:29 | 00,139,264 | ---- | C] (Blizzard Entertainment) -- C:\Windows\War3Unin.exe
[2009/12/27 01:08:35 | 00,000,000 | ---D | C] -- C:\Program Files\Warcraft III
[2009/12/26 08:28:16 | 00,000,000 | ---D | C] -- C:\Program Files\EA Games
[2009/12/26 07:36:54 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\My Games
[2009/12/26 07:35:26 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2009/12/26 07:30:08 | 00,000,000 | ---D | C] -- C:\Windows\System32\xlive
[2009/12/26 07:30:06 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE
[2009/12/26 06:01:19 | 00,000,000 | ---D | C] -- C:\ProgramData\Yahoo! Companion
[2009/12/26 06:00:15 | 00,000,000 | ---D | C] -- C:\ProgramData\Yahoo!
[2009/12/26 02:17:07 | 00,000,000 | ---D | C] -- C:\ProgramData\Media Center Programs
[2009/12/26 02:05:24 | 00,000,000 | ---D | C] -- C:\Program Files\Ubisoft
[2009/12/26 00:55:19 | 00,000,000 | ---D | C] -- C:\ProgramData\Native Instruments
[2009/12/26 00:51:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Native Instruments
[2009/12/26 00:31:25 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Digidesign
[2009/12/26 00:31:24 | 00,000,000 | ---D | C] -- C:\Program Files\Brainworx Music
[2009/12/25 09:25:17 | 00,000,000 | ---D | C] -- C:\Program Files\Sing and See
[2009/12/25 08:57:13 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Music Recognition
[2009/12/25 08:56:56 | 00,000,000 | ---D | C] -- C:\Program Files\WIDI 3.3 Pro
[2009/12/25 06:35:53 | 00,000,000 | ---D | C] -- C:\Program Files\SuperAudiotool
[2009/12/24 14:19:14 | 00,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2009/12/23 09:49:16 | 00,413,696 | ---- | C] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2009/12/23 09:49:16 | 00,110,592 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2009/12/23 09:49:16 | 00,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2009/12/23 09:44:40 | 00,000,000 | ---D | C] -- C:\Program Files\The Adventure Company
[2009/12/23 09:33:44 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Rose_Hill_Solutions
[2009/12/23 09:33:43 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\KeyMapper
[2009/12/23 09:33:13 | 00,000,000 | ---D | C] -- C:\Program Files\Key Mapper
[2009/12/23 02:04:18 | 00,000,000 | ---D | C] -- C:\Program Files\James Cameron's Avatar - The Game
[2009/12/23 01:54:46 | 00,000,000 | ---D | C] -- C:\ProgramData\Systweak
[2009/12/23 01:50:36 | 00,000,000 | ---D | C] -- C:\Windows\Repair
[2009/12/23 01:50:35 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Systweak
[2009/12/23 01:50:22 | 00,000,000 | ---D | C] -- C:\ProgramData\MyDefrag
[2009/12/23 01:50:13 | 00,000,000 | ---D | C] -- C:\Program Files\Advanced System Optimizer 3
[2009/12/23 00:18:48 | 00,000,000 | ---D | C] -- C:\Users\Cristi\Documents\Any Video Converter
[2009/12/22 10:17:29 | 00,000,000 | ---D | C] -- C:\Windows\System32\directx
[2009/12/22 09:39:03 | 00,000,000 | ---D | C] -- C:\Program Files\Ricochet Infinity
[2009/12/22 08:02:51 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Drivers HeadQuarters
[2009/12/22 03:49:02 | 00,000,000 | ---D | C] -- C:\ProgramData\Tages
[2009/12/22 03:45:32 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Microsoft Games
[2009/12/22 03:31:13 | 00,000,000 | ---D | C] -- C:\Program Files\Sun
[2009/12/21 09:23:16 | 00,000,000 | ---D | C] -- C:\Program Files\Mouse Wheel Control
[2009/12/21 09:11:15 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliPoint 5.0
[2009/12/21 09:11:12 | 00,000,000 | ---D | C] -- C:\Program Files\Shelltoys
[2009/12/21 01:44:43 | 00,000,000 | -HSD | C] -- C:\Windows\ftpcache
[2009/12/21 01:05:30 | 00,000,000 | ---D | C] -- C:\Program Files\Realtek
[2009/12/21 01:05:16 | 00,000,000 | -H-D | C] -- C:\Program Files\Temp
[2009/12/21 00:52:44 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\PassMark
[2009/12/21 00:51:48 | 00,000,000 | ---D | C] -- C:\Program Files\PerformanceTest
[2009/12/21 00:51:48 | 00,000,000 | ---D | C] -- C:\ProgramData\PassMark
[2009/12/21 00:02:27 | 00,000,000 | ---D | C] -- C:\Program Files\GIGABYTE
[2009/12/21 00:01:54 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009/12/20 22:33:32 | 00,000,000 | ---D | C] -- C:\Program Files\SystemRequirementsLab
[2009/12/20 08:25:23 | 00,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2009/12/20 08:25:17 | 00,000,000 | -H-D | C] -- C:\Users\Cristi\Documents\ShadowEditFiles
[2009/12/20 08:24:27 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\CyberLink
[2009/12/20 08:22:17 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/12/20 08:15:11 | 00,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2009/12/20 08:04:22 | 00,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2009/12/20 08:04:01 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\DAEMON Tools Lite
[2009/12/20 08:03:59 | 00,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2009/12/19 23:59:56 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\ElevatedDiagnostics
[2009/12/19 19:48:04 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\vlc
[2009/12/19 19:47:41 | 00,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2009/12/19 19:44:14 | 00,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll
[2009/12/19 19:44:10 | 00,000,000 | ---D | C] -- C:\Windows\System32\QuickTime
[2009/12/19 19:44:06 | 01,650,688 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplva6.dll
[2009/12/19 19:44:06 | 01,581,056 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplvw7.dll
[2009/12/19 19:44:06 | 01,552,384 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplvm6.dll
[2009/12/19 19:44:06 | 01,122,304 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplvpx.dll
[2009/12/19 19:44:06 | 00,077,824 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplaw7.dll
[2009/12/19 19:44:06 | 00,077,824 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplaa6.dll
[2009/12/19 19:44:06 | 00,065,536 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplapx.dll
[2009/12/19 19:44:06 | 00,065,536 | ---- | C] (Ligos Corporation) -- C:\Windows\System32\mplam6.dll
[2009/12/19 19:43:54 | 00,000,000 | ---D | C] -- C:\Program Files\ACE Mega CoDecS Pack
[2009/12/19 19:26:07 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Corel
[2009/12/19 15:09:52 | 00,000,000 | ---D | C] -- C:\Program Files\Guitar Pro 5
[2009/12/19 13:10:37 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\Axialis
[2009/12/19 13:10:36 | 00,000,000 | ---D | C] -- C:\Program Files\Axialis
[2009/12/19 13:10:23 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Local\Axialis
[2009/12/19 13:00:38 | 00,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2009/12/19 13:00:01 | 00,000,000 | ---D | C] -- C:\Program Files\AGEIA Technologies
[2009/12/19 12:59:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2009/12/19 12:59:38 | 00,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2009/12/19 12:44:02 | 00,000,000 | ---D | C] -- C:\ProgramData\Google
[2009/12/19 12:30:41 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2009/12/19 12:25:30 | 00,029,512 | ---- | C] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2009/12/19 12:25:24 | 00,030,024 | ---- | C] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2009/12/19 12:25:24 | 00,021,320 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2009/12/19 12:25:03 | 00,000,000 | ---D | C] -- C:\Users\Cristi\AppData\Roaming\TuneUp Software
[2009/12/19 12:24:49 | 00,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2010
[2009/12/19 12:23:02 | 00,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2009/12/19 12:22:49 | 00,000,000 | -HSD | C] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2009/12/19 12:09:25 | 00,000,000 | R--D | C] -- C:\Users\Cristi\Virtual Machines
[2009/12/19 11:54:56 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
 
[color=#E56717]========== Files - Modified Within 14 Days ==========[/color]
 
[2010/01/02 08:14:35 | 02,883,584 | ---- | M] () -- C:\Users\Cristi\NTUSER.DAT
[2010/01/02 08:11:45 | 00,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 08:11:45 | 00,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 08:08:28 | 00,727,362 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/01/02 08:08:28 | 00,625,482 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/01/02 08:08:28 | 00,108,104 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/01/02 08:02:54 | 00,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/02 08:02:40 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/01/02 08:02:37 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/01/02 08:02:32 | 28,182,20032 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/02 08:02:32 | 26,351,7620 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/01/02 07:25:06 | 00,000,894 | ---- | M] () -- C:\Users\Cristi\Desktop\NTREGOPT.lnk
[2010/01/02 07:25:06 | 00,000,875 | ---- | M] () -- C:\Users\Cristi\Desktop\ERUNT.lnk
[2010/01/02 07:25:03 | 00,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/02 04:14:46 | 00,001,652 | ---- | M] () -- C:\Users\Cristi\Desktop\to be continued.gp5
[2010/01/02 03:51:13 | 07,100,389 | ---- | M] () -- C:\Users\Cristi\Desktop\sniffer.zip
[2010/01/02 03:34:10 | 00,053,653 | ---- | M] () -- C:\Users\Cristi\Desktop\asche_zu_asche_ver3.gp4
[2010/01/01 23:37:20 | 00,060,481 | ---- | M] () -- C:\Users\Cristi\Desktop\15p0rc1.gif
[2010/01/01 23:33:03 | 00,013,398 | ---- | M] () -- C:\Users\Cristi\Desktop\we_three_kings.gp5
[2010/01/01 15:06:53 | 03,312,451 | -H-- | M] () -- C:\Users\Cristi\AppData\Local\IconCache.db
[2010/01/01 15:02:28 | 06,410,628 | ---- | M] () -- C:\Users\Cristi\Desktop\Untitled-1.png
[2010/01/01 14:24:12 | 00,171,554 | ---- | M] () -- C:\Users\Cristi\Desktop\hannah-hilton.jpg
[2010/01/01 13:51:41 | 00,022,328 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010/01/01 13:51:41 | 00,022,328 | ---- | M] () -- C:\Users\Cristi\AppData\Roaming\PnkBstrK.sys
[2010/01/01 13:51:33 | 00,103,736 | ---- | M] () -- C:\Windows\System32\PnkBstrB.exe
[2010/01/01 13:51:26 | 00,669,184 | ---- | M] () -- C:\Windows\System32\pbsvc.exe
[2010/01/01 13:50:01 | 00,001,256 | ---- | M] () -- C:\Users\Public\Desktop\Crysis.lnk
[2010/01/01 13:45:23 | 00,030,361 | ---- | M] () -- C:\Users\Cristi\Desktop\Untitled.jpg
[2010/01/01 13:36:44 | 00,020,861 | ---- | M] () -- C:\Users\Cristi\Desktop\selena-gomez-blonde.jpg
[2010/01/01 13:36:26 | 00,138,337 | ---- | M] () -- C:\Users\Cristi\Desktop\hotblonde.jpg
[2010/01/01 13:33:54 | 00,046,172 | ---- | M] () -- C:\Users\Cristi\Desktop\jennifer-aniston1.jpg
[2010/01/01 12:59:23 | 00,132,425 | ---- | M] () -- C:\Users\Cristi\Desktop\movingbreastfq4.gif
[2010/01/01 11:40:58 | 03,710,223 | ---- | M] () -- C:\Users\Cristi\Desktop\Taylor_Swift_-_You_Belong_With_Me.mp3
[2010/01/01 11:20:27 | 03,587,784 | ---- | M] () -- C:\Users\Cristi\Desktop\Taylor Swift - You Belong With Me.mp3
[2010/01/01 11:20:27 | 03,587,784 | ---- | M] () -- C:\Users\Cristi\Desktop\Taylor Swift - You Belong With Me - Copy.mp3
[2010/01/01 09:48:57 | 00,031,976 | ---- | M] () -- C:\Users\Cristi\Desktop\taylor_swift.jpg
[2010/01/01 07:57:49 | 00,000,132 | ---- | M] () -- C:\Windows\System32\rezumatenoi.dat
[2010/01/01 07:56:56 | 00,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\System32\CmdLineExt.dll
[2010/01/01 07:36:53 | 02,310,752 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/01/01 07:22:27 | 00,066,872 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe
[2010/01/01 07:12:15 | 00,043,399 | ---- | M] () -- C:\Users\Cristi\Desktop\wat.jpg
[2010/01/01 06:35:08 | 00,418,721 | ---- | M] () -- C:\Users\Cristi\Desktop\Fuckers.png
[2010/01/01 03:30:43 | 00,109,056 | ---- | M] () -- C:\Users\Cristi\Desktop\evolution.VSP
[2010/01/01 02:55:43 | 00,062,464 | ---- | M] () -- C:\Users\Cristi\Desktop\herr-gates.jpg
[2010/01/01 02:54:44 | 00,146,402 | ---- | M] () -- C:\Users\Cristi\Desktop\1172090604_ec5cccb1c6.jpg
[2010/01/01 02:34:11 | 00,070,303 | ---- | M] () -- C:\Users\Cristi\Desktop\clock.jpg
[2010/01/01 02:27:29 | 00,021,644 | ---- | M] () -- C:\Users\Cristi\Desktop\clock1.jpg
[2010/01/01 01:51:03 | 00,028,613 | ---- | M] () -- C:\Users\Cristi\Desktop\Windows ME.jpg
[2010/01/01 01:43:38 | 01,244,890 | ---- | M] () -- C:\Users\Cristi\Desktop\Untitled-2.jpg
[2010/01/01 01:41:43 | 00,075,308 | ---- | M] () -- C:\Users\Cristi\Desktop\kirstendunst.jpg
[2010/01/01 01:32:37 | 00,102,528 | ---- | M] () -- C:\Users\Cristi\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/01/01 01:32:23 | 00,026,425 | ---- | M] () -- C:\Users\Cristi\Desktop\compaq-presario-sg3440il-desktop-pc.jpg
[2010/01/01 01:32:17 | 00,185,009 | ---- | M] () -- C:\Users\Cristi\Desktop\trs80.jpg
[2009/12/31 10:41:57 | 00,049,777 | ---- | M] () -- C:\Users\Cristi\Desktop\Buchanan, Roy - The Messiah Will Come Again v1.gp5
[2009/12/31 10:28:55 | 00,050,327 | ---- | M] () -- C:\Users\Cristi\Desktop\still_got_the_blues.gp3
[2009/12/31 10:06:51 | 00,093,184 | ---- | M] () -- C:\Users\Cristi\Desktop\The Messiah Will Come Again part 1.doc
[2009/12/31 09:23:02 | 00,289,405 | ---- | M] () -- C:\Users\Cristi\Desktop\Untitled-3.png
[2009/12/31 09:12:39 | 00,028,025 | ---- | M] () -- C:\Users\Cristi\Desktop\imageshackget.jpg
[2009/12/31 08:48:25 | 07,127,450 | ---- | M] () -- C:\Users\Cristi\Desktop\Gary_Moore_The_Messiah_Will_Come_Again.mp3
[2009/12/31 07:44:03 | 00,009,033 | ---- | M] () -- C:\Windows\System32\quicktime.qtp
[2009/12/31 05:37:45 | 00,019,210 | ---- | M] () -- C:\Users\Cristi\Desktop\avatar.png
[2009/12/31 04:53:55 | 00,000,528 | ---- | M] () -- C:\Windows\win.ini
[2009/12/31 04:45:12 | 00,059,904 | ---- | M] () -- C:\Users\Cristi\Desktop\The Messiah Will Come Again part 3.doc
[2009/12/31 04:40:36 | 00,046,592 | ---- | M] () -- C:\Users\Cristi\Desktop\The Messiah Will Come Again part 2.doc
[2009/12/31 04:33:58 | 00,049,777 | ---- | M] () -- C:\Users\Cristi\Desktop\Roy Buchanan - The Messiah will come again.gp5
[2009/12/31 03:39:44 | 00,000,965 | ---- | M] () -- C:\Users\Cristi\Desktop\SpeedFan.lnk
[2009/12/31 03:39:43 | 00,000,045 | ---- | M] () -- C:\Windows\System32\initdebug.nfo
[2009/12/31 01:57:27 | 00,001,905 | ---- | M] () -- C:\Windows\diagwrn.xml
[2009/12/31 01:57:27 | 00,001,905 | ---- | M] () -- C:\Windows\diagerr.xml
[2009/12/31 01:55:46 | 00,344,679 | ---- | M] () -- C:\Users\Cristi\Desktop\nv_wallpaper.jpg
[2009/12/31 01:48:56 | 11,940,768 | ---- | M] (Passmark Software                                           ) -- C:\Users\Cristi\Desktop\petst.exe
[2009/12/31 01:45:15 | 00,060,797 | ---- | M] () -- C:\Users\Cristi\Desktop\fotografii0006.jpg
[2009/12/30 23:28:30 | 00,065,538 | ---- | M] () -- C:\Users\Cristi\Desktop\orlova_660.jpg
[2009/12/30 22:52:00 | 05,917,258 | ---- | M] () -- C:\Users\Cristi\Desktop\powertab.zip
[2009/12/30 22:51:11 | 00,022,053 | ---- | M] () -- C:\Users\Cristi\Desktop\bad_girlfriend_ver2.ptb
[2009/12/30 22:49:03 | 00,049,589 | ---- | M] () -- C:\Users\Cristi\Desktop\bad_girlfriend.gp3
[2009/12/30 22:47:21 | 05,832,583 | ---- | M] () -- C:\Users\Cristi\Desktop\Theory of a Dead Man - Bad Girlfriend.mp3
[2009/12/30 14:55:24 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/12/30 14:54:58 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/12/30 12:24:32 | 00,000,930 | ---- | M] () -- C:\Users\Cristi\Desktop\Doom3.lnk
[2009/12/30 11:59:49 | 00,001,622 | ---- | M] () -- C:\Users\Public\Desktop\DOOM 3 Resurrection of Evil.lnk
[2009/12/30 11:59:46 | 00,000,338 | ---- | M] () -- C:\Windows\d3xp.ini
[2009/12/30 11:52:19 | 00,000,331 | ---- | M] () -- C:\Windows\doom3.ini
[2009/12/30 09:17:29 | 00,072,630 | ---- | M] () -- C:\Users\Cristi\Desktop\2.jpg
[2009/12/30 06:43:22 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
[2009/12/30 06:42:55 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
[2009/12/30 04:51:47 | 00,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE
[2009/12/29 23:59:28 | 00,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2009/12/27 07:50:17 | 00,068,305 | ---- | M] () -- C:\Users\Cristi\Desktop\1.jpg
[2009/12/27 04:25:07 | 00,413,696 | ---- | M] (Creative Labs) -- C:\Windows\System32\wrap_oal.dll
[2009/12/27 04:25:07 | 00,110,592 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\System32\OpenAL32.dll
[2009/12/27 01:19:41 | 00,055,433 | ---- | M] () -- C:\Windows\War3Unin.dat
[2009/12/27 01:19:41 | 00,001,902 | ---- | M] () -- C:\Users\Cristi\Desktop\Frozen Throne.lnk
[2009/12/27 01:19:38 | 00,139,264 | ---- | M] (Blizzard Entertainment) -- C:\Windows\War3Unin.exe
[2009/12/27 01:19:38 | 00,002,829 | ---- | M] () -- C:\Windows\War3Unin.pif
[2009/12/27 01:12:33 | 00,001,895 | ---- | M] () -- C:\Users\Cristi\Desktop\Warcraft III.lnk
[2009/12/25 06:42:23 | 00,000,005 | ---- | M] () -- C:\Windows\System32\SySCut.dat
[2009/12/23 13:37:41 | 00,524,288 | -HS- | M] () -- C:\Users\Cristi\NTUSER.DAT{8975c2d1-ef99-11de-baeb-00241d153668}.TMContainer00000000000000000002.regtrans-ms
[2009/12/23 13:37:41 | 00,524,288 | -HS- | M] () -- C:\Users\Cristi\NTUSER.DAT{8975c2d1-ef99-11de-baeb-00241d153668}.TMContainer00000000000000000001.regtrans-ms
[2009/12/23 13:37:41 | 00,065,536 | -HS- | M] () -- C:\Users\Cristi\NTUSER.DAT{8975c2d1-ef99-11de-baeb-00241d153668}.TM.blf
[2009/12/22 03:50:23 | 00,281,760 | ---- | M] () -- C:\Windows\System32\drivers\atksgt.sys
[2009/12/22 03:50:23 | 00,025,888 | ---- | M] () -- C:\Windows\System32\drivers\lirsgt.sys
[2009/12/20 08:04:50 | 00,691,696 | ---- | M] () -- C:\Windows\System32\drivers\sptd.sys
[2009/12/19 21:43:44 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2009/12/19 21:37:06 | 00,001,738 | ---- | M] () -- C:\Users\Cristi\Desktop\Things.lnk
[2009/12/19 19:47:54 | 00,001,042 | -H-- | M] () -- C:\Users\Cristi\Desktop\VLC media player.lnk
[2009/12/19 19:44:42 | 00,009,421 | ---- | M] () -- C:\Windows\system.ini
[2009/12/19 19:38:31 | 00,003,584 | ---- | M] () -- C:\Users\Cristi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/19 19:26:55 | 00,002,516 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2009/12/19 19:26:55 | 00,000,088 | RHS- | M] () -- C:\ProgramData\2B99956F00.sys
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\wsbl.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ph_white.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ph_summ.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ph_spoof.sig
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ph_sign.slf
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ph_fuzzy.sig
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ph_black.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\pcwords2.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\pcwords.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\pc_sign.slf
[2009/12/19 12:00:24 | 00,000,000 | ---- | M] () -- C:\Windows\System32\ab_sbl.sig
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010/01/02 07:25:06 | 00,000,894 | ---- | C] () -- C:\Users\Cristi\Desktop\NTREGOPT.lnk
[2010/01/02 07:25:06 | 00,000,875 | ---- | C] () -- C:\Users\Cristi\Desktop\ERUNT.lnk
[2010/01/02 04:14:46 | 00,001,652 | ---- | C] () -- C:\Users\Cristi\Desktop\to be continued.gp5
[2010/01/02 03:51:04 | 07,100,389 | ---- | C] () -- C:\Users\Cristi\Desktop\sniffer.zip
[2010/01/02 03:34:10 | 00,053,653 | ---- | C] () -- C:\Users\Cristi\Desktop\asche_zu_asche_ver3.gp4
[2010/01/01 23:37:20 | 00,060,481 | ---- | C] () -- C:\Users\Cristi\Desktop\15p0rc1.gif
[2010/01/01 23:33:03 | 00,013,398 | ---- | C] () -- C:\Users\Cristi\Desktop\we_three_kings.gp5
[2010/01/01 14:22:15 | 06,410,628 | ---- | C] () -- C:\Users\Cristi\Desktop\Untitled-1.png
[2010/01/01 13:50:00 | 00,001,256 | ---- | C] () -- C:\Users\Public\Desktop\Crysis.lnk
[2010/01/01 13:45:23 | 00,030,361 | ---- | C] () -- C:\Users\Cristi\Desktop\Untitled.jpg
[2010/01/01 13:39:48 | 00,171,554 | ---- | C] () -- C:\Users\Cristi\Desktop\hannah-hilton.jpg
[2010/01/01 13:36:44 | 00,020,861 | ---- | C] () -- C:\Users\Cristi\Desktop\selena-gomez-blonde.jpg
[2010/01/01 13:36:25 | 00,138,337 | ---- | C] () -- C:\Users\Cristi\Desktop\hotblonde.jpg
[2010/01/01 13:33:54 | 00,046,172 | ---- | C] () -- C:\Users\Cristi\Desktop\jennifer-aniston1.jpg
[2010/01/01 12:59:23 | 00,132,425 | ---- | C] () -- C:\Users\Cristi\Desktop\movingbreastfq4.gif
[2010/01/01 11:39:37 | 03,710,223 | ---- | C] () -- C:\Users\Cristi\Desktop\Taylor_Swift_-_You_Belong_With_Me.mp3
[2010/01/01 11:23:42 | 03,587,784 | ---- | C] () -- C:\Users\Cristi\Desktop\Taylor Swift - You Belong With Me - Copy.mp3
[2010/01/01 11:19:11 | 03,587,784 | ---- | C] () -- C:\Users\Cristi\Desktop\Taylor Swift - You Belong With Me.mp3
[2010/01/01 09:48:57 | 00,031,976 | ---- | C] () -- C:\Users\Cristi\Desktop\taylor_swift.jpg
[2010/01/01 07:22:43 | 00,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010/01/01 07:22:42 | 00,022,328 | ---- | C] () -- C:\Users\Cristi\AppData\Roaming\PnkBstrK.sys
[2010/01/01 07:22:32 | 00,103,736 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2010/01/01 07:22:27 | 00,669,184 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2010/01/01 07:22:27 | 00,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2010/01/01 07:12:11 | 00,043,399 | ---- | C] () -- C:\Users\Cristi\Desktop\wat.jpg
[2010/01/01 06:35:08 | 00,418,721 | ---- | C] () -- C:\Users\Cristi\Desktop\Fuckers.png
[2010/01/01 06:20:02 | 00,000,886 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/01 06:19:59 | 00,000,882 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/01 02:55:43 | 00,062,464 | ---- | C] () -- C:\Users\Cristi\Desktop\herr-gates.jpg
[2010/01/01 02:54:44 | 00,146,402 | ---- | C] () -- C:\Users\Cristi\Desktop\1172090604_ec5cccb1c6.jpg
[2010/01/01 02:34:11 | 00,070,303 | ---- | C] () -- C:\Users\Cristi\Desktop\clock.jpg
[2010/01/01 02:27:29 | 00,021,644 | ---- | C] () -- C:\Users\Cristi\Desktop\clock1.jpg
[2010/01/01 01:54:23 | 00,109,056 | ---- | C] () -- C:\Users\Cristi\Desktop\evolution.VSP
[2010/01/01 01:51:03 | 00,028,613 | ---- | C] () -- C:\Users\Cristi\Desktop\Windows ME.jpg
[2010/01/01 01:43:35 | 01,244,890 | ---- | C] () -- C:\Users\Cristi\Desktop\Untitled-2.jpg
[2010/01/01 01:41:43 | 00,075,308 | ---- | C] () -- C:\Users\Cristi\Desktop\kirstendunst.jpg
[2010/01/01 01:32:23 | 00,026,425 | ---- | C] () -- C:\Users\Cristi\Desktop\compaq-presario-sg3440il-desktop-pc.jpg
[2010/01/01 01:32:17 | 00,185,009 | ---- | C] () -- C:\Users\Cristi\Desktop\trs80.jpg
[2010/01/01 01:20:15 | 00,209,040 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2010/01/01 01:20:15 | 00,204,944 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2010/01/01 01:20:15 | 00,196,752 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2010/01/01 01:20:15 | 00,196,752 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2010/01/01 01:20:15 | 00,192,656 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2010/01/01 01:20:15 | 00,024,720 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2010/01/01 01:16:06 | 00,007,420 | ---- | C] () -- C:\Windows\UA000106.DLL
[2010/01/01 01:00:24 | 00,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2010/01/01 01:00:24 | 00,005,672 | ---- | C] () -- C:\Windows\System32\quartz.vxd
[2009/12/31 10:41:57 | 00,049,777 | ---- | C] () -- C:\Users\Cristi\Desktop\Buchanan, Roy - The Messiah Will Come Again v1.gp5
[2009/12/31 10:28:55 | 00,050,327 | ---- | C] () -- C:\Users\Cristi\Desktop\still_got_the_blues.gp3
[2009/12/31 09:23:00 | 00,289,405 | ---- | C] () -- C:\Users\Cristi\Desktop\Untitled-3.png
[2009/12/31 09:12:39 | 00,028,025 | ---- | C] () -- C:\Users\Cristi\Desktop\imageshackget.jpg
[2009/12/31 08:47:42 | 07,127,450 | ---- | C] () -- C:\Users\Cristi\Desktop\Gary_Moore_The_Messiah_Will_Come_Again.mp3
[2009/12/31 06:39:27 | 00,007,090 | ---- | C] () -- C:\Windows\System32\nvnrm.nvu
[2009/12/31 06:39:27 | 00,002,344 | ---- | C] () -- C:\Windows\System32\nvsmb.nvu
[2009/12/31 06:17:26 | 00,006,136 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2009/12/31 04:45:12 | 00,059,904 | ---- | C] () -- C:\Users\Cristi\Desktop\The Messiah Will Come Again part 3.doc
[2009/12/31 04:40:36 | 00,046,592 | ---- | C] () -- C:\Users\Cristi\Desktop\The Messiah Will Come Again part 2.doc
[2009/12/31 04:40:29 | 00,093,184 | ---- | C] () -- C:\Users\Cristi\Desktop\The Messiah Will Come Again part 1.doc
[2009/12/31 04:34:06 | 00,049,777 | ---- | C] () -- C:\Users\Cristi\Desktop\Roy Buchanan - The Messiah Will Come Again v1.gp5
[2009/12/31 04:33:58 | 00,049,777 | ---- | C] () -- C:\Users\Cristi\Desktop\Roy Buchanan - The Messiah will come again.gp5
[2009/12/31 03:47:44 | 00,019,210 | ---- | C] () -- C:\Users\Cristi\Desktop\avatar.png
[2009/12/31 03:39:44 | 00,000,965 | ---- | C] () -- C:\Users\Cristi\Desktop\SpeedFan.lnk
[2009/12/31 03:39:22 | 00,000,045 | ---- | C] () -- C:\Windows\System32\initdebug.nfo
[2009/12/31 01:56:44 | 00,001,905 | ---- | C] () -- C:\Windows\diagwrn.xml
[2009/12/31 01:56:44 | 00,001,905 | ---- | C] () -- C:\Windows\diagerr.xml
[2009/12/31 01:55:46 | 00,344,679 | ---- | C] () -- C:\Users\Cristi\Desktop\nv_wallpaper.jpg
[2009/12/31 01:45:15 | 00,060,797 | ---- | C] () -- C:\Users\Cristi\Desktop\fotografii0006.jpg
[2009/12/30 23:28:30 | 00,065,538 | ---- | C] () -- C:\Users\Cristi\Desktop\orlova_660.jpg
[2009/12/30 22:51:56 | 05,917,258 | ---- | C] () -- C:\Users\Cristi\Desktop\powertab.zip
[2009/12/30 22:51:11 | 00,022,053 | ---- | C] () -- C:\Users\Cristi\Desktop\bad_girlfriend_ver2.ptb
[2009/12/30 22:49:03 | 00,049,589 | ---- | C] () -- C:\Users\Cristi\Desktop\bad_girlfriend.gp3
[2009/12/30 22:46:47 | 05,832,583 | ---- | C] () -- C:\Users\Cristi\Desktop\Theory of a Dead Man - Bad Girlfriend.mp3
[2009/12/30 12:24:17 | 00,000,930 | ---- | C] () -- C:\Users\Cristi\Desktop\Doom3.lnk
[2009/12/30 11:59:49 | 00,001,622 | ---- | C] () -- C:\Users\Public\Desktop\DOOM 3 Resurrection of Evil.lnk
[2009/12/30 11:59:46 | 00,000,338 | ---- | C] () -- C:\Windows\d3xp.ini
[2009/12/30 11:52:19 | 00,000,331 | ---- | C] () -- C:\Windows\doom3.ini
[2009/12/30 11:38:39 | 05,578,002 | ---- | C] () -- C:\Users\Cristi\Desktop\02-sixx_am-van_nuys.mp3
[2009/12/30 09:17:28 | 00,072,630 | ---- | C] () -- C:\Users\Cristi\Desktop\2.jpg
[2009/12/30 06:43:22 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
[2009/12/30 06:42:55 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
[2009/12/30 04:51:47 | 00,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2009/12/30 04:00:33 | 00,058,792 | ---- | C] () -- C:\Windows\System32\wbload.dll
[2009/12/27 07:47:13 | 00,068,305 | ---- | C] () -- C:\Users\Cristi\Desktop\1.jpg
[2009/12/27 07:38:35 | 26,351,7620 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2009/12/27 01:19:41 | 00,001,902 | ---- | C] () -- C:\Users\Cristi\Desktop\Frozen Throne.lnk
[2009/12/27 01:12:33 | 00,001,895 | ---- | C] () -- C:\Users\Cristi\Desktop\Warcraft III.lnk
[2009/12/27 01:12:30 | 00,055,433 | ---- | C] () -- C:\Windows\War3Unin.dat
[2009/12/27 01:12:29 | 00,002,829 | ---- | C] () -- C:\Windows\War3Unin.pif
[2009/12/25 06:36:12 | 00,000,005 | ---- | C] () -- C:\Windows\System32\SySCut.dat
[2009/12/23 09:41:26 | 00,524,288 | -HS- | C] () -- C:\Users\Cristi\NTUSER.DAT{8975c2d1-ef99-11de-baeb-00241d153668}.TMContainer00000000000000000002.regtrans-ms
[2009/12/23 09:41:26 | 00,524,288 | -HS- | C] () -- C:\Users\Cristi\NTUSER.DAT{8975c2d1-ef99-11de-baeb-00241d153668}.TMContainer00000000000000000001.regtrans-ms
[2009/12/23 09:41:26 | 00,065,536 | -HS- | C] () -- C:\Users\Cristi\NTUSER.DAT{8975c2d1-ef99-11de-baeb-00241d153668}.TM.blf
[2009/12/22 03:10:03 | 00,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2009/12/22 03:10:03 | 00,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2009/12/20 23:59:17 | 00,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2009/12/20 08:04:50 | 00,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009/12/19 21:43:44 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2009/12/19 21:37:06 | 00,001,738 | ---- | C] () -- C:\Users\Cristi\Desktop\Things.lnk
[2009/12/19 19:47:54 | 00,001,042 | -H-- | C] () -- C:\Users\Cristi\Desktop\VLC media player.lnk
[2009/12/19 19:44:17 | 00,053,248 | ---- | C] () -- C:\Windows\System32\vp6dec_settings.cpl
[2009/12/19 19:44:11 | 00,009,033 | ---- | C] () -- C:\Windows\System32\quicktime.qtp
[2009/12/19 19:44:08 | 00,000,761 | ---- | C] () -- C:\Windows\m3jp2k.ini
[2009/12/19 19:44:08 | 00,000,714 | ---- | C] () -- C:\Windows\m3jpeg.ini
[2009/12/19 19:44:08 | 00,000,702 | ---- | C] () -- C:\Windows\mmtvmj.ini
[2009/12/19 19:44:06 | 00,019,968 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll
[2009/12/19 19:44:05 | 00,152,064 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009/12/19 19:44:03 | 00,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009/12/19 19:43:54 | 00,417,792 | ---- | C] () -- C:\Windows\System32\ac3filter.cpl
[2009/12/19 19:38:31 | 00,003,584 | ---- | C] () -- C:\Users\Cristi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/19 19:26:08 | 00,000,088 | RHS- | C] () -- C:\ProgramData\2B99956F00.sys
[2009/12/19 19:26:07 | 00,002,516 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\wsbl.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ph_white.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ph_summ.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ph_spoof.sig
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ph_sign.slf
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ph_fuzzy.sig
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ph_black.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\pcwords2.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\pcwords.dat
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\pc_sign.slf
[2009/12/19 12:00:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\ab_sbl.sig
[2009/12/18 23:14:30 | 00,048,640 | ---- | C] () -- C:\Windows\grwprocs.dll
[2009/12/18 23:14:30 | 00,000,770 | ---- | C] () -- C:\Windows\C-B settings.ini
[2009/11/06 10:58:04 | 00,178,975 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2009/07/13 15:51:43 | 00,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 15:42:10 | 00,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/01/15 13:45:34 | 00,181,248 | ---- | C] () -- C:\Windows\System32\txmlutil.dll
[2007/01/31 14:50:32 | 00,913,408 | ---- | C] () -- C:\Windows\System32\xreglib.dll
[2003/08/07 14:01:52 | 00,237,568 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[1996/04/03 11:33:26 | 00,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009/12/18 23:07:02 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\AnvSoft
[2009/12/18 06:38:53 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Any Video Converter Professional
[2009/12/19 13:10:37 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Axialis
[2009/12/18 06:28:16 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\BitDefender
[2009/12/22 09:55:49 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\BSplayer PRO
[2009/12/20 08:10:42 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\DAEMON Tools Lite
[2009/12/27 22:30:05 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\fretsonfire
[2010/01/01 11:23:21 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\LimeWire
[2009/12/25 08:57:13 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Music Recognition
[2009/12/30 05:31:00 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Nimi
[2009/12/30 06:45:35 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Nokia
[2009/12/18 04:11:49 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Opera
[2009/12/30 06:43:20 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\PC Suite
[2009/12/23 08:43:33 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Systweak
[2009/12/19 12:25:03 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\TuneUp Software
[2010/01/01 07:38:40 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\Ulead Systems
[2009/12/18 23:38:25 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\URSoft
[2010/01/02 08:13:03 | 00,000,000 | ---D | M] -- C:\Users\Cristi\AppData\Roaming\uTorrent
[2009/07/13 20:53:46 | 00,017,272 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2009/07/13 17:26:15 | 00,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/13 17:26:15 | 00,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/13 17:26:15 | 00,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2009/07/13 17:26:15 | 00,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/13 17:26:15 | 00,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/13 17:26:15 | 00,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
 
[color=#A23BEC]< MD5 for: CNGAUDIT.DLL  >[/color]
[2009/07/13 17:15:06 | 00,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/13 17:15:06 | 00,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
 
[color=#A23BEC]< MD5 for: EVENTLOG.DLL  >[/color]
[2009/06/25 16:04:32 | 00,001,536 | ---- | M] () MD5=8D4CD834292293F4055BAC313268E2DE -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\lib\eventlog.dll
[2007/05/17 21:34:04 | 00,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\CyberLink\PowerDirector\EventLog.dll
 
[color=#A23BEC]< MD5 for: IASTORV.SYS  >[/color]
[2009/07/13 17:20:36 | 00,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009/07/13 17:20:36 | 00,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/13 17:20:36 | 00,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2009/07/13 17:16:02 | 00,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/13 17:16:02 | 00,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
 
[color=#A23BEC]< MD5 for: NVRD32.SYS  >[/color]
[2006/12/22 04:07:04 | 00,122,880 | ---- | M] (NVIDIA Corporation) MD5=7D58CA2B284B41351F5176EACA1173C6 -- C:\Windows\System32\drivers\nvrd32.sys
[2006/12/22 04:07:04 | 00,122,880 | ---- | M] (NVIDIA Corporation) MD5=7D58CA2B284B41351F5176EACA1173C6 -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_x86_neutral_4dc60d9985d10dc6\nvrd32.sys
 
[color=#A23BEC]< MD5 for: NVSTOR.SYS  >[/color]
[2009/07/13 17:20:44 | 00,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009/07/13 17:20:44 | 00,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/13 17:20:44 | 00,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
 
[color=#A23BEC]< MD5 for: NVSTOR32.SYS  >[/color]
[2009/06/30 01:32:54 | 00,212,000 | ---- | M] (NVIDIA Corporation) MD5=032EF66DD96692AD3A9D36160F467F67 -- C:\Windows\System32\drivers\nvstor32.sys
[2009/06/30 01:32:54 | 00,212,000 | ---- | M] (NVIDIA Corporation) MD5=032EF66DD96692AD3A9D36160F467F67 -- C:\Windows\System32\DriverStore\FileRepository\nvstor32.inf_x86_neutral_68640c3c72cad0af\nvstor32.sys
[2006/12/22 04:07:10 | 00,093,696 | ---- | M] (NVIDIA Corporation) MD5=5FBF62A83B551F757112B4A0C27432EC -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_x86_neutral_4dc60d9985d10dc6\nvstor32.sys
[2008/08/18 02:58:16 | 00,145,952 | ---- | M] (NVIDIA Corporation) MD5=8EE374B6FB3CB2BB8D70395218B464A5 -- C:\$WINDOWS.~Q\DATA\Windows\System32\drivers\nvstor32.sys
[2008/08/18 02:58:16 | 00,145,952 | ---- | M] (NVIDIA Corporation) MD5=8EE374B6FB3CB2BB8D70395218B464A5 -- C:\Windows\System32\DriverStore\FileRepository\nvstor32.inf_x86_neutral_b900095f3aa53048\nvstor32.sys
[2007/08/09 18:12:30 | 00,110,624 | ---- | M] (NVIDIA Corporation) MD5=DC5F166422BEEBF195E3E4BB8AB4EE22 -- C:\Windows\System32\DriverStore\FileRepository\nvstor32.inf_x86_neutral_1dfd6f8c0556ba62\nvstor32.sys
 
[color=#A23BEC]< MD5 for: SCECLI.DLL  >[/color]
[2009/07/13 17:16:13 | 00,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009/07/13 17:16:13 | 00,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2009/07/13 17:15:13 | 00,346,112 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\dxtmsft.dll
[2009/07/13 17:15:13 | 00,215,552 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\dxtrans.dll
[2009/07/13 17:15:19 | 00,271,360 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\es.dll
[2009/07/13 17:15:52 | 01,233,408 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\msxml3.dll
[2009/08/28 22:59:32 | 11,406,336 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\System32\wmp.dll
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:B3D74A13
< End of report >