FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\
smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/02/06 15:47:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/08/10 16:18:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/08/23 17:24:42 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\
smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/02/06 15:47:01 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{D48A5C82-F95B-11E1-8270-B8AC6F996F26}: C:\Users\Owner\AppData\Local\{D48A5C82-F95B-11E1-8270-B8AC6F996F26}\ [2012/09/07 22:21:05 | 000,000,000 | ---D | M]
[2011/08/19 08:51:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Extensions
[2012/09/11 22:38:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\86hcnlmp.default\extensions
[2012/08/23 21:08:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/08/23 21:08:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012/06/09 18:10:27 | 000,000,000 | ---D | M] (Hotspot Shield Helper (Please allow this installation)) -- C:\Program Files (x86)\Mozilla Firefox\extensions\
afurladvisor@anchorfree.com
[2012/09/07 22:21:05 | 000,000,000 | ---D | M] (Mozilla Safe Browsing) -- C:\USERS\OWNER\APPDATA\LOCAL\{D48A5C82-F95B-11E1-8270-B8AC6F996F26}
[2012/08/10 16:18:54 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/08/10 17:41:32 | 000,003,749 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/06/14 18:19:40 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/06/14 18:19:40 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
========== Chrome ==========
CHR - homepage:
http://www.siccode.com/
CHR - default_search_provider: AVG Secure Search (Enabled)
CHR - default_search_provider: search_url =
https://isearch.avg.com/search?cid=...d=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms}
CHR - default_search_provider: suggest_url =
http://clients5.google.com/complete...inputEncoding}&outputencoding={outputEncoding}
CHR - homepage:
http://www.siccode.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Owner\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Owner\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Owner\AppData\Local\Google\Chrome\Application\21.0.1180.89\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Owner\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - Extension: YouTube = C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Gmail = C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2012/08/22 15:32:39 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:
64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:
64bit: - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
O2:
64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (W2PBrowser Class) - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O2 - BHO: (WOT Helper) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:
64bit: - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKLM\..\Toolbar: (WOT) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
O3:
64bit: - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
O4:
64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:
64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:
64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:
64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:
64bit: - HKLM..\Run: [nerlex] "C:\Windows\System32\rundll32.exe" "C:\Users\Owner\AppData\Roaming\nerlex.dll",GC_Track File not found
O4:
64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKCU..\Run: [FileHippo.com] C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe (FileHippo.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5}
http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_06-windows-i586.cab (Java Plug-in 10.6.2)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}
http://java.sun.com/update/1.7.0/jinstall-1_7_0_06-windows-i586.cab (Java Plug-in 1.7.0_06)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.7.0_06)
O16 - DPF: {CB1A2363-BCE7-42B1-A8B2-E530C9F0B0DA}
https://secure.digsigtrust.com/ms/IdenTrustCertEnroll.cab (CertEnrollControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 167.206.245.129 167.206.245.130 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DEAA0459-FD77-4007-B31D-7998BC471859}: DhcpNameServer = 167.206.245.129 167.206.245.130 192.168.1.1
O18:
64bit: - Protocol\Handler\livecall - No CLSID value found
O18:
64bit: - Protocol\Handler\msnim - No CLSID value found
O18:
64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:
64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:
64bit: - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
O20:
64bit: - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:
64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:
64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012/09/11 21:15:51 | 000,448,512 | ---- | C] (OldTimer Tools) -- C:\Users\Owner\Desktop\TFC.exe
[2012/09/11 21:12:29 | 000,693,235 | ---- | C] (Farbar) -- C:\Users\Owner\Desktop\FSS.exe
[2012/09/11 21:00:22 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/09/11 20:26:35 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
[2012/09/11 20:15:25 | 010,524,080 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Owner\Desktop\mbam-setup-1.65.0.1400.exe
[2012/09/10 23:36:54 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/09/10 20:59:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\Desktop\RK_Quarantine
[2012/09/07 22:21:05 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{D48A5C82-F95B-11E1-8270-B8AC6F996F26}
[2012/09/06 16:16:19 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2012/09/04 17:59:01 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\pdfforge
[2012/09/04 17:28:26 | 000,177,640 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdm.sys
[2012/09/04 17:28:26 | 000,157,672 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadbus.sys
[2012/09/04 17:28:26 | 000,016,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdfl.sys
[2012/09/04 17:28:26 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwhnt.sys
[2012/09/04 17:28:26 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwh.sys
[2012/09/04 17:28:26 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcmnt.sys
[2012/09/04 17:28:26 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcm.sys
[2012/08/23 21:39:47 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2012/08/23 21:38:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SkyDrive
[2012/08/23 21:38:27 | 000,000,000 | R--D | C] -- C:\Users\Owner\SkyDrive
[2012/08/23 21:38:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft SkyDrive
[2012/08/23 21:37:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012/08/23 21:35:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client
[2012/08/23 21:05:55 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
[2012/08/23 20:57:49 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\Secunia PSI
[2012/08/23 20:57:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Secunia
[2012/08/23 20:53:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileHippo.com
[2012/08/23 20:39:52 | 000,000,000 | ---D | C] -- C:\Program Files\WOT
[2012/08/23 20:39:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WOT
[2012/08/23 17:28:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012/08/23 17:27:38 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2012/08/23 12:01:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012/08/23 00:50:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/08/23 00:50:32 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/08/23 00:50:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/08/22 15:32:44 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2012/08/22 15:02:04 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012/08/22 10:58:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{23E2D15F-877F-4E0A-9068-7728E64CB6FB}
[2012/08/16 15:45:50 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{6554A463-B686-416D-AE80-4C34BB8A1211}
[2012/08/16 15:45:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{62419E22-A8B3-401D-8019-D8898FB392EE}
[2012/08/16 15:41:33 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{B505AEBC-C2ED-44AB-B9CB-97FA4D20DBC3}
[2012/08/16 15:41:24 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{FC35BACC-6C4F-4274-8F77-532F485773F9}
[2012/08/16 15:37:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{018C6B10-3ABD-429B-8D85-A9048B37B756}
[2012/08/16 15:37:14 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{D33577DA-02DF-4F1D-AF40-91B6265FAA3B}
[2012/08/16 15:32:27 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{19FD24CF-8C45-4E36-A019-4B00EC31E717}
[2012/08/16 15:32:16 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{BD66BFB9-923F-4C18-8EEA-128E2CC075C7}
[2012/08/16 15:28:37 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{1046392E-14FA-4E6F-BA53-439704799308}
[2012/08/16 15:20:58 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{7D3BEB9E-C3BE-492E-A119-91483A10A490}
[2012/08/16 15:20:46 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{89351A59-EF82-4218-BC50-DE97F2046B1D}
[2012/08/15 13:51:28 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{FEEF43F0-0A08-47A8-B5CA-CDFAFF8B4547}
[2012/08/15 13:51:15 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{C30C1636-CD8A-4655-AC25-192B45FA3D84}
[2012/08/14 11:03:42 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{50635B3E-137B-48CA-B7DA-0EA1E85634B4}
[2012/08/14 11:03:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{2B0369F3-07BF-44BD-A709-129E48E4BF18}
[2012/08/14 10:46:32 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{92357CE2-F4B4-4A77-96A6-F87CFD2DB9FB}
[2012/08/14 10:42:40 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{1D333F65-AA86-4F75-926D-5E55F73F68D9}
[2012/08/14 10:42:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{F08DC235-3BB4-4A33-84E0-4782C63F344F}
[2012/08/14 10:30:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2012/08/14 10:30:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012/08/14 07:23:22 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
[2012/08/13 17:37:08 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{579256FC-33D1-4EDD-82FB-BC3C703BCB37}
[2012/08/13 17:36:52 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{640DAB74-1BBB-4F34-B908-84F628F84990}
[2012/08/13 14:41:59 | 000,000,000 | ---D | C] -- C:\Users\Owner\Documents\Anti-virus
[2012/08/13 14:28:26 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{1711552E-7CA8-46D2-9553-BEE14EAC0097}
[2012/08/13 14:28:12 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{7B607E49-0F6A-492B-A417-395C94B2FC48}
[2012/08/13 10:40:38 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{DB087CDE-B094-40D6-89EA-1EF1049501EE}
[2012/08/13 10:39:34 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{A80D082C-126E-4832-8981-7EA7034EA543}
[2012/08/13 06:35:18 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{C89E875A-F683-49A7-B7BC-96601D88EBFC}
[2012/08/13 06:33:25 | 000,000,000 | ---D | C] -- C:\Users\Owner\AppData\Local\{6BF451D9-0EE4-42B8-A822-23513582F10B}
[2009/07/13 19:19:28 | 210,051,234 | ---- | C] (Immediately Display Mobile Erasing llc) -- C:\Users\Owner\AppData\Roaming\jjvop.exe
========== Files - Modified Within 30 Days ==========
[2012/09/12 01:52:06 | 000,000,896 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/09/12 01:20:04 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/09/12 01:01:03 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2503403413-1387520261-2031820482-1001UA.job
[2012/09/11 21:26:05 | 000,014,144 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/09/11 21:26:05 | 000,014,144 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/09/11 21:18:38 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/09/11 21:18:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/09/11 21:18:09 | 2055,512,063 | -HS- | M] () -- C:\hiberfil.sys
[2012/09/11 21:15:51 | 000,448,512 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\TFC.exe
[2012/09/11 21:14:54 | 000,512,399 | ---- | M] () -- C:\Users\Owner\Desktop\adwcleaner.exe
[2012/09/11 21:12:29 | 000,693,235 | ---- | M] (Farbar) -- C:\Users\Owner\Desktop\FSS.exe
[2012/09/11 21:06:48 | 000,854,156 | ---- | M] () -- C:\Users\Owner\Desktop\SecurityCheck.exe
[2012/09/11 20:57:59 | 000,006,532 | ---- | M] () -- C:\Users\Owner\AppData\Local\chromeupdate.crx
[2012/09/11 20:30:33 | 000,729,880 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/09/11 20:30:33 | 000,626,540 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/09/11 20:30:33 | 000,107,784 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/09/11 20:26:58 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
[2012/09/11 20:16:04 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/11 20:15:25 | 010,524,080 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Owner\Desktop\mbam-setup-1.65.0.1400.exe
[2012/09/10 22:09:16 | 000,000,512 | ---- | M] () -- C:\Users\Owner\Desktop\MBR.dat
[2012/09/10 20:50:22 | 002,193,184 | ---- | M] () -- C:\Users\Owner\Desktop\tdsskiller.zip
[2012/09/09 07:01:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2503403413-1387520261-2031820482-1001Core.job
[2012/09/08 17:51:29 | 210,051,234 | ---- | M] (Immediately Display Mobile Erasing llc) -- C:\Users\Owner\AppData\Roaming\jjvop.exe
[2012/09/07 17:04:46 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/09/01 16:02:16 | 000,002,453 | ---- | M] () -- C:\Users\Owner\Desktop\Google Chrome.lnk
[2012/08/29 10:00:29 | 000,060,864 | ---- | M] () -- C:\Users\Owner\g2mdlhlpx.exe
[2012/08/29 06:06:14 | 000,000,600 | ---- | M] () -- C:\Users\Owner\AppData\Local\PUTTY.RND
[2012/08/26 06:34:14 | 000,011,264 | ---- | M] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/08/23 21:37:02 | 000,002,212 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012/08/23 21:14:42 | 005,043,664 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/08/23 21:04:41 | 000,001,070 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012/08/23 20:57:19 | 000,001,110 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
[2012/08/23 20:53:50 | 000,001,973 | ---- | M] () -- C:\Users\Owner\Desktop\Update Checker.lnk
[2012/08/23 17:24:43 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012/08/22 15:32:39 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012/08/22 14:57:52 | 000,002,086 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/08/14 10:30:19 | 000,743,856 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
========== Files Created - No Company Name ==========
[2012/09/11 21:14:44 | 000,512,399 | ---- | C] () -- C:\Users\Owner\Desktop\adwcleaner.exe
[2012/09/11 21:06:37 | 000,854,156 | ---- | C] () -- C:\Users\Owner\Desktop\SecurityCheck.exe
[2012/09/10 22:09:16 | 000,000,512 | ---- | C] () -- C:\Users\Owner\Desktop\MBR.dat
[2012/09/10 20:50:20 | 002,193,184 | ---- | C] () -- C:\Users\Owner\Desktop\tdsskiller.zip
[2012/09/07 22:21:05 | 000,006,532 | ---- | C] () -- C:\Users\Owner\AppData\Local\chromeupdate.crx
[2012/08/29 10:00:28 | 000,060,864 | ---- | C] () -- C:\Users\Owner\g2mdlhlpx.exe
[2012/08/23 22:02:18 | 000,001,458 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
[2012/08/23 21:38:26 | 000,002,160 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
[2012/08/23 21:37:02 | 000,002,212 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012/08/23 21:04:41 | 000,001,070 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012/08/23 20:57:19 | 000,001,110 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
[2012/08/23 20:57:19 | 000,001,073 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
[2012/08/23 20:53:50 | 000,002,003 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update Checker.lnk
[2012/08/23 20:53:50 | 000,001,973 | ---- | C] () -- C:\Users\Owner\Desktop\Update Checker.lnk
[2012/08/23 17:24:43 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2012/08/23 17:24:42 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2012/08/23 00:50:37 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/08/14 10:30:28 | 000,001,915 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/08/10 17:20:53 | 000,000,048 | ---- | C] () -- C:\Users\Owner\AppData\Local\OWNER-PC.cfg
[2012/02/06 15:53:41 | 000,207,571 | ---- | C] () -- C:\Windows\hpwins28.dat.temp
[2012/02/06 15:53:41 | 000,000,418 | ---- | C] () -- C:\Windows\hpwmdl28.dat.temp
[2012/02/06 15:39:51 | 000,206,568 | ---- | C] () -- C:\Windows\hpwins28.dat
[2012/01/22 11:18:05 | 000,000,600 | ---- | C] () -- C:\Users\Owner\AppData\Local\PUTTY.RND
[2012/01/18 10:24:09 | 000,007,596 | ---- | C] () -- C:\Users\Owner\AppData\Local\Resmon.ResmonCfg
[2012/01/16 23:31:54 | 000,743,856 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/11/19 15:09:01 | 000,011,264 | ---- | C] () -- C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/18 12:34:56 | 000,000,166 | ---- | C] () -- C:\Users\Owner\AppData\Roaming\PLGComp.ini
[2011/08/19 13:48:35 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2011/08/18 14:54:45 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/12/22 23:21:56 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2010/12/22 23:21:54 | 000,206,952 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2010/12/22 23:21:52 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2010/12/22 07:36:50 | 000,307,200 | ---- | C] () -- C:\Windows\SetDisplayResolution.exe
[2010/12/22 06:17:59 | 000,003,154 | ---- | C] () -- C:\Windows\HotFixList.ini
[2010/12/22 06:17:55 | 000,142,704 | ---- | C] () -- C:\Windows\wiainst64.exe
[2010/12/22 06:17:01 | 000,484,656 | ---- | C] () -- C:\Windows\ssndii.exe
[2010/12/22 06:16:42 | 000,258,864 | ---- | C] () -- C:\Windows\SUPDRun.exe
[2010/12/22 05:48:35 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
========== LOP Check ==========
[2012/01/28 16:24:53 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Audacity
[2012/06/09 19:41:31 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Azureus
[2012/09/07 13:08:31 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\FileZilla
[2012/09/11 19:38:01 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\IrfanView
[2012/03/24 14:05:53 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\PDAppFlex
[2012/09/04 18:32:42 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\pdfforge
[2012/03/24 14:24:38 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/08/19 21:48:30 | 000,000,000 | ---D | M] -- C:\Users\Owner\AppData\Roaming\Windows Live Writer
[2012/07/17 10:54:55 | 000,032,578 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/08/10 17:41:48 | 000,000,218 | ---- | M] () -- C:\Windows\Tasks\SidebarExecute.job
========== Purity Check ==========
< End of report >