OTL logfile created on: 27.6.2010 6:39:45 - Run 1 OTL by OldTimer - Version 3.2.7.0 Folder = C:\Users\ASUS\Desktop 64bit- Ultimate Edition - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 61,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 180,90 Gb Total Space | 104,92 Gb Free Space | 58,00% Space Free | Partition Type: NTFS Drive D: | 250,00 Gb Total Space | 199,73 Gb Free Space | 79,89% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010.06.27 06:36:57 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\ASUS\Desktop\OTL.exe PRC - [2010.06.16 11:57:22 | 000,835,952 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2010.05.06 21:59:42 | 002,815,192 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast5\AvastUI.exe PRC - [2010.05.06 21:59:38 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast5\AvastSvc.exe PRC - [2009.11.24 13:45:36 | 000,053,888 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe PRC - [2009.11.12 10:10:06 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe PRC - [2009.11.12 09:52:04 | 000,184,176 | ---- | M] () -- C:\Portable\Real Temp\RealTemp.exe PRC - [2009.10.26 20:29:32 | 006,998,656 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe PRC - [2009.10.26 10:10:42 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe PRC - [2009.10.21 12:12:50 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009.09.30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009.09.30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009.09.23 10:11:54 | 001,160,320 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Net4Switch\Net4Switch.exe PRC - [2009.08.19 20:31:48 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe PRC - [2009.06.24 12:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe PRC - [2009.06.19 10:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe PRC - [2009.06.19 10:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe PRC - [2009.06.15 17:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe PRC - [2009.04.07 14:05:56 | 000,948,792 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\Asus MultiFrame\MultiFrame32.exe PRC - [2008.12.22 17:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe PRC - [2008.03.31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe PRC - [2007.08.08 00:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe PRC - [2007.08.03 12:24:54 | 000,125,496 | ---- | M] () -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010.06.27 06:36:57 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\ASUS\Desktop\OTL.exe MOD - [2009.07.14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009.07.14 02:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll MOD - [2009.04.07 14:05:48 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\Asus MultiFrame\HookTitle32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010.05.06 21:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2010.05.06 21:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Stopped] -- C:\Program Files\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2010.05.06 21:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009.11.18 06:45:40 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009.09.17 11:36:34 | 000,359,552 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent) SRV:[b]64bit:[/b] - [2009.08.18 12:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV:[b]64bit:[/b] - [2009.08.02 16:54:14 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009.07.14 02:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:[b]64bit:[/b] - [2009.07.14 02:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:[b]64bit:[/b] - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009.07.14 02:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:[b]64bit:[/b] - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2007.08.08 00:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV:[b]64bit:[/b] - [2007.08.03 12:24:54 | 000,125,496 | ---- | M] () [On_Demand | Running] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr) SRV - [2010.03.18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.09.30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009.09.30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009.07.14 04:20:14 | 000,000,000 | ---D | M] [On_Demand | Stopped] -- C:\Windows\Vss -- (VSS) SRV - [2009.07.14 04:20:14 | 000,000,000 | ---D | M] [Unknown | Stopped] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC) SRV - [2009.07.13 21:30:11 | 000,061,056 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds) SRV - [2009.06.15 17:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService) SRV - [2008.03.31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2010.05.09 23:29:02 | 000,145,936 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2010.05.06 21:39:27 | 000,051,280 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2010.05.06 21:39:06 | 000,121,936 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2010.05.06 21:34:30 | 000,028,752 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2010.05.06 21:34:14 | 000,063,568 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2010.05.06 21:33:50 | 000,022,096 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2010.03.01 19:28:36 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010.02.25 17:33:32 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm) DRV:[b]64bit:[/b] - [2009.12.01 18:55:31 | 000,359,624 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm) DRV:[b]64bit:[/b] - [2009.11.18 07:21:20 | 006,171,136 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009.11.13 09:47:38 | 000,067,072 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2009.10.26 23:19:48 | 000,176,640 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2009.10.26 23:19:46 | 000,075,264 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2009.10.15 10:23:20 | 000,117,760 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2009.10.05 02:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009.09.30 02:34:32 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009.09.23 02:46:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr) DRV:[b]64bit:[/b] - [2009.09.23 02:32:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb) DRV:[b]64bit:[/b] - [2009.09.23 02:32:35 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcuxd.sys -- (vpcuxd) DRV:[b]64bit:[/b] - [2009.09.23 02:32:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus) DRV:[b]64bit:[/b] - [2009.09.17 12:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009.08.21 07:48:18 | 000,044,032 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor) DRV:[b]64bit:[/b] - [2009.08.20 03:41:38 | 001,800,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV:[b]64bit:[/b] - [2009.08.06 22:24:14 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009.07.20 10:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr) DRV:[b]64bit:[/b] - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009.07.14 00:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:[b]64bit:[/b] - [2009.07.14 00:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:[b]64bit:[/b] - [2009.07.14 00:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:[b]64bit:[/b] - [2009.07.01 05:46:58 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt) DRV:[b]64bit:[/b] - [2009.07.01 05:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2009.07.01 05:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2009.07.01 05:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2009.06.18 12:18:10 | 000,015,928 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\lullaby.sys -- (lullaby) DRV:[b]64bit:[/b] - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009.06.09 04:18:20 | 000,053,816 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\DGIVECP.SYS -- (DgiVecp) DRV:[b]64bit:[/b] - [2009.05.20 11:04:56 | 000,202,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009.05.13 02:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2009.04.07 08:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2008.05.23 17:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr) DRV:[b]64bit:[/b] - [2008.01.10 19:34:52 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT) DRV:[b]64bit:[/b] - [2007.07.24 11:11:32 | 000,014,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64) DRV - [2010.02.26 01:05:50 | 000,000,000 | ---D | M] [Kernel | System | Running] -- C:\Windows\CSC -- (CSC) DRV - [2009.06.10 22:28:14 | 000,001,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv) DRV - [2009.06.10 22:15:18 | 000,003,066 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip) DRV - [2008.07.26 22:30:36 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | On_Demand | Running] -- C:\Portable\Real Temp\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2006.05.19 04:39:58 | 000,015,497 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\snp2uvc.ini -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2004.10.18 15:02:20 | 000,041,472 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\DgiVecp.sys -- (DgiVecp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-rs IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 79 88 42 51 92 14 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.update: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.rs" FF - prefs.js..extensions.enabledItems: support@easy-hideip.com:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2 FF - prefs.js..extensions.enabledItems: arpit3@techraga.in:1.0 FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.9.87 FF - prefs.js..extensions.enabledItems: externalip@erik.morlin:0.9.9.6 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3 FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4 FF - prefs.js..extensions.enabledItems: fastYoutubeDownloader@yevgenyandrov.net:1.2.2 FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6 FF - prefs.js..extensions.enabledItems: properties@darktrojan.net:6 FF - prefs.js..extensions.enabledItems: ehtip@robertkatic:2.3.9 FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.47.4 FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.2 FF - prefs.js..extensions.enabledItems: imagecounter@extensiondevelopment.org:2.100228.4 FF - prefs.js..extensions.enabledItems: tabcounter@morac:1.8.4 FF - prefs.js..extensions.enabledItems: tito@link-finder:1.100607.6 FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5 FF - prefs.js..extensions.enabledItems: piclens@cooliris.com:1.12.0.36605 FF - prefs.js..extensions.enabledItems: linkalert.conlan@addons.mozilla.com:1.0.1 FF - prefs.js..extensions.enabledItems: mgDownloadHelper@yevgenyandrov.net:1.0.2 FF - prefs.js..extensions.enabledItems: webmaster@keep-tube.com:1.2 FF - prefs.js..extensions.enabledItems: aardvark@rob.brown:3.0 FF - prefs.js..extensions.enabledItems: unplug@compunach:2.025 FF - prefs.js..extensions.enabledItems: jayakrishnan@gmail.com:1.3.2 FF - prefs.js..extensions.enabledItems: capturefoxmovie@advancity.net:0.7.0 FF - prefs.js..extensions.enabledItems: {29c4afe1-db19-4298-8785-fcc94d1d6c1d}:0.6.2009110501 FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.3 FF - prefs.js..network.proxy.share_proxy_settings: true FF - HKLM\software\mozilla\Mozilla Firefox 3.6.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.06.23 09:23:35 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.06.23 09:23:35 | 000,000,000 | ---D | M] [2010.04.05 07:52:13 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Extensions [2010.06.23 09:24:43 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions [2010.05.10 01:56:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d} [2010.03.25 01:03:58 | 000,000,000 | ---D | M] (Speed Dial) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{64161300-e22b-11db-8314-0800200c9a66} [2010.06.22 02:55:49 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} [2010.04.28 10:08:16 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010.06.04 02:42:15 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} [2010.05.05 05:53:57 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.04.28 10:08:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} [2010.06.22 02:55:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{dc572301-7619-498c-a57d-39143191b318} [2010.04.28 10:08:18 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2010.03.24 05:27:21 | 000,000,000 | ---D | M] (User Agent Switcher) -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1} [2010.04.29 02:51:34 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\aardvark@rob.brown [2010.03.13 19:52:16 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\arpit3@techraga.in [2010.05.05 05:41:47 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\capturefoxmovie@advancity.net [2010.03.24 05:27:27 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\ehtip@robertkatic [2010.03.13 19:52:16 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\externalip@erik.morlin [2010.06.22 02:55:49 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\fastYoutubeDownloader@yevgenyandrov.net [2010.03.24 05:27:21 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\imagecounter@extensiondevelopment.org [2010.05.05 05:41:47 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\jayakrishnan@gmail.com [2010.04.21 03:02:06 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\linkalert.conlan@addons.mozilla.com [2010.03.25 06:27:38 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\mgDownloadHelper@yevgenyandrov.net [2010.06.22 02:55:50 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\piclens@cooliris.com [2010.03.24 05:15:12 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\properties@darktrojan.net [2010.03.25 01:03:58 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\rsDownloadHelper@yevgenyandrov.net [2010.03.01 13:30:37 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\support@easy-hideip.com [2010.03.24 05:27:21 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\tabcounter@morac [2010.06.22 02:55:49 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\tito@link-finder [2010.05.04 08:19:55 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\unplug@compunach [2010.05.05 05:53:57 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\webmaster@keep-tube.com [2010.03.24 05:27:21 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\imagecounter@extensiondevelopment.org\chrome [2010.03.24 05:27:21 | 000,000,000 | ---D | M] -- C:\Users\ASUS\AppData\Roaming\mozilla\Firefox\Profiles\9d25g7v1.default\extensions\imagecounter@extensiondevelopment.org\components [2010.03.18 16:16:00 | 000,002,434 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\google-scholar.xml [2010.03.18 16:17:59 | 000,001,504 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\imdb.xml [2010.03.18 16:56:44 | 000,001,650 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\longman-english-dictionary.xml [2010.03.18 16:21:38 | 000,001,302 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\only-pdf.xml [2010.03.18 16:22:45 | 000,002,824 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\rapidshare-files-search.xml [2010.03.18 16:22:55 | 000,001,976 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\rapidshare-google-arama.xml [2010.03.18 16:55:30 | 000,001,679 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\thepiratebayorg.xml [2010.03.18 17:01:34 | 000,006,418 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\torrentgamez.xml [2010.03.18 17:02:13 | 000,000,888 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\torrentsto.xml [2010.03.18 16:31:53 | 000,002,107 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\translate-croatian-to-english.xml [2010.03.18 16:56:58 | 000,002,096 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\translate-english-to-croatian.xml [2010.03.18 16:31:39 | 000,002,209 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\wolfram-alpha.xml [2010.03.18 16:29:32 | 000,004,140 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Mozilla\FireFox\Profiles\9d25g7v1.default\searchplugins\youtube.xml [2010.02.25 20:28:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions O1 HOSTS File: ([2010.03.27 06:02:35 | 000,838,472 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 fr.a2dfp.net O1 - Hosts: 127.0.0.1 m.fr.a2dfp.net O1 - Hosts: 127.0.0.1 ad.a8.net O1 - Hosts: 127.0.0.1 asy.a8ww.net O1 - Hosts: 127.0.0.1 adserver.abv.bg O1 - Hosts: 127.0.0.1 adv.abv.bg O1 - Hosts: 127.0.0.1 bimg.abv.bg O1 - Hosts: 127.0.0.1 www2.a-counter.kiev.ua O1 - Hosts: 127.0.0.1 track.acclaimnetwork.com O1 - Hosts: 127.0.0.1 accuserveadsystem.com O1 - Hosts: 127.0.0.1 www.accuserveadsystem.com O1 - Hosts: 127.0.0.1 achmedia.com O1 - Hosts: 127.0.0.1 aconti.net O1 - Hosts: 127.0.0.1 secure.aconti.net O1 - Hosts: 127.0.0.1 www.aconti.net #[Dialer.Aconti] O1 - Hosts: 127.0.0.1 ads.active.com O1 - Hosts: 127.0.0.1 am1.activemeter.com O1 - Hosts: 127.0.0.1 www.activemeter.com #[Tracking.Cookie] O1 - Hosts: 127.0.0.1 ads.activepower.net O1 - Hosts: 127.0.0.1 data2.activshopper.com #[Trackware.ActivShopper] O1 - Hosts: 127.0.0.1 stat.active24stats.nl #[Tracking.Cookie] O1 - Hosts: 127.0.0.1 ad2games.com O1 - Hosts: 127.0.0.1 cms.ad2click.nl O1 - Hosts: 127.0.0.1 ads.ad2games.com O1 - Hosts: 23229 more lines... O2:[b]64bit:[/b] - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [avast5] C:\Program Files\Avast5\avastUI.exe (ALWIL Software) O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation) O4 - HKCU..\Run: [NB Probe] File not found O4 - Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MultiFrame.lnk = C:\Program Files (x86)\ASUS\Asus MultiFrame\MultiFrame.exe (ASUSTek Computer Inc.) O4 - Startup: C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RealTemp.lnk = C:\Portable\Real Temp\RealTemp.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: Objavi ovo u blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Objavi ovo u blogu u okviru usluge Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.216.1.40 89.216.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 0 O33 - MountPoints2\{725dc49a-2560-11df-9d81-1c4bd6017dfd}\Shell - "" = AutoRun O33 - MountPoints2\{725dc49a-2560-11df-9d81-1c4bd6017dfd}\Shell\AutoRun\command - "" = F:\Setup.exe -- File not found O33 - MountPoints2\{8d7b73f5-226a-11df-b9d9-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{8d7b73f5-226a-11df-b9d9-806e6f6e6963}\Shell\AutoRun\command - "" = E:\InstAll.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010.06.27 06:36:57 | 000,574,464 | ---- | C] (OldTimer Tools) -- C:\Users\ASUS\Desktop\OTL.exe [2010.06.26 12:28:18 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Prečice za Windows Media Center [2010.06.26 09:28:20 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Local\ashampoo [2010.06.26 07:00:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Corporation [2010.06.26 06:30:25 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Local\PowerCinema [2010.06.26 06:06:39 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Local\Cyberlink [2010.06.26 06:04:46 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Documents\CyberLink [2010.06.26 06:04:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xenocode [2010.06.26 06:04:43 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\winevt [2010.06.26 06:04:43 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\SMI [2010.06.23 07:14:20 | 000,000,000 | ---D | C] -- C:\Windows\pss [2010.06.22 20:10:48 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010.06.22 20:10:48 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010.06.22 20:10:48 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010.06.22 20:10:48 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010.06.22 20:10:48 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010.06.22 20:10:48 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010.06.22 20:10:48 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010.06.22 20:10:48 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010.06.22 20:02:49 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010.06.22 20:02:49 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010.06.22 20:02:48 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010.06.22 20:02:48 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010.06.22 20:02:48 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010.06.22 20:02:47 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010.06.22 20:02:47 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010.06.22 20:02:30 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010.06.11 04:34:38 | 000,000,000 | ---D | C] -- C:\Users\ASUS\AppData\Roaming\Tomato [2010.06.11 04:34:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Tomato [2010.06.09 11:27:10 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010.06.09 11:27:10 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010.06.09 11:27:10 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010.06.09 11:27:10 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010.06.03 13:17:16 | 000,000,000 | ---D | C] -- C:\Users\ASUS\Documents\Moje primljene datoteke [2010.05.28 20:30:28 | 000,359,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcvmm.sys [2010.05.28 10:34:38 | 000,000,000 | R--D | C] -- C:\Users\ASUS\Virtual Machines [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\zh-TW [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\zh-CN [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Virtual PC [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\tr-TR [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\th-TH [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\sv-SE [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ru-RU [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ro-RO [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pt-PT [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pt-BR [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pl-PL [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\nl-NL [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\nb-NO [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ko-KR [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ja-JP [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\it-IT [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\hu-HU [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\he-IL [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\fr-FR [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\fi-FI [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\es-ES [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\el-GR [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\da-DK [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\cs-CZ [2010.05.28 07:04:37 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ar-SA [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010.06.27 06:39:32 | 004,194,304 | -HS- | M] () -- C:\Users\ASUS\NTUSER.DAT [2010.06.27 06:36:57 | 000,574,464 | ---- | M] (OldTimer Tools) -- C:\Users\ASUS\Desktop\OTL.exe [2010.06.27 06:32:05 | 000,525,824 | ---- | M] () -- C:\Users\ASUS\Desktop\dds.scr [2010.06.27 05:16:38 | 000,016,352 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.06.27 05:16:38 | 000,016,352 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.06.27 05:11:33 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.06.27 05:11:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.06.27 05:11:16 | 3105,259,520 | -HS- | M] () -- C:\hiberfil.sys [2010.06.27 00:48:51 | 004,653,808 | -H-- | M] () -- C:\Users\ASUS\AppData\Local\IconCache.db [2010.06.26 23:07:22 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.06.26 23:07:22 | 000,616,546 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.06.26 23:07:22 | 000,106,926 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.06.26 11:56:42 | 000,002,008 | ---- | M] () -- C:\Users\ASUS\Desktop\WMC.lnk [2010.06.26 10:16:38 | 000,043,616 | ---- | M] () -- C:\Windows\SysNative\oemlogo.bmp [2010.06.26 09:54:39 | 000,036,164 | ---- | M] () -- C:\Users\ASUS\energy-report.html [2010.06.25 02:54:06 | 000,043,254 | ---- | M] () -- C:\Windows\oemlogo.trishtech.bmp [2010.06.22 03:31:11 | 000,000,345 | ---- | M] () -- C:\Windows\pdf2word.INI [2010.06.22 02:58:38 | 000,000,877 | ---- | M] () -- C:\Users\ASUS\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2010.06.21 20:10:39 | 000,000,760 | ---- | M] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RealTemp.lnk [2010.06.21 19:50:37 | 000,000,024 | ---- | M] () -- C:\Windows\ATKPF.ini [2010.06.09 11:41:49 | 000,365,960 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010.06.27 06:32:05 | 000,525,824 | ---- | C] () -- C:\Users\ASUS\Desktop\dds.scr [2010.06.26 11:56:34 | 000,002,008 | ---- | C] () -- C:\Users\ASUS\Desktop\WMC.lnk [2010.06.26 10:17:48 | 000,043,616 | ---- | C] () -- C:\Windows\SysNative\oemlogo.bmp [2010.06.26 09:54:39 | 000,036,164 | ---- | C] () -- C:\Users\ASUS\energy-report.html [2010.06.21 20:10:39 | 000,000,760 | ---- | C] () -- C:\Users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RealTemp.lnk [2010.03.20 07:15:22 | 000,338,944 | ---- | C] () -- C:\Windows\SysWow64\Lffpx7.dll [2010.03.20 07:15:22 | 000,118,784 | ---- | C] () -- C:\Windows\SysWow64\Lfkodak.dll [2010.03.18 19:00:51 | 000,000,345 | ---- | C] () -- C:\Windows\pdf2word.INI [2010.03.17 17:18:24 | 000,000,194 | ---- | C] () -- C:\Windows\apdfpr.ini [2010.02.28 03:06:02 | 000,000,000 | ---- | C] () -- C:\Windows\Net4Switch.INI [2010.02.25 17:59:32 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini [2010.02.25 17:33:20 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\LogonStart.dll [2010.02.25 17:29:13 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini [2009.07.31 02:58:42 | 000,000,326 | ---- | C] () -- C:\Windows\primopdf.ini [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2008.12.01 18:32:32 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll < End of report >