Code:
:OTL
PRC - [2011/08/17 12:15:28 | 000,534,880 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
O3 - HKLM\..\Toolbar: (no name) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
O3 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [CCUTRAYICON] FactoryMode File not found
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [UIWWFDnoJEOaR.exe] C:\ProgramData\UIWWFDnoJEOaR.exe File not found
O4 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001..\Run: [hbcVhKDrqeOuR.exe] C:\ProgramData\hbcVhKDrqeOuR.exe File not found
O4 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 File not found
O4 - HKU\.DEFAULT..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe File not found
O4 - HKU\S-1-5-18..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe File not found
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: internet ([]about in Trusted sites)
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: intuit.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: mcafee.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: mcafee.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\..Trusted Domains: turbotax.com ([]https in Trusted sites)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get.../ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O33 - MountPoints2\{180b5077-46c7-11e1-9e49-9e705b79f991}\Shell - "" = AutoRun
O33 - MountPoints2\{180b5077-46c7-11e1-9e49-9e705b79f991}\Shell\AutoRun\command - "" = H:\HPLauncher.exe
O33 - MountPoints2\{b255a0da-51c8-11dc-9faf-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{b255a0da-51c8-11dc-9faf-00038a000015}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\J\Shell - "" = AutoRun
O37 - HKLM\...exe [@ = anp] -- "C:\Windows\system32\config\systemprofile\AppData\Local\yzv.exe" -a "%1" %*
O37 - HKU\.DEFAULT\...exe [@ = anp] -- "C:\Windows\system32\config\systemprofile\AppData\Local\yzv.exe" -a "%1" %*
O37 - HKU\S-1-5-18\...exe [@ = anp] -- "C:\Windows\system32\config\systemprofile\AppData\Local\yzv.exe" -a "%1" %*
O37 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\...com [@ = comfile] -- Reg Error: Key error. File not found
O37 - HKU\S-1-5-21-2541608533-1603495204-1932474290-1001\...exe [@ = exefile] -- Reg Error: Key error. File not found
[2012/01/18 14:52:15 | 000,000,000 | -H-D | C] -- C:\Users\fran\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
[2012/01/19 17:21:33 | 000,000,448 | -H-- | M] () -- C:\ProgramData\k7vUREwXGlnIiC
[2012/01/19 17:19:53 | 000,000,296 | -H-- | M] () -- C:\ProgramData\~k7vUREwXGlnIiC
[2012/01/19 17:19:53 | 000,000,176 | -H-- | M] () -- C:\ProgramData\~k7vUREwXGlnIiCr
[2012/01/19 17:19:51 | 000,000,631 | -H-- | M] () -- C:\Users\fran\Application Data\Microsoft\Internet Explorer\Quick Launch\System Check.lnk
[2012/01/19 16:26:03 | 000,000,456 | -H-- | M] () -- C:\ProgramData\q5Tf4nr63zhUx2
[2012/01/19 16:24:23 | 000,000,296 | -H-- | M] () -- C:\ProgramData\~q5Tf4nr63zhUx2
[2012/01/19 16:24:23 | 000,000,176 | -H-- | M] () -- C:\ProgramData\~q5Tf4nr63zhUx2r
[2012/01/19 16:15:47 | 000,448,768 | -H-- | M] () -- C:\ProgramData\123.exe
[2012/01/18 14:55:22 | 000,000,440 | -H-- | M] () -- C:\ProgramData\ofMZsqDhhCLj4V
[2012/01/18 14:52:17 | 000,000,296 | -H-- | M] () -- C:\ProgramData\~ofMZsqDhhCLj4V
[2012/01/18 14:52:17 | 000,000,176 | -H-- | M] () -- C:\ProgramData\~ofMZsqDhhCLj4Vr
[2012/01/18 14:52:15 | 000,000,607 | -H-- | M] () -- C:\Users\fran\Desktop\System Check.lnk
[2012/01/16 19:37:38 | 000,008,754 | ---- | M] () -- C:\ProgramData\52423c85
[2012/01/16 16:04:43 | 000,062,459 | -H-- | C] () -- C:\Users\fran\Documents\The_Descendants_2011_REPACK_SCREENER_XviD_-_ZOMBiES.6959683.TPB.torrent
[2012/01/16 15:49:13 | 000,029,738 | -H-- | C] () -- C:\Users\fran\Documents\Moneyball_2011_BRRip_XviD-FTW.6892152.TPB.torrent
[2012/01/14 20:43:45 | 000,014,666 | -H-- | C] () -- C:\Users\fran\Documents\Person.of.Interest.S01E10.HDTV.XviD-ASAP [AGENT][1337x.org].torrent
[2012/01/13 17:58:32 | 000,007,476 | -H-- | C] () -- C:\Users\fran\Documents\The.Mentalist.S04E11.HDTV.XviD-ASAP.[VTV].avi.6951405.TPB.torrent
[2012/01/13 17:01:24 | 000,014,499 | -H-- | C] () -- C:\Users\fran\Documents\Person_of_Interest_S01E11_HDTV_XviD-ASAP_[eztv].6951579.TPB.torrent
[2012/01/12 14:19:43 | 000,014,593 | -H-- | C] () -- C:\Users\fran\Documents\Unforgettable_S01E12_HDTV_XviD-ASAP_[eztv][1337x.org].torrent
[2012/01/12 14:17:50 | 000,014,590 | -H-- | C] () -- C:\Users\fran\Documents\Unforgettable_S01E13_HDTV_XviD-2HD_[eztv][1337x.org].torrent
[2012/01/12 14:14:21 | 000,014,490 | -H-- | C] () -- C:\Users\fran\Documents\Harrys_Law_S02E11_HDTV_XviD-LOL_[eztv].6949132.TPB.torrent
[2012/01/12 14:11:42 | 000,014,479 | -H-- | C] () -- C:\Users\fran\Documents\Law.and.Order.SVU.S13E11.HDTV.XviD-LOL.[VTV].avi.6949230.TPB.torrent
[2012/01/09 17:14:25 | 017,364,199 | -H-- | C] () -- C:\Users\fran\Desktop\Excel 2010 For Dummies - (Maalestrom).pdf
[2012/01/09 17:12:20 | 000,006,337 | -H-- | C] () -- C:\Users\fran\Documents\Excel 2010 For Dummies - (Malestrom) [h33t].torrent
[2011/12/26 13:13:52 | 000,008,105 | -H-- | C] () -- C:\Users\fran\Documents\Sibling.Rivalry.1990.DVDRip.x264.6384000.TPB.torren t
[2011/12/24 18:08:34 | 000,012,680 | -HS- | C] () -- C:\Users\fran\AppData\Local\16qb5285s67yesn24bxfk81p33a02r8x
[2011/12/24 18:08:34 | 000,012,680 | -HS- | C] () -- C:\ProgramData\16qb5285s67yesn24bxfk81p33a02r8x
[2011/12/20 13:10:54 | 000,004,348 | -HS- | C] () -- C:\Users\fran\AppData\Local\506881s3y808c713u857y1ysd5m6
[2011/12/20 13:10:54 | 000,003,930 | -HS- | C] () -- C:\ProgramData\506881s3y808c713u857y1ysd5m6
[2009/01/12 18:06:56 | 000,005,055 | -H-- | C] () -- C:\ProgramData\ywasvxup.hvs
[2009/01/10 11:39:27 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\879bd249e38aa95
[2009/01/10 11:36:51 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\e2885dfed4432ad
[2009/01/10 11:30:31 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\f4b4078416895d5
[2009/01/10 11:30:11 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\5bd984c3690c592
[2009/01/10 11:27:06 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\e24b76a18275429
[2009/01/10 11:26:36 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\16a31fe427215df
[2009/01/10 11:23:25 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\8c381622b054eae
[2009/01/10 11:21:10 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\dfa409a166a6a13
[2009/01/10 11:19:15 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\32584a94ef4d92a
[2009/01/10 11:19:05 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\1a4687276c956c8
[2009/01/10 11:18:00 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\99ce21a2ae22606
[2009/01/10 11:17:30 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\c8c5499adc56da5
[2009/01/10 11:14:50 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\acbb6ef48b6dc68
[2009/01/10 11:14:14 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\c9104d4825b6261
[2009/01/10 11:07:59 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\4f8f8cf620a3077
[2009/01/10 10:23:30 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\65a00ff4fc8f1af
[2009/01/10 10:22:30 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\b06b03ba03bca22
[2009/01/09 18:10:36 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\491b74175c778c5
[2009/01/09 18:05:40 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\d4b5c41f8d74e6a
[2009/01/09 18:04:41 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\eb4387b7e66a85f
[2009/01/09 17:59:55 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\ff86e0b75094016
[2009/01/09 17:59:09 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\5b3cf438eb60b35
[2009/01/09 17:57:49 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\1c259bf20aab364
[2009/01/09 17:56:44 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\40beebab9c36ce0
[2009/01/09 17:53:34 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\b1b638edd446128
[2009/01/09 17:53:14 | 000,003,262 | -H-- | C] () -- C:\Users\fran\AppData\Roaming\94800ada1706250
[2010/07/14 14:56:53 | 000,000,000 | -H-D | M] -- C:\Users\fran\AppData\Roaming\Uniblue
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 64 bytes -> C:\Users\fran\Documents\Romantics - Talking In Your Sleep.mp3:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\fran\Documents\MeatLoaf - Let Me Sleep On It.mp3:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\fran\Documents\jesse maccartney - Don't Go Breaking My Heart.mp3:TOC.WMV
@Alternate Data Stream - 3241 bytes -> C:\Users\fran\Documents\Girlfriends.eml:OECustomProperty
@Alternate Data Stream - 170 bytes -> C:\ProgramData\TEMP:F4CE9946
@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:7F4E393D
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:ECF54A0E
:Services
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" =-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" =-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" =-
:Files
C:\Program Files\Common Files\Spigot
C:\Users\fran\AppData\Local\Temp\87EPgtDlSWkVpf.exe.tmp
C:\Users\fran\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\393d13ac-2a08195f
C:\ProgramData\123.exe
:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]
System check virus has ruined my PCMar 11, 2012
Could This RAM upgrade have ruined my PC?Mar 21, 2009
I think I may have ruined my computerAug 2, 2007
Combofix seems to have ruined my cpuFeb 3, 2011
TWEAK UI ruined my icons,Feb 18, 2006
System Check removalJan 27, 2012
Add New Comment