Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

AV Protection 2011 (spyware or malware) help.


  • Please log in to reply

#1
JacksonStone

JacksonStone

    New Member

  • Member
  • Pip
  • 2 posts
I was browsing different pages on this online forum when i noticed this pop-up showed up.
It was named AV Protection 2011 and it was saying i had numerous infections. i ran my nod 32 nothing picked up re booted my computer and it keeps popping up.can someone help me with this?

OTL logfile created on: 11/21/2011 11:49:51 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Jesse\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.25 Gb Available Physical Memory | 81.33% Memory free
7.99 Gb Paging File | 7.29 Gb Available in Paging File | 91.14% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.66 Gb Total Space | 226.79 Gb Free Space | 48.70% Space Free | Partition Type: NTFS
Drive F: | 931.51 Gb Total Space | 690.35 Gb Free Space | 74.11% Space Free | Partition Type: NTFS

Computer Name: JESSE-PC | User Name: Jesse | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/11/21 23:48:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Jesse\Downloads\OTL.exe
PRC - [2011/11/10 15:25:59 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/18 20:56:55 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
MOD - [2011/11/10 15:25:58 | 001,989,592 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011/08/03 02:31:28 | 000,255,592 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2010/11/20 06:19:56 | 000,232,448 | ---- | M] () -- \\.\globalroot\systemroot\syswow64\mswsock.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/08/12 14:18:40 | 000,042,360 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV:64bit: - [2010/08/12 14:16:26 | 000,810,144 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe -- (ekrn)
SRV:64bit: - [2009/07/13 19:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/11/19 17:31:52 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/10/25 13:38:10 | 000,542,672 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2011/08/03 05:50:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/08/03 02:31:42 | 000,379,496 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/06/07 14:20:40 | 000,075,136 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011/06/06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/06/01 06:44:54 | 002,337,144 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/11/08 12:47:20 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/10/19 06:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2010/09/14 04:45:56 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2010/09/14 04:45:44 | 000,508,264 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 15:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/11/12 14:09:11 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV:64bit: - [2011/09/28 13:14:02 | 000,070,760 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PCTBD64.sys -- (PCTBD)
DRV:64bit: - [2011/08/02 17:38:56 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/06/10 05:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/05/25 00:09:17 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011/03/11 00:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 00:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/12/15 22:06:46 | 000,047,232 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2010/11/20 07:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 05:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/09/14 04:45:52 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
DRV:64bit: - [2010/09/14 04:45:50 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
DRV:64bit: - [2010/09/14 04:45:48 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
DRV:64bit: - [2010/09/14 04:45:44 | 000,760,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
DRV:64bit: - [2010/08/04 20:17:14 | 001,342,064 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2010/07/29 13:31:26 | 000,168,544 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:64bit: - [2010/07/29 13:31:26 | 000,141,264 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:64bit: - [2010/07/29 13:31:26 | 000,126,320 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV:64bit: - [2010/06/22 20:47:58 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2010/06/01 22:33:42 | 000,035,840 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS -- (BVRPMPR5a64)
DRV:64bit: - [2010/04/27 15:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid)
DRV:64bit: - [2010/04/27 15:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum)
DRV:64bit: - [2010/04/27 13:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore)
DRV:64bit: - [2010/03/09 20:03:52 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009/07/15 21:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009/07/13 19:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 19:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 19:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 14:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 14:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 14:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 14:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/21 13:40:06 | 000,103,272 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Tpkd.sys -- (Tpkd)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2008/03/13 01:46:00 | 000,027,136 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ManyCam_x64.sys -- (ManyCam)
DRV:64bit: - [2007/08/06 18:21:32 | 000,057,776 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV - [2009/07/13 19:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007/03/16 10:11:20 | 000,015,648 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TBPanelx64.sys -- (Cardex)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 20 73 0E B1 5C A6 CC 01 [binary data]
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@gamersfirst.com/LiveLauncher: C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@unity3d.com/UnityPlayer: C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\Firefox\ [2011/11/21 23:15:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/11/14 12:03:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/14 12:03:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010/11/08 03:38:19 | 000,000,000 | ---D | M]

[2010/11/08 03:15:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Extensions
[2011/11/20 04:17:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\v40a1qkt.default\extensions
[2011/11/11 08:19:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/10/14 21:37:13 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
() (No name found) -- C:\USERS\JESSE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\V40A1QKT.DEFAULT\EXTENSIONS\{E968FC70-8F95-4AB9-9E79-304DE2A71EE1}.XPI
[2011/11/10 15:25:59 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/05/04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/11/10 15:25:57 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/11/10 15:25:57 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2009/06/10 15:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (PC Tools Browser Defender BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Defender) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKCU..\Run: [B39.exe] C:\Users\Jesse\AppData\Roaming\Microsoft\323E\B39.exe ()
O4 - HKCU..\Run: [f22obbF4pmG5QJd8234A] C:\Users\Jesse\AppData\Roaming\WhhhYYXwjUVeIBz\AV Protection 2011v121.exe ()
O4 - HKCU..\Run: [TBPanel] C:\Program Files (x86)\Vtune\TBPanel.exe ()
O4 - HKCU..\Run: [ySS22obFF3m] C:\Users\Jesse\AppData\Roaming\dwme.exe File not found
F3:64bit: - HKCU WinNT: Load - (C:\Users\Jesse\AppData\Roaming\76E51\lvvm.exe) - File not found
F3 - HKCU WinNT: Load - (C:\Users\Jesse\AppData\Roaming\76E51\lvvm.exe) - File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - mmswsock.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\Bonjour\mdnsNSP.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{177BFA9D-4394-4294-A021-58B5B8E90E2A}: DhcpNameServer = 10.49.16.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E4A3D28-61B1-4758-A5B9-B8323D032AC8}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKCU Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (C:\Users\Jesse\AppData\Roaming\E0676\94C32.exe) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Install.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/21 23:43:14 | 000,000,000 | ---D | C] -- C:\Windows\system64
[2011/11/21 23:28:23 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\S5ssQJ7dK8gR9Yw
[2011/11/21 23:28:23 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\ieelIBBtzPNc1v2
[2011/11/21 23:15:08 | 002,291,664 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll
[2011/11/21 23:15:08 | 000,149,456 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll
[2011/11/21 23:15:08 | 000,070,760 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTBD64.sys
[2011/11/21 23:15:07 | 001,681,360 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll
[2011/11/21 23:14:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Tools
[2011/11/21 23:08:38 | 000,230,952 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTSD64.sys
[2011/11/21 23:08:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools
[2011/11/21 23:05:47 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2011/11/21 23:05:46 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\TestApp
[2011/11/21 22:43:23 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\Z4pmH5sQJdKgZhX
[2011/11/21 22:43:23 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\hjUVelIBtPyAuDo
[2011/11/21 21:10:31 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\76E51
[2011/11/21 21:09:59 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\E0676
[2011/11/21 21:09:40 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\tmmHH5ssWJ7ELgZ
[2011/11/21 21:09:40 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\mP00yycS1ivDon4
[2011/11/21 21:09:40 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AV Protection 2011
[2011/11/21 21:09:37 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\XjjUUCelIBrzPyA
[2011/11/21 21:09:36 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\WhhhYYXwjUVeIBz
[2011/11/21 21:09:36 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\aiiivDD2onFpm5s
[2011/11/21 03:07:16 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{9D87CFBE-5F39-47FE-B833-C26FF21D409C}
[2011/11/21 03:07:05 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{22588BA3-4EDA-45C1-9065-73EAB9CEA890}
[2011/11/21 01:27:17 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Desktop\Trapaholic Soundpack XXL
[2011/11/20 01:07:43 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
[2011/11/19 18:36:13 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{DD3B1C02-188F-4A66-923F-5BBA265A76FB}
[2011/11/19 18:36:02 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{F04CCE6C-4100-4B0D-A57C-0582F2B3C38A}
[2011/11/19 01:36:25 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{CEA3A82C-EC43-4B96-A074-D5D3BD3A4805}
[2011/11/19 01:36:14 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{300EE118-0E99-4211-A8AC-292E121639D8}
[2011/11/18 20:56:52 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2011/11/18 18:59:59 | 000,035,840 | R--- | C] (Avanquest Software) -- C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS
[2011/11/18 18:59:00 | 000,000,000 | ---D | C] -- C:\Netgear
[2011/11/14 14:59:13 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{AB48598E-0917-456E-A074-6551A0C93323}
[2011/11/14 14:58:51 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{00AA9699-DBC2-4EAC-A715-175FCF7C1C86}
[2011/11/14 02:58:22 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{D9529BEA-6575-4205-A69F-08E2151A024A}
[2011/11/14 02:58:11 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{EC63D8D9-C221-4AEE-8ABB-4B83C338D5C2}
[2011/11/13 02:13:56 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Desktop\Elune
[2011/11/12 14:09:11 | 000,066,728 | ---- | C] (Eugene V. Muzychenko) -- C:\Windows\SysNative\drivers\vrtaucbl.sys
[2011/11/12 14:09:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Virtual Audio Cable
[2011/11/12 14:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\Virtual Audio Cable
[2011/11/11 18:21:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011/11/10 15:27:00 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RaidCall
[2011/11/10 15:27:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RaidCall
[2011/11/10 15:26:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\raidcall
[2011/11/09 04:10:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/11/09 04:10:08 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011/11/09 04:10:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2011/11/09 04:10:08 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011/11/09 04:07:54 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011/11/09 04:03:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2011/11/03 04:00:45 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{0462DA1E-0426-4E36-8C09-5E819C8E41C6}
[2011/11/03 04:00:34 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\{B305A7BD-6459-4C91-8183-63A197238CD8}
[2011/11/03 01:56:40 | 000,000,000 | R--D | C] -- C:\Users\Jesse\Desktop\taskbar icons
[2011/11/03 01:49:05 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Desktop\
[2011/10/31 17:30:13 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Desktop\Gerardo Ortiz - Entre Dios Y El Diablo (2011 CD2)
[2011/10/31 17:30:12 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Desktop\Gerardo Ortiz - Entre Dios Y El Diablo (2011 CD1)
[2011/10/27 21:09:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MediaMonkey
[2011/10/27 21:08:58 | 000,000,000 | ---D | C] -- C:\Users\Jesse\AppData\Local\MediaMonkey
[2011/10/27 21:08:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MediaMonkey
[2011/10/25 18:49:25 | 000,000,000 | ---D | C] -- C:\Users\Jesse\Documents\FireChrome
[2011/10/25 18:49:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AlyxSoftware

========== Files - Modified Within 30 Days ==========

[2011/11/21 23:45:52 | 000,793,504 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/11/21 23:45:52 | 000,669,500 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/11/21 23:45:52 | 000,125,428 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/11/21 23:41:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/11/21 23:41:34 | 3219,787,776 | -HS- | M] () -- C:\hiberfil.sys
[2011/11/21 23:28:24 | 000,001,978 | ---- | M] () -- C:\Users\Jesse\Desktop\AV Protection 2011.lnk
[2011/11/21 23:28:16 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/11/21 23:20:00 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/11/21 23:09:50 | 001,783,402 | ---- | M] () -- C:\Windows\SysNative\drivers\Cat.DB
[2011/11/21 23:05:48 | 000,001,538 | ---- | M] () -- C:\Users\Jesse\Desktop\sdsetup.exe.lnk
[2011/11/21 22:50:42 | 000,014,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/21 22:50:42 | 000,014,832 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/21 21:10:01 | 000,001,208 | ---- | M] () -- C:\Users\Jesse\AppData\Roaming\ahst.lni
[2011/11/21 18:37:09 | 000,053,376 | ---- | M] () -- C:\Users\Jesse\Desktop\untitled.mp3
[2011/11/21 18:37:07 | 007,272,514 | ---- | M] () -- C:\Users\Jesse\Desktop\Frank Ocean- Novacane.mp3
[2011/11/21 15:46:46 | 001,625,623 | ---- | M] () -- C:\Users\Jesse\Documents\gta_sa 2011-11-21 15-46-46-287.png
[2011/11/21 03:57:17 | 083,958,194 | ---- | M] () -- C:\Users\Jesse\Documents\strogboss1051v1.wmv
[2011/11/21 01:54:38 | 000,102,491 | ---- | M] () -- C:\Users\Jesse\Desktop\project.flp
[2011/11/20 01:07:43 | 000,002,182 | ---- | M] () -- C:\Users\Jesse\Desktop\Halo Custom Edition.lnk
[2011/11/18 19:24:04 | 000,006,173 | ---- | M] () -- C:\Users\Jesse\Desktop\Router_Setup.html
[2011/11/14 03:10:17 | 134,626,518 | ---- | M] () -- C:\Users\Jesse\Documents\NGRP-COP CHASE.wmv
[2011/11/12 14:09:11 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) -- C:\Windows\SysNative\drivers\vrtaucbl.sys
[2011/11/11 04:42:32 | 000,925,184 | ---- | M] () -- C:\Windows\expstart.exe
[2011/11/10 15:27:00 | 000,001,011 | ---- | M] () -- C:\Users\Jesse\Desktop\RaidCall.lnk
[2011/11/10 15:26:10 | 000,002,052 | ---- | M] () -- C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/11/09 04:10:41 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011/11/09 03:39:29 | 002,198,064 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/11/07 20:36:06 | 000,002,046 | -H-- | M] () -- C:\Users\Jesse\Documents\Default.rdp
[2011/11/07 02:38:20 | 000,002,274 | ---- | M] () -- C:\Users\Jesse\Desktop\Ventrilo - Shortcut.lnk
[2011/11/04 16:40:35 | 000,234,536 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011/11/04 16:40:35 | 000,234,536 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011/11/04 16:37:31 | 000,234,536 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011/11/03 23:47:33 | 000,000,173 | ---- | M] () -- C:\Users\Jesse\Desktop\AutoFish.ahk
[2011/11/02 17:45:47 | 000,000,234 | ---- | M] () -- C:\Users\Jesse\Desktop\Radio Clubzone.pls
[2011/10/31 20:22:36 | 000,816,056 | ---- | M] () -- C:\Users\Jesse\Desktop\freeforall.png
[2011/10/28 11:03:00 | 000,230,952 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\PCTSD64.sys
[2011/10/27 21:09:04 | 000,000,977 | ---- | M] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2011/10/25 13:38:20 | 000,149,456 | ---- | M] (PC Tools) -- C:\Windows\SGDetectionTool.dll
[2011/10/25 13:38:18 | 002,291,664 | ---- | M] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll
[2011/10/25 13:38:18 | 001,681,360 | ---- | M] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll
[2011/10/25 13:38:08 | 000,767,952 | ---- | M] () -- C:\Windows\BDTSupport.dll

========== Files Created - No Company Name ==========

[2011/11/21 23:15:08 | 000,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll
[2011/11/21 23:15:08 | 000,003,488 | ---- | C] () -- C:\Windows\UDB.zip
[2011/11/21 23:15:08 | 000,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml
[2011/11/21 23:15:08 | 000,000,879 | ---- | C] () -- C:\Windows\RegISSImport.xml
[2011/11/21 23:15:08 | 000,000,131 | ---- | C] () -- C:\Windows\IDB.zip
[2011/11/21 23:08:42 | 001,783,402 | ---- | C] () -- C:\Windows\SysNative\drivers\Cat.DB
[2011/11/21 23:05:48 | 000,001,538 | ---- | C] () -- C:\Users\Jesse\Desktop\sdsetup.exe.lnk
[2011/11/21 21:09:41 | 000,001,978 | ---- | C] () -- C:\Users\Jesse\Desktop\AV Protection 2011.lnk
[2011/11/21 21:09:40 | 000,001,208 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\ahst.lni
[2011/11/21 15:46:46 | 001,625,623 | ---- | C] () -- C:\Users\Jesse\Documents\gta_sa 2011-11-21 15-46-46-287.png
[2011/11/21 03:55:10 | 083,958,194 | ---- | C] () -- C:\Users\Jesse\Documents\strogboss1051v1.wmv
[2011/11/21 01:54:38 | 000,102,491 | ---- | C] () -- C:\Users\Jesse\Desktop\project.flp
[2011/11/20 01:07:43 | 000,002,182 | ---- | C] () -- C:\Users\Jesse\Desktop\Halo Custom Edition.lnk
[2011/11/18 19:24:04 | 000,006,173 | ---- | C] () -- C:\Users\Jesse\Desktop\Router_Setup.html
[2011/11/18 19:24:04 | 000,000,137 | R--- | C] () -- C:\Users\Jesse\Desktop\Router Login.url
[2011/11/14 03:08:50 | 134,626,518 | ---- | C] () -- C:\Users\Jesse\Documents\NGRP-COP CHASE.wmv
[2011/11/10 15:27:00 | 000,001,011 | ---- | C] () -- C:\Users\Jesse\Desktop\RaidCall.lnk
[2011/11/09 04:10:41 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2011/11/07 20:15:14 | 000,002,046 | -H-- | C] () -- C:\Users\Jesse\Documents\Default.rdp
[2011/11/02 17:45:46 | 000,000,234 | ---- | C] () -- C:\Users\Jesse\Desktop\Radio Clubzone.pls
[2011/10/31 20:22:36 | 000,816,056 | ---- | C] () -- C:\Users\Jesse\Desktop\freeforall.png
[2011/10/31 18:15:31 | 000,002,274 | ---- | C] () -- C:\Users\Jesse\Desktop\Ventrilo - Shortcut.lnk
[2011/10/27 21:09:04 | 000,000,977 | ---- | C] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2011/10/25 18:49:02 | 000,003,033 | ---- | C] () -- C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FireChrome 1.0.lnk
[2011/10/13 14:29:40 | 000,042,392 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2011/08/03 02:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011/05/21 13:45:23 | 000,925,184 | ---- | C] () -- C:\Windows\expstart.exe
[2011/05/11 23:16:45 | 000,005,632 | ---- | C] () -- C:\Users\Jesse\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/11 19:24:38 | 000,000,097 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2010/12/12 04:50:52 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010/12/05 04:40:27 | 000,002,256 | ---- | C] () -- C:\Windows\checkip.dat
[2010/11/24 20:18:06 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010/11/15 01:02:13 | 000,007,623 | ---- | C] () -- C:\Users\Jesse\AppData\Local\Resmon.ResmonCfg
[2010/11/14 18:00:03 | 000,234,536 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010/11/14 18:00:02 | 003,360,624 | ---- | C] () -- C:\Windows\SysWow64\Pbsvc.exe
[2010/11/14 18:00:02 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010/11/13 17:18:00 | 000,809,708 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/08 12:14:20 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2010/11/08 12:14:20 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2010/11/08 12:14:19 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2010/11/08 12:14:19 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2010/11/08 12:10:10 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2010/11/08 12:10:06 | 000,028,523 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2010/11/08 11:38:21 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2009/07/13 23:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 20:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 20:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/13 18:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 17:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 15:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 15:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009/04/02 06:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS

========== LOP Check ==========

[2011/02/27 00:24:44 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\.minecraft
[2011/11/21 22:43:36 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\76E51
[2011/11/21 21:09:36 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\aiiivDD2onFpm5s
[2011/11/21 03:43:41 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Audacity
[2011/11/21 22:43:33 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\E0676
[2011/03/15 20:52:58 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\fhnetwork.com
[2011/08/10 15:54:54 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\FileZilla
[2011/11/21 23:26:42 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\foobar2000
[2011/10/22 12:31:34 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\FrostWire
[2010/12/07 17:22:50 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\GetRightToGo
[2011/11/21 22:43:23 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\hjUVelIBtPyAuDo
[2011/11/21 23:28:24 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\ieelIBBtzPNc1v2
[2010/12/24 02:36:05 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\ManyCam
[2011/03/18 00:18:27 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Mount&Blade Warband
[2011/11/21 21:09:40 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\mP00yycS1ivDon4
[2011/10/19 09:57:36 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\PACE Anti-Piracy
[2011/05/15 00:26:03 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Publish Providers
[2011/11/17 23:04:19 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Rainmeter
[2011/11/21 23:28:23 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\S5ssQJ7dK8gR9Yw
[2011/11/17 23:03:31 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\SoftGrid Client
[2011/05/15 01:13:17 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Sony
[2010/11/17 15:23:26 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Stardock
[2011/03/27 00:56:03 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\SystemRequirementsLab
[2010/12/24 01:43:34 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TeamViewer
[2011/11/21 23:05:46 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TestApp
[2011/11/21 21:09:40 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\tmmHH5ssWJ7ELgZ
[2011/09/07 16:12:16 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TP
[2011/02/12 14:39:36 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TS3Client
[2010/12/09 21:24:56 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\TuneUp Software
[2011/02/20 08:02:02 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Unity
[2011/11/17 23:04:19 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\uTorrent
[2011/11/21 21:09:37 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\WhhhYYXwjUVeIBz
[2011/11/21 21:09:37 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\XjjUUCelIBrzPyA
[2011/11/21 22:43:23 | 000,000,000 | ---D | M] -- C:\Users\Jesse\AppData\Roaming\Z4pmH5sQJdKgZhX
[2011/10/06 08:08:48 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 153 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:05EE1EEF
@Alternate Data Stream - 1287 bytes -> C:\Users\Jesse\AppData\Local\Temp:NA88aQ1OGL3nL7czMg5Ls2
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84

< End of report >

Edited by JacksonStone, 22 November 2011 - 12:08 AM.

  • 0

Advertisements


#2
JacksonStone

JacksonStone

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
my computer didn't want to boot so i had to do system repair which made me do a system restore point and put me back to the last time my computer was working properly.

it seems it removed the av protection 2011 program that it would start up everytime i logged in. i installed malware bytes to do a full scan and it found 4 infected files i removed them.

how can i make sure my computer is fully cleaned?

please respond.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP