Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

http://int.search-results.com [Closed]


  • This topic is locked This topic is locked

#1
rodicil

rodicil

    New Member

  • Member
  • Pip
  • 2 posts
Hello,

I have for several days this site if i search something: http://int.search-results.com
my maleware cant find it and i have tried to follow the removal guide of http://www.selectrea...-removal-guide/ and of http://www.killallvirus.com/download
I also tried to delete it by changing the settings by JAVA, but this didnt helped ether.
futher i dont know how i did get this and im desperate to get it removed.
this is the log that i get from the OTL:

OTL logfile created on: 24-9-2012 12:41:19 - Run 1
OTL by OldTimer - Version 3.2.66.2 Folder = C:\Users\Roderick\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy

3,86 Gb Total Physical Memory | 1,73 Gb Available Physical Memory | 44,77% Memory free
7,71 Gb Paging File | 5,12 Gb Available in Paging File | 66,43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 7,61 Gb Free Space | 6,54% Space Free | Partition Type: NTFS
Drive D: | 332,72 Gb Total Space | 91,04 Gb Free Space | 27,36% Space Free | Partition Type: NTFS

Computer Name: RODERICK-PC | User Name: Roderick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012-09-24 12:41:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Roderick\Downloads\OTL.exe
PRC - [2012-09-07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012-09-02 13:21:22 | 001,890,744 | ---- | M] (Bandoo Media, inc) -- C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngrUI.exe
PRC - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012-08-10 05:01:06 | 000,052,736 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\systry.exe
PRC - [2012-08-08 20:24:52 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012-07-24 09:48:45 | 000,801,792 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
PRC - [2012-06-28 11:05:00 | 002,160,024 | ---- | M] (ManyCam LLC) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
PRC - [2012-05-14 20:19:02 | 000,932,528 | ---- | M] () -- C:\Users\Roderick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2011-12-28 00:21:18 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2011-12-28 00:21:08 | 003,508,624 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
PRC - [2011-12-14 13:59:20 | 002,984,832 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2011-03-28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010-09-03 18:05:34 | 000,566,024 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManager.exe
PRC - [2010-05-04 19:27:25 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010-01-05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2009-11-24 22:45:36 | 000,053,888 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
PRC - [2009-11-10 04:20:36 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009-11-02 23:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009-10-27 05:29:32 | 006,998,656 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2009-10-26 19:10:42 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2009-10-01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2009-10-01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2009-08-20 05:31:48 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2009-08-12 12:32:56 | 000,365,936 | ---- | M] (Boingo Wireless, Inc.) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
PRC - [2009-06-19 19:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009-06-19 19:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009-06-16 02:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
PRC - [2009-05-19 00:58:38 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009-05-19 00:57:32 | 000,485,944 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\facemgr.exe
PRC - [2009-02-23 19:43:12 | 000,576,000 | ---- | M] (MagicISO, Inc.) -- C:\Program Files (x86)\MagicDisc\MagicDisc.exe
PRC - [2008-12-23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008-03-31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007-11-30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
PRC - [2007-11-20 13:50:36 | 001,145,400 | ---- | M] (ASUS) -- C:\Program Files\ASUS\Net4Switch\Net4Switch.exe


========== Modules (No Company Name) ==========

MOD - [2012-09-24 12:33:15 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM926F.tmp
MOD - [2012-09-24 12:33:14 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM921F.tmp
MOD - [2012-09-24 12:33:14 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM91BF.tmp
MOD - [2012-09-24 12:33:14 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM916F.tmp
MOD - [2012-09-24 12:33:14 | 000,033,792 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\YTMP7MC8AA\TAA8F79.tmp
MOD - [2012-09-24 12:33:13 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM8E5E.tmp
MOD - [2012-09-24 12:33:13 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM8AC4.tmp
MOD - [2012-09-24 12:33:12 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM89C8.tmp
MOD - [2012-09-24 12:33:12 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM893A.tmp
MOD - [2012-09-24 12:33:12 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM8810.tmp
MOD - [2012-09-24 12:33:12 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM8791.tmp
MOD - [2012-09-24 12:33:12 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM8722.tmp
MOD - [2012-09-24 12:33:11 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM84A0.tmp
MOD - [2012-09-24 12:33:10 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM81C1.tmp
MOD - [2012-09-24 12:33:09 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM7EC2.tmp
MOD - [2012-09-24 12:33:09 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM7CEC.tmp
MOD - [2012-09-24 12:33:08 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM79DE.tmp
MOD - [2012-09-24 12:33:08 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM7960.tmp
MOD - [2012-09-24 12:33:08 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM7874.tmp
MOD - [2012-09-24 12:33:06 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM72E6.tmp
MOD - [2012-09-24 12:33:06 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM716E.tmp
MOD - [2012-09-24 12:33:06 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM6FB7.tmp
MOD - [2012-09-24 12:33:05 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM6D83.tmp
MOD - [2012-09-24 12:33:05 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM6C88.tmp
MOD - [2012-09-24 12:33:04 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM6AFF.tmp
MOD - [2012-09-24 12:33:04 | 000,072,192 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM6A03.tmp
MOD - [2012-09-24 12:33:04 | 000,072,192 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM69B3.tmp
MOD - [2012-09-24 12:33:03 | 000,072,704 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM655D.tmp
MOD - [2012-09-24 12:33:03 | 000,072,192 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM650D.tmp
MOD - [2012-09-24 12:33:03 | 000,057,344 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM606A.tmp
MOD - [2012-09-24 12:33:02 | 000,053,760 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM601A.tmp
MOD - [2012-09-24 12:33:01 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5D17.tmp
MOD - [2012-09-24 12:33:01 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5CC7.tmp
MOD - [2012-09-24 12:33:01 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5C18.tmp
MOD - [2012-09-24 12:33:01 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5BC8.tmp
MOD - [2012-09-24 12:33:01 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5B78.tmp
MOD - [2012-09-24 12:33:01 | 000,064,000 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5EEF.tmp
MOD - [2012-09-24 12:33:01 | 000,056,320 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5C77.tmp
MOD - [2012-09-24 12:33:01 | 000,053,760 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5D67.tmp
MOD - [2012-09-24 12:33:00 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5AE7.tmp
MOD - [2012-09-24 12:33:00 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5A97.tmp
MOD - [2012-09-24 12:33:00 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5A47.tmp
MOD - [2012-09-24 12:33:00 | 000,068,608 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM59F7.tmp
MOD - [2012-09-24 12:33:00 | 000,056,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM5B28.tmp
MOD - [2012-09-24 12:33:00 | 000,056,320 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM584E.tmp
MOD - [2012-09-24 12:33:00 | 000,055,296 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM589E.tmp
MOD - [2012-09-24 12:32:59 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM54E2.tmp
MOD - [2012-09-14 13:51:37 | 000,031,232 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\plg1.nls
MOD - [2012-09-14 13:51:36 | 000,059,904 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\plg0.nls
MOD - [2012-08-30 04:58:45 | 000,442,392 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
MOD - [2012-08-30 04:58:44 | 012,237,336 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll
MOD - [2012-08-30 04:58:42 | 003,997,720 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll
MOD - [2012-08-30 04:57:27 | 000,526,872 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\libglesv2.dll
MOD - [2012-08-30 04:57:26 | 000,104,984 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\libegl.dll
MOD - [2012-08-30 04:57:15 | 000,144,424 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\avutil-51.dll
MOD - [2012-08-30 04:57:13 | 000,266,792 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\avformat-54.dll
MOD - [2012-08-30 04:57:12 | 002,480,680 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\avcodec-54.dll
MOD - [2012-08-10 05:01:06 | 000,052,736 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\systry.exe
MOD - [2012-06-28 11:05:02 | 000,124,312 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\CrashRpt.dll
MOD - [2012-06-15 00:05:45 | 018,000,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
MOD - [2012-06-15 00:05:33 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
MOD - [2012-06-15 00:05:28 | 013,198,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
MOD - [2012-06-15 00:05:23 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
MOD - [2012-06-15 00:05:21 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
MOD - [2012-05-15 20:30:45 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
MOD - [2012-05-15 20:28:55 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\65f0d70169a0e73b45307dddbd86f92b\System.Runtime.Remoting.ni.dll
MOD - [2012-05-15 20:28:45 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
MOD - [2012-05-14 20:19:02 | 000,932,528 | ---- | M] () -- C:\Users\Roderick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
MOD - [2012-05-10 16:14:56 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
MOD - [2012-05-10 16:10:48 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
MOD - [2012-05-10 16:10:42 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
MOD - [2012-05-10 16:10:32 | 009,091,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
MOD - [2012-05-10 16:10:23 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
MOD - [2012-01-21 20:55:23 | 000,115,137 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\bad4021e-8b96-4726-a482-7caebf5bc001\CliSecureRT.dll
MOD - [2012-01-08 15:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2011-12-28 00:21:18 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2011-09-27 07:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011-09-27 07:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011-08-07 14:54:16 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\Detour32.dll
MOD - [2010-12-05 04:38:12 | 000,241,152 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_objdetect220.dll
MOD - [2010-12-05 04:38:06 | 000,776,192 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_highgui220.dll
MOD - [2010-12-05 04:38:06 | 000,201,216 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_video220.dll
MOD - [2010-12-05 04:38:04 | 001,242,112 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
MOD - [2010-12-05 04:38:02 | 002,010,624 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
MOD - [2010-10-13 21:45:55 | 003,928,304 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\plugin\libbizlplugin.dll
MOD - [2010-09-03 18:05:30 | 000,400,384 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
MOD - [2010-09-03 18:05:30 | 000,322,048 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
MOD - [2010-09-03 18:05:30 | 000,194,048 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
MOD - [2010-09-03 18:05:30 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
MOD - [2010-09-03 18:05:28 | 002,202,624 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
MOD - [2010-09-03 18:05:28 | 000,959,488 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
MOD - [2010-09-03 18:05:28 | 000,377,856 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
MOD - [2010-09-03 18:05:28 | 000,062,464 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
MOD - [2010-05-02 22:30:10 | 002,078,208 | ---- | M] () -- C:\Program Files (x86)\wLite\IPCameraRTSP.ax
MOD - [2010-01-05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MOD - [2009-11-24 22:45:36 | 000,053,888 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
MOD - [2009-11-02 23:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009-11-02 23:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2009-09-23 20:07:14 | 000,204,800 | ---- | M] () -- C:\Program Files (x86)\ASUS\VirtualCamera\virtualCamera.ax
MOD - [2009-07-09 17:41:50 | 000,222,720 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswsysmon.dll
MOD - [2009-07-08 11:24:16 | 000,167,424 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipsw_cfgmgr.dll
MOD - [2009-07-03 13:40:34 | 000,085,504 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\LogonStartup.dll
MOD - [2009-07-03 13:21:16 | 000,042,496 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\iphelper.dll
MOD - [2009-07-03 13:13:56 | 000,297,984 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswui.dll
MOD - [2009-07-03 13:13:16 | 000,074,752 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswobj.dll
MOD - [2009-07-03 13:12:32 | 000,049,152 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswhlp.dll
MOD - [2009-07-03 13:12:24 | 000,065,024 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswgblset.dll
MOD - [2009-07-03 13:12:14 | 000,089,088 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswds.dll
MOD - [2009-07-03 13:11:56 | 000,267,264 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswcore.dll
MOD - [2009-07-03 13:04:16 | 000,084,992 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\cxcmrt.dll
MOD - [2009-07-01 16:46:24 | 000,461,824 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswresmgr.dll
MOD - [2007-11-30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
MOD - [2007-07-27 15:10:02 | 000,049,152 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ResItf.dll
MOD - [2007-06-15 10:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
MOD - [2007-06-01 17:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012-03-26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012-03-26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2010-09-06 12:09:44 | 000,859,712 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom)
SRV:64bit: - [2010-01-22 03:01:11 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009-12-08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2009-11-27 05:39:45 | 000,243,712 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\stacsv64.exe -- (STacSV)
SRV:64bit: - [2009-09-29 18:32:31 | 000,570,632 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer)
SRV:64bit: - [2009-09-29 18:32:29 | 000,917,768 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy)
SRV:64bit: - [2009-08-06 23:17:46 | 000,118,672 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012-09-20 22:28:02 | 000,250,288 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-09-07 17:04:46 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-09-07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-06-15 00:17:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011-12-14 13:59:20 | 002,984,832 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2011-04-01 11:14:30 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011-03-28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010-06-25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2010-05-02 23:34:28 | 005,027,328 | ---- | M] (Moonware Studios) [On_Demand | Stopped] -- C:\Program Files (x86)\wLite\wService.exe -- (wxpSvc)
SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-11-27 05:39:45 | 000,243,712 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe -- (STacSV)
SRV - [2009-11-10 04:20:36 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009-10-01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009-10-01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009-06-16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008-03-31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012-09-07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012-06-05 16:03:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2012-05-11 07:34:14 | 000,203,320 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012-05-11 07:34:12 | 000,099,384 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012-03-20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012-03-01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012-02-22 12:34:36 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2012-01-11 08:11:20 | 000,034,304 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
DRV:64bit: - [2011-06-26 02:56:44 | 000,033,888 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\appliand.sys -- (appliandMP)
DRV:64bit: - [2011-06-26 02:56:44 | 000,033,888 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appliand.sys -- (appliand)
DRV:64bit: - [2011-05-10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011-03-11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011-03-11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010-08-02 21:03:01 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
DRV:64bit: - [2010-07-30 19:30:26 | 000,309,840 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmxpflt.sys -- (tmxpflt)
DRV:64bit: - [2010-07-30 19:30:20 | 000,042,576 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmpreflt.sys -- (tmpreflt)
DRV:64bit: - [2010-07-30 19:24:14 | 001,988,176 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vsapint.sys -- (vsapint)
DRV:64bit: - [2010-06-25 19:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2010-01-22 03:13:23 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2010-01-22 03:13:23 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:64bit: - [2010-01-22 02:07:55 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010-01-18 14:37:57 | 000,128,512 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2009-12-30 11:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009-12-14 00:36:16 | 002,102,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwx.sys -- (AR5416)
DRV:64bit: - [2009-11-27 05:39:45 | 000,505,344 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2009-11-13 11:47:35 | 000,067,072 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2009-11-05 22:35:45 | 000,034,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64k.sys -- (Point64)
DRV:64bit: - [2009-11-05 22:35:45 | 000,027,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
DRV:64bit: - [2009-10-26 06:39:43 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2009-10-05 03:33:59 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009-09-30 03:34:31 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009-09-29 18:33:17 | 000,107,536 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:64bit: - [2009-09-17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
DRV:64bit: - [2009-08-21 08:48:17 | 000,044,032 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2009-08-12 05:38:01 | 001,799,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
DRV:64bit: - [2009-08-06 23:24:13 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009-08-06 23:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2009-07-20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009-07-14 02:00:13 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Dot4Scan.sys -- (Dot4Scan)
DRV:64bit: - [2009-06-10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009-05-13 18:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2009-02-24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
DRV:64bit: - [2009-02-13 12:02:52 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2008-05-24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2010-12-30 10:54:06 | 000,034,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RKHit.sys -- (RkHit)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-07-03 02:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2009-02-24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\mcdbus.sys -- (mcdbus)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.condui...&ctid=CT2879562
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweeti...q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchnu.com/406
IE - HKCU\..\URLSearchHook: {6d8d66f3-14fc-4736-a096-fac0ea66289c} - No CLSID value found
IE - HKCU\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found
IE - HKCU\..\URLSearchHook: {f37831ec-6919-42aa-ba2a-aceddf5ee262} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylo...0001c4bd6d028da
IE - HKCU\..\SearchScopes\{6985F9DF-BABC-46E9-B6ED-1731FE7FCD99}: "URL" = http://www.dymasearc...q={SearchTerms}
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-se...q={searchTerms}
IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.condui...&ctid=CT2879562
IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweeti...q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.searchnu.com/406"
FF - prefs.js..browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..keyword.URL: "http://dts.search-re...id=406&sr=0&q="


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_278.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Roderick\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Roderick\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010-08-06 17:19:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-08-08 20:25:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-25 17:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-08 20:25:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-25 17:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-08 20:25:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-25 17:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-08 20:25:34 | 000,000,000 | ---D | M]

[2012-09-22 17:33:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Extensions
[2010-12-18 17:59:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Extensions\[email protected]
[2010-09-30 18:56:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Extensions\[email protected]
[2012-09-22 17:33:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Firefox\Profiles\obbj7uct.default\extensions
[2012-09-22 17:33:00 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Users\Roderick\AppData\Roaming\mozilla\Firefox\Profiles\obbj7uct.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2012-09-22 17:32:56 | 000,002,519 | ---- | M] () -- C:\Users\Roderick\AppData\Roaming\mozilla\firefox\profiles\obbj7uct.default\searchplugins\Search_Results.xml
[2012-09-22 17:33:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011-01-06 21:38:32 | 000,000,000 | ---D | M] (z) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{60b4c82c-6b84-ae94-85a5-26e713d89b9a}
[2012-09-22 17:33:05 | 000,000,000 | ---D | M] (DataMngr) -- C:\PROGRAM FILES (X86)\SEARCHQU TOOLBAR\DATAMNGR\FIREFOXEXTENSION
[2012-06-15 00:19:07 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012-08-08 20:24:59 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
[2012-06-25 11:37:29 | 000,002,352 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012-06-15 00:36:33 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012-06-15 00:36:33 | 000,001,892 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bolcom-nl.xml
[2012-06-15 00:36:33 | 000,004,558 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\marktplaats-nl.xml
[2012-09-22 17:32:56 | 000,002,519 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
[2012-06-15 00:36:33 | 000,001,049 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-nl.xml

========== Chrome ==========

CHR - homepage: http://www.searchnu.com/406
CHR - default_search_provider: Search Results (Enabled)
CHR - default_search_provider: search_url = http://dts.search-re...q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - homepage: http://www.searchnu.com/406
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.60\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll
CHR - plugin: 20-20 3D Viewer for IKEA (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\NP_2020Player_IKEA.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Roderick\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - Extension: YouTube = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Zoeken = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: AdBlock = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.45_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Skype Click to Call = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.2.0.10687_0\
CHR - Extension: Gmail = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2011-04-24 22:58:29 | 000,001,211 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 3dns.adobe.com 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com activate.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.wip.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com adobe-dns-3.adobe.com adobe-dns-4.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com practivate.adobe practivate.adobe.com practivate.adobe.newoa practivate.adobe.ntp practivate.adobe.ipp ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com wwis-dubc1-vip60.adobe.com www.wip.adobe.com www.wip1.adobe.com
O1 - Hosts: 127.0.0.1 www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com wwis-dubc1-vip60.adobe.com crl.verisign.net CRL.VERISIGN.NET ood.opsource.net
O2:64bit: - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\64\AutocompletePro64.dll (SimplyGen)
O2:64bit: - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media, inc)
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManager.lnk ()
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [pcsafedoctor.exe] C:\Program Files (x86)\PCSafeDoctor\pcsafedoctor.exe ()
O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TkBellExe] c:\program files (x86)\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [VDownloader] C:\Program Files (x86)\VDownloader\VDownloader.exe /silent File not found
O4 - HKCU..\Run: [AutoLoader] C:\Users\Roderick\AppData\Local\Temp\systry.exe ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
O4 - HKCU..\Run: [Media Finder] "C:\Program Files (x86)\Media Finder\Media Finder.exe" /opentotray File not found
O4 - HKCU..\Run: [Software Informer] "C:\Program Files (x86)\Software Informer\softinfo.exe" -autorun File not found
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\Roderick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()
O4 - Startup: C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk = C:\Program Files (x86)\LimeWire\LimeWire.exe (Lime Wire, LLC)
O4 - Startup: C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Roderick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Roderick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zon...kr.cab56986.cab (Checkers Class)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} http://messenger.zon...wn.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zon...1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zon...er.cab56986.cab (Minesweeper Flags Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2B6A86E6-49D8-4C09-8BCF-027782B7FAEF}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media, inc)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{be4fba49-a3ce-11df-86e6-485b3967a2fc}\Shell - "" = AutoRun
O33 - MountPoints2\{be4fba49-a3ce-11df-86e6-485b3967a2fc}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{ddf19a30-a180-11df-aed5-485b3967a2fc}\Shell - "" = AutoRun
O33 - MountPoints2\{ddf19a30-a180-11df-aed5-485b3967a2fc}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012-09-24 12:31:58 | 000,208,216 | ---- | C] (Kaspersky Lab, GERT) -- C:\Windows\SysNative\drivers\75411954.sys
[2012-09-24 12:28:26 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2012-09-24 12:04:17 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\SpeedyPC Software
[2012-09-24 12:04:17 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\DriverCure
[2012-09-24 12:04:12 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedyPC Software
[2012-09-24 12:04:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SpeedyPC Software
[2012-09-24 12:04:06 | 000,000,000 | ---D | C] -- C:\ProgramData\SpeedyPC Software
[2012-09-24 12:04:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedyPC Software
[2012-09-24 11:57:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSafeDoctor
[2012-09-24 11:57:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PCSafeDoctor
[2012-09-24 10:45:45 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{AE294DD3-43FC-4CF9-8F30-BF8A824EFC7A}
[2012-09-22 19:14:50 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Desktop\Mixtape Rotterdam
[2012-09-22 17:32:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Searchqu Toolbar
[2012-09-22 17:32:56 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2012-09-22 15:39:07 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{619E7F96-75D1-4CE0-8A40-1953BD72520B}
[2012-09-22 00:19:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{560F99B5-F002-43EE-8FA2-3BEDF0956E38}
[2012-09-20 22:10:05 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{657D5866-433F-4C23-929B-3E612D410795}
[2012-09-20 10:09:42 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{AC6017CE-F120-4910-8575-F15A24E6BC19}
[2012-09-19 22:09:16 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{75BAF43F-9441-482E-9F64-9AC0FF71815F}
[2012-09-19 09:31:34 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E66606FF-CEC6-4F15-A1EE-33AABE66B0DC}
[2012-09-18 22:27:07 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{AE7C59E7-5E02-40A4-A789-0C33DF1E0D98}
[2012-09-18 18:29:42 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E18426AE-C8AF-400C-974C-DCF5AB476D59}
[2012-09-17 19:03:59 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E6DB71E5-8269-4CFD-93E2-64AD53F815A0}
[2012-09-15 13:53:02 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{BCE7F5A2-4E96-4C93-B981-DBE011FECC4F}
[2012-09-14 13:58:02 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\ubot
[2012-09-14 13:58:00 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\Xenocode
[2012-09-14 13:57:55 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Desktop\MoneyWords_Scraper
[2012-09-14 13:51:11 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{2B4988BB-4B62-4616-8669-4DB73B90A098}
[2012-09-13 15:00:45 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6B94519E-E630-4BE7-86E9-32A9A8784077}
[2012-09-12 21:52:55 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E90E2F72-6DF5-4EBC-BE4C-C8A537D33638}
[2012-09-12 17:25:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA TO
[2012-09-12 17:25:54 | 000,000,000 | ---D | C] -- C:\Program Files\TOSHIBA TO
[2012-09-12 17:25:45 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\InstallShield
[2012-09-12 17:13:07 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\TOSHIBA
[2012-09-12 09:52:22 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{CEB81A5E-7B20-4780-9F5C-1BB15A2DC1F7}
[2012-09-11 18:59:12 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7A8BC7CB-AAE0-414E-8BD4-C836C775AD13}
[2012-09-10 16:39:21 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7DB8214C-4B9A-4F0A-9D71-BCB4170614BF}
[2012-09-09 21:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recover Keys
[2012-09-09 21:01:42 | 000,000,000 | ---D | C] -- C:\Program Files\Recover Keys
[2012-09-09 15:57:36 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7583724D-029A-4CCB-8D1E-CE9A1D2B867D}
[2012-09-08 22:22:25 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{137B9F61-4DDC-4AEC-87E2-9BBC86ED7294}
[2012-09-07 14:03:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
[2012-09-07 14:03:16 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\Media Finder
[2012-09-07 12:50:47 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Desktop\Unit mappen Jaar 3
[2012-09-07 12:11:41 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{2BED2315-CAFE-498C-A343-F520CCE206E4}
[2012-09-06 17:02:09 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{0DB0CB30-1FDF-4412-8D3B-CD2A6D1118AD}
[2012-09-05 17:37:17 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6B6809C9-0EC3-47E6-8CBC-54C3188E7CFA}
[2012-09-04 21:41:49 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackjack Multi Advisor [TRIAL]
[2012-09-04 21:41:44 | 000,000,000 | ---D | C] -- C:\Program Files\Blackjack Multi Advisor TRIAL
[2012-09-04 20:02:25 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{917DD254-6502-414B-9BED-25A28A0ADA6F}
[2012-09-03 22:32:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spin Palace Casino
[2012-09-03 22:32:31 | 000,000,000 | ---D | C] -- C:\Microgaming
[2012-09-03 22:32:31 | 000,000,000 | ---D | C] -- C:\ProgramData\MGS
[2012-09-03 22:01:13 | 000,000,000 | ---D | C] -- C:\ProgramData\qfit
[2012-09-03 21:56:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QFIT
[2012-09-03 21:56:07 | 000,000,000 | ---D | C] -- C:\Windows\msagent
[2012-09-03 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Documents\ABCCounter
[2012-09-03 18:45:00 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{A14E6C0C-D0CD-4BE4-9519-686EED99147C}
[2012-09-02 19:54:51 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{91968A45-CD84-48A4-9E5A-8F39C1A1B334}
[2012-09-01 20:34:18 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{16A5564D-808B-4AE1-B476-EC4DCF95ED5F}
[2012-09-01 12:45:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6D3492C6-FFE5-4D7B-A19F-ADE8AE66A7C5}
[2012-08-31 21:37:10 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Documents\Camtasia Studio
[2012-08-31 21:36:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camtasia Studio 7
[2012-08-31 21:35:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\TechSmith Shared
[2012-08-31 19:28:25 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{9202CB62-66C4-4D52-A437-B8EBC6F21740}
[2012-08-30 14:34:04 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{94891816-8AE5-4765-9E00-6D013A318DD9}
[2012-08-29 23:37:27 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{4550FFDC-1F7F-4E20-A198-1D9C00151671}
[2012-08-29 11:37:02 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{87C49F17-B11E-4912-AD4B-484A3E1B4D02}
[2012-08-28 22:13:22 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{FD0D1285-1EFD-4917-A72A-DD480CA167A6}
[2012-08-28 10:13:10 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7FA040F6-E325-4690-9534-3228DD0E1AE6}
[2012-08-27 16:53:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6C1CD357-621C-4C13-9701-3B76E099D863}
[2012-08-26 09:50:19 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{EE596A35-45D3-4942-8F00-472D62E0E055}
[2012-08-25 13:08:51 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7C800874-E2D5-41CF-A875-8BCD0063B974}
[5 C:\Users\Roderick\Documents\*.tmp files -> C:\Users\Roderick\Documents\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012-09-24 12:38:37 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-09-24 12:38:37 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-09-24 12:31:59 | 000,208,216 | ---- | M] (Kaspersky Lab, GERT) -- C:\Windows\SysNative\drivers\75411954.sys
[2012-09-24 12:31:28 | 000,000,522 | ---- | M] () -- C:\Windows\tasks\SpeedyPC Update Version3 Startup Task.job
[2012-09-24 12:31:27 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\Final Media Player Update Checker.job
[2012-09-24 12:31:25 | 000,000,440 | ---- | M] () -- C:\Windows\tasks\PCConfidential.job
[2012-09-24 12:30:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-09-24 12:30:36 | 3105,259,520 | -HS- | M] () -- C:\hiberfil.sys
[2012-09-24 12:27:14 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-09-24 12:22:53 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012-09-24 12:22:35 | 000,000,498 | ---- | M] () -- C:\Windows\tasks\SpeedyPC Registration3.job
[2012-09-24 12:22:35 | 000,000,470 | ---- | M] () -- C:\Windows\tasks\SpeedyPC Update Version3.job
[2012-09-24 12:22:35 | 000,000,426 | ---- | M] () -- C:\Windows\tasks\SpeedyPC Pro.job
[2012-09-24 12:04:12 | 000,001,203 | ---- | M] () -- C:\Users\Roderick\Desktop\SpeedyPC Pro.lnk
[2012-09-24 11:57:50 | 000,000,021 | ---- | M] () -- C:\Windows\tpcsd
[2012-09-24 11:57:14 | 000,001,081 | ---- | M] () -- C:\Users\Roderick\Application Data\Microsoft\Internet Explorer\Quick Launch\pcsafedoctor.lnk
[2012-09-24 11:57:14 | 000,001,057 | ---- | M] () -- C:\Users\Roderick\Desktop\pcsafedoctor.lnk
[2012-09-24 11:52:00 | 000,001,078 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2626851990-2592596413-102839567-1000UA.job
[2012-09-22 19:03:02 | 000,002,836 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012-09-20 21:20:45 | 001,593,016 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-09-20 21:20:45 | 000,716,984 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2012-09-20 21:20:45 | 000,630,042 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-09-20 21:20:45 | 000,140,792 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2012-09-20 21:20:45 | 000,112,520 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-09-20 19:51:18 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2626851990-2592596413-102839567-1000Core.job
[2012-09-14 13:49:22 | 000,001,482 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012-09-12 13:45:19 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-09-07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012-09-05 17:35:04 | 005,010,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-09-04 21:41:50 | 000,000,930 | ---- | M] () -- C:\Users\Roderick\Desktop\Blackjack Multi Advisor - TRIAL.lnk
[2012-09-04 20:16:30 | 000,002,471 | ---- | M] () -- C:\Users\Roderick\Desktop\Google Chrome.lnk
[2012-09-03 22:36:47 | 000,000,000 | ---- | M] () -- C:\10.1.19.109
[2012-09-03 22:33:23 | 000,001,813 | ---- | M] () -- C:\Users\Roderick\Application Data\Microsoft\Internet Explorer\Quick Launch\Spin Palace Casino.lnk
[2012-09-03 22:33:23 | 000,001,777 | ---- | M] () -- C:\Users\Public\Desktop\Spin Palace Casino.lnk
[2012-08-31 22:49:17 | 000,040,960 | ---- | M] () -- C:\Users\Roderick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-08-31 21:36:06 | 000,000,613 | ---- | M] () -- C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[5 C:\Users\Roderick\Documents\*.tmp files -> C:\Users\Roderick\Documents\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012-09-24 12:04:24 | 000,000,498 | ---- | C] () -- C:\Windows\tasks\SpeedyPC Registration3.job
[2012-09-24 12:04:12 | 000,001,203 | ---- | C] () -- C:\Users\Roderick\Desktop\SpeedyPC Pro.lnk
[2012-09-24 12:04:11 | 000,000,522 | ---- | C] () -- C:\Windows\tasks\SpeedyPC Update Version3 Startup Task.job
[2012-09-24 12:04:11 | 000,000,470 | ---- | C] () -- C:\Windows\tasks\SpeedyPC Update Version3.job
[2012-09-24 12:04:10 | 000,000,426 | ---- | C] () -- C:\Windows\tasks\SpeedyPC Pro.job
[2012-09-24 11:57:50 | 000,000,021 | ---- | C] () -- C:\Windows\tpcsd
[2012-09-24 11:57:14 | 000,001,081 | ---- | C] () -- C:\Users\Roderick\Application Data\Microsoft\Internet Explorer\Quick Launch\pcsafedoctor.lnk
[2012-09-24 11:57:14 | 000,001,057 | ---- | C] () -- C:\Users\Roderick\Desktop\pcsafedoctor.lnk
[2012-09-24 11:57:07 | 000,034,736 | ---- | C] () -- C:\Windows\SysWow64\drivers\RKHit.sys
[2012-09-12 13:45:19 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-09-04 21:41:50 | 000,000,930 | ---- | C] () -- C:\Users\Roderick\Desktop\Blackjack Multi Advisor - TRIAL.lnk
[2012-09-03 22:36:47 | 000,000,000 | ---- | C] () -- C:\10.1.19.109
[2012-09-03 22:32:32 | 000,001,813 | ---- | C] () -- C:\Users\Roderick\Application Data\Microsoft\Internet Explorer\Quick Launch\Spin Palace Casino.lnk
[2012-09-03 22:32:31 | 000,001,777 | ---- | C] () -- C:\Users\Public\Desktop\Spin Palace Casino.lnk
[2012-08-31 21:36:06 | 000,000,613 | ---- | C] () -- C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[2012-06-25 13:39:57 | 000,000,046 | ---- | C] () -- C:\Windows\SysWow64\DonationCoder_urlsnooper_InstallInfo.dat
[2012-06-12 16:35:31 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2012-05-24 19:55:29 | 000,060,304 | ---- | C] () -- C:\Users\Roderick\g2mdlhlpx.exe
[2011-04-27 14:19:32 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011-04-27 14:19:30 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011-04-27 14:19:30 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011-04-27 14:19:30 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011-04-27 14:19:30 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011-03-31 19:09:53 | 000,040,960 | ---- | C] () -- C:\Users\Roderick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-03-10 21:08:26 | 000,185,344 | ---- | C] () -- C:\Windows\patchw32.dll
[2011-03-07 22:52:14 | 000,815,104 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011-03-07 22:52:14 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011-01-02 13:55:16 | 001,615,738 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-11-24 02:13:28 | 002,493,643 | ---- | C] () -- C:\Windows\SysWow64\abgx360.exe
[2010-10-11 14:26:52 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-09 22:47:05 | 000,000,151 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2010-08-09 18:03:07 | 000,000,081 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010-05-04 19:03:20 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe

========== ZeroAccess Check ==========

[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2010-09-07 19:24:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Asus
[2012-03-05 22:03:09 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Asus WebStorage
[2010-09-08 18:31:04 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Audacity
[2012-06-25 11:37:16 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Babylon
[2011-07-27 12:46:12 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011-02-07 23:52:24 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\C__Program Files (x86)_WebcamMax_WebcamMax.exe
[2010-09-03 23:20:33 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DAEMON Tools Lite
[2012-06-25 13:39:57 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DonationCoder
[2012-01-27 03:38:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Downloaded Installations
[2012-09-24 12:04:17 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DriverCure
[2012-09-02 22:17:26 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Dropbox
[2012-03-27 21:07:44 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DVDVideoSoft
[2011-05-05 23:26:54 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DVDVideoSoftIEHelpers
[2010-08-02 23:57:38 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\EeeStorageUploader
[2012-07-03 21:20:26 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\FileZilla
[2011-05-06 18:11:45 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\FinalMediaPlayer
[2012-09-07 12:59:40 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Foxit Software
[2012-07-20 00:03:02 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\HandBrake
[2010-10-05 18:36:47 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ImgBurn
[2012-06-25 13:47:59 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Leawo
[2012-09-24 12:33:14 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\LimeWire
[2012-08-09 19:12:41 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ManyCam
[2012-09-07 16:12:46 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Media Finder
[2010-10-11 15:41:46 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\net.minionfactory.Minions.4E914550D2E908443FEB11428BA5D2586C0F8CA7.1
[2012-01-27 03:43:00 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Nitro PDF
[2012-06-25 11:57:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Orbit
[2012-06-25 11:53:42 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ProgSense
[2012-03-31 00:37:47 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\RBotPlus
[2012-06-25 13:00:41 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Replay Media Catcher 4
[2011-02-08 18:18:00 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Rovio
[2012-01-21 20:51:43 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Samsung
[2012-09-24 12:04:17 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\SpeedyPC Software
[2012-07-12 14:36:33 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Spotify
[2010-08-25 20:27:17 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\TeamViewer
[2011-06-11 01:57:29 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\thriXXX
[2012-09-12 17:13:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\TOSHIBA
[2010-09-05 21:16:53 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\TuneUp Software
[2011-03-10 21:08:34 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ubi.com
[2012-09-14 13:58:02 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ubot
[2012-09-19 16:35:05 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\uTorrent
[2010-12-18 18:06:18 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Vivox
[2011-02-07 23:33:31 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\WebcamMax

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 24 bytes -> C:\Windows:AC1312710374717A
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:115CEE00
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 117 bytes -> C:\ProgramData\Temp:2B11E0DF

< End of report >


I really hope that someone can help me and thanks in advance.

kind regards,

Rodicil
  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi you will need to reset the Chrome search engine manually. Once this run has completed can you let me know what problems remain

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Posted Image

    :OTL
    IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
    IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
    IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.condui...&ctid=CT2879562
    IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweeti...q={searchTerms}
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchnu.com/406
    IE - HKCU\..\URLSearchHook: {6d8d66f3-14fc-4736-a096-fac0ea66289c} - No CLSID value found
    IE - HKCU\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - No CLSID value found
    IE - HKCU\..\URLSearchHook: {f37831ec-6919-42aa-ba2a-aceddf5ee262} - No CLSID value found
    IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylo...0001c4bd6d028da
    IE - HKCU\..\SearchScopes\{6985F9DF-BABC-46E9-B6ED-1731FE7FCD99}: "URL" = http://www.dymasearc...q={SearchTerms}
    IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
    IE - HKCU\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-se...q={searchTerms}
    IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.condui...&ctid=CT2879562
    IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweeti...q={searchTerms}
    FF - prefs.js..browser.startup.homepage: "http://www.searchnu.com/406"
    FF - prefs.js..browser.search.selectedEngine: "Search Results"
    FF - prefs.js..browser.search.defaultenginename: "Search Results"
    FF - prefs.js..browser.search.order.1: "Search Results"
    FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=394&systemid=406&sr=0&q="
    [2012-09-22 17:33:00 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Users\Roderick\AppData\Roaming\mozilla\Firefox\Profiles\obbj7uct.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
    [2012-09-22 17:32:56 | 000,002,519 | ---- | M] () -- C:\Users\Roderick\AppData\Roaming\mozilla\firefox\profiles\obbj7uct.default\searchplugins\Search_Results.xml
    [2011-01-06 21:38:32 | 000,000,000 | ---D | M] (z) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{60b4c82c-6b84-ae94-85a5-26e713d89b9a}
    [2012-09-22 17:33:05 | 000,000,000 | ---D | M] (DataMngr) -- C:\PROGRAM FILES (X86)\SEARCHQU TOOLBAR\DATAMNGR\FIREFOXEXTENSION
    [2012-06-25 11:37:29 | 000,002,352 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
    [2012-09-22 17:32:56 | 000,002,519 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
    O2:64bit: - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\64\AutocompletePro64.dll (SimplyGen)
    O2:64bit: - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media, inc)
    O2 - BHO: (AC-Pro) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen)
    O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
    O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
    O2 - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
    O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
    O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
    O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
    O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
    O4 - HKLM..\Run: [VDownloader] C:\Program Files (x86)\VDownloader\VDownloader.exe /silent File not found
    O4 - HKCU..\Run: [AutoLoader] C:\Users\Roderick\AppData\Local\Temp\systry.exe ()
    O4 - HKCU..\Run: [Media Finder] "C:\Program Files (x86)\Media Finder\Media Finder.exe" /opentotray File not found
    O4 - HKCU..\Run: [Software Informer] "C:\Program Files (x86)\Software Informer\softinfo.exe" -autorun File not found
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media, inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media, inc)
    O20 - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
    O20 - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll) - C:\Program Files (x86)\Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
    [2012-09-22 17:32:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Searchqu Toolbar
    [2012-09-22 17:32:56 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
    [2012-06-25 11:37:16 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Babylon
    
    :Files
    C:\Users\Roderick\AppData\Local\Temp\systry.exe
    C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE
    C:\Program Files (x86)\Media Finder
    C:\Program Files (x86)\VDownloader
    C:\Program Files (x86)\ConduitEngine
    C:\Program Files (x86)\AutocompletePro
    
    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

  • 0

#3
rodicil

rodicil

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Hello,

Thank you very much.

after restarting i get this:
All processes killed
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{6d8d66f3-14fc-4736-a096-fac0ea66289c} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6d8d66f3-14fc-4736-a096-fac0ea66289c}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{f37831ec-6919-42aa-ba2a-aceddf5ee262} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f37831ec-6919-42aa-ba2a-aceddf5ee262}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6985F9DF-BABC-46E9-B6ED-1731FE7FCD99}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6985F9DF-BABC-46E9-B6ED-1731FE7FCD99}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847}\ not found.
Prefs.js: "http://www.searchnu.com/406" removed from browser.startup.homepage
Prefs.js: "Search Results" removed from browser.search.selectedEngine
Prefs.js: "Search Results" removed from browser.search.defaultenginename
Prefs.js: "Search Results" removed from browser.search.order.1
Prefs.js: "http://dts.search-re...id=406&sr=0&q=" removed from keyword.URL
Folder C:\Users\Roderick\AppData\Roaming\mozilla\Firefox\Profiles\obbj7uct.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}\ not found.
C:\Users\Roderick\AppData\Roaming\mozilla\firefox\profiles\obbj7uct.default\searchplugins\Search_Results.xml moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{60b4c82c-6b84-ae94-85a5-26e713d89b9a}\components folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{60b4c82c-6b84-ae94-85a5-26e713d89b9a}\chrome folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{60b4c82c-6b84-ae94-85a5-26e713d89b9a} folder moved successfully.
Folder C:\PROGRAM FILES (X86)\SEARCHQU TOOLBAR\DATAMNGR\FIREFOXEXTENSION\ not found.
C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Program Files (x86)\Mozilla Firefox\searchplugins\Search_Results.xml moved successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
C:\Program Files (x86)\AutocompletePro\64\AutocompletePro64.dll moved successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9D717F81-9148-4f12-8568-69135F087DB0}\ not found.
C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\BrowserConnection.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ deleted successfully.
C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}\ deleted successfully.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9D717F81-9148-4f12-8568-69135F087DB0}\ not found.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
File C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{99079a25-328f-4bd4-be04-00955acaa0a7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}\ not found.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DATAMNGR not found.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngrUI.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\VDownloader deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AutoLoader deleted successfully.
C:\Users\Roderick\AppData\Local\Temp\systry.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Media Finder deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Software Informer deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll deleted successfully.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\datamngr.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll deleted successfully.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll deleted successfully.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngr.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll deleted successfully.
File C:\Program Files (x86)\Searchqu Toolbar\Datamngr\IEBHO.dll not found.
C:\Program Files (x86)\Searchqu Toolbar\Datamngr\x64 folder moved successfully.
C:\Program Files (x86)\Searchqu Toolbar\Datamngr folder moved successfully.
C:\Program Files (x86)\Searchqu Toolbar folder moved successfully.
C:\ProgramData\boost_interprocess\D9D933E9E398CD01 folder moved successfully.
C:\ProgramData\boost_interprocess\393EBA38C798CD01 folder moved successfully.
C:\ProgramData\boost_interprocess folder moved successfully.
C:\Users\Roderick\AppData\Roaming\Babylon folder moved successfully.
========== FILES ==========
File\Folder C:\Users\Roderick\AppData\Local\Temp\systry.exe not found.
C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE folder moved successfully.
File\Folder C:\Program Files (x86)\Media Finder not found.
File\Folder C:\Program Files (x86)\VDownloader not found.
C:\Program Files (x86)\ConduitEngine folder moved successfully.
C:\Program Files (x86)\AutocompletePro\[email protected]\defaults\preferences folder moved successfully.
C:\Program Files (x86)\AutocompletePro\[email protected]\defaults folder moved successfully.
C:\Program Files (x86)\AutocompletePro\[email protected]\chrome\content folder moved successfully.
C:\Program Files (x86)\AutocompletePro\[email protected]\chrome folder moved successfully.
C:\Program Files (x86)\AutocompletePro\[email protected] folder moved successfully.
C:\Program Files (x86)\AutocompletePro\chrome folder moved successfully.
C:\Program Files (x86)\AutocompletePro\64 folder moved successfully.
C:\Program Files (x86)\AutocompletePro folder moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 225348 bytes
->Flash cache emptied: 56502 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: Roderick
->Temp folder emptied: 915041253 bytes
->Temporary Internet Files folder emptied: 186273033 bytes
->Java cache emptied: 36 bytes
->FireFox cache emptied: 75954533 bytes
->Google Chrome cache emptied: 140655001 bytes
->Flash cache emptied: 94272 bytes

User: roderick ibs
->Temp folder emptied: 916269 bytes
->Temporary Internet Files folder emptied: 21742422 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 57479 bytes

User: TEMP
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56504 bytes

User: TEMP.Roderick-PC

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 366650823 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36045723 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1.663,00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.66.2 log created on 09242012_173741

Files\Folders moved on Reboot...
C:\Users\Roderick\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Roderick\AppData\Local\Temp\~DF0331521FE09A8E0F.TMP not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{51781B92-AADD-49C4-BF11-BDDA62248D19}.tmp not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{03F83995-C9E3-4101-A3C2-806D2A897A23}.tmp not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{1F23895F-43EC-471A-AFD1-682E2B83587B}.tmp not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4639173F-0587-4F3D-B754-CE88D43E37E3}.tmp not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{86D4DD73-9A24-49B2-B8EB-8C3AABF1901D}.tmp not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{9F6229E9-4166-49A4-AA22-544ECD82DC3A}.tmp not found!
C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IZ6GZUX1\messengerscripttracking[4].htm moved successfully.
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\692TX7LP\ADSAdClient31[3].htm not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\692TX7LP\direct;auc.4943694721650770231;ai.292669193.292670595;ac.1348484554-22656981;wi.234;hi.60;cp.0[1].htm not found!
File\Folder C:\Users\Roderick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\692TX7LP\tt[3].htm not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

after the running otl quick scan was this what i got:


OTL logfile created on: 24-9-2012 17:47:08 - Run 2
OTL by OldTimer - Version 3.2.66.2 Folder = C:\Users\Roderick\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy

3,86 Gb Total Physical Memory | 1,42 Gb Available Physical Memory | 36,86% Memory free
7,71 Gb Paging File | 4,83 Gb Available in Paging File | 62,67% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 8,83 Gb Free Space | 7,59% Space Free | Partition Type: NTFS
Drive D: | 332,72 Gb Total Space | 91,04 Gb Free Space | 27,36% Space Free | Partition Type: NTFS

Computer Name: RODERICK-PC | User Name: Roderick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012-09-24 12:41:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Roderick\Downloads\OTL.exe
PRC - [2012-09-07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012-08-08 20:24:52 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2012-07-24 09:48:45 | 000,801,792 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
PRC - [2012-06-28 11:05:00 | 002,160,024 | ---- | M] (ManyCam LLC) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
PRC - [2012-05-14 20:19:02 | 000,932,528 | ---- | M] () -- C:\Users\Roderick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2011-12-28 00:21:18 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2011-12-28 00:21:08 | 003,508,624 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
PRC - [2011-12-14 13:59:20 | 002,984,832 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2011-03-28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010-09-03 18:05:34 | 000,566,024 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManager.exe
PRC - [2010-05-04 19:27:25 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010-01-05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2009-11-24 22:45:36 | 000,053,888 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
PRC - [2009-11-10 04:20:36 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009-11-02 23:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009-10-27 05:29:32 | 006,998,656 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2009-10-26 19:10:42 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2009-10-01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2009-10-01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2009-08-20 05:31:48 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2009-08-12 12:32:56 | 000,365,936 | ---- | M] (Boingo Wireless, Inc.) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
PRC - [2009-06-19 19:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009-06-19 19:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009-06-16 02:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
PRC - [2009-05-19 00:58:38 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009-05-19 00:57:32 | 000,485,944 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\facemgr.exe
PRC - [2009-02-23 19:43:12 | 000,576,000 | ---- | M] (MagicISO, Inc.) -- C:\Program Files (x86)\MagicDisc\MagicDisc.exe
PRC - [2008-12-23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008-03-31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007-11-30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
PRC - [2007-11-20 13:50:36 | 001,145,400 | ---- | M] (ASUS) -- C:\Program Files\ASUS\Net4Switch\Net4Switch.exe


========== Modules (No Company Name) ==========

MOD - [2012-09-24 17:45:19 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM1D65.tmp
MOD - [2012-09-24 17:45:18 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM1C89.tmp
MOD - [2012-09-24 17:45:18 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM1A55.tmp
MOD - [2012-09-24 17:45:17 | 000,086,016 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM188F.tmp
MOD - [2012-09-24 17:45:16 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM14F3.tmp
MOD - [2012-09-24 17:45:16 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM1214.tmp
MOD - [2012-09-24 17:45:15 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMFBF.tmp
MOD - [2012-09-24 17:45:15 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM10F9.tmp
MOD - [2012-09-24 17:45:14 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMBA8.tmp
MOD - [2012-09-24 17:45:13 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM84C.tmp
MOD - [2012-09-24 17:45:13 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM6C4.tmp
MOD - [2012-09-24 17:45:12 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM387.tmp
MOD - [2012-09-24 17:45:11 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMD5.tmp
MOD - [2012-09-24 17:45:11 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEM1C1.tmp
MOD - [2012-09-24 17:45:10 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMFBB5.tmp
MOD - [2012-09-24 17:45:09 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMF9CF.tmp
MOD - [2012-09-24 17:45:09 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMF2C9.tmp
MOD - [2012-09-24 17:45:09 | 000,033,792 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\YTMP7MC8AA\TAAF75C.tmp
MOD - [2012-09-24 17:45:07 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMF0A5.tmp
MOD - [2012-09-24 17:45:06 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMED68.tmp
MOD - [2012-09-24 17:45:05 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEME79C.tmp
MOD - [2012-09-24 17:45:04 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEME431.tmp
MOD - [2012-09-24 17:45:03 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMDF9D.tmp
MOD - [2012-09-24 17:45:02 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMDBD3.tmp
MOD - [2012-09-24 17:45:01 | 000,120,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMD589.tmp
MOD - [2012-09-24 17:45:00 | 000,072,192 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMD337.tmp
MOD - [2012-09-24 17:44:59 | 000,072,192 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMD151.tmp
MOD - [2012-09-24 17:44:58 | 000,072,704 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMCE81.tmp
MOD - [2012-09-24 17:44:58 | 000,072,192 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMCE22.tmp
MOD - [2012-09-24 17:44:58 | 000,057,344 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMCA39.tmp
MOD - [2012-09-24 17:44:56 | 000,064,000 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMC45C.tmp
MOD - [2012-09-24 17:44:56 | 000,053,760 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMC661.tmp
MOD - [2012-09-24 17:44:55 | 000,053,760 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMC2F3.tmp
MOD - [2012-09-24 17:44:54 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMBEEB.tmp
MOD - [2012-09-24 17:44:54 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMBDF0.tmp
MOD - [2012-09-24 17:44:53 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB793.tmp
MOD - [2012-09-24 17:44:53 | 000,056,320 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB89F.tmp
MOD - [2012-09-24 17:44:53 | 000,053,760 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMBB8D.tmp
MOD - [2012-09-24 17:44:52 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB6A7.tmp
MOD - [2012-09-24 17:44:52 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB5BB.tmp
MOD - [2012-09-24 17:44:52 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB4B0.tmp
MOD - [2012-09-24 17:44:51 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB3B5.tmp
MOD - [2012-09-24 17:44:51 | 000,056,832 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMB317.tmp
MOD - [2012-09-24 17:44:50 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMAE92.tmp
MOD - [2012-09-24 17:44:50 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMAD29.tmp
MOD - [2012-09-24 17:44:49 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMA97F.tmp
MOD - [2012-09-24 17:44:48 | 000,068,608 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMA7B9.tmp
MOD - [2012-09-24 17:44:48 | 000,056,320 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMA4A9.tmp
MOD - [2012-09-24 17:44:48 | 000,055,296 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMA576.tmp
MOD - [2012-09-24 17:44:47 | 000,075,776 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\XTMP1MC3VE\DEMA3CD.tmp
MOD - [2012-09-24 17:44:36 | 000,115,137 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Temp\bad4021e-8b96-4726-a482-7caebf5bc001\CliSecureRT.dll
MOD - [2012-08-30 04:58:45 | 000,442,392 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
MOD - [2012-08-30 04:58:42 | 003,997,720 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll
MOD - [2012-08-30 04:57:15 | 000,144,424 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\avutil-51.dll
MOD - [2012-08-30 04:57:13 | 000,266,792 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\avformat-54.dll
MOD - [2012-08-30 04:57:12 | 002,480,680 | ---- | M] () -- C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\avcodec-54.dll
MOD - [2012-06-28 11:05:02 | 000,124,312 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\CrashRpt.dll
MOD - [2012-06-15 00:05:45 | 018,000,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
MOD - [2012-06-15 00:05:33 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
MOD - [2012-06-15 00:05:28 | 013,198,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
MOD - [2012-06-15 00:05:23 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
MOD - [2012-06-15 00:05:21 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
MOD - [2012-05-15 20:30:45 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
MOD - [2012-05-15 20:28:55 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\65f0d70169a0e73b45307dddbd86f92b\System.Runtime.Remoting.ni.dll
MOD - [2012-05-15 20:28:45 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
MOD - [2012-05-14 20:19:02 | 000,932,528 | ---- | M] () -- C:\Users\Roderick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
MOD - [2012-05-10 16:14:56 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
MOD - [2012-05-10 16:10:48 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
MOD - [2012-05-10 16:10:42 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
MOD - [2012-05-10 16:10:32 | 009,091,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
MOD - [2012-05-10 16:10:23 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
MOD - [2012-01-08 15:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2011-12-28 00:21:18 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2011-09-27 07:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011-09-27 07:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011-08-07 14:54:16 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\Detour32.dll
MOD - [2011-04-11 13:58:21 | 000,390,656 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\lame_enc.dll
MOD - [2011-04-11 13:58:17 | 000,370,688 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\libsndfile.dll
MOD - [2010-12-05 04:38:12 | 000,241,152 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_objdetect220.dll
MOD - [2010-12-05 04:38:06 | 000,776,192 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_highgui220.dll
MOD - [2010-12-05 04:38:06 | 000,201,216 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_video220.dll
MOD - [2010-12-05 04:38:04 | 001,242,112 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
MOD - [2010-12-05 04:38:02 | 002,010,624 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
MOD - [2010-10-13 21:45:55 | 003,928,304 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\plugin\libbizlplugin.dll
MOD - [2010-09-03 18:05:30 | 000,400,384 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
MOD - [2010-09-03 18:05:30 | 000,322,048 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
MOD - [2010-09-03 18:05:30 | 000,194,048 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
MOD - [2010-09-03 18:05:30 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
MOD - [2010-09-03 18:05:28 | 002,202,624 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
MOD - [2010-09-03 18:05:28 | 000,959,488 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
MOD - [2010-09-03 18:05:28 | 000,377,856 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
MOD - [2010-09-03 18:05:28 | 000,062,464 | ---- | M] () -- C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
MOD - [2010-05-02 22:30:10 | 002,078,208 | ---- | M] () -- C:\Program Files (x86)\wLite\IPCameraRTSP.ax
MOD - [2010-01-05 02:43:36 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MOD - [2009-11-24 22:45:36 | 000,053,888 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
MOD - [2009-11-02 23:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009-11-02 23:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2009-09-23 20:07:14 | 000,204,800 | ---- | M] () -- C:\Program Files (x86)\ASUS\VirtualCamera\virtualCamera.ax
MOD - [2009-07-09 17:41:50 | 000,222,720 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswsysmon.dll
MOD - [2009-07-08 11:24:16 | 000,167,424 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipsw_cfgmgr.dll
MOD - [2009-07-03 13:40:34 | 000,085,504 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\LogonStartup.dll
MOD - [2009-07-03 13:21:16 | 000,042,496 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\iphelper.dll
MOD - [2009-07-03 13:13:56 | 000,297,984 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswui.dll
MOD - [2009-07-03 13:13:16 | 000,074,752 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswobj.dll
MOD - [2009-07-03 13:12:32 | 000,049,152 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswhlp.dll
MOD - [2009-07-03 13:12:24 | 000,065,024 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswgblset.dll
MOD - [2009-07-03 13:12:14 | 000,089,088 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswds.dll
MOD - [2009-07-03 13:11:56 | 000,267,264 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswcore.dll
MOD - [2009-07-03 13:04:16 | 000,084,992 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\cxcmrt.dll
MOD - [2009-07-01 16:46:24 | 000,461,824 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ipswresmgr.dll
MOD - [2007-11-30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
MOD - [2007-07-27 15:10:02 | 000,049,152 | ---- | M] () -- C:\Program Files\ASUS\Net4Switch\ResItf.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012-03-26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012-03-26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2010-09-06 12:09:44 | 000,859,712 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom)
SRV:64bit: - [2010-01-22 03:01:11 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009-12-08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2009-11-27 05:39:45 | 000,243,712 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\stacsv64.exe -- (STacSV)
SRV:64bit: - [2009-09-29 18:32:31 | 000,570,632 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer)
SRV:64bit: - [2009-09-29 18:32:29 | 000,917,768 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy)
SRV:64bit: - [2009-08-06 23:17:46 | 000,118,672 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012-09-20 22:28:02 | 000,250,288 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-09-07 17:04:46 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-09-07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-06-15 00:17:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011-12-14 13:59:20 | 002,984,832 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2011-04-01 11:14:30 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011-03-28 11:21:16 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010-06-25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2010-05-02 23:34:28 | 005,027,328 | ---- | M] (Moonware Studios) [On_Demand | Stopped] -- C:\Program Files (x86)\wLite\wService.exe -- (wxpSvc)
SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-11-27 05:39:45 | 000,243,712 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_38986e29a8b510a2\STacSV64.exe -- (STacSV)
SRV - [2009-11-10 04:20:36 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009-10-01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009-10-01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009-06-16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008-03-31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012-09-07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012-06-05 16:03:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2012-05-11 07:34:14 | 000,203,320 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2012-05-11 07:34:12 | 000,099,384 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:64bit: - [2012-03-20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012-03-01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012-02-22 12:34:36 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
DRV:64bit: - [2012-01-11 08:11:20 | 000,034,304 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
DRV:64bit: - [2011-06-26 02:56:44 | 000,033,888 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\appliand.sys -- (appliandMP)
DRV:64bit: - [2011-06-26 02:56:44 | 000,033,888 | ---- | M] (Applian Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\appliand.sys -- (appliand)
DRV:64bit: - [2011-05-10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011-03-11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011-03-11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010-08-02 21:03:01 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
DRV:64bit: - [2010-07-30 19:30:26 | 000,309,840 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmxpflt.sys -- (tmxpflt)
DRV:64bit: - [2010-07-30 19:30:20 | 000,042,576 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmpreflt.sys -- (tmpreflt)
DRV:64bit: - [2010-07-30 19:24:14 | 001,988,176 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vsapint.sys -- (vsapint)
DRV:64bit: - [2010-06-25 19:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2010-01-22 03:13:23 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2010-01-22 03:13:23 | 006,233,088 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)
DRV:64bit: - [2010-01-22 02:07:55 | 000,161,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2010-01-18 14:37:57 | 000,128,512 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2009-12-30 11:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009-12-14 00:36:16 | 002,102,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwx.sys -- (AR5416)
DRV:64bit: - [2009-11-27 05:39:45 | 000,505,344 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2009-11-13 11:47:35 | 000,067,072 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:64bit: - [2009-11-05 22:35:45 | 000,034,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64k.sys -- (Point64)
DRV:64bit: - [2009-11-05 22:35:45 | 000,027,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
DRV:64bit: - [2009-10-26 06:39:43 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2009-10-05 03:33:59 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009-09-30 03:34:31 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009-09-29 18:33:17 | 000,107,536 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:64bit: - [2009-09-17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
DRV:64bit: - [2009-08-21 08:48:17 | 000,044,032 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:64bit: - [2009-08-12 05:38:01 | 001,799,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
DRV:64bit: - [2009-08-06 23:24:13 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009-08-06 23:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2009-07-20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009-07-14 02:00:13 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Dot4Scan.sys -- (Dot4Scan)
DRV:64bit: - [2009-06-10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009-05-13 18:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2009-02-24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcdbus.sys -- (mcdbus)
DRV:64bit: - [2009-02-13 12:02:52 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2008-05-24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-07-03 02:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2009-02-24 18:35:44 | 000,255,552 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\mcdbus.sys -- (mcdbus)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.order.1: ""


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_278.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Roderick\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Roderick\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010-08-06 17:19:32 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-08-08 20:25:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-25 17:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-08 20:25:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-25 17:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-08 20:25:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-25 17:22:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-08 20:25:34 | 000,000,000 | ---D | M]

[2012-09-24 12:56:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Extensions
[2010-12-18 17:59:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Extensions\[email protected]
[2010-09-30 18:56:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Extensions\[email protected]
[2012-09-24 12:56:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roderick\AppData\Roaming\mozilla\Firefox\Profiles\obbj7uct.default\extensions
[2012-09-24 12:56:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
File not found (No name found) -- C:\PROGRAM FILES (X86)\SEARCHQU TOOLBAR\DATAMNGR\FIREFOXEXTENSION
[2012-06-15 00:19:07 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012-08-08 20:24:59 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
[2012-06-15 00:36:33 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012-06-15 00:36:33 | 000,001,892 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bolcom-nl.xml
[2012-06-15 00:36:33 | 000,004,558 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\marktplaats-nl.xml
[2012-06-15 00:36:33 | 000,001,049 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-nl.xml

========== Chrome ==========

CHR - homepage: http://www.searchnu.com/406
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.searchnu.com/406
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.60\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll
CHR - plugin: 20-20 3D Viewer for IKEA (Enabled) = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\NP_2020Player_IKEA.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Roderick\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - Extension: YouTube = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Zoeken = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: AdBlock = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.45_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Skype Click to Call = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.2.0.10687_0\
CHR - Extension: Gmail = C:\Users\Roderick\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012-09-24 17:37:45 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManager.lnk ()
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TkBellExe] c:\program files (x86)\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\Roderick\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()
O4 - Startup: C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk = C:\Program Files (x86)\LimeWire\LimeWire.exe (Lime Wire, LLC)
O4 - Startup: C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:64bit: - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Roderick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Roderick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zon...kr.cab56986.cab (Checkers Class)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} http://messenger.zon...wn.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zon...1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zon...er.cab56986.cab (Minesweeper Flags Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2B6A86E6-49D8-4C09-8BCF-027782B7FAEF}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{be4fba49-a3ce-11df-86e6-485b3967a2fc}\Shell - "" = AutoRun
O33 - MountPoints2\{be4fba49-a3ce-11df-86e6-485b3967a2fc}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{ddf19a30-a180-11df-aed5-485b3967a2fc}\Shell - "" = AutoRun
O33 - MountPoints2\{ddf19a30-a180-11df-aed5-485b3967a2fc}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012-09-24 17:37:41 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-09-24 12:31:58 | 000,208,216 | ---- | C] (Kaspersky Lab, GERT) -- C:\Windows\SysNative\drivers\75411954.sys
[2012-09-24 12:28:26 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2012-09-24 12:04:17 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\SpeedyPC Software
[2012-09-24 12:04:17 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\DriverCure
[2012-09-24 12:04:06 | 000,000,000 | ---D | C] -- C:\ProgramData\SpeedyPC Software
[2012-09-24 10:45:45 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{AE294DD3-43FC-4CF9-8F30-BF8A824EFC7A}
[2012-09-22 19:14:50 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Desktop\Mixtape Rotterdam
[2012-09-22 15:39:07 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{619E7F96-75D1-4CE0-8A40-1953BD72520B}
[2012-09-22 00:19:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{560F99B5-F002-43EE-8FA2-3BEDF0956E38}
[2012-09-20 22:10:05 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{657D5866-433F-4C23-929B-3E612D410795}
[2012-09-20 10:09:42 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{AC6017CE-F120-4910-8575-F15A24E6BC19}
[2012-09-19 22:09:16 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{75BAF43F-9441-482E-9F64-9AC0FF71815F}
[2012-09-19 09:31:34 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E66606FF-CEC6-4F15-A1EE-33AABE66B0DC}
[2012-09-18 22:27:07 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{AE7C59E7-5E02-40A4-A789-0C33DF1E0D98}
[2012-09-18 18:29:42 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E18426AE-C8AF-400C-974C-DCF5AB476D59}
[2012-09-17 19:03:59 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E6DB71E5-8269-4CFD-93E2-64AD53F815A0}
[2012-09-15 13:53:02 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{BCE7F5A2-4E96-4C93-B981-DBE011FECC4F}
[2012-09-14 13:58:02 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\ubot
[2012-09-14 13:58:00 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\Xenocode
[2012-09-14 13:57:55 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Desktop\MoneyWords_Scraper
[2012-09-14 13:51:11 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{2B4988BB-4B62-4616-8669-4DB73B90A098}
[2012-09-13 15:00:45 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6B94519E-E630-4BE7-86E9-32A9A8784077}
[2012-09-12 21:52:55 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{E90E2F72-6DF5-4EBC-BE4C-C8A537D33638}
[2012-09-12 17:25:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA TO
[2012-09-12 17:25:54 | 000,000,000 | ---D | C] -- C:\Program Files\TOSHIBA TO
[2012-09-12 17:25:45 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\InstallShield
[2012-09-12 17:13:07 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\TOSHIBA
[2012-09-12 09:52:22 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{CEB81A5E-7B20-4780-9F5C-1BB15A2DC1F7}
[2012-09-11 18:59:12 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7A8BC7CB-AAE0-414E-8BD4-C836C775AD13}
[2012-09-10 16:39:21 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7DB8214C-4B9A-4F0A-9D71-BCB4170614BF}
[2012-09-09 21:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recover Keys
[2012-09-09 21:01:42 | 000,000,000 | ---D | C] -- C:\Program Files\Recover Keys
[2012-09-09 15:57:36 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7583724D-029A-4CCB-8D1E-CE9A1D2B867D}
[2012-09-08 22:22:25 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{137B9F61-4DDC-4AEC-87E2-9BBC86ED7294}
[2012-09-07 14:03:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
[2012-09-07 14:03:16 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\Media Finder
[2012-09-07 12:50:47 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Desktop\Unit mappen Jaar 3
[2012-09-07 12:11:41 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{2BED2315-CAFE-498C-A343-F520CCE206E4}
[2012-09-06 17:02:09 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{0DB0CB30-1FDF-4412-8D3B-CD2A6D1118AD}
[2012-09-05 17:37:17 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6B6809C9-0EC3-47E6-8CBC-54C3188E7CFA}
[2012-09-04 21:41:49 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackjack Multi Advisor [TRIAL]
[2012-09-04 21:41:44 | 000,000,000 | ---D | C] -- C:\Program Files\Blackjack Multi Advisor TRIAL
[2012-09-04 20:02:25 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{917DD254-6502-414B-9BED-25A28A0ADA6F}
[2012-09-03 22:32:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spin Palace Casino
[2012-09-03 22:32:31 | 000,000,000 | ---D | C] -- C:\Microgaming
[2012-09-03 22:32:31 | 000,000,000 | ---D | C] -- C:\ProgramData\MGS
[2012-09-03 22:01:13 | 000,000,000 | ---D | C] -- C:\ProgramData\qfit
[2012-09-03 21:56:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QFIT
[2012-09-03 21:56:07 | 000,000,000 | ---D | C] -- C:\Windows\msagent
[2012-09-03 20:55:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Documents\ABCCounter
[2012-09-03 18:45:00 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{A14E6C0C-D0CD-4BE4-9519-686EED99147C}
[2012-09-02 19:54:51 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{91968A45-CD84-48A4-9E5A-8F39C1A1B334}
[2012-09-01 20:34:18 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{16A5564D-808B-4AE1-B476-EC4DCF95ED5F}
[2012-09-01 12:45:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6D3492C6-FFE5-4D7B-A19F-ADE8AE66A7C5}
[2012-08-31 21:37:10 | 000,000,000 | ---D | C] -- C:\Users\Roderick\Documents\Camtasia Studio
[2012-08-31 21:36:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camtasia Studio 7
[2012-08-31 21:35:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\TechSmith Shared
[2012-08-31 19:28:25 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{9202CB62-66C4-4D52-A437-B8EBC6F21740}
[2012-08-30 14:34:04 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{94891816-8AE5-4765-9E00-6D013A318DD9}
[2012-08-29 23:37:27 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{4550FFDC-1F7F-4E20-A198-1D9C00151671}
[2012-08-29 11:37:02 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{87C49F17-B11E-4912-AD4B-484A3E1B4D02}
[2012-08-28 22:13:22 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{FD0D1285-1EFD-4917-A72A-DD480CA167A6}
[2012-08-28 10:13:10 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{7FA040F6-E325-4690-9534-3228DD0E1AE6}
[2012-08-27 16:53:31 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{6C1CD357-621C-4C13-9701-3B76E099D863}
[2012-08-26 09:50:19 | 000,000,000 | ---D | C] -- C:\Users\Roderick\AppData\Local\{EE596A35-45D3-4942-8F00-472D62E0E055}
[5 C:\Users\Roderick\Documents\*.tmp files -> C:\Users\Roderick\Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012-09-24 17:50:53 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-09-24 17:50:53 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-09-24 17:43:00 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\Final Media Player Update Checker.job
[2012-09-24 17:42:53 | 000,000,440 | ---- | M] () -- C:\Windows\tasks\PCConfidential.job
[2012-09-24 17:42:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-09-24 17:42:09 | 3105,259,520 | -HS- | M] () -- C:\hiberfil.sys
[2012-09-24 17:37:45 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2012-09-24 17:27:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-09-24 16:52:00 | 000,001,078 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2626851990-2592596413-102839567-1000UA.job
[2012-09-24 12:31:59 | 000,208,216 | ---- | M] (Kaspersky Lab, GERT) -- C:\Windows\SysNative\drivers\75411954.sys
[2012-09-24 12:22:53 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012-09-24 11:57:50 | 000,000,021 | ---- | M] () -- C:\Windows\tpcsd
[2012-09-22 19:03:02 | 000,002,836 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012-09-20 21:20:45 | 001,593,016 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-09-20 21:20:45 | 000,716,984 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2012-09-20 21:20:45 | 000,630,042 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-09-20 21:20:45 | 000,140,792 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2012-09-20 21:20:45 | 000,112,520 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-09-20 19:51:18 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2626851990-2592596413-102839567-1000Core.job
[2012-09-14 13:49:22 | 000,001,482 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012-09-12 13:45:19 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-09-07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012-09-05 17:35:04 | 005,010,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-09-04 21:41:50 | 000,000,930 | ---- | M] () -- C:\Users\Roderick\Desktop\Blackjack Multi Advisor - TRIAL.lnk
[2012-09-04 20:16:30 | 000,002,471 | ---- | M] () -- C:\Users\Roderick\Desktop\Google Chrome.lnk
[2012-09-03 22:36:47 | 000,000,000 | ---- | M] () -- C:\10.1.19.109
[2012-09-03 22:33:23 | 000,001,813 | ---- | M] () -- C:\Users\Roderick\Application Data\Microsoft\Internet Explorer\Quick Launch\Spin Palace Casino.lnk
[2012-09-03 22:33:23 | 000,001,777 | ---- | M] () -- C:\Users\Public\Desktop\Spin Palace Casino.lnk
[2012-08-31 22:49:17 | 000,040,960 | ---- | M] () -- C:\Users\Roderick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-08-31 21:36:06 | 000,000,613 | ---- | M] () -- C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[5 C:\Users\Roderick\Documents\*.tmp files -> C:\Users\Roderick\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012-09-24 11:57:50 | 000,000,021 | ---- | C] () -- C:\Windows\tpcsd
[2012-09-12 13:45:19 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012-09-04 21:41:50 | 000,000,930 | ---- | C] () -- C:\Users\Roderick\Desktop\Blackjack Multi Advisor - TRIAL.lnk
[2012-09-03 22:36:47 | 000,000,000 | ---- | C] () -- C:\10.1.19.109
[2012-09-03 22:32:32 | 000,001,813 | ---- | C] () -- C:\Users\Roderick\Application Data\Microsoft\Internet Explorer\Quick Launch\Spin Palace Casino.lnk
[2012-09-03 22:32:31 | 000,001,777 | ---- | C] () -- C:\Users\Public\Desktop\Spin Palace Casino.lnk
[2012-08-31 21:36:06 | 000,000,613 | ---- | C] () -- C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[2012-06-25 13:39:57 | 000,000,046 | ---- | C] () -- C:\Windows\SysWow64\DonationCoder_urlsnooper_InstallInfo.dat
[2012-06-12 16:35:31 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2012-05-24 19:55:29 | 000,060,304 | ---- | C] () -- C:\Users\Roderick\g2mdlhlpx.exe
[2011-04-27 14:19:32 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011-04-27 14:19:30 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2011-04-27 14:19:30 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011-04-27 14:19:30 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011-04-27 14:19:30 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011-03-31 19:09:53 | 000,040,960 | ---- | C] () -- C:\Users\Roderick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-03-10 21:08:26 | 000,185,344 | ---- | C] () -- C:\Windows\patchw32.dll
[2011-03-07 22:52:14 | 000,815,104 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2011-03-07 22:52:14 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2011-01-02 13:55:16 | 001,615,738 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-11-24 02:13:28 | 002,493,643 | ---- | C] () -- C:\Windows\SysWow64\abgx360.exe
[2010-10-11 14:26:52 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-08-09 22:47:05 | 000,000,151 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2010-08-09 18:03:07 | 000,000,081 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010-05-04 19:03:20 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe

========== ZeroAccess Check ==========

[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2010-09-07 19:24:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Asus
[2012-03-05 22:03:09 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Asus WebStorage
[2010-09-08 18:31:04 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Audacity
[2011-07-27 12:46:12 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011-02-07 23:52:24 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\C__Program Files (x86)_WebcamMax_WebcamMax.exe
[2010-09-03 23:20:33 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DAEMON Tools Lite
[2012-06-25 13:39:57 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DonationCoder
[2012-01-27 03:38:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Downloaded Installations
[2012-09-24 12:04:17 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DriverCure
[2012-09-02 22:17:26 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Dropbox
[2012-03-27 21:07:44 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DVDVideoSoft
[2011-05-05 23:26:54 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\DVDVideoSoftIEHelpers
[2010-08-02 23:57:38 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\EeeStorageUploader
[2012-07-03 21:20:26 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\FileZilla
[2011-05-06 18:11:45 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\FinalMediaPlayer
[2012-09-07 12:59:40 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Foxit Software
[2012-07-20 00:03:02 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\HandBrake
[2010-10-05 18:36:47 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ImgBurn
[2012-06-25 13:47:59 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Leawo
[2012-09-24 17:45:38 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\LimeWire
[2012-08-09 19:12:41 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ManyCam
[2012-09-07 16:12:46 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Media Finder
[2010-10-11 15:41:46 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\net.minionfactory.Minions.4E914550D2E908443FEB11428BA5D2586C0F8CA7.1
[2012-01-27 03:43:00 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Nitro PDF
[2012-06-25 11:57:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Orbit
[2012-06-25 11:53:42 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ProgSense
[2012-03-31 00:37:47 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\RBotPlus
[2012-06-25 13:00:41 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Replay Media Catcher 4
[2011-02-08 18:18:00 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Rovio
[2012-01-21 20:51:43 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Samsung
[2012-09-24 12:04:17 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\SpeedyPC Software
[2012-07-12 14:36:33 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Spotify
[2010-08-25 20:27:17 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\TeamViewer
[2011-06-11 01:57:29 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\thriXXX
[2012-09-12 17:13:07 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\TOSHIBA
[2010-09-05 21:16:53 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\TuneUp Software
[2011-03-10 21:08:34 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ubi.com
[2012-09-14 13:58:02 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\ubot
[2012-09-19 16:35:05 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\uTorrent
[2010-12-18 18:06:18 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\Vivox
[2011-02-07 23:33:31 | 000,000,000 | ---D | M] -- C:\Users\Roderick\AppData\Roaming\WebcamMax

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 24 bytes -> C:\Windows:AC1312710374717A
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:115CEE00
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 117 bytes -> C:\ProgramData\Temp:2B11E0DF

< End of report >
  • 0

#4
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
All I can see now is searchqu as your Chrome start/search, that will need to be reset manually

Meanwhile what problems remain ?
  • 0

#5
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP