MyCity » Ambulanta -> Arhiva Ambulante » Facebook virus

Facebook virus

Napisano na dan: 2.9.2012

Facebook virus

Sledeća strana

Pagination

Odgovori

Mario Ljubic Poslao: 02 Sep 2012 18:01 Idi na vrh
offline Mario Ljubic Novi MyCity građanin Pridružio: 02 Sep 2012 Poruke: 3	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Prije otprilike mjesec dana sam na facebook profilu kliknuo na link koji mi je poslao prijatelj. Pisalo je nesto na turskom. Link me odveo do videa koji se nije mogao ucitati, i iskocila mi je poruka da mi flash player nije up to date. Kliknuo sam na ponudjeni download i sad moj profil svima salje takve linkove. Ako se netko drugi na mom racunalu ulogira na face, i njegov profil podivlja. Puno bi mi znacilo ako biste mi pomogli, jer mi se racunalo opcenito pocelo cudno ponasati (povremeno se ugasi ekran). Imam 64-bitni windows. Evo sto mi je izbacio OTL: OTL logfile created on: 9/2/2012 5:41:52 PM - Run 1 OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\ime\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 \| Country: United States \| Language: ENU \| Date Format: M/d/yyyy 3.86 Gb Total Physical Memory \| 2.44 Gb Available Physical Memory \| 63.17% Memory free 7.71 Gb Paging File \| 5.94 Gb Available in Paging File \| 77.10% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 450.66 Gb Total Space \| 193.35 Gb Free Space \| 42.90% Space Free \| Partition Type: NTFS Computer Name: IME-PC \| User Name: ime \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: All users \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 60 Days ========== Processes (SafeList) ========== PRC - [2012/09/02 17:26:34 \| 000,598,528 \| ---- \| M] (OldTimer Tools) -- C:\Users\ime\Desktop\OTL.exe PRC - [2012/09/02 17:17:33 \| 001,807,560 \| ---- \| M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe PRC - [2012/08/18 01:02:21 \| 000,913,888 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/08/13 13:33:30 \| 003,064,000 \| ---- \| M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012/07/11 01:18:29 \| 001,107,552 \| ---- \| M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe PRC - [2012/07/11 01:17:43 \| 000,935,008 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe PRC - [2012/05/31 15:00:22 \| 000,445,624 \| ---- \| M] (Sony) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe PRC - [2012/04/30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe PRC - [2012/04/05 14:12:34 \| 002,587,008 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe PRC - [2012/03/12 22:25:06 \| 000,583,680 \| ---- \| M] (MyCity) -- C:\Program Files (x86)\MCShield\MCShieldRTM.exe PRC - [2012/02/14 13:53:38 \| 000,193,288 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe PRC - [2011/02/01 23:24:42 \| 002,656,280 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2011/02/01 23:24:40 \| 000,326,168 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010/09/14 04:32:32 \| 000,013,336 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010/09/14 04:32:30 \| 000,283,160 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010/04/27 04:09:52 \| 000,113,288 \| ---- \| M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009/01/27 00:31:16 \| 002,144,088 \| RHS- \| M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009/01/27 00:31:10 \| 001,153,368 \| ---- \| M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe ========== Modules (No Company Name) ========== MOD - [2012/09/02 17:17:32 \| 009,813,704 \| ---- \| M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll MOD - [2012/08/18 01:02:19 \| 002,003,424 \| ---- \| M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012/07/11 01:18:29 \| 001,107,552 \| ---- \| M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe MOD - [2012/07/11 01:17:44 \| 000,132,704 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll MOD - [2012/06/18 22:37:08 \| 000,475,136 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\09557e6c5a83a1cb68c7c50a841c8064\IAStorUtil.ni.dll MOD - [2012/06/18 22:17:57 \| 011,833,344 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll MOD - [2012/06/18 22:17:15 \| 012,436,480 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll MOD - [2012/06/18 22:17:05 \| 001,591,808 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll MOD - [2012/05/24 11:50:32 \| 000,203,776 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll MOD - [2012/05/21 05:12:54 \| 000,014,336 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\220b0516e45e7f9bbf6a631490c1243a\IAStorCommon.ni.dll MOD - [2012/05/14 13:54:37 \| 000,771,584 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll MOD - [2012/05/14 13:53:54 \| 005,452,800 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll MOD - [2012/05/14 13:53:50 \| 000,971,264 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll MOD - [2012/05/14 13:53:36 \| 003,347,968 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll MOD - [2012/05/14 13:53:33 \| 007,967,232 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll MOD - [2012/05/14 13:49:16 \| 011,492,864 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll MOD - [2012/04/30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe MOD - [2012/04/30 11:57:42 \| 000,039,936 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll ========== Services (SafeList) ========== SRV:64bit: - [2012/03/26 18:49:56 \| 000,291,696 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv) SRV:64bit: - [2012/03/26 18:49:56 \| 000,012,600 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc) SRV:64bit: - [2010/09/23 03:10:10 \| 000,057,184 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:64bit: - [2009/07/14 03:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012/09/02 17:17:33 \| 000,250,568 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/08/18 01:02:20 \| 000,113,120 \| ---- \| M] (Mozilla Foundation) [On_Demand \| Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/08/13 13:33:30 \| 003,064,000 \| ---- \| M] (Skype Technologies S.A.) [Auto \| Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012/07/11 01:17:43 \| 000,935,008 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- (vToolbarUpdater11.2.0) SRV - [2012/06/08 04:12:14 \| 000,160,944 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012/02/14 13:53:38 \| 000,193,288 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2012/01/18 14:38:28 \| 000,155,320 \| ---- \| M] (Avanquest Software) [On_Demand \| Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011/03/31 11:47:27 \| 000,655,624 \| ---- \| M] (Acresso Software Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011/02/01 23:24:42 \| 002,656,280 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2011/02/01 23:24:40 \| 000,326,168 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010/09/14 04:32:32 \| 000,013,336 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2010/03/18 22:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/06/10 23:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012/04/19 13:50:26 \| 000,028,480 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA) DRV:64bit: - [2012/03/20 20:44:12 \| 000,098,688 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:64bit: - [2012/03/09 03:40:52 \| 000,048,488 \| ---- \| M] (Microsoft Corporation) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:64bit: - [2012/03/01 08:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012/02/22 14:25:32 \| 000,289,872 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64) DRV:64bit: - [2012/01/31 13:46:48 \| 000,036,944 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| Boot \| Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64) DRV:64bit: - [2011/12/23 22:32:14 \| 000,047,696 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64) DRV:64bit: - [2011/08/03 03:38:56 \| 000,051,712 \| ---- \| M] (Apple, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2011/03/11 08:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/03/11 08:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011/01/27 18:57:14 \| 012,273,408 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2011/01/21 03:15:30 \| 000,019,496 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp) DRV:64bit: - [2011/01/21 03:15:28 \| 000,067,624 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd) DRV:64bit: - [2011/01/20 05:28:26 \| 000,052,264 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa) DRV:64bit: - [2011/01/18 00:56:14 \| 000,412,712 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) DRV:64bit: - [2011/01/14 03:22:24 \| 000,085,544 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\bScsiSDa.sys -- (bScsiSDa) DRV:64bit: - [2010/11/20 15:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/20 13:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/11/20 11:37:42 \| 000,109,056 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2010/11/09 12:26:46 \| 002,377,216 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2010/10/20 02:34:26 \| 000,056,344 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2010/10/15 10:28:18 \| 000,317,440 \| ---- \| M] (Intel(R) Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:64bit: - [2010/09/30 07:00:06 \| 000,180,736 \| ---- \| M] (Renesas Electronics Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2010/09/30 07:00:06 \| 000,080,384 \| ---- \| M] (Renesas Electronics Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2010/09/14 04:24:26 \| 000,437,272 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010/07/29 15:30:48 \| 001,383,472 \| ---- \| M] (Synaptics Incorporated) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2009/07/14 03:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/14 03:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/14 03:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/06/10 22:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 22:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 22:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 22:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009/07/14 03:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = acer.msn.com IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = acer.msn.com IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = acer.msn.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = acer.msn.com IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2237994 IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = acer.msn.com IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = google.hr/ IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = search.babylon.com/?q={searchTerms}&AF=108298&babsrc=SP_ss&mntrId=acbd556c000000000000ec55f990b2f6 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = isearch.avg.com/search?cid={69B0E6B3-31AD-4E1C-A539-E79DF5B108E6}&mid=1b38ec99e92747d1abb9cd3c4e01a905-f57556369dbda7f5483bb0cb77948f9416349358&lang=en&ds=AVG&pr=fr&d=2012-05-31 18:46:50&v=11.1.0.7&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2237994 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{B76E7A85-7322-428b-AB33-19A6A5FD1E73}: "URL" = bsplayer-search.com/search?q={searchTerms} IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://www.google.hr/" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2011/10/23 10:42:21 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\ [2012/07/04 03:00:55 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012/07/11 01:17:51 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/08/18 01:02:22 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/08/18 01:02:22 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/06/01 05:26:29 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ime\AppData\Roaming\Mozilla\Extensions [2012/07/26 20:32:10 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ime\AppData\Roaming\Mozilla\Firefox\Profiles\jteslu5r.default\extensions [2012/08/18 01:02:24 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012/08/28 18:31:12 \| 000,000,000 \| ---D \| M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012/07/26 20:32:10 \| 000,009,184 \| ---- \| M] () (No name found) -- C:\USERS\IME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\JTESLU5R.DEFAULT\EXTENSIONS\{CDE38172-4160-4091-BF76-DE675198D659}.XPI [2012/08/18 01:02:21 \| 000,136,672 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/07/11 01:18:29 \| 000,003,767 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml [2012/07/03 00:42:22 \| 000,002,252 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/07/03 00:42:22 \| 000,002,040 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml O1 HOSTS File: ([2009/06/10 23:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.) O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.) O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll () O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (BS.Player ControlBar) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files (x86)\BS.Player ControlBar\BSToolbar64.dll () O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (BS.Player ControlBar) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files (x86)\BS.Player ControlBar\BSToolbar.dll () O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HF_G_Jul] C:\Program Files (x86)\AVG Secure Search\HF_G_Jul.exe () O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [ROC_roc_dec12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 File not found O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000..\Run: [MCShield Monitor] C:\Program Files (x86)\MCShield\MCShieldRTM.exe (MyCity) O4 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000..\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony) O4 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.) O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} java.sun.com/update/1.7.0/jinstall-1_7_0_06-windows-i586.cab (Java Plug-in 10.6.2) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.7.0_06) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{91BDA95A-5A38-43B5-B5A5-2ABF760076AD}: NameServer = 195.29.166.118,195.29.166.119 O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.) O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll () O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk ) O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart) O35:64bit: - HKLM\..comfile [open] -- "%1" % O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 60 Days ========== [2012/09/02 17:26:32 \| 000,598,528 \| ---- \| C] (OldTimer Tools) -- C:\Users\ime\Desktop\OTL.exe [2012/09/02 14:21:34 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{34D731EC-F1E9-4A2D-9535-009BC3F09284} [2012/08/31 18:40:33 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F9B62427-0314-4D5C-A29F-B37BEACC923C} [2012/08/30 01:06:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F15A2826-5C85-4A5D-A172-D06D6BF777FE} [2012/08/29 10:48:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{CA1B1488-9AA7-4194-A7AB-3BC4D373305A} [2012/08/28 18:30:22 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{9D4B9CAE-97A4-402B-80B0-7CD1ACC23E48} [2012/08/27 17:24:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8AB2A0F6-D46D-4C2D-9C7C-00C689129489} [2012/08/27 00:25:11 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F0FDF350-D61A-4C0A-AB17-DDA365E58634} [2012/08/23 23:38:11 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{FE0C80A8-0512-4436-984A-C85251395023} [2012/08/23 23:38:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{6D046925-0B29-4D2E-9CEA-E4E245EDE436} [2012/08/22 17:03:06 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{70A7D72C-2908-452A-8A15-B63C67FD3356} [2012/08/22 16:59:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E56D6D70-17DF-4FAA-9FEB-6D6563A76CD9} [2012/08/21 01:29:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E350EFFB-A20F-473D-9368-177EE32111E1} [2012/08/20 13:29:27 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{56EB3F46-A3C9-46A3-8125-0EEB1FD83684} [2012/08/19 05:48:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{44B98356-0496-4B62-9FC7-D00DE570C779} [2012/08/18 09:45:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{04BFDCC4-28BF-46FD-9E9A-C164BC268B25} [2012/08/18 09:45:13 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{1FAAE20E-1F1E-43CB-9603-F13C6F1E6E47} [2012/08/18 09:45:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{784894B6-713A-4037-8828-0A39629B9C03} [2012/08/18 09:44:51 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{510EEDB6-6860-48BA-B0E9-CB6BB525337B} [2012/08/17 20:43:13 \| 000,246,760 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012/08/17 20:43:13 \| 000,174,056 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012/08/17 20:43:13 \| 000,174,056 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012/08/17 20:41:12 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2012/08/17 20:40:46 \| 000,095,208 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012/08/17 20:07:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{80BE4821-B793-494D-9E2B-7F35F1A8DE20} [2012/08/17 20:07:32 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B4370E9B-85DA-459C-A9FA-A9741312CD50} [2012/08/17 20:07:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D030FD1B-7DA1-4CD7-8D61-2A1ACAB21C06} [2012/08/17 20:07:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D53AD302-5D7E-4D21-B696-78DEDD2B2046} [2012/08/16 21:46:43 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{32E71781-98BB-40E9-A049-2FF122BC02F8} [2012/08/16 21:46:30 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F968243F-8253-4F92-AEFA-4C08A268977C} [2012/08/16 21:46:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{9068BDE8-7A17-4056-9558-79AEBE5EC496} [2012/08/16 21:46:03 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{453FD03E-854F-47B3-AE0B-4C48674DC37B} [2012/08/16 00:33:43 \| 000,237,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012/08/16 00:33:43 \| 000,231,936 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012/08/16 00:33:43 \| 000,096,768 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012/08/16 00:33:43 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012/08/16 00:33:42 \| 000,176,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012/08/16 00:33:41 \| 001,427,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012/08/16 00:33:41 \| 000,248,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012/08/16 00:33:41 \| 000,173,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012/08/16 00:33:41 \| 000,142,848 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012/08/16 00:33:40 \| 002,312,704 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012/08/16 00:33:40 \| 001,494,528 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012/08/16 00:33:39 \| 000,816,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012/08/16 00:33:39 \| 000,717,824 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012/08/15 23:47:32 \| 000,503,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2012/08/15 23:47:26 \| 000,751,104 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2012/08/15 23:47:26 \| 000,492,032 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2012/08/15 23:47:26 \| 000,067,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\splwow64.exe [2012/08/15 23:47:25 \| 000,059,392 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll [2012/08/15 23:47:24 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll [2012/08/15 23:47:24 \| 000,041,984 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll [2012/08/15 23:47:22 \| 000,956,928 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2012/08/15 22:07:27 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Microsoft Security Client [2012/08/15 22:07:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Microsoft Security Client [2012/08/15 22:02:22 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{20C07A2D-A76A-4874-A5B5-CDC8E28FA017} [2012/08/15 22:02:11 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{7CAE9E8E-A0E3-464C-B91E-BD4330406C2B} [2012/08/15 22:01:59 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{AF2E21B0-AD64-4991-A32E-0F6A1AE18812} [2012/08/14 21:06:38 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{C69400CD-1293-4660-9010-50BF36ECD658} [2012/08/14 21:06:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{0A87C1A8-2876-4172-9D4A-DCC50B034A71} [2012/08/14 21:02:12 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{4C632EBF-DAE7-4D27-9F8C-6CCD4FF5C777} [2012/08/13 17:32:52 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{A94569AD-E3DE-49B7-BF70-A34D292AD787} [2012/08/13 17:32:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3625B110-CEA7-4293-A4A0-93AEADC25D62} [2012/08/13 17:32:23 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2DCE091B-B0C3-4AB8-92EA-6A72593BB17B} [2012/08/13 17:32:09 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{099CD79E-0A1E-43A6-A2EE-5B2BD7A8941C} [2012/08/10 18:56:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{995ECC82-A707-4302-B838-F7A38D56DC7F} [2012/08/10 18:55:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8D317E8C-7339-4D4D-89B9-3C9FE75DCD6D} [2012/08/10 18:55:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{026CD0FB-72C5-4DE9-8B7F-E7620FDFB6D5} [2012/08/09 17:56:10 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{C4DFF62D-54E4-4882-9876-CDEAEFA1D1E1} [2012/08/09 17:55:55 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3DEA3409-586D-4787-A34C-1AD35997BD3E} [2012/08/09 17:55:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2CEB3C52-6EED-4AE0-BEE0-90BEE1ABE9B4} [2012/08/08 10:16:40 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E131E375-6EBD-4101-BBD5-359199ED1466} [2012/08/08 10:16:29 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{64C217C6-DEA7-4695-8F45-5579C83345DC} [2012/08/08 10:16:18 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{AC93AB78-2491-454D-8C5E-8F05F0EEFC79} [2012/08/08 10:16:07 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E3E42D10-0151-4F4D-9AB2-0D97E454472C} [2012/08/07 18:05:26 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{AD7255D7-3B8B-4131-92B8-087DB9F2864C} [2012/08/07 18:05:13 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{EE2C5798-0492-4B83-8606-A0A741BB1704} [2012/08/07 18:05:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{60C44AF2-C920-448D-B116-1BB6C1EBECB2} [2012/08/07 18:04:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2B7C0B32-EEC0-4163-BE2A-110CD4DA6491} [2012/08/07 15:10:28 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{974460BD-FB28-4840-BB3D-92B9398DF4F6} [2012/08/07 15:06:38 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{6137414D-CB6C-4B8A-A223-F8D3684888AA} [2012/08/06 22:58:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F61B3291-F016-4D2B-B6F7-ABC9B5D2EB60} [2012/08/06 22:58:05 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{06639066-6F1A-4F72-81E7-1B41BBB4A78B} [2012/08/06 22:57:54 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2D1ABE8A-88DE-4D79-AF7A-E884C9C8514E} [2012/08/06 22:57:43 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{A5E90C1B-B21D-4372-B419-01AEC1CA1CD0} [2012/08/06 15:40:04 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{0F59B3F4-6601-4F6B-8E8B-3F53AC839450} [2012/08/06 15:39:54 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2637AB52-9FCF-4583-B274-8CAA98AC561D} [2012/08/06 15:39:42 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{1BE46999-5963-471B-B097-B6931B59B63F} [2012/08/06 10:57:17 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B1ABAB14-1B7F-4749-837C-761599548120} [2012/08/06 10:57:07 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{6FB15B6B-EFC1-4C3E-8427-FD26C1CF187C} [2012/08/06 10:56:56 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{FB7877A6-84F9-4102-B0D1-15CFDBFFD3E9} [2012/08/06 10:56:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{75CD2AA3-DE1C-4DDF-81BE-9A74BF97BAA8} [2012/08/05 19:34:30 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{39BC1BC4-056B-40AE-A31A-8566CCC98167} [2012/08/05 19:33:21 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{237202C7-E97B-4DA7-9B04-DDDD047809CA} [2012/08/05 19:29:51 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{97A6F903-CB51-4410-B222-7B140B2F1D4E} [2012/08/05 06:39:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{06A59195-A6F9-4524-B2E1-935C6B66B8AD} [2012/08/05 06:39:31 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{26CA46D6-F351-400C-9A7E-4478AD82C732} [2012/08/05 06:35:46 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{34C3688D-0A09-43B4-ACCD-8F27F016CD7E} [2012/07/27 17:10:29 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{443BF3A6-11EF-4A0C-82BD-D0A5BD8DE5F8} [2012/07/27 17:10:18 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F3BCFF6C-23E5-487C-9193-B2B0AB488EB0} [2012/07/27 17:10:07 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{465242F6-1A59-4A3D-A9E1-9F81F91AF6C2} [2012/07/26 20:32:47 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{181DB970-AB9B-42E3-806A-AA742594CEDD} [2012/07/26 20:32:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D3E2E4ED-217E-4DE5-AABC-75BDAEE72C33} [2012/07/26 20:32:14 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{EBD15EBB-1039-479C-8D1A-48A9A521862B} [2012/07/26 08:32:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{A9CE3E7E-117D-4426-9B23-DF60E279AB4B} [2012/07/26 08:31:48 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{61B012A6-E497-4C02-9C31-8C5F1F27735D} [2012/07/26 08:31:37 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{136E9389-3C05-4C92-88C5-743C404FD9EA} [2012/07/26 08:31:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{29B8AB4A-E0E5-4CBB-B076-91C2386CB4BF} [2012/07/22 07:00:21 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8C765491-721B-4ECC-95FE-FA2812035FD5} [2012/07/22 07:00:07 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{65C646DB-4B38-46CF-AFE5-3AD01F94096A} [2012/07/22 06:59:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{EC17FDFC-FB6C-48EB-8547-ACD7215325D6} [2012/07/22 06:59:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D4EE8EED-D3B0-42AA-9482-8CBB5A641BE6} [2012/07/21 02:49:17 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{0FFA9F96-7A31-4787-A269-273198C689AA} [2012/07/21 02:49:03 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{CFB34DD8-28B9-49C5-8894-F6E3AA7E1827} [2012/07/21 02:48:48 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F1E59C0F-BC85-4D16-B266-678D2E083972} [2012/07/21 02:48:32 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{47A30CDD-D37D-44E6-9482-1D44D0E9D52B} [2012/07/20 01:09:32 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{C006C7C8-03CF-4D82-931F-84B11C65864F} [2012/07/20 01:09:19 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{4ED16C8B-AF7B-4F14-A7D4-6339D8E3D889} [2012/07/20 01:09:08 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{C6CB7B54-B0A2-4EB5-8BFF-62B666AAD35A} [2012/07/20 01:08:56 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{72E96C36-696C-4208-9A18-B0D1FF5DD813} [2012/07/19 08:44:37 \| 000,000,000 \| ---D \| C] -- C:\Windows\SysWow64\drivers\AVG [2012/07/19 08:43:54 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG [2012/07/19 08:38:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{09E1F028-03CC-46E4-B27B-0E5F7986BF98} [2012/07/19 08:37:48 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D8B45E2B-C424-437F-AEEA-3048E7557A82} [2012/07/19 08:37:34 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3FBA5B9F-0C88-4D76-BDCD-340A0C112AA4} [2012/07/19 08:37:19 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{70B39898-E8DF-4343-896C-6BE3C6B11E6A} [2012/07/18 04:01:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2379FAC0-5CD7-4A22-8AC8-96807D3C8F50} [2012/07/18 04:01:12 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{374DBD30-0C49-4BBD-8B30-F9C2AED0D769} [2012/07/18 04:01:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{907A0A85-3D33-41A5-8585-73F9148187ED} [2012/07/18 04:00:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B2146B3E-C7A4-4E1A-82AB-668B6909E934} [2012/07/17 14:32:27 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F5FB93F4-AE29-41B9-B3BD-339B67A6904E} [2012/07/17 14:32:15 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B5877237-80F1-4ADE-BCE6-C6D745AB31F5} [2012/07/17 14:32:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{859FA397-9A72-4D7E-A46E-C301404006FF} [2012/07/17 01:37:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2CA46A87-18C7-4ACB-BDEA-CCA3A4294FE5} [2012/07/17 01:37:28 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{55E44ED0-B0AD-4AD1-ADEC-40F8CFA2B202} [2012/07/17 01:37:17 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{ACEAE61D-E39A-4663-8005-9D2E24059F95} [2012/07/17 01:37:05 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{1E756354-C602-4B87-900F-9EC2B7F267B2} [2012/07/16 00:07:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{00CE0DB8-16A1-4F1F-8CEA-69D09D56B044} [2012/07/16 00:06:49 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{9EFDA71B-BE2C-4C91-A6E6-C3BB5FF48935} [2012/07/16 00:06:37 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{433DFAD4-833D-4473-93B2-4D1BACB539C3} [2012/07/16 00:06:25 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{931A88FF-6F22-4FE8-B9E9-DE75D2A4072E} [2012/07/14 22:00:37 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{99E457E2-16A7-4958-A0E3-7BABAD353BC7} [2012/07/14 22:00:26 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{0270BDFF-F379-4AB2-8D14-6DA31AF1415A} [2012/07/14 22:00:15 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F2FFB3BA-7716-45F6-8794-DC929F35F18E} [2012/07/14 22:00:03 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{9DB4B599-6B88-4C49-8476-11672AC8335F} [2012/07/14 03:04:13 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{DFE0ADD2-122C-463F-89EB-3B0CBB2F7709} [2012/07/14 03:04:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{CD13EB85-56C5-408E-96F1-DACA439DFE6F} [2012/07/14 03:03:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3C0DE53E-7A9C-4E15-AF9B-35826A53CA7B} [2012/07/14 03:03:10 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{DA19FFA9-6E00-4E45-A7E3-70866A0DC529} [2012/07/13 09:33:25 \| 000,000,000 \| ---D \| C] -- C:\5816c4a46e5a02e687 [2012/07/13 07:52:11 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2012/07/13 07:52:11 \| 000,002,048 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2012/07/13 07:52:00 \| 000,307,200 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2012/07/13 07:51:59 \| 000,805,376 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll [2012/07/13 07:51:58 \| 001,133,568 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll [2012/07/13 03:13:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{66AC78D4-C725-42EB-ABF2-B87D44A69604} [2012/07/13 03:12:58 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{75B482D1-D7B2-40E6-9D3E-2891455716B6} [2012/07/13 02:38:53 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{CB66A01D-B3E1-432E-A689-C74B40309BE2} [2012/07/12 01:51:27 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{7F5EA9A9-0835-4019-9BB3-67C919E4CAC0} [2012/07/12 01:51:15 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D6BCEC4E-EE57-4EDD-9376-41260776E833} [2012/07/12 01:51:04 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{068C80EB-AEBF-467B-9D70-B6BF8EA9A88A} [2012/07/12 01:50:52 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F521BE7C-3572-4BC0-8170-21464EF49435} [2012/07/11 01:18:22 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3B7E8832-F9FA-4230-990A-F4E7BEB16A44} [2012/07/11 01:18:06 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{639899F1-8AC6-48D8-A738-D2CB5D049DE6} [2012/07/11 01:17:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{4B18CA9F-1E40-4F56-847C-1B6C7C7461AF} [2012/07/11 01:17:21 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8D5406F5-6AF9-45AB-9E53-904EE9DCE212} [2012/07/09 10:24:05 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8E602C88-35A4-4FA1-8047-A218D2EB00B2} [2012/07/09 10:20:32 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{68EC4988-1AFF-4FE8-9A12-29C9A414B665} [2012/07/08 13:09:45 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{5C36FE7A-9C65-4557-A6C3-C9CB0215F9C1} [2012/07/08 13:06:15 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{167DC8BE-0DA1-44C1-A317-9AE22C2DEB2F} [2012/07/06 16:54:47 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2752002A-020C-4370-9952-0D35BC1E097E} [2012/07/06 16:54:35 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{CB7878E8-B89C-44EA-8760-96E3509236BC} [2012/07/06 16:51:05 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{FD1E4CCC-BE21-4F3A-8BBC-68E61928515B} [2012/07/04 19:54:53 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F67C5D17-9A03-40CC-869D-7ECACD80FEBA} [2012/07/04 19:54:42 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B99E705D-FDBE-4802-8D64-A62103F0A910} [2012/07/04 19:54:29 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{146E52FA-464E-4125-8A70-E413C94B4040} [2012/07/04 19:54:15 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{5E1C7867-BC3E-4E6A-B311-99039DEE44C5} ========== Files - Modified Within 60 Days ========== [2012/09/02 17:29:12 \| 000,009,920 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/09/02 17:29:12 \| 000,009,920 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/09/02 17:26:34 \| 000,598,528 \| ---- \| M] (OldTimer Tools) -- C:\Users\ime\Desktop\OTL.exe [2012/09/02 17:21:38 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/09/02 17:21:25 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012/09/02 17:21:23 \| 3104,722,944 \| -HS- \| M] () -- C:\hiberfil.sys [2012/09/02 17:17:33 \| 000,696,520 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/09/02 17:17:32 \| 000,073,416 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/09/02 14:25:07 \| 093,535,809 \| ---- \| M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm [2012/08/21 21:42:40 \| 000,194,171 \| ---- \| M] () -- C:\Windows\SysNative\drivers\AVG\iavichjg.avm [2012/08/17 20:40:41 \| 000,095,208 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012/08/17 20:40:38 \| 000,246,760 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012/08/17 20:40:38 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012/08/17 20:40:38 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012/08/17 20:40:37 \| 000,821,736 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\npdeployJava1.dll [2012/08/17 20:40:37 \| 000,746,984 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2012/08/16 21:45:05 \| 000,274,320 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/08/15 22:07:49 \| 000,001,945 \| ---- \| M] () -- C:\Windows\epplauncher.mif [2012/08/15 22:07:29 \| 000,744,900 \| ---- \| M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/08/15 22:07:29 \| 000,626,868 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012/08/15 22:07:29 \| 000,108,298 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012/08/15 22:03:55 \| 000,001,990 \| ---- \| M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2012/08/13 17:36:45 \| 000,726,444 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/07/19 08:43:54 \| 000,000,929 \| ---- \| M] () -- C:\Users\Public\Desktop\AVG 2012.lnk [2012/07/05 00:16:43 \| 000,073,216 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll [2012/07/05 00:13:27 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll [2012/07/04 23:14:34 \| 000,041,984 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll ========== Files Created - No Company Name ========== [2012/08/15 22:07:49 \| 000,001,945 \| ---- \| C] () -- C:\Windows\epplauncher.mif [2012/08/15 22:07:32 \| 000,001,879 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk [2012/08/15 22:07:29 \| 000,744,900 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011/03/03 13:52:21 \| 000,960,940 \| ---- \| C] () -- C:\Windows\SysWow64\igkrng600.bin [2011/03/03 13:52:20 \| 000,213,332 \| ---- \| C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011/03/03 13:52:18 \| 000,145,804 \| ---- \| C] () -- C:\Windows\SysWow64\igcompkrng600.bin ========== Custom Scans ========== < > < %SYSTEMDRIVE%\*.exe > < MD5 for: EXPLORER.EXE > [2011/02/26 08:23:14 \| 002,870,272 \| ---- \| M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe [2011/02/26 07:19:21 \| 002,616,320 \| ---- \| M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe [2009/07/14 03:14:20 \| 002,613,248 \| ---- \| M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2011/02/26 07:51:13 \| 002,614,784 \| ---- \| M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe [2010/07/17 21:26:04 \| 002,614,272 \| ---- \| M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2011/02/26 07:33:07 \| 002,614,784 \| ---- \| M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe [2011/02/25 08:19:30 \| 002,871,808 \| ---- \| M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe [2011/02/25 08:19:30 \| 002,871,808 \| ---- \| M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe [2011/02/26 08:14:34 \| 002,871,808 \| ---- \| M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe [2010/11/20 14:17:09 \| 002,616,320 \| ---- \| M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2010/02/04 12:49:48 \| 002,868,224 \| ---- \| M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2011/02/25 07:30:54 \| 002,616,320 \| ---- \| M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe [2011/02/25 07:30:54 \| 002,616,320 \| ---- \| M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe [2010/07/17 21:26:04 \| 002,870,272 \| ---- \| M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2010/02/04 12:49:48 \| 002,613,248 \| ---- \| M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2010/11/20 15:24:45 \| 002,872,320 \| ---- \| M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2010/07/17 21:26:04 \| 002,870,272 \| ---- \| M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2010/02/04 12:49:48 \| 002,613,248 \| ---- \| M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009/07/14 03:39:10 \| 002,868,224 \| ---- \| M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2010/07/17 21:26:04 \| 002,614,272 \| ---- \| M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe [2011/02/26 08:26:45 \| 002,870,784 \| ---- \| M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe [2010/02/04 12:49:48 \| 002,868,224 \| ---- \| M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe < MD5 for: SERVICES > [2009/06/10 23:00:26 \| 000,017,463 \| ---- \| M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services < MD5 for: SERVICES.EXE > [2009/07/14 03:39:37 \| 000,328,704 \| ---- \| M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe [2009/07/14 03:39:37 \| 000,328,704 \| ---- \| M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe < MD5 for: SERVICES.EXE.MUI > [2009/07/14 04:25:40 \| 000,017,408 \| ---- \| M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\SysNative\en-US\services.exe.mui [2009/07/14 04:25:40 \| 000,017,408 \| ---- \| M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui < MD5 for: SERVICES.LNK > [2009/07/14 06:54:05 \| 000,001,288 \| ---- \| M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk [2009/07/14 06:54:05 \| 000,001,288 \| ---- \| M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk < MD5 for: SERVICES.MOF > [2009/06/10 22:44:06 \| 000,002,866 \| ---- \| M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\SysNative\wbem\services.mof [2009/06/10 22:44:06 \| 000,002,866 \| ---- \| M] () MD5=26A11C895A7F0B6D32105EBE127D8500 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof < MD5 for: SERVICES.MSC > [2009/07/14 04:23:30 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\en-US\services.msc [2009/06/10 22:38:36 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysNative\services.msc [2009/07/14 04:08:50 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\en-US\services.msc [2009/06/10 23:21:09 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\SysWOW64\services.msc [2009/07/14 04:23:30 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc [2009/06/10 22:38:36 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc [2009/07/14 04:08:50 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc [2009/06/10 23:21:09 \| 000,092,745 \| ---- \| M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 -- C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc < MD5 for: SERVICES.PTXML > [2009/07/13 22:16:17 \| 000,001,061 \| ---- \| M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\SysNative\wdi\perftrack\Services.ptxml [2009/07/13 22:16:17 \| 000,001,061 \| ---- \| M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml < MD5 for: SERVICES.SBS > [2011/03/01 09:58:46 \| 000,034,818 \| ---- \| M] () MD5=62AFD4B2025CE6D4706B36F4C4808F9B -- C:\Program Files (x86)\Spybot - Search & Destroy\Includes\Services.sbs < MD5 for: SVCHOST.EXE > [2009/07/14 03:14:41 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe [2009/07/14 03:14:41 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe [2009/07/14 03:39:46 \| 000,027,136 \| ---- \| M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe [2009/07/14 03:39:46 \| 000,027,136 \| ---- \| M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe < MD5 for: USERINIT.EXE > [2010/11/20 14:17:48 \| 000,026,624 \| ---- \| M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe [2010/11/20 14:17:48 \| 000,026,624 \| ---- \| M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009/07/14 03:14:43 \| 000,026,112 \| ---- \| M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009/07/14 03:39:48 \| 000,030,208 \| ---- \| M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe [2010/11/20 15:25:24 \| 000,030,720 \| ---- \| M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe [2010/11/20 15:25:24 \| 000,030,720 \| ---- \| M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe < MD5 for: WINLOGON.EXE > [2010/11/20 15:25:30 \| 000,390,656 \| ---- \| M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe [2010/11/20 15:25:30 \| 000,390,656 \| ---- \| M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2009/07/14 03:39:52 \| 000,389,120 \| ---- \| M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2010/07/17 21:26:04 \| 000,389,632 \| ---- \| M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2010/07/17 21:26:04 \| 000,389,632 \| ---- \| M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < %systemdrive%\$Recycle.Bin\|@;true;true;true > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS /s > "DisplayName" = @%SystemRoot%\system32\qmgr.dll,-1000 "ImagePath" = %SystemRoot%\System32\svchost.exe -k netsvcs -- [2009/07/14 03:14:41 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) "Description" = @%SystemRoot%\system32\qmgr.dll,-1001 "ObjectName" = LocalSystem "ErrorControl" = 1 "Start" = 2 "DelayedAutoStart" = 1 "Type" = 32 "DependOnService" = RpcSsEventSystem [binary data] "ServiceSidType" = 1 "RequiredPrivileges" = [Binary data over 100 bytes] "FailureActions" = 80 51 01 00 00 00 00 00 00 00 00 00 03 00 00 00 14 00 00 00 01 00 00 00 60 EA 00 00 01 00 00 00 C0 D4 01 00 00 00 00 00 00 00 00 00 [binary data] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS\Parameters] "ServiceDll" = %SystemRoot%\System32\qmgr.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS\Performance] "Library" = bitsperf.dll -- [2010/11/20 14:18:07 \| 000,019,456 \| ---- \| M] (Microsoft Corporation) "Open" = PerfMon_Open "Collect" = PerfMon_Collect "Close" = PerfMon_Close "InstallType" = 1 "PerfIniFile" = bitsctrs.ini "First Counter" = 2156 "Last Counter" = 2172 "First Help" = 2157 "Last Help" = 2173 "Object List" = 2156 "PerfMMFileName" = Global\MMF_BITS_s [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BITS\Security] "Security" = [Binary data over 100 bytes] ========== Alternate Data Streams ========== @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:0B4227B4 < End of report > Drugi report (extras): mycity.rs/must-login.png

Profil

Sass Drake Poslao: 02 Sep 2012 18:34 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Korak 1 Imaš instalirana dva AV programa: AVG 2012 i Microsoft Security Essentials. Deinstaliraj jedan od njih kroz aplet Start -> Control Panel -> Programs and Features. Korak 2 Idi u Start -> Control Panel -> Programs and Features i deinstaliraj sljedeće programe ako ti ne trebaju: BS.Player ControlBar Korak 3 Ponovo pokreni program OTL dvoklikom na ikonu. U bijeli okvir prozora gdje piše Custom Scans/Fixes iskopirati sljedeći tekst: :OTL IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2237994 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=108298&babsrc=SP_ss&mntrId=acbd556c000000000000ec55f990b2f6 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2237994 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{B76E7A85-7322-428b-AB33-19A6A5FD1E73}: "URL" = http://www.bsplayer-search.com/search?q={searchTerms} [2012/07/26 20:32:10 \| 000,009,184 \| ---- \| M] () (No name found) -- C:\USERS\IME\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\JTESLU5R.DEFAULT\EXTENSIONS\{CDE38172-4160-4091-BF76-DE675198D659}.XPI O3:64bit: - HKLM\..\Toolbar: (BS.Player ControlBar) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files (x86)\BS.Player ControlBar\BSToolbar64.dll () O3 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. :commands [emptytemp] Klikni taster Run Fix; Izvještaj koji dobiješ iskopiraj ovde u poruci. Korak 4 Postavi mi novi OTL izvještaj. Da li i dalje imaš problem sa Facebbok nalogom?

Profil

Mario Ljubic Poslao: 02 Sep 2012 19:23 Idi na vrh
offline Mario Ljubic Novi MyCity građanin Pridružio: 02 Sep 2012 Poruke: 3	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Hvala na brzom odgovoru. Ispratio sam sve upute, evo izvjestaja nakon fixa: All processes killed ========== OTL ========== Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{A3BC75A2-1F87-4686-AA43-5347D756017C} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A3BC75A2-1F87-4686-AA43-5347D756017C}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope\| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. HKEY_USERS\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope\| /E : value set successfully! Registry key HKEY_USERS\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_USERS\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. Registry key HKEY_USERS\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Internet Explorer\SearchScopes\{B76E7A85-7322-428b-AB33-19A6A5FD1E73}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B76E7A85-7322-428b-AB33-19A6A5FD1E73}\ not found. C:\Users\ime\AppData\Roaming\Mozilla\Firefox\Profiles\jteslu5r.default\extensions\{cde38172-4160-4091-bf76-de675198d659}.xpi moved successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C688203-7EB3-4327-9995-1CB417BA23F9}\ deleted successfully. C:\Program Files (x86)\BS.Player ControlBar\BSToolbar64.dll moved successfully. Registry value HKEY_USERS\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: AppData User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56504 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: ime ->Temp folder emptied: 245257966 bytes ->Temporary Internet Files folder emptied: 717680411 bytes ->Java cache emptied: 79573 bytes ->FireFox cache emptied: 95544021 bytes ->Flash cache emptied: 2421 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 89380767 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50400 bytes RecycleBin emptied: 24630517 bytes Total Files Cleaned = 1,118.00 mb OTL by OldTimer - Version 3.2.59.1 log created on 09022012_190253 Files\Folders moved on Reboot... C:\Users\ime\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot... Novi scan: OTL logfile created on: 9/2/2012 7:16:55 PM - Run 2 OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\ime\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 \| Country: United States \| Language: ENU \| Date Format: M/d/yyyy 3.86 Gb Total Physical Memory \| 2.39 Gb Available Physical Memory \| 62.05% Memory free 7.71 Gb Paging File \| 5.97 Gb Available in Paging File \| 77.38% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 450.66 Gb Total Space \| 194.11 Gb Free Space \| 43.07% Space Free \| Partition Type: NTFS Computer Name: IME-PC \| User Name: ime \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: All users \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012/09/02 19:08:05 \| 000,917,984 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/09/02 17:26:34 \| 000,598,528 \| ---- \| M] (OldTimer Tools) -- C:\Users\ime\Desktop\OTL.exe PRC - [2012/09/02 17:17:33 \| 001,807,560 \| ---- \| M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe PRC - [2012/08/13 13:33:30 \| 003,064,000 \| ---- \| M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012/07/11 01:18:29 \| 001,107,552 \| ---- \| M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe PRC - [2012/07/11 01:17:43 \| 000,935,008 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe PRC - [2012/05/31 15:00:22 \| 000,445,624 \| ---- \| M] (Sony) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe PRC - [2012/04/30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe PRC - [2012/04/05 14:12:34 \| 002,587,008 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe PRC - [2012/03/12 22:25:06 \| 000,583,680 \| ---- \| M] (MyCity) -- C:\Program Files (x86)\MCShield\MCShieldRTM.exe PRC - [2012/02/14 13:53:38 \| 000,193,288 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe PRC - [2011/02/01 23:24:42 \| 002,656,280 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2011/02/01 23:24:40 \| 000,326,168 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010/09/14 04:32:32 \| 000,013,336 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010/09/14 04:32:30 \| 000,283,160 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010/04/27 04:09:52 \| 000,113,288 \| ---- \| M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009/01/27 00:31:16 \| 002,144,088 \| RHS- \| M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009/01/27 00:31:10 \| 001,153,368 \| ---- \| M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe ========== Modules (No Company Name) ========== MOD - [2012/09/02 19:08:04 \| 002,242,528 \| ---- \| M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012/09/02 17:17:32 \| 009,813,704 \| ---- \| M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll MOD - [2012/07/11 01:18:29 \| 001,107,552 \| ---- \| M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe MOD - [2012/07/11 01:17:44 \| 000,132,704 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll MOD - [2012/06/18 22:37:08 \| 000,475,136 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\09557e6c5a83a1cb68c7c50a841c8064\IAStorUtil.ni.dll MOD - [2012/06/18 22:17:15 \| 012,436,480 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll MOD - [2012/06/18 22:17:05 \| 001,591,808 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll MOD - [2012/05/24 11:50:32 \| 000,203,776 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll MOD - [2012/05/21 05:12:54 \| 000,014,336 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\220b0516e45e7f9bbf6a631490c1243a\IAStorCommon.ni.dll MOD - [2012/05/14 13:54:37 \| 000,771,584 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll MOD - [2012/05/14 13:53:54 \| 005,452,800 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll MOD - [2012/05/14 13:53:50 \| 000,971,264 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll MOD - [2012/05/14 13:53:36 \| 003,347,968 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll MOD - [2012/05/14 13:53:33 \| 007,967,232 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll MOD - [2012/05/14 13:49:16 \| 011,492,864 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll MOD - [2012/04/30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe MOD - [2012/04/30 11:57:42 \| 000,039,936 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll ========== Services (SafeList) ========== SRV:64bit: - [2010/09/23 03:10:10 \| 000,057,184 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:64bit: - [2009/07/14 03:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012/09/02 19:08:05 \| 000,114,144 \| ---- \| M] (Mozilla Foundation) [On_Demand \| Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/09/02 17:17:33 \| 000,250,568 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/08/13 13:33:30 \| 003,064,000 \| ---- \| M] (Skype Technologies S.A.) [Auto \| Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012/07/11 01:17:43 \| 000,935,008 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- (vToolbarUpdater11.2.0) SRV - [2012/06/08 04:12:14 \| 000,160,944 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012/02/14 13:53:38 \| 000,193,288 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2012/01/18 14:38:28 \| 000,155,320 \| ---- \| M] (Avanquest Software) [On_Demand \| Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011/03/31 11:47:27 \| 000,655,624 \| ---- \| M] (Acresso Software Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011/02/01 23:24:42 \| 002,656,280 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2011/02/01 23:24:40 \| 000,326,168 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010/09/14 04:32:32 \| 000,013,336 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2010/03/18 22:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/06/10 23:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012/04/19 13:50:26 \| 000,028,480 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA) DRV:64bit: - [2012/03/09 03:40:52 \| 000,048,488 \| ---- \| M] (Microsoft Corporation) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:64bit: - [2012/03/01 08:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012/02/22 14:25:32 \| 000,289,872 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64) DRV:64bit: - [2012/01/31 13:46:48 \| 000,036,944 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| Boot \| Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64) DRV:64bit: - [2011/12/23 22:32:14 \| 000,047,696 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64) DRV:64bit: - [2011/08/03 03:38:56 \| 000,051,712 \| ---- \| M] (Apple, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2011/03/11 08:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/03/11 08:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011/01/27 18:57:14 \| 012,273,408 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2011/01/21 03:15:30 \| 000,019,496 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp) DRV:64bit: - [2011/01/21 03:15:28 \| 000,067,624 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd) DRV:64bit: - [2011/01/20 05:28:26 \| 000,052,264 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa) DRV:64bit: - [2011/01/18 00:56:14 \| 000,412,712 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) DRV:64bit: - [2011/01/14 03:22:24 \| 000,085,544 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\bScsiSDa.sys -- (bScsiSDa) DRV:64bit: - [2010/11/20 15:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/20 13:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/11/20 11:37:42 \| 000,109,056 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2010/11/09 12:26:46 \| 002,377,216 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2010/10/20 02:34:26 \| 000,056,344 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2010/10/15 10:28:18 \| 000,317,440 \| ---- \| M] (Intel(R) Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:64bit: - [2010/09/30 07:00:06 \| 000,180,736 \| ---- \| M] (Renesas Electronics Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2010/09/30 07:00:06 \| 000,080,384 \| ---- \| M] (Renesas Electronics Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2010/09/14 04:24:26 \| 000,437,272 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010/07/29 15:30:48 \| 001,383,472 \| ---- \| M] (Synaptics Incorporated) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2009/07/14 03:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/14 03:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/14 03:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/06/10 22:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 22:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 22:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 22:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009/07/14 03:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = acer.msn.com IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = acer.msn.com IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = acer.msn.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = acer.msn.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = acer.msn.com IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = google.hr/ IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = isearch.avg.com/search?cid={69B0E6B3-31AD-4E1C-A539-E79DF5B108E6}&mid=1b38ec99e92747d1abb9cd3c4e01a905-f57556369dbda7f5483bb0cb77948f9416349358&lang=en&ds=AVG&pr=fr&d=2012-05-31 18:46:50&v=11.1.0.7&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://www.google.hr/" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2011/10/23 10:42:21 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files (x86)\AVG\AVG2012\Firefox\DoNotTrack\ [2012/07/04 03:00:55 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\11.1.0.12\ [2012/07/11 01:17:51 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/09/02 19:08:05 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/09/02 19:08:05 \| 000,000,000 \| ---D \| M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/06/01 05:26:29 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ime\AppData\Roaming\Mozilla\Extensions [2012/09/02 19:02:54 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ime\AppData\Roaming\Mozilla\Firefox\Profiles\jteslu5r.default\extensions [2012/08/18 01:02:24 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012/08/28 18:31:12 \| 000,000,000 \| ---D \| M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012/09/02 19:08:05 \| 000,266,720 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/07/11 01:18:29 \| 000,003,767 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml [2012/09/02 19:08:04 \| 000,002,465 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/09/02 19:08:04 \| 000,002,253 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml O1 HOSTS File: ([2009/06/10 23:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.) O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.) O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll () O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [HF_G_Jul] C:\Program Files (x86)\AVG Secure Search\HF_G_Jul.exe () O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [ROC_roc_dec12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 File not found O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000..\Run: [MCShield Monitor] C:\Program Files (x86)\MCShield\MCShieldRTM.exe (MyCity) O4 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000..\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony) O4 - HKU\S-1-5-21-1891961197-3043709513-3272304393-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O9:64bit: - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.) O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} java.sun.com/update/1.7.0/jinstall-1_7_0_06-windows-i586.cab (Java Plug-in 10.6.2) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.7.0_06) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{91BDA95A-5A38-43B5-B5A5-2ABF760076AD}: NameServer = 195.29.166.118,195.29.166.119 O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.) O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll () O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk ) O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart) O35:64bit: - HKLM\..comfile [open] -- "%1" % O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012/09/02 19:02:53 \| 000,000,000 \| ---D \| C] -- C:\_OTL [2012/09/02 18:43:45 \| 000,000,000 \| -HSD \| C] -- C:\Config.Msi [2012/09/02 17:26:32 \| 000,598,528 \| ---- \| C] (OldTimer Tools) -- C:\Users\ime\Desktop\OTL.exe [2012/09/02 14:21:34 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{34D731EC-F1E9-4A2D-9535-009BC3F09284} [2012/08/31 18:40:33 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F9B62427-0314-4D5C-A29F-B37BEACC923C} [2012/08/30 01:06:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F15A2826-5C85-4A5D-A172-D06D6BF777FE} [2012/08/29 10:48:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{CA1B1488-9AA7-4194-A7AB-3BC4D373305A} [2012/08/28 18:30:22 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{9D4B9CAE-97A4-402B-80B0-7CD1ACC23E48} [2012/08/27 17:24:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8AB2A0F6-D46D-4C2D-9C7C-00C689129489} [2012/08/27 00:25:11 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F0FDF350-D61A-4C0A-AB17-DDA365E58634} [2012/08/23 23:38:11 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{FE0C80A8-0512-4436-984A-C85251395023} [2012/08/23 23:38:00 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{6D046925-0B29-4D2E-9CEA-E4E245EDE436} [2012/08/22 17:03:06 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{70A7D72C-2908-452A-8A15-B63C67FD3356} [2012/08/22 16:59:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E56D6D70-17DF-4FAA-9FEB-6D6563A76CD9} [2012/08/21 01:29:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E350EFFB-A20F-473D-9368-177EE32111E1} [2012/08/20 13:29:27 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{56EB3F46-A3C9-46A3-8125-0EEB1FD83684} [2012/08/19 05:48:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{44B98356-0496-4B62-9FC7-D00DE570C779} [2012/08/18 09:45:24 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{04BFDCC4-28BF-46FD-9E9A-C164BC268B25} [2012/08/18 09:45:13 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{1FAAE20E-1F1E-43CB-9603-F13C6F1E6E47} [2012/08/18 09:45:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{784894B6-713A-4037-8828-0A39629B9C03} [2012/08/18 09:44:51 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{510EEDB6-6860-48BA-B0E9-CB6BB525337B} [2012/08/17 20:43:13 \| 000,246,760 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012/08/17 20:43:13 \| 000,174,056 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012/08/17 20:43:13 \| 000,174,056 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012/08/17 20:41:12 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2012/08/17 20:40:46 \| 000,095,208 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012/08/17 20:07:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{80BE4821-B793-494D-9E2B-7F35F1A8DE20} [2012/08/17 20:07:32 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B4370E9B-85DA-459C-A9FA-A9741312CD50} [2012/08/17 20:07:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D030FD1B-7DA1-4CD7-8D61-2A1ACAB21C06} [2012/08/17 20:07:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{D53AD302-5D7E-4D21-B696-78DEDD2B2046} [2012/08/16 21:46:43 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{32E71781-98BB-40E9-A049-2FF122BC02F8} [2012/08/16 21:46:30 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F968243F-8253-4F92-AEFA-4C08A268977C} [2012/08/16 21:46:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{9068BDE8-7A17-4056-9558-79AEBE5EC496} [2012/08/16 21:46:03 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{453FD03E-854F-47B3-AE0B-4C48674DC37B} [2012/08/16 00:33:43 \| 000,237,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012/08/16 00:33:43 \| 000,231,936 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012/08/16 00:33:43 \| 000,096,768 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012/08/16 00:33:43 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012/08/16 00:33:42 \| 000,176,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012/08/16 00:33:41 \| 001,427,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012/08/16 00:33:41 \| 000,248,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012/08/16 00:33:41 \| 000,173,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012/08/16 00:33:41 \| 000,142,848 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012/08/16 00:33:40 \| 002,312,704 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012/08/16 00:33:40 \| 001,494,528 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012/08/16 00:33:39 \| 000,816,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012/08/16 00:33:39 \| 000,717,824 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012/08/15 23:47:32 \| 000,503,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2012/08/15 23:47:26 \| 000,751,104 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2012/08/15 23:47:26 \| 000,492,032 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2012/08/15 23:47:26 \| 000,067,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\splwow64.exe [2012/08/15 23:47:25 \| 000,059,392 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll [2012/08/15 23:47:24 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll [2012/08/15 23:47:24 \| 000,041,984 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll [2012/08/15 23:47:22 \| 000,956,928 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2012/08/15 22:02:22 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{20C07A2D-A76A-4874-A5B5-CDC8E28FA017} [2012/08/15 22:02:11 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{7CAE9E8E-A0E3-464C-B91E-BD4330406C2B} [2012/08/15 22:01:59 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{AF2E21B0-AD64-4991-A32E-0F6A1AE18812} [2012/08/14 21:06:38 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{C69400CD-1293-4660-9010-50BF36ECD658} [2012/08/14 21:06:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{0A87C1A8-2876-4172-9D4A-DCC50B034A71} [2012/08/14 21:02:12 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{4C632EBF-DAE7-4D27-9F8C-6CCD4FF5C777} [2012/08/13 17:32:52 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{A94569AD-E3DE-49B7-BF70-A34D292AD787} [2012/08/13 17:32:36 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3625B110-CEA7-4293-A4A0-93AEADC25D62} [2012/08/13 17:32:23 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2DCE091B-B0C3-4AB8-92EA-6A72593BB17B} [2012/08/13 17:32:09 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{099CD79E-0A1E-43A6-A2EE-5B2BD7A8941C} [2012/08/10 18:56:01 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{995ECC82-A707-4302-B838-F7A38D56DC7F} [2012/08/10 18:55:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{8D317E8C-7339-4D4D-89B9-3C9FE75DCD6D} [2012/08/10 18:55:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{026CD0FB-72C5-4DE9-8B7F-E7620FDFB6D5} [2012/08/09 17:56:10 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{C4DFF62D-54E4-4882-9876-CDEAEFA1D1E1} [2012/08/09 17:55:55 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{3DEA3409-586D-4787-A34C-1AD35997BD3E} [2012/08/09 17:55:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2CEB3C52-6EED-4AE0-BEE0-90BEE1ABE9B4} [2012/08/08 10:16:40 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E131E375-6EBD-4101-BBD5-359199ED1466} [2012/08/08 10:16:29 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{64C217C6-DEA7-4695-8F45-5579C83345DC} [2012/08/08 10:16:18 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{AC93AB78-2491-454D-8C5E-8F05F0EEFC79} [2012/08/08 10:16:07 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{E3E42D10-0151-4F4D-9AB2-0D97E454472C} [2012/08/07 18:05:26 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{AD7255D7-3B8B-4131-92B8-087DB9F2864C} [2012/08/07 18:05:13 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{EE2C5798-0492-4B83-8606-A0A741BB1704} [2012/08/07 18:05:02 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{60C44AF2-C920-448D-B116-1BB6C1EBECB2} [2012/08/07 18:04:50 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2B7C0B32-EEC0-4163-BE2A-110CD4DA6491} [2012/08/07 15:10:28 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{974460BD-FB28-4840-BB3D-92B9398DF4F6} [2012/08/07 15:06:38 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{6137414D-CB6C-4B8A-A223-F8D3684888AA} [2012/08/06 22:58:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{F61B3291-F016-4D2B-B6F7-ABC9B5D2EB60} [2012/08/06 22:58:05 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{06639066-6F1A-4F72-81E7-1B41BBB4A78B} [2012/08/06 22:57:54 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2D1ABE8A-88DE-4D79-AF7A-E884C9C8514E} [2012/08/06 22:57:43 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{A5E90C1B-B21D-4372-B419-01AEC1CA1CD0} [2012/08/06 15:40:04 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{0F59B3F4-6601-4F6B-8E8B-3F53AC839450} [2012/08/06 15:39:54 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{2637AB52-9FCF-4583-B274-8CAA98AC561D} [2012/08/06 15:39:42 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{1BE46999-5963-471B-B097-B6931B59B63F} [2012/08/06 10:57:17 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{B1ABAB14-1B7F-4749-837C-761599548120} [2012/08/06 10:57:07 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{6FB15B6B-EFC1-4C3E-8427-FD26C1CF187C} [2012/08/06 10:56:56 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{FB7877A6-84F9-4102-B0D1-15CFDBFFD3E9} [2012/08/06 10:56:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{75CD2AA3-DE1C-4DDF-81BE-9A74BF97BAA8} [2012/08/05 19:34:30 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{39BC1BC4-056B-40AE-A31A-8566CCC98167} [2012/08/05 19:33:21 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{237202C7-E97B-4DA7-9B04-DDDD047809CA} [2012/08/05 19:29:51 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{97A6F903-CB51-4410-B222-7B140B2F1D4E} [2012/08/05 06:39:44 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{06A59195-A6F9-4524-B2E1-935C6B66B8AD} [2012/08/05 06:39:31 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{26CA46D6-F351-400C-9A7E-4478AD82C732} [2012/08/05 06:35:46 \| 000,000,000 \| ---D \| C] -- C:\Users\ime\AppData\Local\{34C3688D-0A09-43B4-ACCD-8F27F016CD7E} ========== Files - Modified Within 30 Days ========== [2012/09/02 19:13:42 \| 000,009,920 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/09/02 19:13:42 \| 000,009,920 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/09/02 19:06:00 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012/09/02 19:05:56 \| 3104,722,944 \| -HS- \| M] () -- C:\hiberfil.sys [2012/09/02 18:57:00 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/09/02 18:44:07 \| 000,001,945 \| ---- \| M] () -- C:\Windows\epplauncher.mif [2012/09/02 18:43:51 \| 000,624,740 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012/09/02 18:43:51 \| 000,107,270 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012/09/02 17:26:34 \| 000,598,528 \| ---- \| M] (OldTimer Tools) -- C:\Users\ime\Desktop\OTL.exe [2012/09/02 17:17:33 \| 000,696,520 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/09/02 17:17:32 \| 000,073,416 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/09/02 14:25:07 \| 093,535,809 \| ---- \| M] () -- C:\Windows\SysNative\drivers\AVG\incavi.avm [2012/08/21 21:42:40 \| 000,194,171 \| ---- \| M] () -- C:\Windows\SysNative\drivers\AVG\iavichjg.avm [2012/08/17 20:40:41 \| 000,095,208 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012/08/17 20:40:38 \| 000,246,760 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012/08/17 20:40:38 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012/08/17 20:40:38 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012/08/17 20:40:37 \| 000,821,736 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\npdeployJava1.dll [2012/08/17 20:40:37 \| 000,746,984 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2012/08/16 21:45:05 \| 000,274,320 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/08/15 22:07:29 \| 000,744,900 \| ---- \| M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/08/15 22:03:55 \| 000,001,990 \| ---- \| M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2012/08/13 17:36:45 \| 000,726,444 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI ========== Files Created - No Company Name ========== [2012/08/15 22:07:49 \| 000,001,945 \| ---- \| C] () -- C:\Windows\epplauncher.mif [2012/08/15 22:07:29 \| 000,744,900 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011/03/03 13:52:21 \| 000,960,940 \| ---- \| C] () -- C:\Windows\SysWow64\igkrng600.bin [2011/03/03 13:52:20 \| 000,213,332 \| ---- \| C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011/03/03 13:52:18 \| 000,145,804 \| ---- \| C] () -- C:\Windows\SysWow64\igcompkrng600.bin ========== Alternate Data Streams ========== @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:0B4227B4 < End of report > Zasad je sve u redu s facebookom, ali ionako je slao linkove s odredjenim vremenskim razmakom, a ne pri svakom loginu, pa ne mogu biti 100% siguran.

Profil

Sass Drake Poslao: 02 Sep 2012 20:33 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	1Ovo se svidja korisniku: ThePhilosopher Registruj se da bi pohvalio/la poruku! U postavljenom izvještaju nema više tragova aktivnog malware-a i problem koji si imao ne bi trebao opet da se pojavi. Ostaje ti još da uradiš sljedeće: Ponovo pokreni OTL i klikni na dugme CleanUp. Koristiš Adobe Reader 9.5 koji je zastarjela i kritična verzija tog programa zbog sigurnosnih propusta. Moj predlog da instaliraš najnoviju verziju (Reader X(10.1.4)) ili pređes na alternativu tipa Foxit Reader, Nitro PDF Reader, itd ...; Posjeti temu Testirajte da li vam je pretraživač ranjiv, pročitaj i isprati link koji stoji u njoj. I ubuduće pamet u glavu kad si na Internetu. http://www.mycity.rs/Zastita/Aplikacija-za-sigurno-surfovanje-Vas-mozak.html http://www.mycity.rs/Zastita/Facebook-malware.html Pozdrav...

Profil

Mario Ljubic Poslao: 06 Sep 2012 20:43 Idi na vrh
offline Mario Ljubic Novi MyCity građanin Pridružio: 02 Sep 2012 Poruke: 3	1Ovo se svidja korisniku: Sass Drake Registruj se da bi pohvalio/la poruku! Hvala puno na pomoći, mislim da sam sve sredio sada. Pazit ću na što klikam ubuduće. Lijepi pozdrav!

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Facebook virus

Ko je trenutno na forumu

Ukupno su 1131 korisnika na forumu :: 28 registrovanih, 5 sakrivenih i 1098 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: A.R.Chafee.Jr., aleksmajstor, bobomicek, BraneS, Bubimir, cenejac111, draganl, FOX, galerija, Griffon vulture, HrcAk47, Jeremiah, Kibice, Krusarac, mercedesamg, Metanoja, Mi lao shu, MiG-29M2, mikrimaus, mile23, milos.cbr, powSrb, tubular, voja64, W123, wolf431, zbazin, Čivi

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by