OTL logfile created on: 06/01/2014 10:34:18 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\benjamin1\Downloads
 Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
1014,18 Mb Total Physical Memory | 78,04 Mb Available Physical Memory | 7,69% Memory free
2,19 Gb Paging File | 0,72 Gb Available in Paging File | 32,98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,00 Gb Total Space | 65,53 Gb Free Space | 65,53% Space Free | Partition Type: NTFS
Drive D: | 183,07 Gb Total Space | 182,62 Gb Free Space | 99,75% Space Free | Partition Type: NTFS
 
Computer Name: BENJAMIN-PC | User Name: benjamin1 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Users\benjamin1\Downloads\OTL (1).exe (OldTimer Tools)
PRC - C:\Program Files\WinZipper\winzipersvc.exe (Taiwan Shui Mu Chih Ching Technology Limited.)
PRC - C:\ProgramData\WPM\wprotectmanager.exe (Cherished Technololgy LIMITED)
PRC - C:\Program Files\iSafe\iSafeTray.exe (Elex do Brasil Participações Ltda)
PRC - C:\Program Files\iSafe\iSafeSvc2.exe (Elex do Brasil Participações Ltda)
PRC - C:\Program Files\iSafe\iSafeSvc.exe (Elex do Brasil Participações Ltda)
PRC - C:\Users\benjamin1\AppData\Local\VNT\vntldr.exe (APN LLC.)
PRC - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - C:\Program Files\PricePeep\PricePeepUpdater.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files\Mobogenie\DaemonProcess.exe ()
PRC - C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Wajam\Updater\WajamUpdaterV3.exe (Wajam)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe (AsusTek Computer Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Asus\Eee Docking\Eee Docking.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe (ASUSTeK Computer Inc.)
PRC - C:\Windows\System32\AsusService.exe ()
PRC - C:\Program Files\ASUS\HotkeyService\HotkeyService.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files\ASUS\SHE\SuperHybridEngine.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
PRC - C:\Program Files\Elantech\ETDCtrlHelper.exe (ELAN Microelectronic Corp.)
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - C:\Program Files\iSafe\libpng.dll ()
MOD - C:\Program Files\PricePeep\PricePeepUpdater.exe ()
MOD - C:\Program Files\Mobogenie\DaemonProcess.exe ()
MOD - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
MOD - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
MOD - C:\Program Files\Google\Chrome\Application\31.0.1650.63\libglesv2.dll ()
MOD - C:\Program Files\Google\Chrome\Application\31.0.1650.63\libegl.dll ()
MOD - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\83da6d75c14988930b8b6b8550f7a900\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\29f3ae8d313e62b4daed1107ccd29f9f\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3f23090e5ae7d7f22182f74149e664c6\Microsoft.VisualBasic.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - (Software_update_m) -- C:\Program Files\Software\Update\SoftwareUpdate.exe /medsvc File not found
SRV - (Software_update) -- C:\Program Files\Software\Update\SoftwareUpdate.exe /svc File not found
SRV - (ca82e1a5) -- c:\progra~1\optimi~1\OptProCrash.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe File not found
SRV - (winzipersvc) -- C:\Program Files\WinZipper\winzipersvc.exe (Taiwan Shui Mu Chih Ching Technology Limited.)
SRV - (Wpm) -- C:\ProgramData\WPM\wprotectmanager.exe (Cherished Technololgy LIMITED)
SRV - (iSafeService) -- C:\Program Files\iSafe\iSafeSvc.exe (Elex do Brasil Participações Ltda)
SRV - (APNMCP) -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirWebService) -- C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (WajamUpdaterV3) -- C:\Program Files\Wajam\Updater\WajamUpdaterV3.exe (Wajam)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (AsusService) -- C:\Windows\System32\AsusService.exe ()
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (catchme) -- C:\Users\benjamin\AppData\Local\Temp\catchme.sys File not found
DRV - (btwrchid) -- C:\windows\system32\drivers\btwrchid.sys File not found
DRV - (btwl2cap) -- system32\DRIVERS\btwl2cap.sys File not found
DRV - (btwavdt) -- C:\windows\system32\drivers\btwavdt.sys File not found
DRV - (btwaudio) -- system32\drivers\btwaudio.sys File not found
DRV - (iSafeNetFilter) -- C:\Program Files\iSafe\iSafeNetFilter.sys (Elex do Brasil Participações Ltda)
DRV - (iSafeKrnl) -- C:\Program Files\iSafe\iSafeKrnl.sys (Elex do Brasil Participações Ltda)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avnetflt) -- C:\Windows\System32\drivers\avnetflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (TrueSight) -- C:\Windows\System32\drivers\TrueSight.sys ()
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (L1C) -- C:\Windows\System32\drivers\L1C62x86.sys (Atheros Communications, Inc.)
DRV - (AsUpIO) -- C:\Windows\System32\drivers\AsUpIO.sys ()
DRV - (AsIO) -- C:\Windows\System32\drivers\AsIO.sys ()
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (kbfiltr) -- C:\Windows\System32\drivers\kbfiltr.sys ( )
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (btusbflt) -- C:\Windows\System32\drivers\btusbflt.sys (Broadcom Corporation.)
DRV - (XUIF) -- C:\Windows\System32\drivers\x10ufx2.sys (X10 Wireless Technology, Inc.)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nationzoom.com/web/?type=ds&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nationzoom.com/web/?type=ds&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB&q={searchTerms}
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.nationzoom.com/web/?type=ds&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB&q={searchTerms}
IE - HKLM\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0101&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzz0A0A0C0DyDzyyByD0EtN0D0Tzu0CyBtAyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1390853743&ir=
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nationzoom.com/?type=hp&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nationzoom.com/?type=hp&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB
IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.nationzoom.com/web/?type=ds&ts=1388871328&from=adks&uid=ST9320325AS_S2W3VJHBXXXXS2W3VJHB&q={searchTerms}
IE - HKCU\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0101&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzz0A0A0C0DyDzyyByD0EtN0D0Tzu0CyBtAyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1390853743&ir=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.Software.com/Software Update;version=3: C:\Program Files\Software\Update\1.3.25.0\npSoftwareUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.Software.com/Software Update;version=9: C:\Program Files\Software\Update\1.3.25.0\npSoftwareUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\benjamin1\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll File not found
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\benjamin1\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
 
[2012/09/14 17:45:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - Extension: No name found = C:\Users\benjamin1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\
CHR - Extension: No name found = C:\Users\benjamin1\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.2.0.7_0\
CHR - Extension: No name found = C:\Users\benjamin1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa\1.6_0\
 
O1 HOSTS File: ([2014/01/03 20:14:55 | 000,000,074 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 54.204.28.26	nikdaiaidiiiogaidkkekcmokcgcdeac
O2 - BHO: (Avira SearchFree Toolbar) - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
O2 - BHO: (Jump Flip) - {6db9fdfe-b718-4962-be0c-0a5fce7f7f7b} - C:\Program Files\Jump Flip\JumpFlipbho.dll File not found
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Discount Dragon BHO) - {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} - C:\Program Files\Discount Dragon\FrameworkBHO.dll ()
O2 - BHO: (mysearchdial Helper Object) - {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} - C:\Program Files\Mysearchdial\1.8.21.0\bh\mysearchdial.dll File not found
O2 - BHO: (PricePeep) - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Program Files\PricePeep\pricepeep.dll File not found
O3 - HKLM\..\Toolbar: (mysearchdial Toolbar) - {3004627E-F8E9-4E8B-909D-316753CBA923} - C:\Program Files\Mysearchdial\1.8.21.0\mysearchdialTlbr.dll File not found
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe ()
O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [VNT] C:\Program Files\VNT\vntldr.exe (APN LLC.)
O4 - HKCU..\Run: [Facebook Update] C:\Users\benjamin1\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [msnmsgr] ~"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background File not found
O4 - HKCU..\Run: [NextLive] C:\Users\benjamin1\AppData\Roaming\newnext.me\nengine.dll (NewNextDotMe)
O4 - HKLM..\RunOnce: [Discount Dragon-repairJob] C:\Users\benjamin1\AppData\Local\Discount Dragon\repair.js  ()
O4 - Startup: C:\Users\benjamin1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk =  File not found
O4 - Startup: C:\Users\benjamin1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PricePeepUpdater.lnk = C:\Program Files\PricePeep\PricePeepUpdater.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\System32\GPhotos.scr (Google Inc.)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 10.45.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{740FD51A-F1C5-4B48-9985-B8B942C875C1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C1A112FE-274C-452D-81AB-340806B3619C}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
MsConfig - StartUpReg: [b]Facebook Update[/b] - hkey= - key= - C:\Users\benjamin\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= -  File not found
MsConfig - State: "startup" - 2
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
Drivers32: msacm.l3acm - C:\windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\windows\System32\ff_vfw.dll ()
Drivers32: VIDC.LAGS - C:\windows\System32\lagarith.dll ( )
Drivers32: vidc.XVID - C:\windows\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\windows\System32\DivX.dll (DivX, Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2030/01/01 13:13:50 | 000,000,000 | ---D | C] -- C:\Boot
[2014/01/05 18:04:35 | 000,000,000 | ---D | C] -- C:\windows\ERUNT
[2014/01/05 12:49:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
[2014/01/05 12:49:38 | 000,000,000 | ---D | C] -- C:\Program Files\Plus-HD-5.0
[2014/01/05 12:49:27 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow
[2014/01/04 22:43:13 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\eCyber
[2014/01/04 22:41:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
[2014/01/04 22:41:27 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\iSafe
[2014/01/04 22:41:27 | 000,000,000 | ---D | C] -- C:\Program Files\iSafe
[2014/01/04 22:41:07 | 000,000,000 | ---D | C] -- C:\Program Files\Optimizer Pro
[2014/01/04 22:41:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
[2014/01/04 22:40:56 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\WinZipper
[2014/01/04 22:40:56 | 000,000,000 | ---D | C] -- C:\Program Files\WinZipper
[2014/01/04 22:40:14 | 000,000,000 | ---D | C] -- C:\Program Files\PricePeep
[2014/01/04 22:38:19 | 000,000,000 | ---D | C] -- C:\Program Files\Wajam
[2014/01/04 22:37:35 | 000,000,000 | ---D | C] -- C:\ProgramData\BoxUpdChk
[2014/01/04 22:37:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\337
[2014/01/04 22:36:26 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM
[2014/01/04 22:29:52 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\DivX
[2014/01/04 22:29:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
[2014/01/04 22:28:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2014/01/04 22:27:41 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\Documents\Mobogenie
[2014/01/04 22:27:41 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\Mobogenie
[2014/01/04 22:26:31 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
[2014/01/04 22:24:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
[2014/01/04 22:24:19 | 000,000,000 | ---D | C] -- C:\Program Files\Xvid
[2014/01/04 22:24:15 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2014/01/04 22:23:43 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
[2014/01/04 22:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
[2014/01/04 22:23:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DirectVobSub
[2014/01/04 22:23:25 | 000,000,000 | ---D | C] -- C:\Program Files\Lame For Audacity
[2014/01/04 22:23:25 | 000,000,000 | ---D | C] -- C:\Program Files\DirectVobSub
[2014/01/04 22:23:16 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
[2014/01/04 22:23:16 | 000,000,000 | ---D | C] -- C:\Program Files\Haali
[2014/01/04 22:23:15 | 000,000,000 | ---D | C] -- C:\Program Files\DSP-worx
[2014/01/04 22:23:14 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX
[2014/01/04 22:23:11 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\LavFilters
[2014/01/04 22:23:11 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\CDXReader
[2014/01/04 22:23:07 | 000,000,000 | ---D | C] -- C:\Program Files\OpenSource Flash Video Splitter
[2014/01/04 22:22:07 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\DigitalSites
[2014/01/04 14:31:25 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\VNT
[2014/01/04 14:31:07 | 000,000,000 | ---D | C] -- C:\Program Files\VNT
[2014/01/04 14:31:04 | 000,000,000 | ---D | C] -- C:\ProgramData\AskPartnerNetwork
[2014/01/04 14:31:04 | 000,000,000 | ---D | C] -- C:\Program Files\AskPartnerNetwork
[2014/01/04 14:29:21 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\Avira
[2014/01/04 14:26:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2014/01/04 14:26:32 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\windows\System32\drivers\ssmdrv.sys
[2014/01/04 14:26:30 | 000,069,240 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avnetflt.sys
[2014/01/04 14:26:29 | 000,135,648 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avipbb.sys
[2014/01/04 14:26:29 | 000,090,400 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avgntflt.sys
[2014/01/04 14:26:29 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avkmgr.sys
[2014/01/04 14:26:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2014/01/04 14:26:19 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2014/01/04 13:35:39 | 000,066,752 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswstm.sys.1388838976
[2013/12/29 19:02:28 | 000,000,000 | ---D | C] -- C:\Program Files\predm
[2013/12/29 19:01:23 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\BenchUpdater
[2013/12/29 19:01:13 | 000,000,000 | ---D | C] -- C:\Program Files\Discount Dragon
[2013/12/29 19:00:55 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\Discount Dragon
[2013/12/28 18:30:07 | 000,000,000 | ---D | C] -- C:\Program Files\Uninstaller
[2013/12/28 18:29:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPlayer
[2013/12/28 18:22:08 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\.android
[2013/12/28 18:22:00 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\cache
[2013/12/28 18:21:48 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Roaming\newnext.me
[2013/12/28 18:21:35 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\genienext
[2013/12/28 18:20:01 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2013/12/28 18:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\VideoPlayer
[2013/12/28 18:19:15 | 000,000,000 | ---D | C] -- C:\Program Files\Feven 1.7
[2013/12/28 18:18:58 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\Programs
[2013/12/28 13:41:35 | 000,000,000 | ---D | C] -- C:\Users\benjamin1\AppData\Local\Unity
[2013/12/18 07:11:52 | 000,354,656 | ---- | C] (DivX, Inc.) -- C:\windows\System32\DivXControlPanelApplet.cpl
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014/01/06 10:53:04 | 000,001,060 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/06 10:48:03 | 000,000,306 | ---- | M] () -- C:\windows\tasks\Digital Sites.job
[2014/01/06 10:44:00 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014/01/06 10:41:00 | 000,000,912 | ---- | M] () -- C:\windows\tasks\SoftwareUpdateTaskMachineUA.job
[2014/01/06 10:26:19 | 002,634,940 | ---- | M] () -- C:\windows\System32\perfh00C.dat
[2014/01/06 10:26:19 | 001,254,158 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2014/01/06 10:26:19 | 000,811,030 | ---- | M] () -- C:\windows\System32\perfc00C.dat
[2014/01/06 10:26:19 | 000,690,854 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2014/01/06 10:25:32 | 000,001,960 | ---- | M] () -- C:\windows\tasks\Feven 1.7-chromeinstaller.job
[2014/01/06 10:23:00 | 000,000,306 | ---- | M] () -- C:\windows\tasks\MySearchDial.job
[2014/01/06 10:20:31 | 000,002,002 | ---- | M] () -- C:\windows\tasks\Feven 1.7-firefoxinstaller.job
[2014/01/06 10:20:31 | 000,001,330 | ---- | M] () -- C:\windows\tasks\Feven 1.7-updater.job
[2014/01/06 10:20:29 | 000,000,908 | ---- | M] () -- C:\windows\tasks\SoftwareUpdateTaskMachineCore.job
[2014/01/06 10:20:28 | 000,001,232 | ---- | M] () -- C:\windows\tasks\Feven 1.7-codedownloader.job
[2014/01/06 10:20:28 | 000,001,132 | ---- | M] () -- C:\windows\tasks\Feven 1.7-enabler.job
[2014/01/06 10:19:16 | 000,000,340 | ---- | M] () -- C:\windows\tasks\bench-sys.job
[2014/01/06 10:17:39 | 000,000,944 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2324675793-2743908109-805231890-1001UA.job
[2014/01/06 10:17:39 | 000,000,940 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2324675793-2743908109-805231890-1000UA.job
[2014/01/06 10:17:39 | 000,000,340 | ---- | M] () -- C:\windows\tasks\bench-S-1-5-21-2324675793-2743908109-805231890-1001.job
[2014/01/06 10:15:59 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2014/01/05 20:50:34 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/01/05 20:50:34 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/01/05 20:41:13 | 797,581,312 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/05 17:55:25 | 000,000,922 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2324675793-2743908109-805231890-1001Core.job
[2014/01/05 17:37:14 | 000,300,392 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2014/01/05 13:12:13 | 000,001,002 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2014/01/05 12:49:23 | 000,003,086 | ---- | M] () -- C:\windows\unins000.dat
[2014/01/05 12:48:59 | 000,715,038 | ---- | M] () -- C:\windows\unins000.exe
[2014/01/05 11:31:47 | 000,000,152 | ---- | M] () -- C:\Users\benjamin1\AppData\Roaming\WB.CFG
[2014/01/05 11:30:06 | 000,000,005 | ---- | M] () -- C:\Users\benjamin1\AppData\Roaming\WBPU-TTL.DAT
[2014/01/04 22:40:19 | 000,001,048 | ---- | M] () -- C:\Users\benjamin1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PricePeepUpdater.lnk
[2014/01/04 22:35:30 | 000,001,350 | ---- | M] () -- C:\Users\benjamin1\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2014/01/04 22:22:23 | 000,351,124 | ---- | M] () -- C:\Users\benjamin1\AppData\Local\mysearchdial-speeddial.crx
[2014/01/04 18:07:42 | 000,259,917 | ---- | M] () -- C:\Users\benjamin1\Documents\dino 597489.odt
[2014/01/04 15:53:02 | 000,000,918 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2324675793-2743908109-805231890-1000Core.job
[2014/01/04 13:35:29 | 000,066,752 | ---- | M] (AVAST Software) -- C:\windows\System32\drivers\aswstm.sys.1388838976
[2014/01/03 20:15:08 | 000,000,290 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2014/01/03 20:14:55 | 000,000,074 | ---- | M] () -- C:\windows\System32\drivers\etc\hosts
[2013/12/29 16:54:15 | 000,007,604 | ---- | M] () -- C:\Users\benjamin1\AppData\Local\Resmon.ResmonCfg
[2013/12/28 18:58:21 | 000,002,577 | ---- | M] () -- C:\windows\System32\config.nt
[2013/12/18 07:11:52 | 000,354,656 | ---- | M] (DivX, Inc.) -- C:\windows\System32\DivXControlPanelApplet.cpl
[2013/12/13 15:03:37 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\windows\System32\drivers\ssmdrv.sys
[2013/12/13 15:03:29 | 000,069,240 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avnetflt.sys
[2013/12/13 15:03:28 | 000,135,648 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avipbb.sys
[2013/12/13 15:03:28 | 000,090,400 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avgntflt.sys
[2013/12/13 15:03:28 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\windows\System32\drivers\avkmgr.sys
[2013/12/08 10:15:59 | 000,001,054 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore1cef3f61bc41261.job
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2030/01/01 13:13:51 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2014/01/05 12:51:56 | 000,153,088 | ---- | C] () -- C:\windows\System32\xvid.ax
[2014/01/05 12:51:55 | 000,645,632 | ---- | C] () -- C:\windows\System32\xvidcore.dll
[2014/01/05 12:51:55 | 000,240,640 | ---- | C] () -- C:\windows\System32\xvidvfw.dll
[2014/01/05 12:49:49 | 000,079,360 | ---- | C] () -- C:\windows\System32\ff_vfw.dll
[2014/01/05 12:49:19 | 000,715,038 | ---- | C] () -- C:\windows\unins000.exe
[2014/01/05 11:30:06 | 000,000,005 | ---- | C] () -- C:\Users\benjamin1\AppData\Roaming\WBPU-TTL.DAT
[2014/01/05 11:30:05 | 000,000,152 | ---- | C] () -- C:\Users\benjamin1\AppData\Roaming\WB.CFG
[2014/01/04 22:40:19 | 000,001,048 | ---- | C] () -- C:\Users\benjamin1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PricePeepUpdater.lnk
[2014/01/04 22:36:43 | 000,000,912 | ---- | C] () -- C:\windows\tasks\SoftwareUpdateTaskMachineUA.job
[2014/01/04 22:36:41 | 000,000,908 | ---- | C] () -- C:\windows\tasks\SoftwareUpdateTaskMachineCore.job
[2014/01/04 22:23:53 | 000,000,306 | ---- | C] () -- C:\windows\tasks\MySearchDial.job
[2014/01/04 22:23:29 | 000,351,124 | ---- | C] () -- C:\Users\benjamin1\AppData\Local\mysearchdial-speeddial.crx
[2014/01/04 22:23:26 | 000,178,688 | ---- | C] () -- C:\windows\System32\unrar.dll
[2014/01/04 22:23:07 | 000,216,064 | ---- | C] ( ) -- C:\windows\System32\lagarith.dll
[2014/01/04 22:23:05 | 000,003,086 | ---- | C] () -- C:\windows\unins000.dat
[2014/01/04 22:22:14 | 000,000,306 | ---- | C] () -- C:\windows\tasks\Digital Sites.job
[2014/01/03 20:15:07 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014/01/03 20:14:46 | 000,000,340 | ---- | C] () -- C:\windows\tasks\bench-S-1-5-21-2324675793-2743908109-805231890-1001.job
[2014/01/03 20:14:43 | 000,000,340 | ---- | C] () -- C:\windows\tasks\bench-sys.job
[2014/01/02 21:00:08 | 000,259,917 | ---- | C] () -- C:\Users\benjamin1\Documents\dino 597489.odt
[2013/12/29 16:54:15 | 000,007,604 | ---- | C] () -- C:\Users\benjamin1\AppData\Local\Resmon.ResmonCfg
[2013/12/28 18:20:53 | 000,001,330 | ---- | C] () -- C:\windows\tasks\Feven 1.7-updater.job
[2013/12/28 18:20:42 | 000,001,132 | ---- | C] () -- C:\windows\tasks\Feven 1.7-enabler.job
[2013/12/28 18:20:15 | 000,001,232 | ---- | C] () -- C:\windows\tasks\Feven 1.7-codedownloader.job
[2013/12/28 18:19:47 | 000,002,002 | ---- | C] () -- C:\windows\tasks\Feven 1.7-firefoxinstaller.job
[2013/12/28 18:19:22 | 000,001,960 | ---- | C] () -- C:\windows\tasks\Feven 1.7-chromeinstaller.job
[2013/12/08 10:15:59 | 000,001,054 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore1cef3f61bc41261.job
[2013/06/27 18:16:22 | 000,027,905 | ---- | C] () -- C:\Users\benjamin1\AppData\Roaming\UserTile.png
[2013/03/31 13:18:27 | 000,015,616 | ---- | C] () -- C:\windows\System32\drivers\TrueSight.sys
[2013/01/05 14:14:31 | 000,001,306 | ---- | C] () -- C:\Users\benjamin1\Norton Security Scan.lnk
[2012/01/17 21:19:22 | 000,003,584 | ---- | C] () -- C:\Users\benjamin1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/19 16:44:40 | 000,001,302 | RHS- | C] () -- C:\Users\benjamin1\ntuser.pol
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 13:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[1 C:\windows\system32\*.tmp files -> C:\windows\system32\*.tmp -> ]
 
[color=#A23BEC]< %systemroot%\system32\drivers\​*.sys /lockedfiles >[/color]
 
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile
 
[color=#A23BEC]< %appdata%\*. >[/color]
[2011/12/19 16:45:09 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Adobe
[2011/04/02 04:05:40 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\ASUS WebStorage
[2014/01/04 14:29:21 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Avira
[2014/01/04 22:23:28 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\CDXReader
[2012/12/21 21:43:39 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1
[2014/01/04 22:22:07 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\DigitalSites
[2014/01/04 22:30:29 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\DivX
[2011/04/02 03:51:42 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\E-Cam
[2014/01/04 22:43:13 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\eCyber
[2012/01/07 11:50:34 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Google
[2013/05/11 09:49:46 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Identities
[2011/04/02 03:41:24 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\InstallShield
[2014/01/06 11:16:19 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\iSafe
[2014/01/04 22:23:34 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\LavFilters
[2011/04/02 03:52:54 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Macromedia
[2013/12/02 15:45:10 | 000,000,000 | --SD | M] -- C:\Users\benjamin1\AppData\Roaming\Microsoft
[2014/01/06 10:16:17 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\newnext.me
[2013/05/09 17:54:41 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Notepad++
[2013/10/31 11:36:39 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\OpenOffice
[2012/01/08 21:27:28 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\OpenOffice.org
[2013/05/11 13:36:43 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\PhotoFiltre Studio X
[2013/06/03 21:22:15 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Skype
[2013/04/23 20:47:55 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\vlc
[2012/01/24 21:37:34 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\Windows Live Writer
[2014/01/04 22:40:56 | 000,000,000 | ---D | M] -- C:\Users\benjamin1\AppData\Roaming\WinZipper
 
[color=#A23BEC]< %appdata%\*.exe /s >[/color]
[2013/04/12 15:10:43 | 000,108,544 | ---- | M] () -- C:\Users\benjamin1\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe
[2013/05/30 13:26:40 | 000,202,752 | ---- | M] () -- C:\Users\benjamin1\AppData\Roaming\LavFilters\UltimateCodec.exe
 
[color=#A23BEC]< %systemdrive%\*. >[/color]
[2013/04/04 10:57:08 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2014/01/04 21:20:59 | 000,000,000 | ---D | M] -- C:\AdwCleaner
[2013/09/05 11:21:33 | 000,000,000 | ---D | M] -- C:\ASUS WebStorage
[2012/02/09 14:18:25 | 000,000,000 | ---D | M] -- C:\AsusVibeData
[2030/01/01 13:13:51 | 000,000,000 | ---D | M] -- C:\Boot
[2014/01/04 22:37:37 | 000,000,000 | ---D | M] -- C:\Config.Msi
[2009/07/14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012/06/11 16:45:44 | 000,000,000 | ---D | M] -- C:\found.000
[2012/07/24 15:07:48 | 000,000,000 | ---D | M] -- C:\found.001
[2011/12/25 13:06:47 | 000,000,000 | ---D | M] -- C:\interdi !!
[2009/07/14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2014/01/05 20:51:09 | 000,000,000 | R--D | M] -- C:\Program Files
[2014/01/05 20:49:34 | 000,000,000 | ---D | M] -- C:\ProgramData
[2013/04/04 14:59:16 | 000,000,000 | ---D | M] -- C:\Qoobox
[2011/12/19 16:15:43 | 000,000,000 | ---D | M] -- C:\Recovery
[2014/01/06 10:45:06 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011/12/19 16:44:34 | 000,000,000 | R--D | M] -- C:\Users
[2014/01/05 18:04:35 | 000,000,000 | ---D | M] -- C:\Windows
[2013/03/30 20:40:37 | 000,000,000 | ---D | M] -- C:\_OTL
 
[color=#A23BEC]< %systemdrive%\*.exe >[/color]
 
[color=#A23BEC]< %programfiles%\*. >[/color]
[2013/06/21 18:15:14 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2014/01/04 14:31:04 | 000,000,000 | ---D | M] -- C:\Program Files\AskPartnerNetwork
[2012/12/13 17:24:15 | 000,000,000 | ---D | M] -- C:\Program Files\Asus
[2013/01/08 19:03:40 | 000,000,000 | ---D | M] -- C:\Program Files\ATELIERS
[2011/04/02 03:42:19 | 000,000,000 | ---D | M] -- C:\Program Files\Atheros
[2014/01/04 14:26:19 | 000,000,000 | ---D | M] -- C:\Program Files\Avira
[2011/04/02 03:43:48 | 000,000,000 | ---D | M] -- C:\Program Files\Cisco
[2014/01/04 22:37:14 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2011/04/02 03:44:34 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX
[2014/01/05 12:50:20 | 000,000,000 | ---D | M] -- C:\Program Files\DirectVobSub
[2014/01/03 20:15:07 | 000,000,000 | ---D | M] -- C:\Program Files\Discount Dragon
[2014/01/04 22:31:41 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
[2014/01/04 22:23:15 | 000,000,000 | ---D | M] -- C:\Program Files\DSP-worx
[2012/01/29 10:51:13 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2011/04/02 03:51:44 | 000,000,000 | ---D | M] -- C:\Program Files\E-Cam
[2011/12/19 16:20:18 | 000,000,000 | ---D | M] -- C:\Program Files\Elantech
[2014/01/03 19:50:55 | 000,000,000 | ---D | M] -- C:\Program Files\Feven 1.7
[2014/01/05 12:49:56 | 000,000,000 | ---D | M] -- C:\Program Files\ffdshow
[2013/10/29 20:39:16 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2014/01/04 22:23:16 | 000,000,000 | ---D | M] -- C:\Program Files\Haali
[2012/12/12 19:08:58 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2011/04/02 03:41:28 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2014/01/03 19:50:02 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2014/01/05 20:46:14 | 000,000,000 | ---D | M] -- C:\Program Files\iSafe
[2013/10/20 13:42:25 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2014/01/05 12:49:39 | 000,000,000 | ---D | M] -- C:\Program Files\Lame For Audacity
[2012/12/12 19:04:54 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2009/07/14 05:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2011/04/02 04:02:14 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2013/10/12 09:56:30 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2011/12/26 10:38:06 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2014/01/04 22:57:49 | 000,000,000 | ---D | M] -- C:\Program Files\Mobogenie
[2013/09/01 15:26:12 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2009/07/14 05:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2013/05/09 14:38:22 | 000,000,000 | ---D | M] -- C:\Program Files\Notepad++
[2013/10/31 11:23:59 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice 4
[2013/07/27 18:09:33 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice.org 3
[2014/01/04 22:23:08 | 000,000,000 | ---D | M] -- C:\Program Files\OpenSource Flash Video Splitter
[2014/01/05 20:51:05 | 000,000,000 | ---D | M] -- C:\Program Files\Optimizer Pro
[2012/08/02 12:49:50 | 000,000,000 | ---D | M] -- C:\Program Files\Oracle
[2014/01/05 12:51:53 | 000,000,000 | ---D | M] -- C:\Program Files\Plus-HD-5.0
[2013/12/29 19:02:28 | 000,000,000 | ---D | M] -- C:\Program Files\predm
[2014/01/05 20:51:06 | 000,000,000 | ---D | M] -- C:\Program Files\PricePeep
[2011/04/02 03:42:53 | 000,000,000 | ---D | M] -- C:\Program Files\Ralink
[2011/12/19 16:19:14 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2011/04/02 03:43:36 | 000,000,000 | ---D | M] -- C:\Program Files\REALTEK PCIE Wireless LAN Driver
[2009/07/14 05:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2012/09/06 19:22:22 | 000,000,000 | ---D | M] -- C:\Program Files\Super macro
[2011/12/19 16:20:02 | 000,000,000 | -H-D | M] -- C:\Program Files\Temp
[2011/04/02 04:09:14 | 000,000,000 | ---D | M] -- C:\Program Files\Times Reader
[2014/01/04 21:20:40 | 000,000,000 | ---D | M] -- C:\Program Files\Uniblue
[2009/07/14 05:53:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2014/01/03 19:49:34 | 000,000,000 | ---D | M] -- C:\Program Files\Uninstaller
[2012/10/19 16:54:19 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2013/12/28 18:29:42 | 000,000,000 | ---D | M] -- C:\Program Files\VideoPlayer
[2014/01/04 14:31:07 | 000,000,000 | ---D | M] -- C:\Program Files\VNT
[2014/01/05 20:51:11 | 000,000,000 | ---D | M] -- C:\Program Files\Wajam
[2013/07/14 11:49:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2013/07/27 16:23:41 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2012/01/29 10:51:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2014/01/03 19:50:02 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2009/07/14 05:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2012/01/29 10:51:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2011/02/11 12:14:27 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2012/01/29 10:51:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2014/01/05 20:44:32 | 000,000,000 | ---D | M] -- C:\Program Files\WinZipper
[2014/01/05 12:51:36 | 000,000,000 | ---D | M] -- C:\Program Files\Xvid
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2011/02/26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2011/02/26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 13:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\erdnt\cache\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
 
[color=#A23BEC]< MD5 for: NETLOGON.DLL  >[/color]
[2010/11/20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\erdnt\cache\netlogon.dll
[2010/11/20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010/11/20 13:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll
[2009/07/14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
 
[color=#A23BEC]< MD5 for: USERINIT.EXE  >[/color]
[2010/11/20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\erdnt\cache\userinit.exe
[2010/11/20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 13:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2010/11/20 13:17:56 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\erdnt\cache\winlogon.exe
[2010/11/20 13:17:56 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe
[2010/11/20 13:17:56 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 132 bytes -> C:\ProgramData\Temp:373E1720

< End of report >