AVG Support and Discussion Forums | AVG Worldwide

English
- Česky
- English
- Español
- Français
- Português

Folder

AVG Forums » Other topics » Virus Removal, Tools for Removing » Virus Not Detected

New thread Reply

March 1, 2012 05:00	Virus Not Detected #194178
	Reply with Quote \| Quick Reply \| Top
Alexis_248 Novice Join Date: 1.3.2012 Posts: 4	I have run AVG Free on my computer for 3 years and have had only minor problems. However I purchased a new computer and wanted to give my old computer to my mother. I brought it into the geek squad because I thought that an issue I was having with the keyboard for over a year was the result of having spilled soda on it. When I brought it in to get the keyboard fixed they said that there was a virus on my computer. I took it home because I can remove simple viruses but the AVG Free scan says my computer is clean. I do not know how to remove a virus that is not detected. Please help.

March 2, 2012 00:15	Re: Virus Not Detected #194236
	Reply with Quote \| Quick Reply \| Top
BIG AL 43 Moderator Join Date: 18.6.2009 Posts: 21633	@ Alexis_248 If you are suspecting that you are infected by some malicious software, please provide both Gmer scan results Msinfo output and AVG Anti-Virus scan results for further analysis. AVG Free Volunteer ModeratorAVG Free Forum member since - Nov. 27, 2004My total posts on the Old AVG Free Forum - 27,063 Alan How-To Articles \| FAQ \| Free Support

March 6, 2012 03:18	Re: Virus Not Detected #194724
	Reply with Quote \| Quick Reply \| Top
Alexis_248 Novice Join Date: 1.3.2012 Posts: 4	I am not very good with computers but here is the regular front page gmer scan results GMER 1.0.15.15641 - http://www.gmer.net Rootkit scan 2012-03-02 08:15:29 Windows 6.1.7600 Running: gmer.exe ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\BTHPORT Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\HidBth Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\LocalRadioSettings Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\BTHPORT (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\HidBth (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\LocalRadioSettings (not active ControlSet) ---- EOF - GMER 1.0.15 ---- the misinfo is attached and the AVG scan results "Scan ""Whole computer scan"" completed." "No infection was found during this scan" "Folders selected for scanning:";"Whole computer scan" "Scan started:";"Wednesday, February 29, 2012, 10:41:03 PM" "Scan finished:";"Wednesday, February 29, 2012, 11:46:18 PM (1 hour(s) 5 minute(s) 15 second(s))" "Total object scanned:";"3146002" "User who launched the scan:";"Alexis" Let me know if you need more information. Thank you, Alexis msinfo.zip

March 6, 2012 16:42	Re: Virus Not Detected #194754
	Reply with Quote \| Quick Reply \| Top
nemethste TechBuddy Ambassador Join Date: 1.11.2011 Posts: 1730	Hello Alexis, Please carefully follow steps mentioned in Gmer how to article. We need whole scan logs for detailed analysis. Also please send us OTL output. If your computer was infected by some hidden rootkit, or some infection, there would be some symptoms like re-occurring detections, browser hijack etc... so your computer doesn't appear to be infected at all. Thank you. ___________________AVG TeamHow-To articles \| FAQ \| Free SupportWe Protect Us

March 7, 2012 05:45	Re: Virus Not Detected #194779
	Reply with Quote \| Quick Reply \| Top
Alexis_248 Novice Join Date: 1.3.2012 Posts: 4	There is a problem with running the Gmer. The first screen (Rootit/Malware) will only allow me to select (Services Registry and File)s not all the sections above it (Systems, Sections, IAT/EAT, Devices, Modules, Processes, Threads, and Libraries) they are grey and not allow them to be selected. Then when you try to run the >>> Autostart scan with show all selected and you click Scan nothing happens. I have tried to rename the file and downloaded the older version where nothing different happens except that my computer tells me that (1) System\CurrentControlSet\Services\gmer: The handel is invalid. than after clicking OK C:\ Windows\system32\config\system: The system cannot find the file specified. then again after clicking OK. Gmer will open and behave the same as the newer version. The OTL results are as follows OTL logfile created on: 3/6/2012 9:48:57 PM - Run 1 OTL by OldTimer - Version 3.2.35.1 Folder = C:\Users\Alexis\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 \| Country: United States \| Language: ENU \| Date Format: M/d/yyyy 3.91 Gb Total Physical Memory \| 2.04 Gb Available Physical Memory \| 52.33% Memory free 7.81 Gb Paging File \| 5.58 Gb Available in Paging File \| 71.51% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 451.72 Gb Total Space \| 278.65 Gb Free Space \| 61.69% Space Free \| Partition Type: NTFS Drive D: \| 14.04 Gb Total Space \| 2.13 Gb Free Space \| 15.19% Space Free \| Partition Type: NTFS Computer Name: ALEXIS-PC \| User Name: Alexis \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 60 Days ========== Processes (SafeList) ========== PRC - [2012/03/06 21:47:47 \| 000,584,704 \| ---- \| M] (OldTimer Tools) -- C:\Users\Alexis\Downloads\OTL.exe PRC - [2012/02/21 18:11:18 \| 000,924,632 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/01/24 17:24:26 \| 002,416,480 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe PRC - [2011/10/12 05:25:22 \| 004,433,248 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe PRC - [2011/09/26 16:48:28 \| 000,246,600 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe PRC - [2011/08/02 05:09:08 \| 000,192,776 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe PRC - [2011/06/06 12:55:28 \| 000,064,952 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011/01/27 14:13:50 \| 000,226,624 \| ---- \| M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe PRC - [2011/01/27 14:13:40 \| 000,673,088 \| ---- \| M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe PRC - [2010/11/01 21:34:33 \| 000,179,712 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schtasks.exe PRC - [2010/03/04 12:00:56 \| 000,025,704 \| R--- \| M] (Amazon.com) -- C:\Program Files (x86)\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe PRC - [2009/10/09 08:07:20 \| 000,493,248 \| ---- \| M] (Cisco Systems, Inc.) -- C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe PRC - [2008/12/23 17:18:20 \| 000,365,952 \| ---- \| M] () -- C:\Program Files (x86)\SMINST\BLService.exe PRC - [2008/11/26 17:13:08 \| 000,296,320 \| ---- \| M] () -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe PRC - [2008/11/26 17:13:08 \| 000,116,096 \| ---- \| M] () -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe PRC - [2008/03/14 01:00:00 \| 000,226,624 \| ---- \| M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Common Framework aPrdMgr.exe PRC - [2008/03/14 01:00:00 \| 000,103,744 \| ---- \| M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe ========== Modules (All) ========== MOD - [2012/03/06 21:47:47 \| 000,584,704 \| ---- \| M] (OldTimer Tools) -- C:\Users\Alexis\Downloads\OTL.exe MOD - [2012/02/29 20:57:49 \| 001,792,000 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iertutil.dll MOD - [2012/02/29 20:57:49 \| 001,127,424 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wininet.dll MOD - [2012/02/29 20:57:49 \| 001,103,360 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\urlmon.dll MOD - [2012/02/29 20:57:49 \| 000,716,800 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\jscript.dll MOD - [2012/02/29 20:57:49 \| 000,161,792 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msls31.dll MOD - [2012/02/29 20:57:48 \| 009,705,472 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ieframe.dll MOD - [2012/02/29 20:57:48 \| 000,193,536 \| ---- \| M] (Microsoft Corporation) -- C:\Program Files (x86)\Internet Explorer\ieproxy.dll MOD - [2012/02/21 18:11:18 \| 001,911,768 \| ---- \| M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012/02/21 18:11:18 \| 000,924,632 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe MOD - [2012/02/21 18:11:18 \| 000,801,752 \| ---- \| M] (sqlite.org) -- C:\Program Files (x86)\Mozilla Firefox\mozsqlite3.dll MOD - [2012/02/21 18:11:18 \| 000,269,272 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\freebl3.dll MOD - [2012/02/21 18:11:18 \| 000,134,104 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll MOD - [2012/02/21 18:11:18 \| 000,045,016 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\mozutils.dll MOD - [2012/02/21 18:11:18 \| 000,015,832 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\mozalloc.dll MOD - [2012/02/21 18:11:17 \| 016,116,696 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\xul.dll MOD - [2012/02/21 18:11:17 \| 000,646,104 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox ss3.dll MOD - [2012/02/21 18:11:17 \| 000,371,672 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox ssckbi.dll MOD - [2012/02/21 18:11:17 \| 000,187,352 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox spr4.dll MOD - [2012/02/21 18:11:17 \| 000,170,968 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\softokn3.dll MOD - [2012/02/21 18:11:17 \| 000,154,584 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\ssl3.dll MOD - [2012/02/21 18:11:17 \| 000,109,528 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox ssdbm3.dll MOD - [2012/02/21 18:11:17 \| 000,105,432 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\smime3.dll MOD - [2012/02/21 18:11:17 \| 000,105,432 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox ssutil3.dll MOD - [2012/02/21 18:11:17 \| 000,022,488 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\plc4.dll MOD - [2012/02/21 18:11:17 \| 000,020,952 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\plds4.dll MOD - [2012/02/21 18:11:17 \| 000,019,928 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\xpcom.dll MOD - [2012/02/21 18:11:17 \| 000,016,856 \| ---- \| M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe MOD - [2012/02/19 21:54:07 \| 008,527,008 \| ---- \| M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2012/01/24 17:24:26 \| 002,416,480 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgtray.exe MOD - [2012/01/04 02:03:45 \| 012,868,096 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2012/01/04 02:03:07 \| 000,442,880 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 tshrui.dll MOD - [2011/12/16 00:59:17 \| 000,690,688 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2011/11/22 02:26:48 \| 003,111,776 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avguires.dll MOD - [2011/11/16 22:41:38 \| 001,292,592 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 tdll.dll MOD - [2011/11/16 22:39:28 \| 000,314,368 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\webio.dll MOD - [2011/11/16 22:39:21 \| 000,224,768 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schannel.dll MOD - [2011/11/16 22:39:21 \| 000,022,016 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2011/11/16 22:35:13 \| 000,096,768 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2011/11/12 01:20:06 \| 000,327,520 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgidpmx.dll MOD - [2011/10/10 05:23:48 \| 000,891,744 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgntopensslx.dll MOD - [2011/10/10 05:23:48 \| 000,137,056 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgopensslx.dll MOD - [2011/10/10 05:23:44 \| 000,934,752 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgcfgx.dll MOD - [2011/10/10 05:23:42 \| 001,159,008 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgidpsdkx.dll MOD - [2011/10/06 05:42:44 \| 000,276,320 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avglogx.dll MOD - [2011/10/04 05:23:16 \| 000,365,408 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgsysx.dll MOD - [2011/09/05 10:04:56 \| 000,394,136 \| ---- \| M] (Adobe Systems, Inc.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll MOD - [2011/08/30 23:05:02 \| 000,121,704 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll MOD - [2011/08/26 21:43:07 \| 000,571,904 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2011/08/26 21:43:06 \| 000,233,472 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleacc.dll MOD - [2011/08/05 05:10:54 \| 000,515,936 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgdecider.dll MOD - [2011/08/02 05:08:36 \| 000,499,040 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avgsrmx.dll MOD - [2011/08/02 05:08:32 \| 000,176,992 \| ---- \| M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2012\avglngx.dll MOD - [2011/07/20 04:15:44 \| 001,365,832 \| ---- \| M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE11\msxml5.dll MOD - [2011/07/15 21:30:27 \| 001,048,576 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2011/07/15 21:30:27 \| 000,272,384 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2011/06/15 21:35:50 \| 000,180,224 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\xmllite.dll MOD - [2011/06/15 02:18:37 \| 000,053,584 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90ENU.DLL MOD - [2011/06/15 02:18:22 \| 003,781,960 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll MOD - [2011/06/15 02:18:08 \| 000,569,680 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll MOD - [2011/06/15 02:18:07 \| 000,653,136 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll MOD - [2011/06/15 02:02:57 \| 000,632,656 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll MOD - [2011/06/15 02:02:57 \| 000,554,832 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll MOD - [2011/05/24 03:34:20 \| 000,064,512 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2011/05/24 03:34:20 \| 000,044,544 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devrtl.dll MOD - [2011/05/24 03:34:00 \| 000,145,920 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2011/03/02 22:29:23 \| 000,269,824 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dnsapi.dll MOD - [2011/02/18 22:32:48 \| 001,074,176 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\DWrite.dll MOD - [2011/01/27 14:13:40 \| 000,673,088 \| ---- \| M] () -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe MOD - [2011/01/25 22:32:33 \| 002,578,240 \| -HS- \| M] () -- \\?\C:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-1384460192-3018009557-3247798268-1000\MSPRindiv01.key MOD - [2010/12/20 22:38:22 \| 000,350,720 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winhttp.dll MOD - [2010/12/20 22:36:17 \| 001,389,568 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msxml6.dll MOD - [2010/12/04 02:04:12 \| 003,518,464 \| ---- \| M] (Microsoft Corporation) -- c:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0\coreclr.dll MOD - [2010/12/04 02:04:12 \| 000,004,096 \| ---- \| M] (Microsoft Corporation) -- c:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0\mscorrc.dll MOD - [2010/12/04 00:23:26 \| 005,961,544 \| ---- \| M] (Microsoft Corporation) -- c:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0\agcore.dll MOD - [2010/12/04 00:23:26 \| 001,024,328 \| ---- \| M] ( Microsoft Corporation) -- c:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0 pctrl.1.0.30716.0.dll MOD - [2010/12/04 00:23:26 \| 000,426,848 \| ---- \| M] (Microsoft Corporation) -- c:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0\SLMSPRBootstrap.dll MOD - [2010/08/25 21:39:58 \| 000,109,056 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\t2embed.dll MOD - [2010/08/20 22:21:32 \| 001,680,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll MOD - [2010/06/28 22:02:02 \| 001,413,632 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010/06/25 22:14:29 \| 001,495,040 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ExplorerFrame.dll MOD - [2010/06/18 23:23:50 \| 000,037,376 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rtutils.dll MOD - [2010/05/04 23:46:55 \| 000,363,520 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\StructuredQuery.dll MOD - [2009/12/28 23:55:34 \| 000,172,032 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll MOD - [2009/08/28 23:57:31 \| 000,034,816 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll MOD - [2009/08/26 16:00:04 \| 004,233,728 \| ---- \| M] (Intel Corporation) -- C:\Windows\SysWOW64\igdumd32.dll MOD - [2009/08/26 15:54:00 \| 000,549,888 \| ---- \| M] (Intel Corporation) -- C:\Windows\SysWOW64\igdumdx32.dll MOD - [2009/07/13 18:17:54 \| 000,249,680 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bcryptprimitives.dll MOD - [2009/07/13 18:17:54 \| 000,242,936 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll MOD - [2009/07/13 18:16:21 \| 000,327,680 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\zipfldr.dll MOD - [2009/07/13 18:16:20 \| 000,308,736 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wpc.dll MOD - [2009/07/13 18:16:20 \| 000,206,336 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ws2_32.dll MOD - [2009/07/13 18:16:20 \| 000,039,936 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wtsapi32.dll MOD - [2009/07/13 18:16:20 \| 000,035,840 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wshbth.dll MOD - [2009/07/13 18:16:20 \| 000,015,360 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wsock32.dll MOD - [2009/07/13 18:16:20 \| 000,010,752 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wship6.dll MOD - [2009/07/13 18:16:20 \| 000,009,216 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WSHTCPIP.DLL MOD - [2009/07/13 18:16:19 \| 000,268,800 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2009/07/13 18:16:19 \| 000,194,048 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winmm.dll MOD - [2009/07/13 18:16:19 \| 000,156,160 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winsta.dll MOD - [2009/07/13 18:16:19 \| 000,047,104 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wkscli.dll MOD - [2009/07/13 18:16:19 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winrnr.dll MOD - [2009/07/13 18:16:19 \| 000,016,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winnsi.dll MOD - [2009/07/13 18:16:18 \| 001,011,200 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll MOD - [2009/07/13 18:16:18 \| 000,262,144 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wevtapi.dll MOD - [2009/07/13 18:16:18 \| 000,086,528 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WcnApi.dll MOD - [2009/07/13 18:16:17 \| 001,123,328 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2009/07/13 18:16:17 \| 000,627,200 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2009/07/13 18:16:17 \| 000,079,360 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll MOD - [2009/07/13 18:16:17 \| 000,056,320 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009/07/13 18:16:17 \| 000,021,504 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009/07/13 18:16:16 \| 000,348,160 \| ---- \| M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll MOD - [2009/07/13 18:16:16 \| 000,082,944 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\thumbcache.dll MOD - [2009/07/13 18:16:15 \| 000,380,416 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sxs.dll MOD - [2009/07/13 18:16:15 \| 000,171,008 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2009/07/13 18:16:15 \| 000,090,112 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll MOD - [2009/07/13 18:16:15 \| 000,043,008 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009/07/13 18:16:15 \| 000,027,136 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\slc.dll MOD - [2009/07/13 18:16:14 \| 001,668,608 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2009/07/13 18:16:14 \| 000,350,208 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2009/07/13 18:16:14 \| 000,179,712 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2009/07/13 18:16:14 \| 000,007,168 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shfolder.dll MOD - [2009/07/13 18:16:13 \| 000,643,072 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SearchFolder.dll MOD - [2009/07/13 18:16:13 \| 000,092,160 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009/07/13 18:16:13 \| 000,060,928 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2009/07/13 18:16:13 \| 000,050,688 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2009/07/13 18:16:13 \| 000,045,568 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll MOD - [2009/07/13 18:16:13 \| 000,010,752 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SensApi.dll MOD - [2009/07/13 18:16:12 \| 000,988,160 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2009/07/13 18:16:12 \| 000,547,328 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\PortableDeviceApi.dll MOD - [2009/07/13 18:16:12 \| 000,325,120 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasapi32.dll MOD - [2009/07/13 18:16:12 \| 000,236,544 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\pdh.dll MOD - [2009/07/13 18:16:12 \| 000,145,408 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\powrprof.dll MOD - [2009/07/13 18:16:12 \| 000,090,112 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2009/07/13 18:16:12 \| 000,076,800 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasman.dll MOD - [2009/07/13 18:16:12 \| 000,065,024 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\pnrpnsp.dll MOD - [2009/07/13 18:16:12 \| 000,031,744 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009/07/13 18:16:12 \| 000,028,672 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\perfos.dll MOD - [2009/07/13 18:16:12 \| 000,011,776 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasadhlp.dll MOD - [2009/07/13 18:16:12 \| 000,006,144 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009/07/13 18:16:11 \| 000,121,856 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 tmarta.dll MOD - [2009/07/13 18:16:11 \| 000,016,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 pmproxy.dll MOD - [2009/07/13 18:16:11 \| 000,008,704 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 si.dll MOD - [2009/07/13 18:16:03 \| 001,661,440 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 etworkexplorer.dll MOD - [2009/07/13 18:16:03 \| 000,051,712 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 laapi.dll MOD - [2009/07/13 18:16:03 \| 000,040,960 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 etworkitemfactory.dll MOD - [2009/07/13 18:16:03 \| 000,022,016 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 etutils.dll MOD - [2009/07/13 18:16:02 \| 000,219,136 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 crypt.dll MOD - [2009/07/13 18:16:02 \| 000,056,832 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 etapi32.dll MOD - [2009/07/13 18:16:02 \| 000,052,224 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\NapiNSP.dll MOD - [2009/07/13 18:15:51 \| 000,232,448 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mswsock.dll MOD - [2009/07/13 18:15:50 \| 000,120,320 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvfw32.dll MOD - [2009/07/13 18:15:44 \| 002,340,864 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msi.dll MOD - [2009/07/13 18:15:44 \| 000,004,608 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msimg32.dll MOD - [2009/07/13 18:15:43 \| 000,828,928 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009/07/13 18:15:42 \| 000,481,280 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mscms.dll MOD - [2009/07/13 18:15:42 \| 000,072,192 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msacm32.dll MOD - [2009/07/13 18:15:41 \| 000,213,504 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MMDevAPI.dll MOD - [2009/07/13 18:15:41 \| 000,064,000 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll MOD - [2009/07/13 18:15:40 \| 000,177,664 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mlang.dll MOD - [2009/07/13 18:15:40 \| 000,016,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\midimap.dll MOD - [2009/07/13 18:15:39 \| 000,352,768 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mfplat.dll MOD - [2009/07/13 18:15:36 \| 000,022,016 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\linkinfo.dll MOD - [2009/07/13 18:15:35 \| 000,004,608 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ksuser.dll MOD - [2009/07/13 18:15:33 \| 000,103,936 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IPHLPAPI.DLL MOD - [2009/07/13 18:15:31 \| 000,154,624 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imagehlp.dll MOD - [2009/07/13 18:15:27 \| 000,215,040 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\icm32.dll MOD - [2009/07/13 18:15:27 \| 000,009,728 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IconCodecService.dll MOD - [2009/07/13 18:15:22 \| 000,079,872 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gpapi.dll MOD - [2009/07/13 18:15:21 \| 000,462,848 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\FirewallAPI.dll MOD - [2009/07/13 18:15:21 \| 000,216,576 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\FWPUCLNT.DLL MOD - [2009/07/13 18:15:21 \| 000,167,424 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fundisc.dll MOD - [2009/07/13 18:15:20 \| 000,081,920 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fdWCN.dll MOD - [2009/07/13 18:15:20 \| 000,035,328 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\feclient.dll MOD - [2009/07/13 18:15:20 \| 000,027,136 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fdProxy.dll MOD - [2009/07/13 18:15:20 \| 000,024,576 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fdWNet.dll MOD - [2009/07/13 18:15:14 \| 000,189,952 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorShell.dll MOD - [2009/07/13 18:15:14 \| 000,128,512 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorAPI.dll MOD - [2009/07/13 18:15:13 \| 000,717,824 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dui70.dll MOD - [2009/07/13 18:15:13 \| 000,453,632 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dsound.dll MOD - [2009/07/13 18:15:13 \| 000,181,248 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\duser.dll MOD - [2009/07/13 18:15:13 \| 000,067,072 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009/07/13 18:15:13 \| 000,032,256 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dtsh.dll MOD - [2009/07/13 18:15:11 \| 000,061,952 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc.dll MOD - [2009/07/13 18:15:11 \| 000,043,008 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc6.dll MOD - [2009/07/13 18:15:11 \| 000,043,008 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dfscli.dll MOD - [2009/07/13 18:15:09 \| 000,854,528 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dbghelp.dll MOD - [2009/07/13 18:15:08 \| 001,826,816 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d9.dll MOD - [2009/07/13 18:15:08 \| 000,011,264 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\d3d8thk.dll MOD - [2009/07/13 18:15:07 \| 001,151,488 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll MOD - [2009/07/13 18:15:07 \| 000,486,912 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2009/07/13 18:15:07 \| 000,103,424 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptnet.dll MOD - [2009/07/13 18:15:07 \| 000,078,848 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptsp.dll MOD - [2009/07/13 18:15:07 \| 000,036,864 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009/07/13 18:15:07 \| 000,034,816 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll MOD - [2009/07/13 18:15:07 \| 000,016,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\credssp.dll MOD - [2009/07/13 18:15:03 \| 000,522,240 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009/07/13 18:15:00 \| 000,041,472 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\browcli.dll MOD - [2009/07/13 18:14:58 \| 000,014,336 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\avrt.dll MOD - [2009/07/13 18:14:57 \| 000,195,584 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\AudioSes.dll MOD - [2009/07/13 18:14:57 \| 000,070,144 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009/07/13 18:14:53 \| 000,640,000 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2009/07/13 18:14:53 \| 000,292,352 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2009/07/13 18:14:52 \| 000,309,248 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\actxprxy.dll MOD - [2009/07/13 18:14:10 \| 000,095,232 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009/07/13 18:14:08 \| 000,319,488 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2009/07/13 18:14:08 \| 000,172,032 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wdmaud.drv MOD - [2009/07/13 18:14:08 \| 000,020,992 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msacm32.drv MOD - [2009/07/13 18:11:24 \| 000,833,024 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2009/07/13 18:11:24 \| 000,245,760 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009/07/13 18:11:23 \| 000,662,528 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2009/07/13 18:11:23 \| 000,025,600 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009/07/13 18:11:21 \| 000,310,784 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2009/07/13 18:11:21 \| 000,119,808 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2009/07/13 18:11:20 \| 000,080,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bcrypt.dll MOD - [2009/07/13 18:09:00 \| 000,002,048 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\SysWOW64 ormaliz.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010/02/26 19:34:42 \| 000,030,520 \| ---- \| M] (Hewlett-Packard Company) [Auto \| Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV:64bit: - [2009/07/13 18:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009/01/28 06:15:24 \| 000,290,304 \| ---- \| M] (IDT, Inc.) [Auto \| Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_27a7f4961a76cb4e\stacsv64.exe -- (STacSV) SRV:64bit: - [2008/11/17 12:22:44 \| 000,088,576 \| ---- \| M] (Andrea Electronics Corporation) [Auto \| Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_27a7f4961a76cb4e\AESTSr64.exe -- (AESTFilters) SRV - [2011/10/12 05:25:22 \| 004,433,248 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2011/09/26 16:48:28 \| 000,246,600 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe -- (vToolbarUpdater) SRV - [2011/08/02 05:09:08 \| 000,192,776 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Auto \| Running] -- C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -- (avgwd) SRV - [2011/06/06 12:55:28 \| 000,064,952 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011/01/27 14:13:50 \| 000,226,624 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe -- (MotoHelper) SRV - [2010/03/18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/03/04 12:00:56 \| 000,025,704 \| R--- \| M] (Amazon.com) [Auto \| Running] -- C:\Program Files (x86)\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe -- (ADVService) SRV - [2009/10/09 08:07:20 \| 000,493,248 \| ---- \| M] (Cisco Systems, Inc.) [Auto \| Running] -- C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe -- (vpnagent) SRV - [2009/06/10 14:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008/12/23 17:18:20 \| 000,365,952 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\SMINST\BLService.exe -- (Recovery Service for Windows) SRV - [2008/11/26 17:13:08 \| 000,296,320 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe -- (TVCapSvc) TV Background Capture Service (TVBCS) SRV - [2008/11/26 17:13:08 \| 000,116,096 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe -- (TVSched) TV Task Scheduler (TVTS) SRV - [2008/03/14 01:00:00 \| 000,103,744 \| ---- \| M] (McAfee, Inc.) [Auto \| Running] -- C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe -- (McAfeeFramework) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011/10/07 05:23:46 \| 000,283,728 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64) DRV:64bit: - [2011/09/13 05:30:08 \| 000,037,456 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| Boot \| Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64) DRV:64bit: - [2011/08/08 05:08:58 \| 000,046,672 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64) DRV:64bit: - [2011/07/11 00:14:36 \| 000,375,376 \| ---- \| M] (AVG Technologies CZ, s.r.o.) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia) DRV:64bit: - [2011/07/11 00:14:08 \| 000,029,776 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV:64bit: - [2011/07/11 00:14:06 \| 000,120,400 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV:64bit: - [2011/07/11 00:14:06 \| 000,026,704 \| ---- \| M] (AVG Technologies CZ, s.r.o. ) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\AVGIDSEH.sys -- (AVGIDSEH) DRV:64bit: - [2011/05/10 07:06:08 \| 000,051,712 \| ---- \| M] (Apple, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2011/03/10 23:22:41 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/03/10 23:22:40 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2010/12/03 14:03:26 \| 000,021,504 \| ---- \| M] (Motorola) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\motccgp.sys -- (motccgp) DRV:64bit: - [2010/03/02 15:45:24 \| 001,594,368 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2010/02/26 19:34:48 \| 000,030,008 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:64bit: - [2010/02/26 19:34:30 \| 000,041,272 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:64bit: - [2010/02/25 14:18:58 \| 000,018,432 \| ---- \| M] (Hewlett-Packard Development Company, L.P.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:64bit: - [2010/01/25 18:57:54 \| 000,010,240 \| ---- \| M] (Motorola Inc) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\motusbdevice.sys -- (motusbdevice) DRV:64bit: - [2009/10/09 07:50:48 \| 000,024,248 \| ---- \| M] (Cisco Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vpnva64.sys -- (vpnva) DRV:64bit: - [2009/08/26 16:07:06 \| 007,369,600 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2009/07/13 18:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/13 18:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/13 18:47:48 \| 000,077,888 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009/07/13 18:47:48 \| 000,023,104 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2009/07/13 18:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/07/09 14:45:12 \| 000,139,264 \| ---- \| M] (Intel(R) Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R) DRV:64bit: - [2009/06/10 13:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 13:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 13:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 13:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009/05/18 13:17:08 \| 000,034,152 \| ---- \| M] (GEAR Software Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2009/03/01 22:05:32 \| 000,187,392 \| ---- \| M] (Realtek Corporation ) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009/01/29 16:18:12 \| 000,009,216 \| ---- \| M] (Motorola) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\motccgpfl.sys -- (motccgpfl) DRV:64bit: - [2009/01/28 06:16:06 \| 000,473,088 \| ---- \| M] (IDT, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:64bit: - [2008/12/30 05:18:40 \| 000,068,608 \| ---- \| M] (ENE TECHNOLOGY INC.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir) DRV:64bit: - [2008/12/02 14:01:42 \| 000,068,608 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\RTSTOR64.sys -- (RTSTOR) DRV:64bit: - [2008/11/10 13:26:30 \| 000,184,832 \| ---- \| M] (Realtek Corporation ) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\Rtlh64.sys -- (RTL8169) DRV:64bit: - [2008/09/18 10:08:04 \| 000,260,144 \| ---- \| M] (Synaptics, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2007/11/02 14:52:02 \| 000,008,576 \| ---- \| M] (Motorola) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\motswch.sys -- (MotoSwitchService) DRV - [2009/07/13 18:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2008/11/28 18:04:24 \| 000,146,928 \| ---- \| M] (CyberLink Corp.) [2009/08/01 14:44:44] [Kernel \| Auto \| Running] -- C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl -- ({55662437-DA8C-40c0-AADA-2C816A897A49}) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE:64bit: - HKLM\..\SearchScopes\{7EEAD0DA-121E-498E-B773-B8F0B4C4AAB1}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&FORM=HPNTDF IE:64bit: - HKLM\..\SearchScopes\{B226DAE9-F4F6-41AA-9CD0-4000E7E09068}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{7EEAD0DA-121E-498E-B773-B8F0B4C4AAB1}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&FORM=HPNTDF IE - HKLM\..\SearchScopes\{B226DAE9-F4F6-41AA-9CD0-4000E7E09068}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.umail.utah.edu/exchweb/bin/auth/owalogon.asp?url=https://www.umail.utah.edu/exchange&reason=0&replaceCurrent=1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_en IE - HKCU\..\SearchScopes\{7EEAD0DA-121E-498E-B773-B8F0B4C4AAB1}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=HPNTDF&pc=HPNTDF&src=IE-SearchBox IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={607E6351-67CA-4162-AD62-65F68A95E177}&mid=1ceb0e2ba3d4e8193d1a824e4dd61312-dced94e0469bb2064c762889dd00bbe705c942ac&lang=en&ds=AVG&pr=fr&d=2011-09-26 17:48:32&v=8.0.0.34&sap=dsp&q={searchTerms} IE - HKCU\..\SearchScopes\{B226DAE9-F4F6-41AA-9CD0-4000E7E09068}: "URL" = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = .local;192.168..* ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://pubs.acs.org/journal/ancham" FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.1.20091029021655 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: avg@igeared:6.103.018.001 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1209 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17 FF - prefs.js..keyword.URL: "http://isearch.avg.com/search?cid=%7Bda544b11-1b1d-4e73-8cc6-9b5bc1555ae0%7D&mid=1ceb0e2ba3d4e8193d1a824e4dd61312-dced94e0469bb2064c762889dd00bbe705c942ac&ds=AVG&v=8.0.0.34.1&lang=en&pr=fr&d=2011-09-26%2017%3A48%3A32&sap=ku&q=" FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins pitunes.dll () FF - HKLM\Software\MozillaPlugins\@cambridgesoft.com/Chem3D,version=12.0: C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\Chem3D pChem3DPlugin.dll (CambridgeSoft Corp.) FF - HKLM\Software\MozillaPlugins\@cambridgesoft.com/ChemDraw,version=12.0: C:\Program Files (x86)\CambridgeSoft\ChemOffice2010\ChemDraw pcdp32.dll (CambridgeSoft Corp.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin ew_plugin pjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.51204.0 pctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR ppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Users\Alexis\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins pybrowserplus_2.9.8.dll (Yahoo! Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2010/01/19 21:10:44 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files (x86)\AVG\AVG2012\Firefox4\ [2012/02/01 08:20:53 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/02/21 18:11:18 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/12/08 23:59:54 \| 000,000,000 \| ---D \| M] [2010/03/07 13:19:09 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Extensions [2010/03/07 13:19:09 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2012/01/25 22:34:21 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\cfi9dzy8.default\extensions [2010/04/28 07:07:09 \| 000,000,000 \| ---D \| M] (Microsoft .NET Framework Assistant) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\cfi9dzy8.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012/01/25 22:34:17 \| 000,000,000 \| ---D \| M] (Yahoo! Toolbar) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\cfi9dzy8.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2011/09/26 16:48:50 \| 000,000,000 \| ---D \| M] (AVG Security Toolbar) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\cfi9dzy8.default\extensions\avg@toolbar [2011/09/26 17:17:25 \| 000,003,849 \| ---- \| M] () -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\cfi9dzy8.default\searchplugins\avg-secure-search.xml [2011/11/08 12:55:33 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2011/10/13 21:38:55 \| 000,000,000 \| ---D \| M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012/02/21 18:11:18 \| 000,000,000 \| ---D \| M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012/02/21 18:11:18 \| 000,134,104 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011/02/02 21:40:24 \| 000,472,808 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pdeployJava1.dll [2006/10/26 21:12:16 \| 000,016,192 \| ---- \| M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2011/09/05 10:04:56 \| 000,183,696 \| ---- \| M] (Adobe Systems Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins ppdf32.dll [2011/01/14 13:14:31 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin.dll [2011/01/14 13:14:31 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin2.dll [2011/01/14 13:14:31 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin3.dll [2011/01/14 13:14:31 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin4.dll [2011/01/14 13:14:31 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin5.dll [2011/01/14 13:14:31 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin6.dll [2011/01/14 13:14:32 \| 000,159,744 \| ---- \| M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins pqtplugin7.dll [2012/02/19 21:54:20 \| 000,001,394 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom.xml [2011/05/01 12:53:29 \| 000,002,193 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\answers.xml [2012/02/19 21:54:20 \| 000,002,252 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2011/05/01 12:53:29 \| 000,001,534 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\creativecommons.xml [2012/02/19 21:54:20 \| 000,001,131 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay.xml [2012/02/19 21:54:20 \| 000,002,364 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml [2012/02/19 21:54:20 \| 000,002,040 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml [2012/02/19 21:54:20 \| 000,001,178 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia.xml [2012/02/19 21:54:20 \| 000,001,096 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo.xml O1 HOSTS File: ([2006/09/18 14:37:24 \| 000,000,761 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll () O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll (Microsoft Corp.) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found. O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative laapi.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64 laapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12) O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_12-windows-i586.cab (Java Plug-in 1.6.0_12

March 7, 2012 12:17	Re: Virus Not Detected #194795
	Reply with Quote \| Quick Reply \| Top
nemethste TechBuddy Ambassador Join Date: 1.11.2011 Posts: 1730	Hello Alexis, Gmer is designed primary for 32bit systems however it can also provide useful information from 64bit Windows as well but it may not be working properly sometimes. Your computer appears to be clean according to the analysis of all the files you provided us with. Should you encounter any issues with malware or AVG or of you have any questions feel free to ask here on forums again. Thank you. ___________________AVG TeamHow-To articles \| FAQ \| Free SupportWe Protect Us

New thread Reply

Go to

Previous thread |

Up to parent | Next thread