Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

OTL.Txt File 11/22/2011 - How to Fix These Malware?


  • Please log in to reply

#1
MarioX1981

MarioX1981

    Member

  • Member
  • PipPip
  • 14 posts
Please tell me how I can correct this malware situation, for whatever may be wrong as contained in this OTL.txt file dated 11-22-2011:

Details of tonight's OTL.txt log:

OTL logfile created on: 11/22/2011 9:25:58 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Mario\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.94 Gb Total Physical Memory | 0.30 Gb Available Physical Memory | 15.34% Memory free
3.87 Gb Paging File | 1.53 Gb Available in Paging File | 39.52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 222.69 Gb Total Space | 179.07 Gb Free Space | 80.41% Space Free | Partition Type: NTFS
Drive D: | 228.14 Gb Total Space | 152.58 Gb Free Space | 66.88% Space Free | Partition Type: NTFS
Drive E: | 10.00 Gb Total Space | 5.32 Gb Free Space | 53.15% Space Free | Partition Type: NTFS

Computer Name: MARIO-PC | User Name: Mario | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/11/22 21:25:33 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Mario\Downloads\OTL.exe
PRC - [2011/11/19 17:17:04 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2011/11/14 21:39:56 | 001,036,344 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2011/10/27 15:03:26 | 002,152,152 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2011/10/27 15:03:26 | 001,187,072 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2011/10/24 19:29:16 | 002,415,456 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
PRC - [2011/10/21 01:09:36 | 000,198,032 | ---- | M] (Lavasoft) -- C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
PRC - [2011/10/15 00:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/10/12 05:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
PRC - [2011/09/25 06:07:56 | 000,246,600 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
PRC - [2011/09/25 06:07:53 | 000,218,440 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
PRC - [2011/08/02 05:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
PRC - [2011/06/06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2010/12/29 17:23:19 | 000,112,600 | ---- | M] (PC Tools) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
PRC - [2010/10/01 12:27:22 | 000,632,792 | ---- | M] (PC Tools) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2010/06/29 07:04:18 | 000,020,480 | ---- | M] (AG Interactive) -- C:\Program Files (x86)\AGI\core\4.2.0.10754\AGCoreService.exe
PRC - [2010/03/11 13:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/08/20 09:54:00 | 000,544,768 | ---- | M] (Hewlett-Packard Development Co. L.P.) -- C:\Program Files (x86)\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe
PRC - [2007/02/01 15:20:02 | 000,493,056 | ---- | M] () -- C:\Users\Mario\Desktop\Video Games\Nintendo NES\fceuxdsp.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/14 21:39:54 | 000,420,920 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\ppgooglenaclpluginchrome.dll
MOD - [2011/11/14 21:39:53 | 003,702,840 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\pdf.dll
MOD - [2011/11/14 21:38:16 | 000,122,952 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\avutil-51.dll
MOD - [2011/11/14 21:38:15 | 000,222,280 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\avformat-53.dll
MOD - [2011/11/14 21:38:14 | 001,746,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\avcodec-53.dll
MOD - [2011/11/14 18:36:18 | 008,593,056 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\gcswf32.dll
MOD - [2011/09/25 06:07:53 | 000,218,440 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
MOD - [2007/02/01 15:20:02 | 000,493,056 | ---- | M] () -- C:\Users\Mario\Desktop\Video Games\Nintendo NES\fceuxdsp.exe


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2009/11/17 18:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV:64bit: - [2009/07/13 17:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/10/27 15:03:26 | 002,152,152 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2011/10/15 00:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/10/12 05:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011/09/25 06:07:56 | 000,246,600 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe -- (vToolbarUpdater)
SRV - [2011/08/02 05:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2011/06/06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2010/10/22 12:08:18 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2010/10/01 12:27:22 | 000,632,792 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/06/29 07:04:18 | 000,020,480 | ---- | M] (AG Interactive) [Auto | Running] -- C:\Program Files (x86)\AGI\core\4.2.0.10754\AGCoreService.exe -- (AGCoreService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/11 13:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2009/06/10 13:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/10/27 15:03:28 | 000,069,376 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\Lbd.sys -- (Lbd)
DRV:64bit: - [2011/10/07 05:23:46 | 000,283,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:64bit: - [2011/09/13 05:30:08 | 000,037,456 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:64bit: - [2011/08/08 05:08:58 | 000,046,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:64bit: - [2011/07/11 00:14:36 | 000,375,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:64bit: - [2011/07/11 00:14:08 | 000,029,776 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV:64bit: - [2011/07/11 00:14:06 | 000,120,400 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV:64bit: - [2011/07/11 00:14:06 | 000,026,704 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV:64bit: - [2011/03/10 22:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 22:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 05:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 03:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/08/12 12:07:50 | 000,350,952 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
DRV:64bit: - [2010/07/12 10:36:10 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 13:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (VST64_DPV)
DRV:64bit: - [2009/06/10 13:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (winachsf)
DRV:64bit: - [2009/06/10 13:01:11 | 000,411,136 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VSTBS26.SYS -- (VST64HWBS2)
DRV:64bit: - [2009/06/10 12:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2011/10/28 07:33:15 | 000,017,152 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys -- (Lavasoft Kernexplorer)
DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = FC F1 07 37 B4 82 CC 01 [binary data]
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = :0


FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.0.198: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.0.198: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.0.198: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.0.198: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.0.198: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2011/11/21 12:17:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/04/27 21:00:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/11/19 17:17:24 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011/04/27 21:00:33 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = D:\PFiles\Plugins\np-mswmp.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\10.0.0.1409_0\plugins/avgnpss.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: ActiveGS = C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coekimhghfcjmbnfonjeklhkmemegiba\3.5.686_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: AVG Safe Search = C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1857_0\

O1 HOSTS File: ([2011/11/16 08:11:09 | 000,438,743 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 15088 more lines...
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Ad-Aware Security Toolbar) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll ()
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.40\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Ad-Aware Security Toolbar) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.40\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found.
O3 - HKU\S-1-5-21-2000206053-1701625192-17127599-1000\..\Toolbar\WebBrowser: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - Reg Error: Value error. File not found
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools)
O4 - HKLM..\Run: [TkBellExe] c:\program files (x86)\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2000206053-1701625192-17127599-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2000206053-1701625192-17127599-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.co...sreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.69.150 68.87.85.102
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BE428EE-99EB-46BC-8EB1-E0870C3A62F6}: DhcpNameServer = 68.87.69.150 68.87.85.102
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll ()
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/04/30 17:01:00 | 000,000,053 | -HS- | M] () - E:\AUTORUN.INF -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/22 18:27:53 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{C107CB42-DF16-4009-BDFE-96B53191E47C}
[2011/11/22 18:27:26 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{71321F36-A7D9-4365-8FBA-61437CBB980D}
[2011/11/21 12:44:10 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{E2EFEF15-C087-4A74-8381-6A1A46115441}
[2011/11/21 12:43:47 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{A8BE7ECD-48B6-4EC1-AAD6-054C8D0C0429}
[2011/11/20 21:33:06 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{980A0377-8378-4074-B961-42DE3A11EB35}
[2011/11/20 21:32:41 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{2A17DE31-924A-46D7-80C2-64BA71BB146A}
[2011/11/20 09:20:37 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{29811644-AF70-420F-8518-D491EFC86171}
[2011/11/20 09:20:14 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{A4F757E2-1035-4416-A917-EACA8689CF96}
[2011/11/19 17:37:11 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{337C11D4-6CD2-44EF-A375-0B12466B7A03}
[2011/11/19 17:36:47 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{2F22CE82-8BFC-485D-873E-C7599FE98844}
[2011/11/19 17:17:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2011/11/19 17:17:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real
[2011/11/19 17:17:07 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2011/11/18 23:38:38 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{017520B4-284E-47EA-84F3-5D8B3286BAE3}
[2011/11/18 23:38:14 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{1ED3B6C7-2592-40C9-ABD5-EDA776DD2F79}
[2011/11/18 09:45:47 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{EFC2C111-13E1-4F0B-8426-168F0E308B7B}
[2011/11/18 09:45:22 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{CA9D3CFA-4EE1-4FBD-8CE1-66CB861B8130}
[2011/11/17 14:49:28 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{5A24BE7F-CE33-414D-A7C3-35F5331FF6B8}
[2011/11/17 14:49:01 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{23368DFE-48CD-47A6-9349-4867B0FDB1A0}
[2011/11/17 00:18:43 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{BA5A2ED6-2ADC-4A37-BFCB-4CE7ABAB3DD0}
[2011/11/17 00:18:20 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{D57BEB68-6D46-468E-B586-C5BB3B38C3E1}
[2011/11/16 09:29:14 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{DE9837A9-8053-4C73-AA03-6318FC45C406}
[2011/11/16 09:28:47 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{F4660F8C-FE64-4F81-97F7-4AE1B3288B7E}
[2011/11/15 17:46:26 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{6E53A4FA-0F3F-43F9-8AC8-1424E3270675}
[2011/11/15 17:46:01 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{10EBA4E0-A078-4E38-A637-6EF83A3B7270}
[2011/11/15 17:27:07 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{C4116810-C4DA-4ABC-B455-407A6679E0EF}
[2011/11/14 20:42:44 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{FEA62070-C2C2-40DB-A8E0-1866AD7E2192}
[2011/11/14 20:42:18 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{71030F3B-338B-40FD-AE8A-AE95913F41F7}
[2011/11/14 08:39:06 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{CCE73F7E-7647-45A3-809C-2D8A04F1BCC4}
[2011/11/14 08:38:44 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{A3F8DE58-4089-4149-8372-6C77CD1B13BA}
[2011/11/13 10:00:43 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{7CE33F5B-A884-4EC0-8BC8-42BF0A062F8F}
[2011/11/13 10:00:20 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{A0D3DF8C-91F4-418B-8E65-4676DD9F2059}
[2011/11/12 14:20:54 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{3E30A92B-AE7D-4141-BE39-57FA6D209592}
[2011/11/12 14:20:30 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{80C8114F-82FD-43FD-AD7E-8912339B9BF4}
[2011/11/11 21:17:33 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{D84D2B60-1D37-424D-9A7E-F3A5A442B713}
[2011/11/11 21:16:58 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{FD9AB9E0-F388-4909-A05B-1992C3DE2757}
[2011/11/11 08:18:53 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{3DF940AF-BA67-4960-B511-2D28971DA18D}
[2011/11/11 08:18:27 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{FBC2383E-1D86-4923-9AFA-3C87709970F0}
[2011/11/10 12:49:13 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{DF2AC1BF-AC72-4AE7-92CE-4BCB597B633B}
[2011/11/10 12:48:46 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{9FF6E378-4312-4FAB-A569-BB7241FD06CE}
[2011/11/09 22:07:43 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{BF744531-6F05-40F3-BDFF-08843772A27A}
[2011/11/09 22:07:15 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{50A14016-BCAE-436A-B3D2-ACB6EB9E16FD}
[2011/11/09 09:35:24 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{55AF5C11-E98E-4F32-94AD-F4896BC2E3CC}
[2011/11/09 09:34:55 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{66888DAE-122D-4A55-B76B-C04664818324}
[2011/11/08 07:53:07 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{86476F28-9E2A-4BE9-8033-AC9BCA4326D8}
[2011/11/08 07:52:28 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{A3DC655B-D507-4D2B-8FAE-F629DB9E5671}
[2011/11/07 13:26:36 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{71587A16-910A-4EEC-BFDC-7607F5E958D3}
[2011/11/07 13:26:13 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{6937C825-FB2C-4FF8-855E-0B7ED728AB02}
[2011/11/06 10:45:15 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{B2463CBF-63ED-4DBD-8420-228BC390CA85}
[2011/11/06 10:45:02 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{5D6BE027-2EB2-4A38-B0A7-298DC25B5F19}
[2011/11/05 11:50:45 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{5EA84351-2849-4331-9955-F66CE49B1928}
[2011/11/05 11:50:21 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{3ED730ED-4C3F-4D4D-B19F-243A06F281F2}
[2011/11/04 22:52:18 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{4822C8CF-7112-49E4-AFC0-14D10B8AF579}
[2011/11/04 22:51:52 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{5EBEB0EE-791A-4F15-89CF-F679EF2F0E2D}
[2011/11/04 07:05:19 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{3983D1D3-119C-4A2D-A67A-92350214AD8C}
[2011/11/04 07:04:56 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{9C7889A1-7694-4E71-931A-2D04BBE65092}
[2011/11/03 12:14:17 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{57D7224B-939E-4DF5-9D04-C3F8071B37F9}
[2011/11/03 12:13:52 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{253CA3D4-2B74-44C9-8BF2-83A94A768512}
[2011/11/02 18:55:53 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{78F5B384-3813-49BC-BF95-68DBBB3CD6D9}
[2011/11/02 18:55:31 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{48089C49-A1DD-47F4-B957-A4F3A8520CAA}
[2011/11/02 05:44:45 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{F343E165-5B88-4325-BF8F-9750D554BBEB}
[2011/11/02 05:44:21 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{B1CC8317-6F15-4CF1-8A78-344FC41E5D1F}
[2011/11/01 09:14:05 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{D7C0156B-11DF-4A6B-94E7-1A36E5681D4E}
[2011/11/01 09:13:45 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{9FF67C68-75D5-4756-8C8A-99D7AFF2B309}
[2011/10/31 15:52:45 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{F473050D-EC69-49B2-A7DB-BD397A9BE286}
[2011/10/31 15:52:20 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{985B7C52-6A6E-4CD6-A7CD-E84DA57BFA4D}
[2011/10/31 07:02:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/10/31 07:02:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2011/10/31 07:02:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2011/10/31 03:51:53 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{932AA9B3-33EA-47AA-A607-2D689986DE10}
[2011/10/31 03:51:26 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{972E1BF6-F510-40E3-BC45-24DF34C06AF3}
[2011/10/30 10:30:12 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{373C2AFB-6EB7-4BBE-A88D-AC1CD79A2F97}
[2011/10/30 10:29:45 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{EC0FC85D-EA63-49F1-8E1A-9588C1BD9497}
[2011/10/30 06:28:47 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2011/10/30 05:53:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2011/10/29 13:57:32 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{E75C8818-2CCA-4AAE-83EB-238A2BDD83A8}
[2011/10/29 13:57:06 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{695165DE-9CAA-4356-B66D-300AD9BDDC40}
[2011/10/29 01:56:37 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{D0DB8AA3-00FB-4076-8A3C-2B6ED6A34D60}
[2011/10/29 01:56:08 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{06C04CB9-D00F-4E5A-8E02-46B6B52C8BE1}
[2011/10/28 08:37:40 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{D5EAB9E1-998B-400E-B2EC-82BF9E24D2D3}
[2011/10/28 08:37:13 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{CDD3BD78-ED3C-4BB2-945F-A0482D753073}
[2011/10/28 07:31:26 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\adaware
[2011/10/28 07:31:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Ad-Aware Browsing Protection
[2011/10/28 07:31:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Toolbar Cleaner
[2011/10/28 07:31:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\adawaretb
[2011/10/28 07:30:59 | 000,069,376 | ---- | C] (Lavasoft AB) -- C:\Windows\SysNative\drivers\Lbd.sys
[2011/10/28 07:30:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
[2011/10/27 18:32:15 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{6DBD0FDB-B8B5-4E0F-B690-3811599FB25A}
[2011/10/27 18:31:52 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{1701E6D3-063F-436D-8DA6-89FB1CF4A480}
[2011/10/27 06:29:27 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{7690ADDA-904C-4317-9595-EEB04A53F13D}
[2011/10/27 06:28:49 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{B8EA477F-9237-42EE-B815-3B1F4A3593CD}
[2011/10/26 18:27:54 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{06EF6647-864F-4D7E-9B77-9BD6A28F4EBA}
[2011/10/26 18:27:30 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{DE1C386F-160E-4521-BF66-25F7AF65B18D}
[2011/10/26 04:21:53 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{DF1CB592-EBF3-4920-9655-7A74B1FEF635}
[2011/10/26 04:21:27 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{1B845E52-FFA1-4A5B-9B03-6FF40CBC5961}
[2011/10/25 06:13:45 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{6829B859-015F-4063-AF2F-794024C0F00C}
[2011/10/25 06:13:23 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{6331D8BB-B81F-4913-A71F-DB6DBCFF64B8}
[2011/10/24 09:57:32 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011/10/24 09:57:32 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011/10/24 06:32:27 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{A81969EF-969C-4CC7-8D84-BCC2F06F491F}
[2011/10/24 06:31:52 | 000,000,000 | ---D | C] -- C:\Users\Mario\AppData\Local\{519C097D-FDCB-42D8-8C3F-8A5FCF168267}
[2011/10/24 05:53:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011/10/24 05:52:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2011/10/24 05:49:14 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011/09/28 21:22:40 | 000,465,264 | ---- | C] (Corel) -- C:\Program Files (x86)\Common Files\AppFramework.dll
[2011/09/28 21:22:40 | 000,332,144 | ---- | C] (Corel) -- C:\Program Files (x86)\Common Files\MediaOrganizer.dll
[2011/09/28 21:22:40 | 000,033,136 | ---- | C] (Corel-V1E) -- C:\Program Files (x86)\Common Files\FlickrProvider.dll
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/11/22 21:10:41 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/11/22 21:10:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/11/22 19:02:52 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\RMSchedule.job
[2011/11/22 19:02:49 | 000,003,072 | ---- | M] () -- C:\Windows\SysWow64\Cache.db
[2011/11/22 17:44:09 | 110,527,423 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm
[2011/11/22 16:47:03 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/11/22 11:09:04 | 000,014,272 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/22 11:09:04 | 000,014,272 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/21 12:24:32 | 000,000,064 | ---- | M] () -- C:\Windows\SysWow64\rp_stats.dat
[2011/11/21 12:24:32 | 000,000,044 | ---- | M] () -- C:\Windows\SysWow64\rp_rules.dat
[2011/11/20 23:49:59 | 000,000,290 | ---- | M] () -- C:\Windows\tasks\RealUpgradeLogonTaskS-1-5-21-2000206053-1701625192-17127599-1000.job
[2011/11/20 23:49:44 | 000,000,298 | ---- | M] () -- C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-2000206053-1701625192-17127599-1000.job
[2011/11/20 21:09:19 | 1559,093,248 | -HS- | M] () -- C:\hiberfil.sys
[2011/11/20 19:49:46 | 000,002,340 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011/11/20 16:34:06 | 000,002,828 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2011/11/19 17:17:40 | 000,001,042 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011/11/19 17:17:07 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2011/11/17 18:04:41 | 000,393,976 | ---- | M] () -- C:\Windows\SysNative\drivers\AVG\iavichjg.avm
[2011/11/17 12:00:01 | 000,000,524 | ---- | M] () -- C:\Windows\tasks\One-Click Tweak.job
[2011/11/17 09:29:31 | 000,001,789 | ---- | M] () -- C:\Users\Mario\Desktop\XnView.lnk
[2011/11/17 09:29:31 | 000,000,943 | ---- | M] () -- C:\Users\Mario\Application Data\Microsoft\Internet Explorer\Quick Launch\XnView.lnk
[2011/11/16 08:11:09 | 000,438,743 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2011/11/15 14:57:01 | 000,779,266 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/11/15 14:57:01 | 000,660,280 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/11/15 14:57:01 | 000,121,208 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/11/09 07:43:32 | 000,438,484 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20111116-081109.backup
[2011/11/08 15:49:42 | 000,002,380 | ---- | M] () -- C:\Users\Mario\Documents\CRAYOLA CRAYON SETS.rtf
[2011/11/08 13:38:26 | 000,525,752 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/11/02 05:47:17 | 000,438,200 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.20111109-074332.backup
[2011/11/01 11:18:28 | 000,013,335 | ---- | M] () -- C:\Users\Mario\Desktop\cmd - Shortcut.lnk
[2011/10/31 11:11:49 | 000,001,240 | ---- | M] () -- C:\Users\Mario\Desktop\rstrui - Shortcut.lnk
[2011/10/31 07:02:20 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/10/28 07:33:14 | 000,016,432 | ---- | M] () -- C:\Windows\SysNative\lsdelete.exe
[2011/10/27 15:03:28 | 000,069,376 | ---- | M] (Lavasoft AB) -- C:\Windows\SysNative\drivers\Lbd.sys
[2011/10/25 12:01:44 | 000,001,133 | ---- | M] () -- C:\Users\Mario\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2011/10/25 07:32:09 | 000,019,526 | ---- | M] () -- C:\Windows\hpqins13.dat
[2011/10/25 07:31:28 | 000,002,167 | ---- | M] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/11/19 17:17:40 | 000,001,042 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011/11/08 13:26:34 | 000,002,380 | ---- | C] () -- C:\Users\Mario\Documents\CRAYOLA CRAYON SETS.rtf
[2011/11/06 13:30:03 | 000,000,290 | ---- | C] () -- C:\Windows\tasks\RealUpgradeLogonTaskS-1-5-21-2000206053-1701625192-17127599-1000.job
[2011/11/06 13:30:02 | 000,000,298 | ---- | C] () -- C:\Windows\tasks\RealUpgradeScheduledTaskS-1-5-21-2000206053-1701625192-17127599-1000.job
[2011/11/01 11:18:28 | 000,013,335 | ---- | C] () -- C:\Users\Mario\Desktop\cmd - Shortcut.lnk
[2011/10/31 11:11:49 | 000,001,240 | ---- | C] () -- C:\Users\Mario\Desktop\rstrui - Shortcut.lnk
[2011/10/31 07:02:20 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/10/28 10:14:33 | 000,016,432 | ---- | C] () -- C:\Windows\SysNative\lsdelete.exe
[2011/10/25 07:31:28 | 000,002,167 | ---- | C] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2011/10/25 07:30:24 | 000,019,526 | ---- | C] () -- C:\Windows\hpqins13.dat.temp
[2011/09/28 21:22:40 | 000,402,800 | ---- | C] () -- C:\Program Files (x86)\Common Files\facebook.dll
[2011/09/28 21:22:40 | 000,130,416 | ---- | C] () -- C:\Program Files (x86)\Common Files\PluginCommon.dll
[2011/08/21 06:10:11 | 000,000,000 | ---- | C] () -- C:\Users\Mario\AppData\Local\prvlcl.dat
[2011/08/09 16:21:49 | 000,073,523 | ---- | C] () -- C:\Windows\hpqins16.dat
[2011/07/31 15:33:05 | 000,148,177 | ---- | C] () -- C:\Program Files (x86)\Common Files\BookViewer.xap
[2011/07/14 19:37:17 | 000,019,526 | ---- | C] () -- C:\Windows\hpqins13.dat
[2011/04/27 20:54:43 | 000,221,801 | ---- | C] () -- C:\Windows\hpoins19.dat
[2011/04/27 20:54:43 | 000,013,898 | ---- | C] () -- C:\Windows\hpomdl19.dat
[2011/04/27 20:07:49 | 000,221,608 | ---- | C] () -- C:\Windows\hpoins19.dat.temp
[2011/04/27 20:07:49 | 000,013,898 | ---- | C] () -- C:\Windows\hpomdl19.dat.temp
[2011/04/20 18:37:57 | 000,000,064 | ---- | C] () -- C:\Windows\SysWow64\rp_stats.dat
[2011/04/20 18:37:57 | 000,000,044 | ---- | C] () -- C:\Windows\SysWow64\rp_rules.dat
[2011/04/03 10:12:09 | 000,003,584 | ---- | C] () -- C:\Users\Mario\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/17 11:49:17 | 000,000,088 | RHS- | C] () -- C:\ProgramData\D78568A79E.sys
[2011/03/17 11:49:16 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2011/03/17 10:54:25 | 000,002,828 | -HS- | C] () -- C:\Windows\SysWow64\KGyGaAvL.sys
[2011/03/17 10:54:25 | 000,000,088 | RHS- | C] () -- C:\Windows\SysWow64\9FA5499923.sys
[2011/01/13 04:49:32 | 000,772,646 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/12/29 17:54:42 | 000,000,255 | ---- | C] () -- C:\Windows\WININIT.INI
[2009/07/13 21:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 18:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 18:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/13 16:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 15:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 13:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 13:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011/05/29 21:26:20 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Audacity
[2011/09/25 06:06:43 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\AVG2012
[2011/07/31 22:21:09 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\LockHunter
[2011/08/02 00:55:03 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Orbit
[2011/08/02 00:41:35 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\ProgSense
[2011/03/05 16:24:37 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Publish Providers
[2011/01/28 19:01:00 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Registry Mechanic
[2011/03/05 17:46:56 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Sony
[2011/07/29 17:08:32 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Sony Creative Software Inc
[2011/07/13 13:40:01 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Visan
[2011/07/10 10:00:43 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\Webshots
[2011/07/08 11:20:59 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\XMedia Recode
[2011/11/21 23:58:35 | 000,000,000 | ---D | M] -- C:\Users\Mario\AppData\Roaming\XnView
[2011/11/17 12:00:01 | 000,000,524 | ---- | M] () -- C:\Windows\Tasks\One-Click Tweak.job
[2011/11/22 19:02:52 | 000,000,266 | ---- | M] () -- C:\Windows\Tasks\RMSchedule.job
[2011/10/05 09:13:44 | 000,032,622 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 154 bytes -> C:\ProgramData\TEMP:D1B5B4F1

< End of report >

Again, I would like to know what problems in this log may be serious enough for me to correct. I would also like to know how to get rid of all the hosts that display all those suspicious sex links.

Thank you,



Ben Edge (MarioX1981)

Edited by MarioX1981, 22 November 2011 - 11:58 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP