========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "
http://www.yahoo.com/"
FF - prefs.js..network.proxy.no_proxies_on: "*.local,192.168.*.*"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
FF:
64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_268.dll File not found
FF:
64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:
64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Users\TT\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2012/06/16 03:32:53 | 000,000,000 | ---D | M]
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\
eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2012/04/02 18:19:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2012/06/16 03:32:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/06/30 19:26:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/06/27 20:07:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\
eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012/04/02 18:19:56 | 000,000,000 | ---D | M]
[2012/06/30 19:27:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\TT\AppData\Roaming\Mozilla\Extensions
[2012/07/01 19:29:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\TT\AppData\Roaming\Mozilla\Firefox\Profiles\fgnv7k33.default\extensions
[2012/06/30 19:26:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/06/14 15:20:49 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/06/14 15:19:40 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/05/30 18:53:12 | 000,001,567 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\glarysearch.xml
[2012/06/14 15:19:40 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
========== Chrome ==========
CHR - homepage:
http://isearch.glarysoft.com/?src=gchome
CHR - default_search_provider: Glary Search (Enabled)
CHR - default_search_provider: search_url =
http://isearch.glarysoft.com/?q={searchTerms}&src=gcsearch
CHR - default_search_provider: suggest_url =
CHR - homepage:
http://isearch.glarysoft.com/?src=gchome
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: ActiveTouch General Plugin Container (Enabled) = C:\Users\TT\AppData\Roaming\Mozilla\plugins\npatgpc.dll
CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: BrowserPlus (from Yahoo!) v2.9.8 (Enabled) = C:\Users\TT\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Web Assistant = C:\Users\TT\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd\2.0.0.439_0\
CHR - Extension: ADDICT-THING = C:\Users\TT\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkhccaeddoccmlppmlmdfmpphmkpnham\1.0_0\
O1 HOSTS File: ([2012/07/29 14:21:59 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:
64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (TBSB05810 Class) - {A7AF277D-1466-4A7B-93AF-B043984A5671} - C:\Program Files (x86)\Glarysoft Toolbar\tbcore3.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:
64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:
64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Glarysoft Toolbar) - {32D47EA5-9473-4CAD-805D-9999F15D5AE2} - C:\Program Files (x86)\Glarysoft Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:
64bit: - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:
64bit: - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:
64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:
64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:
64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:
64bit: - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [tsnp2std] C:\Windows\tsnp2std.exe (SONIX)
O4 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007..\Run: [EPSON WorkForce 630 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGBA.EXE /FU "C:\Windows\TEMP\E_SF9A9.tmp" /EF "HKCU" File not found
O4 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\TT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Epson all-in-one Registration.lnk = File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8:
64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\..Trusted Domains: ual.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1000\..Trusted Domains: ual.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\..Trusted Domains: ual.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-3456863792-1656469236-2506189551-1007\..Trusted Domains: ual.com ([]https in Trusted sites)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F}
http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
https://intercall.webex.com/client/WBXclient-T27L10NSP32EP1-13926/webex/ieatgpc1.cab (GpcContainer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.15.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4745C55E-EB87-4415-A7DC-9E88F9E3C3B3}: DhcpNameServer = 192.168.15.1
O18:
64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:
64bit: - Protocol\Handler\ms-help - No CLSID value found
O20:
64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/09/27 09:00:00 | 000,000,122 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012/07/29 14:45:58 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Users\TT\Desktop\OTL.exe
[2012/07/29 14:26:12 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/07/29 14:13:36 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012/07/29 14:13:36 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012/07/29 14:13:36 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012/07/29 14:10:01 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/07/29 14:09:50 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012/07/29 13:55:57 | 004,721,417 | R--- | C] (Swearware) -- C:\Users\TT\Desktop\ComboFix.exe
[2012/07/29 12:13:05 | 000,000,000 | ---D | C] -- C:\FRST
[2012/07/29 09:36:47 | 000,000,000 | ---D | C] -- C:\Users\TT\Desktop\RK_Quarantine
[2012/07/28 20:19:16 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\TT\Desktop\dds.scr
[2012/07/23 16:37:08 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\%APPDATA%
[2012/06/30 19:26:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2011/08/10 10:51:14 | 002,983,832 | ---- | C] (PC Drivers Headquarters) -- C:\Program Files (x86)\EasyDriverPro.exe
[2011/08/10 10:51:12 | 000,128,936 | ---- | C] (PC Drivers Headquarters) -- C:\Program Files (x86)\EasyDriverPro.Updater.exe
[2011/08/10 10:29:18 | 000,206,760 | ---- | C] (ICSharpCode.net) -- C:\Program Files (x86)\ICSharpCode.SharpZipLib.dll
[2011/08/10 10:29:14 | 000,661,392 | ---- | C] (CPUID) -- C:\Program Files (x86)\cpuidsdk.dll
[2011/08/10 10:29:10 | 000,044,432 | ---- | C] (Microsoft) -- C:\Program Files (x86)\Agent.CPU.exe
[2011/08/10 10:29:08 | 000,297,352 | ---- | C] (Microsoft) -- C:\Program Files (x86)\Common.dll
[2011/08/10 10:29:06 | 000,038,816 | ---- | C] (PC Drivers Headquarters) -- C:\Program Files (x86)\ExceptionLogging.dll
[2011/08/10 10:29:02 | 000,063,424 | ---- | C] (Microsoft) -- C:\Program Files (x86)\Microsoft.Practices.ObjectBuilder.dll
[2011/08/10 10:29:00 | 000,096,216 | ---- | C] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft.Practices.EnterpriseLibrary.Common.dll
[2011/08/10 10:29:00 | 000,075,768 | ---- | C] (Microsoft Corp. - PC Drivers Headquarters) -- C:\Program Files (x86)\Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.dll
[2011/08/10 10:28:58 | 000,124,864 | ---- | C] (Microsoft Corp. - PC Drivers Headquarters) -- C:\Program Files (x86)\Microsoft.ApplicationBlocks.Updater.dll
[2011/08/10 10:28:56 | 000,034,784 | ---- | C] (Microsoft Corp. - PC Drivers Headquarters) -- C:\Program Files (x86)\Microsoft.ApplicationBlocks.Updater.Downloaders.dll
[2011/08/10 10:28:54 | 000,071,664 | ---- | C] (Microsoft Corp. - PC Drivers Headquarters) -- C:\Program Files (x86)\Microsoft.ApplicationBlocks.Updater.ActivationProcessors.dll
[2011/08/10 10:28:46 | 000,157,592 | ---- | C] (PC Drivers Headquarters) -- C:\Program Files (x86)\Agent.Common.dll
[2011/08/10 10:28:18 | 000,071,592 | ---- | C] (PC Drivers Headquarters) -- C:\Program Files (x86)\Agent.ExceptionLogging.dll
[2011/08/10 10:28:10 | 000,173,984 | ---- | C] (PC Drivers Headquarters) -- C:\Program Files (x86)\Agent.Communication.dll
[2010/02/16 16:49:48 | 000,114,688 | ---- | C] (InfoTrust Group, Inc.) -- C:\Program Files (x86)\Common Files\CCCErr3.dll
[2010/02/16 16:49:44 | 000,241,664 | ---- | C] (InfoTrust Group, Inc.) -- C:\Program Files (x86)\Common Files\CCCData1.dll
[2010/02/16 16:49:44 | 000,126,976 | ---- | C] (InfoTrust Group, Inc.) -- C:\Program Files (x86)\Common Files\CCCWinLib2.dll
[2009/07/06 14:47:52 | 000,053,248 | ---- | C] (InfoTrust, Inc.) -- C:\Program Files (x86)\Common Files\SVDaemon.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/07/29 14:51:38 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/29 14:51:38 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/29 14:50:03 | 000,726,142 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/29 14:50:03 | 000,623,940 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/29 14:50:03 | 000,106,316 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/07/29 14:46:08 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\TT\Desktop\OTL.exe
[2012/07/29 14:44:35 | 000,000,318 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
[2012/07/29 14:44:34 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/29 14:44:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/29 14:44:17 | 2090,115,071 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/29 14:21:59 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012/07/29 14:13:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/29 14:06:01 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/29 13:56:05 | 004,721,417 | R--- | M] (Swearware) -- C:\Users\TT\Desktop\ComboFix.exe
[2012/07/29 10:08:18 | 000,000,512 | ---- | M] () -- C:\Users\TT\Desktop\MBR.dat
[2012/07/28 20:19:19 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\TT\Desktop\dds.scr
[2012/07/27 17:52:15 | 004,503,728 | ---- | M] () -- C:\ProgramData\zak_lo0i7g.pad
[2012/07/27 14:30:14 | 000,000,870 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/07/23 19:13:56 | 000,001,806 | ---- | M] () -- C:\Users\TT\Documents\cc_20120723_191348.reg
[2012/07/22 15:04:01 | 000,001,117 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/07/19 03:21:47 | 000,422,328 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/18 12:50:25 | 000,002,348 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/06/30 19:26:51 | 000,001,138 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/07/29 14:13:36 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/07/29 14:13:36 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/07/29 14:13:36 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/07/29 14:13:36 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/07/29 14:13:36 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/07/29 09:50:40 | 000,000,512 | ---- | C] () -- C:\Users\TT\Desktop\MBR.dat
[2012/07/27 17:48:58 | 004,503,728 | ---- | C] () -- C:\ProgramData\zak_lo0i7g.pad
[2012/07/23 19:13:52 | 000,001,806 | ---- | C] () -- C:\Users\TT\Documents\cc_20120723_191348.reg
[2012/06/30 19:26:51 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012/06/30 19:26:51 | 000,001,138 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/02/29 13:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012/02/24 16:58:46 | 000,000,469 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
[2012/01/16 11:22:11 | 000,000,632 | RHS- | C] () -- C:\Users\TT\ntuser.pol
[2012/01/07 00:02:51 | 000,002,012 | ---- | C] () -- C:\Program Files (x86)\EasyDriverPro.InstallState
[2011/11/28 22:34:14 | 000,025,472 | ---- | C] () -- C:\Windows\SysWow64\drivers\sncamd.sys
[2011/11/28 22:34:14 | 000,015,497 | ---- | C] () -- C:\Windows\snp2std.ini
[2011/11/28 22:34:13 | 012,067,328 | ---- | C] () -- C:\Windows\SysWow64\drivers\snp2sxp.sys
[2011/11/28 22:34:12 | 000,151,552 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp2std.dll
[2011/10/04 21:13:39 | 000,005,120 | ---- | C] () -- C:\Users\TT\AppData\Local\Databases.db
[2011/09/02 16:42:58 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2011/09/02 14:05:47 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI
[2011/09/02 13:20:30 | 000,073,220 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2011/09/02 13:20:30 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2011/09/02 13:20:30 | 000,029,114 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2011/09/02 13:20:30 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2011/09/02 13:20:30 | 000,021,021 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2011/09/02 13:20:30 | 000,015,670 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2011/09/02 13:20:30 | 000,013,280 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2011/09/02 13:20:30 | 000,010,673 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2011/09/02 13:20:30 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2011/09/02 13:20:30 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2011/09/02 13:20:30 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2011/09/02 13:20:30 | 000,001,137 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2011/09/02 13:20:30 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2011/09/02 13:20:30 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2011/09/02 13:20:30 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2011/09/02 13:20:30 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2011/09/02 13:19:19 | 000,000,079 | ---- | C] () -- C:\Windows\EWF630.ini
[2011/09/02 12:49:19 | 000,221,184 | ---- | C] () -- C:\Windows\SysWow64\drivers\ServiceHelp.dll
[2011/09/02 12:44:19 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2011/09/02 12:44:19 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2011/09/02 12:44:16 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2011/09/02 12:44:16 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2011/09/02 12:41:42 | 000,022,030 | ---- | C] () -- C:\Windows\Ascd_log.ini
[2011/09/02 12:41:19 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2011/09/02 12:41:14 | 000,016,472 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2011/08/10 10:51:16 | 000,775,080 | ---- | C] () -- C:\Program Files (x86)\ThemePack.EasyDriverPro.dll
[2011/08/10 10:29:16 | 000,092,064 | ---- | C] ( ) -- C:\Program Files (x86)\Interop.WUApiLib.dll
[2011/08/10 10:29:02 | 000,055,192 | ---- | C] () -- C:\Program Files (x86)\XPBurnComponent.dll
[2011/08/10 10:28:54 | 000,014,224 | ---- | C] () -- C:\Program Files (x86)\ISUninstall.exe
[2011/08/10 10:28:18 | 000,022,984 | ---- | C] () -- C:\Program Files (x86)\Agent.ExceptionLogging.XmlSerializers.dll
[2011/08/10 10:28:08 | 000,268,224 | ---- | C] () -- C:\Program Files (x86)\Agent.Communication.XmlSerializers.dll
[2011/08/10 10:22:00 | 000,054,408 | ---- | C] () -- C:\Program Files (x86)\EasyDriverPro.chm
[2011/08/10 10:20:56 | 000,002,316 | ---- | C] () -- C:\Program Files (x86)\EasyDriverPro.Updater.exe.config
[2011/08/10 10:20:32 | 000,002,595 | ---- | C] () -- C:\Program Files (x86)\EasyDriverPro.exe.config
[2011/08/10 10:20:24 | 000,001,536 | ---- | C] () -- C:\Program Files (x86)\config.dat
[2011/04/12 17:09:06 | 000,000,248 | R--- | C] () -- C:\Program Files (x86)\Knowledge Base.url
[2008/03/17 11:30:52 | 000,450,648 | ---- | C] () -- C:\Program Files (x86)\Common Files\phookctl.dll
========== LOP Check ==========
[2012/01/31 13:01:15 | 000,000,000 | ---D | M] -- C:\Users\shanno\AppData\Roaming\Epson
[2012/01/16 10:32:42 | 000,000,000 | ---D | M] -- C:\Users\shanno\AppData\Roaming\ESET
[2012/04/04 16:29:58 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Blackberry Desktop
[2012/06/08 22:40:43 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\DAEMON Tools Lite
[2012/06/16 07:01:26 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\DriverFinder
[2012/06/16 08:05:15 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Easeware
[2011/10/08 22:15:25 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Epson
[2011/09/02 13:36:37 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\ESET
[2012/06/16 07:01:52 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\GlarySoft
[2011/09/02 13:23:09 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Leadertech
[2012/07/20 06:40:29 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\OpenCandy
[2011/12/25 21:20:37 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Origin
[2011/09/02 21:32:26 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\qBittorrent
[2012/01/25 16:42:46 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Research In Motion
[2011/09/27 20:53:17 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\SecondLife
[2011/11/28 22:41:44 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\Tific
[2012/06/26 16:14:06 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\uTorrent
[2011/10/14 13:11:38 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\webex
[2011/10/01 15:56:08 | 000,000,000 | ---D | M] -- C:\Users\TT\AppData\Roaming\
www.TheXSoft.com
[2012/07/29 14:44:35 | 000,000,318 | ---- | M] () -- C:\Windows\Tasks\GlaryInitialize.job
[2012/04/02 18:07:45 | 000,032,638 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >