DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.51.2
Run by Administrator at 23:19:01 on 2014-03-03
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1527.431 [GMT 5:00]
.
AV: avast! Antivirus *Enabled/Outdated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Internet Security *Enabled*
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nimbuzz\Nimbuzz.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\SumRando\SumRando\misc\vpnmanagesvc.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtD0F0F0EtDtA0C0Ezz0A0FzztC0F0BtN0D0Tzu0CyBtDtAtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1158045593&ir=
mStart Page = hxxp://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtD0F0F0EtDtA0C0Ezz0A0FzztC0F0BtN0D0Tzu0CyBtDtAtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1158045593&ir=
uInternet Connection Wizard,ShellNext = iexplore
BHO: IDM integration (IDMIEHlprObj Class): {0055C089-8582-441B-A0BF-17B458C2A3A8} - c:\program files\internet download manager\IDMIECC.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: DefaultTab Browser Helper: {7F6AFBF1-E065-4627-A2FD-810366367D01} -
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
EB: {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} - <orphaned>
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
uRun: [LiveSupport] "c:\program files\livesupport\LiveSupport.exe" /noshow /log
uRun: [Nimbuzz] c:\program files\nimbuzz\Nimbuzz.exe
uRun: [NextLive] c:\windows\system32\rundll32.exe "c:\documents and settings\administrator\application data\newnext.me\nengine.dll",EntryPoint -m l
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /nogui
mRun: [mobilegeni daemon] c:\program files\mobogenie\DaemonProcess.exe
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\VYPRES~1.LNK -
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIECapture.html
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
LSP: c:\windows\system32\sslsp105.dll
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{2F6B2385-BB96-4949-97FF-388989666346} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{A774896F-74AC-4D3F-9AC9-3FA8BC1D5FB9} : DHCPNameServer = 8.8.8.8
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.117\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath -
.
============= SERVICES / DRIVERS ===============
.
R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [2013-11-8 12112]
R0 aswNdis2;avast! Firewall NDIS Driver;c:\windows\system32\drivers\aswNdis2.sys [2013-11-8 247192]
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-3-19 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-3-19 178304]
R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61xxmm.sys [2012-10-10 14184]
R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64xxmm.sys [2012-10-10 5632]
R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.sys [2012-10-10 14184]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2013-11-8 26136]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-3-19 774392]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [2013-3-19 403440]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2012-11-21 121184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-3-19 35656]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-3-19 70384]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2013-3-19 50344]
R2 avast! Firewall;avast! Firewall;c:\program files\avast software\avast\afwServ.exe [2013-11-8 116776]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\htc\internet pass-through\PassThruSvr.exe [2013-6-3 167424]
R3 SumRandoVPNService;SumRandoVPNService;c:\program files\sumrando\sumrando\misc\vpnmanagesvc.exe [2014-2-4 108144]
R3 tun3326;VPN Tunnel Adapter;c:\windows\system32\drivers\tun3326.sys [2013-3-22 30392]
S2 Update Surftastic;Update Surftastic;"c:\program files\surftastic\updatesurftastic.exe" --> c:\program files\surftastic\updateSurftastic.exe [?]
S3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\cyberghost vpn\cgvpncliservice.exe --> c:\program files\cyberghost vpn\CGVPNCliService.exe [?]
S3 FairplayKD;FairplayKD;\??\c:\documents and settings\all users\application data\mta san andreas all\1.3\temp\fairplaykd.sys --> c:\documents and settings\all users\application data\mta san andreas all\1.3\temp\FairplayKD.sys [?]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2013-6-3 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [2012-12-7 21248]
S3 tapSF0901;Spotflux Virtual Network Device Driver;c:\windows\system32\drivers\tapSF0901.sys [2013-3-7 33728]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
.
=============== Created Last 30 ================
.
2014-03-03 18:05:05 17344 ----a-w- c:\windows\system32\roboot.exe
2014-03-03 06:59:42 -------- d-----w- c:\documents and settings\administrator\local settings\application data\PCHealth
2014-03-02 08:26:58 -------- d-----w- c:\documents and settings\administrator\local settings\application data\SumRando
2014-03-02 02:39:58 -------- d-----w- c:\documents and settings\administrator\application data\AVAST Software
2014-03-01 19:45:09 -------- d-----w- c:\documents and settings\administrator\application data\DMCache
2014-03-01 18:48:37 -------- d-----w- c:\documents and settings\administrator\local settings\application data\Skype
2014-03-01 18:47:15 -------- d-----r- c:\program files\Skype
2014-03-01 17:26:39 -------- d-----w- c:\documents and settings\administrator\application data\IDM
2014-03-01 13:23:38 -------- d-----w- c:\program files\SumRando
2014-02-23 19:13:46 -------- d-----w- c:\program files\WASEL Pro VPN Service
2014-02-17 18:45:30 -------- d-----w- c:\documents and settings\administrator\local settings\application data\NativeMessaging
2014-02-09 19:17:15 -------- d-----w- c:\program files\Surftastic
2014-02-04 17:30:42 74352 ----a-w- c:\windows\system32\sslsp105.dll
.
==================== Find3M ====================
.
2014-02-05 23:26:52 920064 ----a-w- c:\windows\system32\wininet.dll
2014-02-05 23:26:43 43520 ----a-w- c:\windows\system32\licmgr10.dll
2014-02-05 23:26:42 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2014-02-05 23:26:37 18944 ----a-w- c:\windows\system32\corpol.dll
2014-02-05 22:24:05 385024 ----a-w- c:\windows\system32\html.iec
2014-01-19 10:39:39 0 ----a-w- c:\documents and settings\administrator\TempWmicBatchFile.bat
2014-01-07 18:44:03 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-07 18:44:03 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-01-04 03:13:05 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-12-18 16:10:01 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-12-18 15:46:50 145408 ----a-w- c:\windows\system32\javacpl.cpl
2013-12-05 11:26:06 1172992 ----a-w- c:\windows\system32\msxml3.dll
2013-09-13 08:36:14 34583392 ----a-w- c:\program files\30.0.1599.37_chrome_installer_2.exe
.
============= FINISH: 23:19:54.98 ===============
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.51.2
Run by Administrator at 23:19:01 on 2014-03-03
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1527.431 [GMT 5:00]
.
AV: avast! Antivirus *Enabled/Outdated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Internet Security *Enabled*
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Program Files\AVAST Software\Avast\afwServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nimbuzz\Nimbuzz.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\SumRando\SumRando\misc\vpnmanagesvc.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtD0F0F0EtDtA0C0Ezz0A0FzztC0F0BtN0D0Tzu0CyBtDtAtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1158045593&ir=
mStart Page = hxxp://start.mysearchdial.com/?f=1&a=dsites&cd=2XzuyEtN2Y1L1QzutDtD0F0F0EtDtA0C0Ezz0A0FzztC0F0BtN0D0Tzu0CyBtDtAtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1158045593&ir=
uInternet Connection Wizard,ShellNext = iexplore
BHO: IDM integration (IDMIEHlprObj Class): {0055C089-8582-441B-A0BF-17B458C2A3A8} - c:\program files\internet download manager\IDMIECC.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: DefaultTab Browser Helper: {7F6AFBF1-E065-4627-A2FD-810366367D01} -
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
EB: {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} - <orphaned>
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
uRun: [LiveSupport] "c:\program files\livesupport\LiveSupport.exe" /noshow /log
uRun: [Nimbuzz] c:\program files\nimbuzz\Nimbuzz.exe
uRun: [NextLive] c:\windows\system32\rundll32.exe "c:\documents and settings\administrator\application data\newnext.me\nengine.dll",EntryPoint -m l
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /nogui
mRun: [mobilegeni daemon] c:\program files\mobogenie\DaemonProcess.exe
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\VYPRES~1.LNK -
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\wcieactivex\AcroIEFavClient.dll/AcroIECapture.html
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
LSP: c:\windows\system32\sslsp105.dll
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{2F6B2385-BB96-4949-97FF-388989666346} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{A774896F-74AC-4D3F-9AC9-3FA8BC1D5FB9} : DHCPNameServer = 8.8.8.8
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.117\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath -
.
============= SERVICES / DRIVERS ===============
.
R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [2013-11-8 12112]
R0 aswNdis2;avast! Firewall NDIS Driver;c:\windows\system32\drivers\aswNdis2.sys [2013-11-8 247192]
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-3-19 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-3-19 178304]
R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61xxmm.sys [2012-10-10 14184]
R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64xxmm.sys [2012-10-10 5632]
R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.sys [2012-10-10 14184]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2013-11-8 26136]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-3-19 774392]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [2013-3-19 403440]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2012-11-21 121184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-3-19 35656]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-3-19 70384]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2013-3-19 50344]
R2 avast! Firewall;avast! Firewall;c:\program files\avast software\avast\afwServ.exe [2013-11-8 116776]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\htc\internet pass-through\PassThruSvr.exe [2013-6-3 167424]
R3 SumRandoVPNService;SumRandoVPNService;c:\program files\sumrando\sumrando\misc\vpnmanagesvc.exe [2014-2-4 108144]
R3 tun3326;VPN Tunnel Adapter;c:\windows\system32\drivers\tun3326.sys [2013-3-22 30392]
S2 Update Surftastic;Update Surftastic;"c:\program files\surftastic\updatesurftastic.exe" --> c:\program files\surftastic\updateSurftastic.exe [?]
S3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\cyberghost vpn\cgvpncliservice.exe --> c:\program files\cyberghost vpn\CGVPNCliService.exe [?]
S3 FairplayKD;FairplayKD;\??\c:\documents and settings\all users\application data\mta san andreas all\1.3\temp\fairplaykd.sys --> c:\documents and settings\all users\application data\mta san andreas all\1.3\temp\FairplayKD.sys [?]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2013-6-3 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [2012-12-7 21248]
S3 tapSF0901;Spotflux Virtual Network Device Driver;c:\windows\system32\drivers\tapSF0901.sys [2013-3-7 33728]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
.
=============== Created Last 30 ================
.
2014-03-03 18:05:05 17344 ----a-w- c:\windows\system32\roboot.exe
2014-03-03 06:59:42 -------- d-----w- c:\documents and settings\administrator\local settings\application data\PCHealth
2014-03-02 08:26:58 -------- d-----w- c:\documents and settings\administrator\local settings\application data\SumRando
2014-03-02 02:39:58 -------- d-----w- c:\documents and settings\administrator\application data\AVAST Software
2014-03-01 19:45:09 -------- d-----w- c:\documents and settings\administrator\application data\DMCache
2014-03-01 18:48:37 -------- d-----w- c:\documents and settings\administrator\local settings\application data\Skype
2014-03-01 18:47:15 -------- d-----r- c:\program files\Skype
2014-03-01 17:26:39 -------- d-----w- c:\documents and settings\administrator\application data\IDM
2014-03-01 13:23:38 -------- d-----w- c:\program files\SumRando
2014-02-23 19:13:46 -------- d-----w- c:\program files\WASEL Pro VPN Service
2014-02-17 18:45:30 -------- d-----w- c:\documents and settings\administrator\local settings\application data\NativeMessaging
2014-02-09 19:17:15 -------- d-----w- c:\program files\Surftastic
2014-02-04 17:30:42 74352 ----a-w- c:\windows\system32\sslsp105.dll
.
==================== Find3M ====================
.
2014-02-05 23:26:52 920064 ----a-w- c:\windows\system32\wininet.dll
2014-02-05 23:26:43 43520 ----a-w- c:\windows\system32\licmgr10.dll
2014-02-05 23:26:42 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2014-02-05 23:26:37 18944 ----a-w- c:\windows\system32\corpol.dll
2014-02-05 22:24:05 385024 ----a-w- c:\windows\system32\html.iec
2014-01-19 10:39:39 0 ----a-w- c:\documents and settings\administrator\TempWmicBatchFile.bat
2014-01-07 18:44:03 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-07 18:44:03 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-01-04 03:13:05 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-12-18 16:10:01 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-12-18 15:46:50 145408 ----a-w- c:\windows\system32\javacpl.cpl
2013-12-05 11:26:06 1172992 ----a-w- c:\windows\system32\msxml3.dll
2013-09-13 08:36:14 34583392 ----a-w- c:\program files\30.0.1599.37_chrome_installer_2.exe
.
============= FINISH: 23:19:54.98 ===============
