API tools faq
paste
Guest User

ComboFix

a guest
Feb 18th, 2012
104
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 32.28 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-02-17.02 - Banksy 02/18/2012 21:41:27.1.4 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.16301.13118 [GMT -5:00]
  3. Running from: c:\users\Banksy\Desktop\ComboFix.exe
  4. AV: Kaspersky Internet Security *Disabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
  5. FW: Kaspersky Internet Security *Disabled* {1691B380-548E-1A7A-BE85-9A42CE15AEFF}
  6. SP: Kaspersky Internet Security *Disabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
  7. SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  8. .
  9. .
  10. ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  11. .
  12. .
  13. C:\test.exe
  14. C:\test.txt
  15. c:\users\Banksy\AppData\Local\TempDIR
  16. c:\users\Banksy\AppData\Local\TempDIR\BetterInstaller.exe
  17. c:\users\Banksy\Desktop\test.exe
  18. c:\windows\system\VI30AUT.DLL
  19. c:\windows\SysWow64\d2d1debug.dll
  20. E:\install.exe
  21. .
  22. .
  23. ((((((((((((((((((((((((( Files Created from 2012-01-19 to 2012-02-19 )))))))))))))))))))))))))))))))
  24. .
  25. .
  26. 2012-02-19 02:46 . 2012-02-19 02:46 -------- d-----w- c:\users\Default\AppData\Local\temp
  27. 2012-02-19 02:32 . 2012-02-19 02:32 -------- d-----w- c:\program files (x86)\AMD
  28. 2012-02-19 02:30 . 2012-02-19 02:30 -------- d-----w- c:\windows\SysWow64\xlive
  29. 2012-02-19 02:30 . 2012-02-19 02:30 -------- d-----w- c:\program files (x86)\Microsoft Games for Windows - LIVE
  30. 2012-02-19 01:24 . 2012-02-19 01:24 -------- d-----w- c:\program files (x86)\Kaspersky Lab
  31. 2012-02-18 23:58 . 2012-02-18 23:58 -------- d-----w- c:\programdata\QFX Software
  32. 2012-02-18 23:53 . 2009-12-14 17:44 85048 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
  33. 2012-02-18 23:53 . 2009-12-14 17:44 66104 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
  34. 2012-02-18 23:53 . 2012-02-19 00:34 -------- dc----w- c:\windows\system32\DRVSTORE
  35. 2012-02-18 23:52 . 2012-02-19 02:49 -------- d-----w- c:\programdata\Kaspersky Lab
  36. 2012-02-18 23:13 . 2012-02-18 23:13 -------- d-----w- c:\program files (x86)\KeyScrambler
  37. 2012-02-18 23:13 . 2011-12-15 00:46 222904 ----a-w- c:\windows\system32\drivers\keyscrambler.sys
  38. 2012-02-18 21:58 . 2009-07-14 01:41 368128 ----a-w- c:\windows\system32\pnpui.dll
  39. 2012-02-18 21:58 . 2009-07-14 01:41 2484736 ----a-w- c:\windows\system32\netshell.dll
  40. 2012-02-18 21:58 . 2009-07-14 01:29 9029120 ----a-w- c:\windows\system32\mmres.dll
  41. 2012-02-18 21:58 . 2009-07-14 01:41 64512 ----a-w- c:\windows\system32\hotplug.dll
  42. 2012-02-18 21:58 . 2009-07-14 01:28 757248 ----a-w- c:\windows\system32\imagesp1.dll
  43. 2012-02-18 21:58 . 2009-07-14 01:40 727040 ----a-w- c:\windows\system32\ActionCenter.dll
  44. 2012-02-18 21:58 . 2009-07-14 01:28 13767168 ----a-w- c:\windows\system32\imageres.dll
  45. 2012-02-18 21:58 . 2009-07-14 01:16 2755072 ----a-w- c:\windows\SysWow64\themeui.dll.backup
  46. 2012-02-18 21:58 . 2009-07-14 01:41 2851328 ----a-w- c:\windows\system32\themeui.dll.backup
  47. 2012-02-18 21:58 . 2009-07-14 01:11 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll.backup
  48. 2012-02-18 21:58 . 2009-07-14 01:41 332288 ----a-w- c:\windows\system32\uxtheme.dll.backup
  49. 2012-02-18 21:58 . 2009-07-14 01:41 44544 ----a-w- c:\windows\system32\themeservice.dll.backup
  50. 2012-02-18 21:58 . 2012-02-18 22:37 -------- d--h--w- c:\windows\Ubuntu Skin Pack
  51. 2012-02-18 01:55 . 2012-02-19 00:17 -------- d-----w- c:\programdata\XHEO INC
  52. 2012-02-17 22:36 . 2012-02-17 22:36 -------- d-----r- C:\Sandbox
  53. 2012-02-17 22:36 . 2012-02-17 22:36 -------- d-----w- c:\program files\Sandboxie
  54. 2012-02-17 21:56 . 2012-02-17 21:56 -------- d-----w- c:\programdata\Malwarebytes
  55. 2012-02-17 21:56 . 2012-02-17 21:56 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
  56. 2012-02-17 21:56 . 2011-12-10 20:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
  57. 2012-02-17 19:16 . 2012-02-17 19:16 -------- d-----w- c:\programdata\Microsoft Visual Studio
  58. 2012-02-17 19:06 . 2012-02-17 19:06 -------- d-----w- c:\program files\Microsoft
  59. 2012-02-17 19:06 . 2012-02-17 19:06 -------- d-----w- c:\program files (x86)\IIS Express
  60. 2012-02-17 19:06 . 2012-02-17 19:06 -------- d-----w- c:\program files (x86)\Microsoft
  61. 2012-02-17 19:06 . 2012-02-17 19:10 2332960 ----a-w- c:\programdata\Microsoft\VisualStudio\11.0\1033\ResourceCache.dll
  62. 2012-02-17 19:04 . 2012-02-17 19:04 -------- d-----w- c:\program files (x86)\Microsoft Help Viewer
  63. 2012-02-17 19:03 . 2012-02-17 19:03 -------- d-----w- c:\program files (x86)\Windows Kits
  64. 2012-02-17 18:50 . 2012-01-17 09:39 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E4E23820-08DC-4E4E-BC5E-17E2E7879E04}\mpengine.dll
  65. 2012-02-17 18:34 . 2012-02-17 18:34 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11
  66. 2012-02-17 18:32 . 2012-02-17 18:32 -------- d-----w- c:\program files\Microsoft Visual Studio 11
  67. 2012-02-17 01:32 . 2012-02-17 01:32 -------- d-----w- c:\program files (x86)\Common Files\TortoiseOverlays
  68. 2012-02-17 01:32 . 2012-02-17 01:32 -------- d-----w- c:\program files\TortoiseSVN
  69. 2012-02-17 01:32 . 2012-02-17 01:32 -------- d-----w- c:\program files\Common Files\TortoiseOverlays
  70. 2012-02-16 16:48 . 2012-02-16 16:48 -------- d-----w- c:\program files\Speccy
  71. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\program files (x86)\SystemRequirementsLab
  72. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\windows\Sun
  73. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\program files (x86)\Common Files\Java
  74. 2012-02-16 16:46 . 2012-02-16 16:46 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
  75. 2012-02-16 16:46 . 2012-02-16 16:46 -------- d-----w- c:\program files (x86)\Java
  76. 2012-02-16 16:15 . 2012-02-16 16:15 265728 ----a-w- c:\windows\SysWow64\MSCOMCTL.oca
  77. 2012-02-16 15:48 . 2012-02-16 15:48 235520 ----a-w- c:\windows\SysWow64\wmp.oca
  78. 2012-02-16 15:47 . 2012-02-16 15:47 35840 ----a-w- c:\windows\SysWow64\COMDLG32.oca
  79. 2012-02-16 13:34 . 2012-02-16 13:34 -------- d-----w- c:\program files (x86)\Web Publish
  80. 2012-02-16 13:34 . 2012-02-16 13:34 -------- d-----w- c:\windows\msapps
  81. 2012-02-16 13:21 . 2012-02-16 13:21 -------- d-----w- c:\program files (x86)\Resource Hacker
  82. 2012-02-16 01:47 . 2012-02-16 01:47 -------- d-----w- c:\program files (x86)\VideoLAN
  83. 2012-02-15 23:39 . 2012-02-17 18:44 -------- d-----w- c:\program files (x86)\uTorrent
  84. 2012-02-15 21:25 . 2012-02-15 21:25 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
  85. 2012-02-15 21:24 . 2012-02-15 21:24 -------- d-----w- c:\program files (x86)\Common Files\Adobe
  86. 2012-02-15 02:33 . 2012-02-16 19:25 -------- d-----w- c:\programdata\Nimoru
  87. 2012-02-15 01:43 . 2012-02-15 01:43 -------- d-----w- c:\program files (x86)\ScreenSnapr
  88. 2012-02-15 01:39 . 2012-02-15 01:39 -------- d-----w- c:\program files (x86)\CodeBlocks
  89. 2012-02-15 00:41 . 2012-02-15 00:41 -------- d-----w- C:\Fraps
  90. 2012-02-15 00:35 . 2012-02-15 00:35 -------- d-----w- c:\programdata\EA Core
  91. 2012-02-15 00:35 . 2012-02-15 01:22 -------- d-----w- c:\programdata\EA Logs
  92. 2012-02-15 00:18 . 2012-02-15 00:18 -------- d-----w- c:\program files (x86)\TeamViewer
  93. 2012-02-14 23:29 . 2012-02-14 23:29 -------- d-----w- c:\program files (x86)\Razer
  94. 2012-02-14 14:56 . 2010-05-26 16:41 511328 ----a-w- c:\windows\system32\d3dx10_43.dll
  95. 2012-02-14 11:00 . 2012-02-15 00:40 -------- d-----w- c:\program files (x86)\Origin Games
  96. 2012-02-14 10:59 . 2012-02-15 00:35 -------- d-----w- c:\programdata\Electronic Arts
  97. 2012-02-14 10:59 . 2012-02-15 00:35 -------- d-----w- c:\programdata\Origin
  98. 2012-02-14 10:59 . 2012-02-17 19:10 -------- d-----w- c:\program files (x86)\Origin
  99. 2012-02-14 08:26 . 2012-02-14 08:26 -------- d-----w- c:\windows\SysWow64\Wat
  100. 2012-02-14 08:26 . 2012-02-14 08:26 -------- d-----w- c:\windows\system32\Wat
  101. 2012-02-14 08:09 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll
  102. 2012-02-14 08:09 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
  103. 2012-02-14 08:00 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys
  104. 2012-02-14 02:06 . 2012-02-19 02:13 -------- d-----w- c:\program files (x86)\Steam
  105. 2012-02-14 02:06 . 2012-02-14 02:06 -------- d-----w- c:\program files (x86)\Common Files\Steam
  106. 2012-02-14 02:00 . 2012-02-14 02:00 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
  107. 2012-02-14 01:51 . 2012-02-14 01:51 -------- d-----w- c:\program files (x86)\Dolby Home Theater v4
  108. 2012-02-14 01:51 . 2009-07-22 08:17 78872 ----a-w- c:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
  109. 2012-02-14 01:51 . 2009-07-22 08:17 50200 ----a-w- c:\windows\SysWow64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
  110. 2012-02-14 01:51 . 2012-02-14 01:51 -------- d-----w- c:\windows\SysWow64\RTCOM
  111. 2012-02-14 01:51 . 2012-02-14 01:51 -------- d-----w- c:\program files\Realtek
  112. 2012-02-14 01:49 . 2012-02-14 01:49 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
  113. 2012-02-14 01:48 . 2011-05-20 14:53 557848 ----a-w- c:\windows\system32\drivers\iaStor.sys
  114. 2012-02-14 01:45 . 2012-02-17 19:08 -------- d-----w- c:\program files\Microsoft SQL Server
  115. 2012-02-14 01:45 . 2012-02-17 19:08 -------- d-----w- c:\program files (x86)\Microsoft SQL Server
  116. 2012-02-14 01:44 . 2012-02-14 01:44 -------- d-----w- c:\program files\Microsoft Sync Framework
  117. 2012-02-14 01:44 . 2012-02-17 19:08 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
  118. 2012-02-14 01:44 . 2012-02-14 01:44 -------- d-----w- c:\program files\Microsoft Synchronization Services
  119. 2012-02-14 01:44 . 2012-02-14 01:44 -------- d-----w- c:\program files (x86)\Microsoft Synchronization Services
  120. 2012-02-14 01:42 . 2012-02-14 01:42 -------- d-----w- c:\programdata\PreEmptive Solutions
  121. 2012-02-14 01:39 . 2011-04-15 21:00 53248 ----a-w- c:\windows\SysWow64\CSVer.dll
  122. 2012-02-14 01:39 . 2011-08-08 22:28 8192 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
  123. 2012-02-14 01:38 . 2012-02-14 01:38 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
  124. 2012-02-14 01:36 . 2012-02-14 01:36 -------- d-----w- C:\Intel
  125. 2012-02-14 01:36 . 2010-10-19 21:34 56344 ----a-w- c:\windows\system32\drivers\HECIx64.sys
  126. 2012-02-14 01:36 . 2012-02-14 01:50 -------- d-----w- c:\program files (x86)\Intel
  127. 2012-02-14 01:36 . 2012-02-14 01:36 -------- d-----w- c:\program files (x86)\Microsoft ASP.NET
  128. 2012-02-14 01:36 . 2012-02-17 19:06 -------- d-----w- c:\program files\IIS
  129. 2012-02-14 01:36 . 2012-02-17 19:06 -------- d-----w- c:\program files (x86)\IIS
  130. 2012-02-14 01:34 . 2012-02-15 08:14 2377696 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
  131. 2012-02-14 01:30 . 2012-02-17 19:05 -------- d-----w- c:\windows\SysWow64\1033
  132. 2012-02-14 01:30 . 2012-02-17 19:04 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
  133. 2012-02-14 01:30 . 2012-02-14 01:42 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 10.0
  134. 2012-02-14 01:30 . 2012-02-14 01:31 -------- d-----w- c:\program files (x86)\Microsoft F#
  135. 2012-02-14 01:30 . 2012-02-14 01:31 -------- d-----w- c:\program files (x86)\HTML Help Workshop
  136. 2012-02-14 01:24 . 2012-02-14 01:24 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 9.0
  137. 2012-02-14 01:22 . 2012-02-17 19:01 -------- d-----w- c:\windows\system32\1033
  138. 2012-02-14 01:22 . 2012-02-14 01:22 -------- d-----w- c:\windows\symbols
  139. 2012-02-14 01:22 . 2012-02-17 19:04 -------- d-----w- c:\program files (x86)\Microsoft SDKs
  140. 2012-02-14 01:22 . 2012-02-14 01:22 -------- d-----w- c:\program files\Microsoft Visual Studio 10.0
  141. 2012-02-14 01:22 . 2012-02-14 01:22 -------- d-----w- c:\program files\Microsoft Help Viewer
  142. 2012-02-14 01:17 . 2012-01-29 10:10 279656 ----a-w- c:\windows\system32\MpSigStub.exe
  143. 2012-02-14 01:17 . 2011-10-01 05:28 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
  144. 2012-02-14 01:17 . 2011-10-01 04:43 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
  145. 2012-02-14 01:15 . 2011-05-04 05:28 2228224 ----a-w- c:\windows\system32\mssrch.dll
  146. 2012-02-14 01:14 . 2010-10-16 05:17 720896 ----a-w- c:\windows\system32\odbc32.dll
  147. 2012-02-14 01:13 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys
  148. 2012-02-14 01:12 . 2011-06-15 09:58 212992 ----a-w- c:\windows\system32\odbctrac.dll
  149. 2012-02-14 01:11 . 2010-09-01 05:14 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
  150. 2012-02-14 01:11 . 2010-09-01 04:23 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
  151. .
  152. .
  153. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  154. .
  155. 2012-02-18 22:36 . 2009-07-13 23:39 2755072 ----a-w- c:\windows\SysWow64\themeui.dll
  156. 2012-02-18 22:36 . 2009-07-13 23:39 245760 ----a-w- c:\windows\SysWow64\uxtheme.dll
  157. 2012-02-18 21:58 . 2009-07-13 23:54 2851328 ----a-w- c:\windows\system32\themeui.dll
  158. 2012-02-18 21:58 . 2009-07-13 23:55 332288 ----a-w- c:\windows\system32\uxtheme.dll
  159. 2012-02-18 21:58 . 2009-07-13 23:54 44544 ----a-w- c:\windows\system32\themeservice.dll
  160. 2012-02-14 00:48 . 2011-03-28 23:36 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
  161. 2012-01-16 19:02 . 2012-01-16 19:02 767872 ----a-w- c:\windows\SysWow64\RzMwApi.dll
  162. .
  163. .
  164. ------- Sigcheck -------
  165. Note: Unsigned files aren't necessarily malware.
  166. .
  167. [7] 2009-07-14 . 1A47D52E303B7543E4E6026595B95422 . 1297408 . . [2001.12.8530.16385] .. c:\windows\Ubuntu Skin Pack\Backup\comres.dll
  168. [7] 2009-07-14 . 1A47D52E303B7543E4E6026595B95422 . 1297408 . . [2001.12.8530.16385] .. c:\windows\winsxs\amd64_microsoft-windows-com-complus.res_31bf3856ad364e35_6.1.7600.16385_none_88a5cc7effe2dfca\comres.dll
  169. [-] 2009-07-14 . 488669FCAB97FB199E1B64CF1BC68316 . 1368576 . . [2001.12.8530.16385] .. c:\windows\system32\comres.dll
  170. .
  171. [7] 2011-02-26 . E38899074D4951D31B4040E994DD7C8D . 2870784 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
  172. [-] 2011-02-26 . 6CE54AC570A2AF8E495107E1419D18D7 . 2635776 . . [6.1.7600.16385] .. c:\windows\explorer.exe
  173. [7] 2011-02-26 . 0862495E0C825893DB75EF44FAEA8E93 . 2870272 . . [6.1.7600.16385] .. c:\windows\Ubuntu Skin Pack\Backup\explorer.exe
  174. [7] 2011-02-26 . 0862495E0C825893DB75EF44FAEA8E93 . 2870272 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
  175. [7] 2011-02-26 . 3B69712041F3D63605529BD66DC00C48 . 2871808 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  176. [7] 2011-02-25 . 332FEAB1435662FC6C672E25BEB37BE3 . 2871808 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  177. [7] 2010-11-20 . AC4C51EB24AA95B77F705AB159189E24 . 2872320 . . [6.1.7600.16385] .. c:\windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  178. [7] 2010-09-07 . 9AAAEC8DAC27AA17B053E6352AD233AE . 2870272 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
  179. [7] 2010-09-07 . B8EC4BD49CE8F6FC457721BFC210B67F . 2870272 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
  180. [7] 2010-09-07 . F170B4A061C9E026437B193B4D571799 . 2868224 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
  181. [7] 2010-09-07 . 700073016DAC1C3D2E7E2CE4223334B6 . 2868224 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
  182. [7] 2009-07-14 . C235A51CB740E45FFA0EBFB9BAFCDA64 . 2868224 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
  183. .
  184. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  185. .
  186. .
  187. *Note* empty entries & legit default entries are not shown
  188. REGEDIT4
  189. .
  190. [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{876d9f09-c6d6-4324-a2cc-04dd9a4de12f}]
  191. 2011-08-25 04:24 65968 ----a-w- c:\program files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
  192. .
  193. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
  194. @="{C5994560-53D9-4125-87C9-F193FC689CB2}"
  195. [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
  196. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  197. .
  198. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
  199. @="{C5994561-53D9-4125-87C9-F193FC689CB2}"
  200. [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
  201. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  202. .
  203. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
  204. @="{C5994562-53D9-4125-87C9-F193FC689CB2}"
  205. [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
  206. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  207. .
  208. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
  209. @="{C5994563-53D9-4125-87C9-F193FC689CB2}"
  210. [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
  211. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  212. .
  213. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
  214. @="{C5994564-53D9-4125-87C9-F193FC689CB2}"
  215. [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
  216. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  217. .
  218. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
  219. @="{C5994565-53D9-4125-87C9-F193FC689CB2}"
  220. [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
  221. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  222. .
  223. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
  224. @="{C5994566-53D9-4125-87C9-F193FC689CB2}"
  225. [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
  226. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  227. .
  228. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
  229. @="{C5994567-53D9-4125-87C9-F193FC689CB2}"
  230. [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
  231. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  232. .
  233. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
  234. @="{C5994568-53D9-4125-87C9-F193FC689CB2}"
  235. [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
  236. 2011-06-13 15:20 64792 ----a-w- c:\program files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  237. .
  238. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  239. "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
  240. "Dolby Home Theater v4"="c:\program files (x86)\Dolby Home Theater v4\pcee4.exe" [2011-06-01 506712]
  241. "Razer Imperator Driver"="c:\program files (x86)\Razer\Imperator\RazerImperatorSysTray.exe" [2012-01-16 979360]
  242. "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
  243. "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
  244. "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" [2011-04-25 202296]
  245. "amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
  246. .
  247. c:\users\Banksy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  248. MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2012-2-13 576000]
  249. .
  250. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  251. RocketDock.lnk - c:\windows\Ubuntu Skin Pack\RocketDock\RocketDock.exe [2007-9-2 495616]
  252. SmartFlip.lnk - c:\windows\Ubuntu Skin Pack\SmartFlip\SmartFlip.exe [2007-1-14 630784]
  253. UberIcon.lnk - c:\windows\Ubuntu Skin Pack\UberIcon\UberIcon.exe [2007-8-17 159744]
  254. Yodm3D.lnk - c:\windows\Ubuntu Skin Pack\Yodm3D\Yodm3D.exe [2007-7-6 2058752]
  255. YzShadow.lnk - c:\windows\Ubuntu Skin Pack\YzShadow\YzShadow.exe [2009-3-21 184320]
  256. .
  257. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  258. "ConsentPromptBehaviorAdmin"= 0 (0x0)
  259. "ConsentPromptBehaviorUser"= 3 (0x3)
  260. "EnableLUA"= 0 (0x0)
  261. "EnableUIADesktopToggle"= 0 (0x0)
  262. "PromptOnSecureDesktop"= 0 (0x0)
  263. .
  264. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  265. "aux"=wdmaud.drv
  266. .
  267. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  268. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  269. .
  270. [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
  271. "DisableMonitoring"=dword:00000001
  272. .
  273. R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2011-08-05 91984]
  274. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2011-08-05 111440]
  275. R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]
  276. R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]
  277. R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]
  278. R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]
  279. R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]
  280. R3 VSPerfDrv110;Performance Tools Driver 11.0;c:\program files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [2011-07-19 67920]
  281. R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
  282. R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
  283. R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [x]
  284. R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
  285. S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x]
  286. S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x]
  287. S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
  288. S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
  289. S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
  290. S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-01-26 2345792]
  291. S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-01-26 382272]
  292. S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
  293. S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-08-08 2656536]
  294. S3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [x]
  295. S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
  296. S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
  297. S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
  298. S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
  299. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
  300. .
  301. .
  302. --- Other Services/Drivers In Memory ---
  303. .
  304. *NewlyCreated* - WS2IFSL
  305. .
  306. .
  307. --------- x86-64 -----------
  308. .
  309. .
  310. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
  311. @="{C5994560-53D9-4125-87C9-F193FC689CB2}"
  312. [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
  313. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  314. .
  315. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
  316. @="{C5994561-53D9-4125-87C9-F193FC689CB2}"
  317. [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
  318. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  319. .
  320. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
  321. @="{C5994562-53D9-4125-87C9-F193FC689CB2}"
  322. [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
  323. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  324. .
  325. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
  326. @="{C5994563-53D9-4125-87C9-F193FC689CB2}"
  327. [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
  328. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  329. .
  330. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
  331. @="{C5994564-53D9-4125-87C9-F193FC689CB2}"
  332. [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
  333. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  334. .
  335. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
  336. @="{C5994565-53D9-4125-87C9-F193FC689CB2}"
  337. [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
  338. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  339. .
  340. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
  341. @="{C5994566-53D9-4125-87C9-F193FC689CB2}"
  342. [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
  343. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  344. .
  345. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
  346. @="{C5994567-53D9-4125-87C9-F193FC689CB2}"
  347. [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
  348. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  349. .
  350. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
  351. @="{C5994568-53D9-4125-87C9-F193FC689CB2}"
  352. [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
  353. 2011-06-13 15:20 75544 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
  354. .
  355. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  356. "LoadAppInit_DLLs"=0x0
  357. .
  358. ------- Supplementary Scan -------
  359. .
  360. uLocal Page = c:\windows\system32\blank.htm
  361. mLocal Page = c:\windows\SysWOW64\blank.htm
  362. IE: Add to Anti-Banner - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
  363. TCP: DhcpNameServer = 192.168.1.1
  364. CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\shell32.dll
  365. FF - ProfilePath - c:\users\Banksy\AppData\Roaming\Mozilla\Firefox\Profiles\u7yi8hrr.default\
  366. .
  367. .
  368. --------------------- LOCKED REGISTRY KEYS ---------------------
  369. .
  370. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  371. @Denied: (A 2) (Everyone)
  372. @="FlashBroker"
  373. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
  374. .
  375. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  376. "Enabled"=dword:00000001
  377. .
  378. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  379. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
  380. .
  381. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  382. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  383. .
  384. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  385. @Denied: (A 2) (Everyone)
  386. @="Shockwave Flash Object"
  387. .
  388. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  389. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
  390. "ThreadingModel"="Apartment"
  391. .
  392. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  393. @="0"
  394. .
  395. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  396. @="ShockwaveFlash.ShockwaveFlash.10"
  397. .
  398. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  399. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
  400. .
  401. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  402. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  403. .
  404. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  405. @="1.0"
  406. .
  407. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  408. @="ShockwaveFlash.ShockwaveFlash"
  409. .
  410. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  411. @Denied: (A 2) (Everyone)
  412. @="Macromedia Flash Factory Object"
  413. .
  414. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  415. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
  416. "ThreadingModel"="Apartment"
  417. .
  418. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  419. @="FlashFactory.FlashFactory.1"
  420. .
  421. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  422. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
  423. .
  424. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  425. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  426. .
  427. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  428. @="1.0"
  429. .
  430. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  431. @="FlashFactory.FlashFactory"
  432. .
  433. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  434. @Denied: (A 2) (Everyone)
  435. @="IFlashBroker4"
  436. .
  437. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  438. @="{00020424-0000-0000-C000-000000000046}"
  439. .
  440. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  441. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  442. "Version"="1.0"
  443. .
  444. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  445. @Denied: (A) (Users)
  446. @Denied: (A) (Everyone)
  447. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  448. "BlindDial"=dword:00000000
  449. .
  450. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  451. @Denied: (Full) (Everyone)
  452. .
  453. ------------------------ Other Running Processes ------------------------
  454. .
  455. c:\windows\SysWOW64\PnkBstrA.exe
  456. c:\windows\SysWOW64\PnkBstrB.exe
  457. c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  458. .
  459. **************************************************************************
  460. .
  461. Completion time: 2012-02-18 21:53:31 - machine was rebooted
  462. ComboFix-quarantined-files.txt 2012-02-19 02:53
  463. .
  464. Pre-Run: 823,674,798,080 bytes free
  465. Post-Run: 825,550,647,296 bytes free
  466. .
  467. - - End Of File - - A4C4C4CCA2A6EE6F063FAA69FE6B39D8
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!