Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Slow Computer, Virus Related (?)

Started by kvlt , Jan 05 2013 01:43 PM

  • Please log in to reply

#1
kvlt
Posted 05 January 2013 - 01:43 PM

kvlt

    New Member

  • Member
  • Pip
  • 3 posts
Hello. My computers been acting up a lot lately. I would really love to get it fixed for good. Please help. I've been running Malwarebyte scans a lot, and it always removes something and I still get lag. I rescan and BAM! more detected. Before I was getting blue screen but I fixed that when I ran driver verifier. Something else happened and I ended up having to reformat. It's still not working and I'm pretty frustrated. Running in safemode right now.

OTL

OTL logfile created on: 1/5/2013 2:31:37 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gregory\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

8.00 Gb Total Physical Memory | 6.22 Gb Available Physical Memory | 77.72% Memory free
15.99 Gb Paging File | 14.35 Gb Available in Paging File | 89.70% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.66 Gb Total Space | 189.60 Gb Free Space | 40.72% Space Free | Partition Type: NTFS
Drive D: | 224.41 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive I: | 148.79 Gb Total Space | 96.07 Gb Free Space | 64.57% Space Free | Partition Type: FAT32

Computer Name: GREGORY-PC | User Name: Gregory | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/01/05 14:28:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gregory\Downloads\OTL.exe
PRC - [2013/01/03 11:23:01 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
PRC - [2012/12/14 16:49:28 | 000,824,232 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2012/11/29 03:27:34 | 000,916,960 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe


========== Modules (No Company Name) ==========

MOD - [2013/01/03 11:23:00 | 014,586,296 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll
MOD - [2012/11/29 03:27:37 | 002,397,152 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012/09/28 15:43:40 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2012/09/27 20:38:16 | 000,239,616 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013/01/04 10:11:36 | 000,076,888 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013/01/03 11:23:01 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/01/03 10:57:57 | 000,541,760 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/12/14 16:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/12/14 16:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/11/29 03:27:36 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/11/09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/17 04:49:12 | 000,212,256 | ---- | M] (Ralink Technology, Corp.) [Auto | Stopped] -- C:\Program Files (x86)\Edimax\Common\RaRegistry64.exe -- (RalinkRegistryWriter64)
SRV - [2009/12/17 04:49:00 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Stopped] -- C:\Program Files (x86)\Edimax\Common\RaRegistry.exe -- (RalinkRegistryWriter)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/12/14 16:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/09/28 10:32:56 | 000,053,760 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/09/27 21:21:20 | 010,697,216 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2012/09/27 21:21:20 | 010,697,216 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012/09/27 20:12:52 | 000,460,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/05/14 01:12:30 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2012/04/09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
DRV:64bit: - [2010/11/20 22:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 22:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 22:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/20 22:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/11 01:11:52 | 000,141,384 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdserd.sys -- (sscdserd)
DRV:64bit: - [2010/11/11 01:11:50 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:64bit: - [2010/11/11 01:11:50 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
DRV:64bit: - [2010/11/11 01:11:50 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:64bit: - [2010/09/10 18:20:28 | 001,014,624 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/10 15:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009/06/10 15:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2012/11/13 21:53:00 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {21A51130-7285-49FE-B3F6-2385CC71CDEA}
IE:64bit: - HKLM\..\SearchScopes\{21A51130-7285-49FE-B3F6-2385CC71CDEA}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {21A51130-7285-49FE-B3F6-2385CC71CDEA}
IE - HKLM\..\SearchScopes\{21A51130-7285-49FE-B3F6-2385CC71CDEA}: "URL" = http://www.bing.com/...rc=IE-SearchBox

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com
IE - HKCU\..\SearchScopes,DefaultScope = {21A51130-7285-49FE-B3F6-2385CC71CDEA}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B4de46b94-1b91-474a-9ae5-6074f86ef7e9%7D:6.0%20PR1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.10.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/01/03 10:36:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013/01/03 10:36:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gregory\AppData\Roaming\Mozilla\Extensions
[2013/01/03 11:30:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gregory\AppData\Roaming\Mozilla\Firefox\Profiles\ff8bjd1o.default\extensions
[2013/01/03 11:30:27 | 000,020,066 | ---- | M] () (No name found) -- C:\Users\Gregory\AppData\Roaming\Mozilla\Firefox\Profiles\ff8bjd1o.default\extensions\{4de46b94-1b91-474a-9ae5-6074f86ef7e9}.xpi
[2013/01/03 10:36:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/11/29 03:27:51 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/11/29 03:27:12 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/11/29 03:27:12 | 000,002,058 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage:

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9E2E1315-17C8-4AE1-A775-60101370D1E7}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/12/26 21:52:11 | 000,635,712 | R--- | M] () - D:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2010/12/26 21:52:11 | 000,002,917 | R--- | M] () - D:\AutoRun.ini -- [ CDFS ]
O32 - AutoRun File - [2010/12/26 21:52:11 | 000,000,029 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O33 - MountPoints2\{9dfb9dc7-55cf-11e2-9b46-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{9dfb9dc7-55cf-11e2-9b46-806e6f6e6963}\Shell\AutoRun\command - "" = D:\AutoRun.exe -- [2010/12/26 21:52:11 | 000,635,712 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/01/05 12:30:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013/01/05 12:18:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2013/01/05 12:17:46 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Google
[2013/01/05 10:58:30 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Malwarebytes
[2013/01/05 10:58:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/01/05 10:58:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/01/05 10:58:23 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013/01/05 10:58:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/01/05 10:58:17 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Programs
[2013/01/05 10:01:21 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2013/01/04 21:02:19 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft BlueScreenView
[2013/01/04 21:02:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NirSoft
[2013/01/04 20:53:04 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\ElevatedDiagnostics
[2013/01/04 20:40:03 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013/01/04 10:05:47 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\ESN
[2013/01/04 10:05:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins
[2013/01/04 10:03:25 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
[2013/01/04 10:03:25 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
[2013/01/04 10:03:23 | 000,000,000 | ---D | C] -- C:\Users\Gregory\Documents\Battlefield 3
[2013/01/04 04:13:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
[2013/01/04 04:13:10 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller
[2013/01/03 23:27:21 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Razer
[2013/01/03 23:27:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
[2013/01/03 23:27:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Razer
[2013/01/03 23:27:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Razer
[2013/01/03 22:49:38 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Apple Computer
[2013/01/03 22:49:38 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Apple Computer
[2013/01/03 22:49:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/01/03 22:49:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2013/01/03 22:49:07 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013/01/03 22:49:06 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/01/03 22:49:05 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013/01/03 22:49:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2013/01/03 22:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2013/01/03 22:46:47 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Apple
[2013/01/03 22:46:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2013/01/03 22:44:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2013/01/03 22:43:31 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013/01/03 22:43:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2013/01/03 22:42:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2013/01/03 22:42:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2013/01/03 21:09:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/01/03 21:09:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2013/01/03 21:09:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2013/01/03 20:52:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013/01/03 14:13:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP
[2013/01/03 14:13:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinSCP
[2013/01/03 13:38:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013/01/03 13:38:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2013/01/03 13:37:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2013/01/03 13:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2013/01/03 13:33:54 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\logs
[2013/01/03 13:33:54 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\.techniclauncher
[2013/01/03 13:05:08 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013/01/03 12:39:51 | 000,000,000 | ---D | C] -- C:\Windows.old
[2013/01/03 11:57:34 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\WinRAR
[2013/01/03 11:57:34 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/01/03 11:57:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/01/03 11:57:32 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013/01/03 11:43:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
[2013/01/03 11:43:24 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Origin
[2013/01/03 11:42:36 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Origin
[2013/01/03 11:30:49 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Macromedia
[2013/01/03 11:30:49 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Macromedia
[2013/01/03 11:30:49 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Adobe
[2013/01/03 11:26:44 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\vlc
[2013/01/03 11:24:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013/01/03 11:23:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2013/01/03 11:22:59 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2013/01/03 11:22:57 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2013/01/03 11:20:50 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\PunkBuster
[2013/01/03 11:17:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2013/01/03 11:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
[2013/01/03 11:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2013/01/03 11:17:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
[2013/01/03 11:01:25 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Xfire
[2013/01/03 11:01:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Xfire
[2013/01/03 11:01:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xfire
[2013/01/03 11:01:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xfire
[2013/01/03 10:57:41 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Skype
[2013/01/03 10:57:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/01/03 10:57:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013/01/03 10:57:33 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013/01/03 10:57:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013/01/03 10:56:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2013/01/03 10:56:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2013/01/03 10:56:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2013/01/03 10:52:42 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\AMD
[2013/01/03 10:52:17 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\ATI
[2013/01/03 10:52:17 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\ATI
[2013/01/03 10:52:17 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2013/01/03 10:47:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2013/01/03 10:47:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2013/01/03 10:47:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2013/01/03 10:47:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2013/01/03 10:47:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2013/01/03 10:46:15 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2013/01/03 10:45:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2013/01/03 10:43:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2013/01/03 10:41:40 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2013/01/03 10:41:39 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2013/01/03 10:36:40 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Mozilla
[2013/01/03 10:36:40 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Mozilla
[2013/01/03 10:36:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013/01/03 10:36:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2013/01/03 10:36:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013/01/03 10:32:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Ralink
[2013/01/03 10:32:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Edimax Wireless
[2013/01/03 10:31:37 | 001,014,624 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysNative\drivers\netr28x.sys
[2013/01/03 10:31:37 | 000,327,008 | ---- | C] (Ralink Technology, Inc.) -- C:\Windows\SysNative\RaCoInstx.dll
[2013/01/03 10:31:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Edimax Driver
[2013/01/03 10:31:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2013/01/03 10:31:08 | 001,063,200 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysNative\RAIHV.dll
[2013/01/03 10:31:07 | 001,063,200 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysWow64\RAIHV.dll
[2013/01/03 10:31:07 | 000,109,856 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysNative\RAEXTUI.dll
[2013/01/03 10:31:06 | 002,061,600 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysNative\RaCertMgr.dll
[2013/01/03 10:31:06 | 001,590,560 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysWow64\RaCertMgr.dll
[2013/01/03 10:31:06 | 000,109,856 | ---- | C] (Ralink Technology, Corp.) -- C:\Windows\SysWow64\RAEXTUI.dll
[2013/01/03 10:31:03 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2013/01/03 10:31:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Edimax
[2013/01/03 10:30:38 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\InstallShield
[2013/01/03 10:28:51 | 000,000,000 | R--D | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013/01/03 10:28:51 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Searches
[2013/01/03 10:28:51 | 000,000,000 | R--D | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013/01/03 10:28:51 | 000,000,000 | -H-D | C] -- C:\Users\Gregory\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2013/01/03 10:28:38 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Identities
[2013/01/03 10:28:34 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Contacts
[2013/01/03 10:28:29 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\VirtualStore
[2013/01/03 10:28:12 | 000,000,000 | --SD | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Videos
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Saved Games
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Pictures
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Music
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Links
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Favorites
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Downloads
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Documents
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\Desktop
[2013/01/03 10:28:12 | 000,000,000 | R--D | C] -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\AppData\Local\Temporary Internet Files
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Templates
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Start Menu
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\SendTo
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Recent
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\PrintHood
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\NetHood
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Documents\My Videos
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Documents\My Pictures
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Documents\My Music
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\My Documents
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Local Settings
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\AppData\Local\History
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Cookies
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\Application Data
[2013/01/03 10:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Gregory\AppData\Local\Application Data
[2013/01/03 10:28:12 | 000,000,000 | -H-D | C] -- C:\Users\Gregory\AppData
[2013/01/03 10:28:12 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Temp
[2013/01/03 10:28:12 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Local\Microsoft
[2013/01/03 10:28:12 | 000,000,000 | ---D | C] -- C:\Users\Gregory\AppData\Roaming\Media Center Programs
[2012/12/28 23:24:18 | 006,018,560 | ---- | C] (Hawkode) -- C:\Users\Gregory\Desktop\Tumblaster.exe
[2012/12/28 09:01:00 | 000,059,392 | ---- | C] (Technic) -- C:\Users\Gregory\Desktop\TechnicLauncher.exe

========== Files - Modified Within 30 Days ==========

[2013/01/05 13:58:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/01/05 13:58:32 | 2145,312,767 | -HS- | M] () -- C:\hiberfil.sys
[2013/01/05 13:57:14 | 000,778,150 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/01/05 13:57:14 | 000,659,580 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/01/05 13:57:14 | 000,120,508 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/01/05 13:39:13 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/05 13:32:31 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/01/05 13:09:37 | 000,020,864 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/01/05 13:09:37 | 000,020,864 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/01/05 12:31:07 | 000,002,289 | ---- | M] () -- C:\Users\Gregory\Desktop\Google Chrome.lnk
[2013/01/05 12:24:25 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/01/05 10:58:24 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/01/05 10:57:28 | 309,357,627 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013/01/04 20:40:56 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013/01/04 10:11:36 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013/01/04 10:11:28 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2013/01/04 10:11:28 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013/01/04 10:07:04 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2013/01/04 04:13:13 | 000,001,170 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2013/01/03 23:27:12 | 000,002,144 | ---- | M] () -- C:\Users\Public\Desktop\Razer Game Booster.lnk
[2013/01/03 23:26:23 | 000,771,962 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/01/03 22:49:26 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/01/03 14:13:28 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\WinSCP.lnk
[2013/01/03 13:33:58 | 000,581,642 | ---- | M] () -- C:\Users\Gregory\AppData\Roaming\technic-launcher.jar
[2013/01/03 13:06:54 | 000,115,640 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2013/01/03 13:06:54 | 000,115,640 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2013/01/03 11:25:20 | 000,001,066 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013/01/03 11:17:48 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
[2013/01/03 11:01:17 | 000,000,959 | ---- | M] () -- C:\Users\Public\Desktop\Xfire.lnk
[2013/01/03 10:57:34 | 000,002,515 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013/01/03 10:56:16 | 000,000,917 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2013/01/03 10:36:34 | 000,001,147 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/01/03 10:35:01 | 000,001,437 | ---- | M] () -- C:\Users\Gregory\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/01/03 10:32:00 | 000,001,986 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Utility.lnk
[2012/12/28 23:24:21 | 006,018,560 | ---- | M] (Hawkode) -- C:\Users\Gregory\Desktop\Tumblaster.exe
[2012/12/28 09:01:04 | 000,059,392 | ---- | M] (Technic) -- C:\Users\Gregory\Desktop\TechnicLauncher.exe
[2012/12/14 16:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/12/07 15:40:40 | 000,042,440 | ---- | M] () -- C:\Windows\SysWow64\xfcodec.dll
[2012/12/07 15:40:38 | 000,028,104 | ---- | M] () -- C:\Windows\SysNative\xfcodec64.dll

========== Files Created - No Company Name ==========

[2013/01/05 12:31:07 | 000,002,289 | ---- | C] () -- C:\Users\Gregory\Desktop\Google Chrome.lnk
[2013/01/05 12:18:44 | 000,000,900 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/01/05 12:18:43 | 000,000,896 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/01/05 10:58:24 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/01/04 20:40:56 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013/01/04 20:39:56 | 309,357,627 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013/01/04 10:07:04 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2013/01/04 04:13:13 | 000,001,170 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2013/01/04 04:12:39 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013/01/04 04:12:39 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2013/01/04 04:12:32 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013/01/03 23:27:12 | 000,002,144 | ---- | C] () -- C:\Users\Public\Desktop\Razer Game Booster.lnk
[2013/01/03 23:26:21 | 000,771,962 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013/01/03 22:49:26 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/01/03 22:46:27 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013/01/03 14:26:53 | 000,269,934 | ---- | C] () -- C:\Users\Gregory\Documents\WorldGuard.jar
[2013/01/03 14:13:28 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\WinSCP.lnk
[2013/01/03 13:33:57 | 000,581,642 | ---- | C] () -- C:\Users\Gregory\AppData\Roaming\technic-launcher.jar
[2013/01/03 11:25:16 | 000,001,066 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013/01/03 11:23:42 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/01/03 11:17:48 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
[2013/01/03 11:01:17 | 000,000,959 | ---- | C] () -- C:\Users\Public\Desktop\Xfire.lnk
[2013/01/03 10:57:34 | 000,002,515 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013/01/03 10:56:16 | 000,000,917 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2013/01/03 10:36:34 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/01/03 10:36:34 | 000,001,147 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/01/03 10:35:01 | 000,001,437 | ---- | C] () -- C:\Users\Gregory\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/01/03 10:32:00 | 000,001,986 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Utility.lnk
[2013/01/03 10:31:38 | 000,014,051 | ---- | C] () -- C:\Windows\SysNative\RaCoInst.dat
[2013/01/03 10:31:37 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
[2013/01/03 10:29:00 | 000,001,409 | ---- | C] () -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2013/01/03 10:28:54 | 000,001,443 | ---- | C] () -- C:\Users\Gregory\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013/01/03 10:28:12 | 000,000,290 | ---- | C] () -- C:\Users\Gregory\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2013/01/03 10:28:12 | 000,000,272 | ---- | C] () -- C:\Users\Gregory\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/12/07 15:40:40 | 000,042,440 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2012/12/07 15:40:38 | 000,028,104 | ---- | C] () -- C:\Windows\SysNative\xfcodec64.dll
[2012/09/27 20:29:54 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012/09/27 20:29:54 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012/05/02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2011/09/12 17:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011/03/01 17:29:29 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

========== ZeroAccess Check ==========

[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2010/11/20 22:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010/11/20 22:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 20:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 20:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/01/03 13:39:02 | 000,000,000 | ---D | M] -- C:\Users\Gregory\AppData\Roaming\.techniclauncher
[2013/01/03 13:33:54 | 000,000,000 | ---D | M] -- C:\Users\Gregory\AppData\Roaming\logs
[2013/01/03 11:44:53 | 000,000,000 | ---D | M] -- C:\Users\Gregory\AppData\Roaming\Origin

========== Purity Check ==========



< End of report >
  • 0

Advertisements

#2
kvlt
Posted 05 January 2013 - 05:35 PM

kvlt

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Well I guess I [bleep]ed something up, because now it freezes when I turn it on.

Here's the new logs.

Spoiler

  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP