TRLOG

***** NORMAL SCAN FOR ACTIVE MALWARE *****
Trojan Remover Ver 6.7.6.2565. For information, email support@simplysup.com

[Unregistered version]
Scan started at: 8:55:28 PM 04 Dec 2011
Using Database v7291
Operating System: Windows 7 Ultimate [Build: 6.1.7600]
File System:
NTFS
User Account Control is DISABLED.
UserData directory: C:\Users\PAKISTAN\AppData\Roaming\Simply Super Software\Troj
an Remover\
Database directory: C:\Program Files\Trojan Remover\
Logfile directory: C:\Users\PAKISTAN\Documents\Simply Super Software\Trojan Rem
over Logfiles\
Program directory: C:\Program Files\Trojan Remover\
Running with Administrator privileges
************************************************************
The following Anti-Malware program(s) are loaded:
Avira AntiVir
************************************************************
************************************************************
8:55:29 PM: ----- SCANNING FOR ROOTKIT SERVICES ----No hidden Services were detected.
************************************************************
8:55:30 PM: Scanning -----WINDOWS REGISTRY-----------------------Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
-------------------Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
This key's "Shell" value calls the following program(s):
Key value: [explorer.exe]
File: explorer.exe
C:\Windows\explorer.exe
2613248 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
Company: Microsoft Corporation
---------This key's "Userinit" value calls the following program(s):
Key value: [C:\Windows\system32\userinit.exe,]
File: C:\Windows\system32\userinit.exe
C:\Windows\system32\userinit.exe
26112 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:14 AM
----------------------------Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
-------------------Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
Value Name: load
-------------------Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: USB Antivirus
Value Data: C:\Program Files\USB Disk Security\USBGuard.exe
C:\Program Files\USB Disk Security\USBGuard.exe

798720 bytes
Created: 10/14/2011 8:59 AM
Modified: 3/27/2008 11:35 AM
Company: http://www.zbshareware.com
-------------------Value Name: QuickTime Task
Value Data: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
C:\Program Files\QuickTime\QTTask.exe
421888 bytes
Created: 7/5/2011 6:36 PM
Modified: 7/5/2011 6:36 PM
Company: Apple Inc.
-------------------Value Name: SunJavaUpdateSched
Value Data: "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
C:\Program Files\Common Files\Java\Java Update\jusched.exe
254696 bytes
Created: 6/9/2011 1:06 PM
Modified: 6/9/2011 1:06 PM
Company: Sun Microsystems, Inc.
-------------------Value Name: MSC
Value Data: "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runk
ey
c:\Program Files\Microsoft Security Client\msseces.exe
997920 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
-------------------Value Name: Corel Graphics Suite 1117
Value Data: C:\Program Files\Corel\Corel Graphics 11\Register\registration.exe /
title="Corel Graphics Suite 11" /date=112611 serial=DR11CRD-0012082-DGW
C:\Program Files\Corel\Corel Graphics 11\Register\registration.exe [file not fou
nd to scan]
-------------------Value Name:
Value Data:
Blank entry: []
-------------------Value Name: ApnUpdater
Value Data: "C:\Program Files\Ask.com\Updater\Updater.exe"
C:\Program Files\Ask.com\Updater\Updater.exe
901800 bytes
Created: 11/21/2011 2:18 AM
Modified: 11/21/2011 2:18 AM
Company: {StringFileInfo_CompanyName}
-------------------Value Name: avgnt
Value Data: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
258512 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
Company: Avira Operations GmbH & Co. KG
-------------------Value Name: IMMON
Value Data: "C:\Program Files\IM Magician\Vicamon.exe"
C:\Program Files\IM Magician\Vicamon.exe
143360 bytes
Created: 1/1/2012 11:16 AM
Modified: 5/7/2009 10:58 AM
Company: Vimisoft Studio
--------------------------------------Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
This Registry Key appears to be empty
-------------------Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Value Name: Facebook Update
Value Data: "C:\Users\PAKISTAN\AppData\Local\Facebook\Update\FacebookUpdate.exe"
/c /nocrashserver
C:\Users\PAKISTAN\AppData\Local\Facebook\Update\FacebookUpdate.exe
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Company: Facebook Inc.
-------------------Value Name: DownloadAccelerator
Value Data: "C:\Program Files\DAP\DAP.EXE" /STARTUP
C:\Program Files\DAP\DAP.EXE
2975920 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/29/2011 6:30 AM
Company: SpeedBit Ltd.
-------------------Value Name: Mobile Partner
Value Data: "C:\Program Files\Broadband\Broadband.exe"
C:\Program Files\Broadband\Broadband.exe
536576 bytes
Created: 12/23/2011 6:20 AM
Modified: 12/23/2011 6:20 AM
Company: TODO: <???>
--------------------------------------Checking HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
************************************************************
8:55:33 PM: Scanning -----SHELLEXECUTEHOOKS----ShellExecuteHooks key is empty
************************************************************
8:55:33 PM: Scanning -----HIDDEN REGISTRY ENTRIES----Taskdir check completed
---------No Hidden File-loading Registry Entries found
---------************************************************************
8:55:34 PM: Scanning -----ACTIVE SCREENSAVER----ScreenSaver: C:\Windows\system32\scrnsave.scr
C:\Windows\system32\scrnsave.scr
10240 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
--------------------
************************************************************
8:55:34 PM: Scanning ----- REGISTRY ACTIVE SETUP KEYS ----Key: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}
Path: "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",Bran
dIEActiveSetup SIGNUP
C:\Windows\System32\rundll32.exe
44544 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
---------************************************************************
8:55:41 PM: Scanning ----- SERVICEDLL REGISTRY KEYS ----Key: AppIDSvc
Path: %SystemRoot%\System32\appidsvc.dll
C:\Windows\System32\appidsvc.dll
27648 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: AxInstSV
Path: %SystemRoot%\System32\AxInstSV.dll
C:\Windows\System32\AxInstSV.dll
88064 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: BDESVC
Path: %SystemRoot%\System32\bdesvc.dll
C:\Windows\System32\bdesvc.dll
76800 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: bthserv
Path: %SystemRoot%\system32\bthserv.dll
C:\Windows\system32\bthserv.dll
64512 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: defragsvc
Path: %Systemroot%\System32\defragsvc.dll
C:\Windows\System32\defragsvc.dll
218624 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: Dhcp
Path: %SystemRoot%\system32\dhcpcore.dll
C:\Windows\system32\dhcpcore.dll
253440 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:15 AM

-------------------Key: FontCache
Path: %SystemRoot%\system32\FntCache.dll
C:\Windows\system32\FntCache.dll
797696 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: HomeGroupListener
Path: %SystemRoot%\system32\ListSvc.dll
C:\Windows\system32\ListSvc.dll
194560 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: HomeGroupProvider
Path: %SystemRoot%\system32\provsvc.dll
C:\Windows\system32\provsvc.dll
165376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: p2pimsvc
Path: %SystemRoot%\system32\pnrpsvc.dll
C:\Windows\system32\pnrpsvc.dll
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PeerDistSvc
Path: %SystemRoot%\system32\peerdistsvc.dll
C:\Windows\system32\peerdistsvc.dll
1004544 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPAutoReg
Path: %SystemRoot%\system32\pnrpauto.dll
C:\Windows\system32\pnrpauto.dll
20480 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Power
Path: %SystemRoot%\system32\umpo.dll
C:\Windows\system32\umpo.dll
119808 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: RpcEptMapper
Path: %SystemRoot%\System32\RpcEpMap.dll
C:\Windows\System32\RpcEpMap.dll
43520 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: SensrSvc
Path: %SystemRoot%\system32\sensrsvc.dll
C:\Windows\system32\sensrsvc.dll
25088 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: sppuinotify
Path: %SystemRoot%\system32\sppuinotify.dll
C:\Windows\system32\sppuinotify.dll
53760 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Themes
Path: %SystemRoot%\system32\themeservice.dll
C:\Windows\system32\themeservice.dll
37376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WbioSrvc
Path: %SystemRoot%\System32\wbiosrvc.dll
C:\Windows\System32\wbiosrvc.dll
151552 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WwanSvc
Path: %SystemRoot%\System32\wwansvc.dll
C:\Windows\System32\wwansvc.dll
185856 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------************************************************************
8:56:01 PM: Scanning ----- SERVICES REGISTRY KEYS ----Key:
1394ohci
ImagePath: \SystemRoot\system32\DRIVERS\1394ohci.sys
C:\Windows\system32\DRIVERS\1394ohci.sys
163328 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
AcpiPmi
ImagePath: \SystemRoot\system32\DRIVERS\acpipmi.sys
C:\Windows\system32\DRIVERS\acpipmi.sys
9728 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 4:16 AM
---------Key:
ALCXWDM
ImagePath: system32\drivers\RTKVAC.SYS
C:\Windows\system32\drivers\RTKVAC.SYS
4172832 bytes
Created: 6/18/2009 7:45 PM
Modified: 6/18/2009 7:45 PM
Company: Realtek Semiconductor Corp.
---------Key:
AmdPPM
ImagePath: \SystemRoot\system32\DRIVERS\amdppm.sys
C:\Windows\system32\DRIVERS\amdppm.sys
52736 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
amdsata
ImagePath: \SystemRoot\system32\DRIVERS\amdsata.sys
C:\Windows\system32\DRIVERS\amdsata.sys
79952 bytes
Created: 6/11/2009 2:19 AM
Modified: 7/14/2009 6:26 AM
Company: Advanced Micro Devices
---------Key:
amdsbs
ImagePath: \SystemRoot\system32\DRIVERS\amdsbs.sys
C:\Windows\system32\DRIVERS\amdsbs.sys
159312 bytes
Created: 6/11/2009 2:20 AM
Modified: 7/14/2009 6:26 AM
Company: AMD Technologies Inc.
---------Key:
amdxata
ImagePath: system32\DRIVERS\amdxata.sys
C:\Windows\system32\DRIVERS\amdxata.sys
23616 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:26 AM
---------Key:
AntiVirSchedulerService
ImagePath: "C:\Program Files\Avira\AntiVir Desktop\sched.exe"
C:\Program Files\Avira\AntiVir Desktop\sched.exe
86224 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
---------Key:
AntiVirService
ImagePath: "C:\Program Files\Avira\AntiVir Desktop\avguard.exe"
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
110032 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
---------Key:
AntiVirWebService
ImagePath: "C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE"
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
463824 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
---------Key:
AppID
ImagePath: \SystemRoot\system32\drivers\appid.sys
C:\Windows\system32\drivers\appid.sys
50176 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 4:36 AM
---------Key:
avgntflt
ImagePath: system32\DRIVERS\avgntflt.sys
C:\Windows\system32\DRIVERS\avgntflt.sys
74640 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
Company: Avira GmbH
---------Key:
avipbb
ImagePath: system32\DRIVERS\avipbb.sys
C:\Windows\system32\DRIVERS\avipbb.sys
134856 bytes
Created: 12/31/2011 8:57 AM
Modified: 1/1/2012 9:00 AM
Company: Avira GmbH
---------Key:
avkmgr
ImagePath: system32\DRIVERS\avkmgr.sys
C:\Windows\system32\DRIVERS\avkmgr.sys
36000 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
Company: Avira GmbH
---------Key:
awhfxjhi
ImagePath: \??\C:\Windows\system32\drivers\awhfxjhi.sys
C:\Windows\system32\drivers\awhfxjhi.sys [file not found to scan]
---------Key:
b06bdrv
ImagePath: \SystemRoot\system32\DRIVERS\bxvbdx.sys
C:\Windows\system32\DRIVERS\bxvbdx.sys
430080 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
Company: Broadcom Corporation
---------Key:
b57nd60x
ImagePath: system32\DRIVERS\b57nd60x.sys
C:\Windows\system32\DRIVERS\b57nd60x.sys
229888 bytes
Created: 7/14/2009 3:02 AM
Modified: 7/14/2009 3:02 AM
---------Key:
blbdrive
ImagePath: system32\DRIVERS\blbdrive.sys
C:\Windows\system32\DRIVERS\blbdrive.sys
35328 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 4:23 AM
---------Key:
CmBatt
ImagePath: \SystemRoot\system32\DRIVERS\CmBatt.sys
C:\Windows\system32\DRIVERS\CmBatt.sys
14080 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
CNG
ImagePath: System32\Drivers\cng.sys
C:\Windows\System32\Drivers\cng.sys
369568 bytes
Created: 7/14/2009 4:32 AM
Modified: 7/14/2009 6:17 AM
---------Key:
CompositeBus
ImagePath: system32\DRIVERS\CompositeBus.sys
C:\Windows\system32\DRIVERS\CompositeBus.sys
31232 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
crcdisk
ImagePath: \SystemRoot\system32\DRIVERS\crcdisk.sys
C:\Windows\system32\DRIVERS\crcdisk.sys
22096 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
discache
ImagePath: System32\drivers\discache.sys
C:\Windows\System32\drivers\discache.sys
32256 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 4:24 AM
---------Key:
djjxwasc
ImagePath: \??\C:\Windows\system32\drivers\djjxwasc.sys
C:\Windows\system32\drivers\djjxwasc.sys [file not found to scan]
---------Key:
ebdrv
ImagePath: \SystemRoot\system32\DRIVERS\evbdx.sys
C:\Windows\system32\DRIVERS\evbdx.sys
3100160 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
exvcfxgw
ImagePath: \??\C:\Windows\system32\drivers\exvcfxgw.sys
C:\Windows\system32\drivers\exvcfxgw.sys [file not found to scan]
---------Key:
flpydisk
ImagePath: \SystemRoot\system32\DRIVERS\flpydisk.sys
C:\Windows\system32\DRIVERS\flpydisk.sys
19968 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
FsDepends
ImagePath: System32\drivers\FsDepends.sys
C:\Windows\System32\drivers\FsDepends.sys
46160 bytes
Created: 7/14/2009 4:15 AM
Modified: 7/14/2009 6:20 AM
---------Key:
gupdate
ImagePath: C:\Program Files\Google\Update\GoogleUpdate.exe /svc
C:\Program Files\Google\Update\GoogleUpdate.exe
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Company: Google Inc.
---------Key:
gupdatem
ImagePath: C:\Program Files\Google\Update\GoogleUpdate.exe /medsvc
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
hcw85cir
ImagePath: \SystemRoot\system32\drivers\hcw85cir.sys
C:\Windows\system32\drivers\hcw85cir.sys
26624 bytes
Created: 7/14/2009 3:54 AM
Modified: 7/14/2009 3:54 AM
Company: Hauppauge Computer Works, Inc.
---------Key:
HidBatt
ImagePath: \SystemRoot\system32\DRIVERS\HidBatt.sys
C:\Windows\system32\DRIVERS\HidBatt.sys
21504 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
HpSAMD
ImagePath: \SystemRoot\system32\DRIVERS\HpSAMD.sys
C:\Windows\system32\DRIVERS\HpSAMD.sys
67152 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
Company: Hewlett-Packard Company
---------Key:
hwdatacard
ImagePath: system32\DRIVERS\ewusbmdm.sys
C:\Windows\system32\DRIVERS\ewusbmdm.sys
102912 bytes
Created: 12/23/2011 6:21 AM
Modified: 9/10/2009 3:31 PM
Company: Huawei Technologies Co., Ltd.
---------Key:
hwpolicy
ImagePath: System32\drivers\hwpolicy.sys
C:\Windows\System32\drivers\hwpolicy.sys
13904 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwusbdev
ImagePath: system32\DRIVERS\ewusbdev.sys
C:\Windows\system32\DRIVERS\ewusbdev.sys
101120 bytes
Created: 12/23/2011 6:21 AM
Modified: 10/12/2009 3:22 PM
---------Key:
intelppm
ImagePath: \SystemRoot\system32\DRIVERS\intelppm.sys
C:\Windows\system32\DRIVERS\intelppm.sys
53760 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
iScsiPrt
ImagePath: \SystemRoot\system32\DRIVERS\msiscsi.sys
C:\Windows\system32\DRIVERS\msiscsi.sys
186960 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
kbdhid
ImagePath: \SystemRoot\system32\DRIVERS\kbdhid.sys
C:\Windows\system32\DRIVERS\kbdhid.sys
28160 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
KSecPkg
ImagePath: System32\Drivers\ksecpkg.sys
C:\Windows\System32\Drivers\ksecpkg.sys
133200 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_FC
ImagePath: \SystemRoot\system32\DRIVERS\lsi_fc.sys
C:\Windows\system32\DRIVERS\lsi_fc.sys
95824 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
Company: LSI Corporation
---------Key:
LSI_SAS
ImagePath: \SystemRoot\system32\DRIVERS\lsi_sas.sys
C:\Windows\system32\DRIVERS\lsi_sas.sys
89168 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS2
ImagePath: \SystemRoot\system32\DRIVERS\lsi_sas2.sys
C:\Windows\system32\DRIVERS\lsi_sas2.sys
54864 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SCSI
ImagePath: \SystemRoot\system32\DRIVERS\lsi_scsi.sys
C:\Windows\system32\DRIVERS\lsi_scsi.sys
96848 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
MpFilter
ImagePath: system32\DRIVERS\MpFilter.sys
C:\Windows\system32\DRIVERS\MpFilter.sys
165648 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
MpKsl175ac0df
ImagePath: \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates
\{5CE904C5-2D9B-420D-A218-479DDDAF1220}\MpKsl175ac0df.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5CE904C5-2D9B
-420D-A218-479DDDAF1220}\MpKsl175ac0df.sys [file not found to scan]
---------Key:
MpKsl19b7cb5c
\{63FC53AE-0C80-4781-A0F2-D285951B5C1C}\MpKsl19b7cb5c.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{63FC53AE-0C80
-4781-A0F2-D285951B5C1C}\MpKsl19b7cb5c.sys [file not found to scan]
---------Key:
MpKsl292c9fc4
\{C2E8B41D-8A3B-440A-94E5-ADC0E3405A30}\MpKsl292c9fc4.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C2E8B41D-8A3B

-440A-94E5-ADC0E3405A30}\MpKsl292c9fc4.sys [file not found to scan]
---------Key:
MpKsl2ed2d473
\{FEDAB18A-7B52-47C7-8216-D8E2B3F38CB6}\MpKsl2ed2d473.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FEDAB18A-7B52
-47C7-8216-D8E2B3F38CB6}\MpKsl2ed2d473.sys [file not found to scan]
---------Key:
MpKsl41b47353
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl41b47353.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4E6B76EC-3692
-4C80-A00B-FB2A4A817156}\MpKsl41b47353.sys [file not found to scan]
---------Key:
MpKsl42564376
\{A1890F5B-444C-4721-85E5-2D8B0E3D7118}\MpKsl42564376.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A1890F5B-444C
-4721-85E5-2D8B0E3D7118}\MpKsl42564376.sys [file not found to scan]
---------Key:
MpKsl43dec7fa
\{0BA28B78-A5AB-4621-AB03-331336B8C789}\MpKsl43dec7fa.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0BA28B78-A5AB
-4621-AB03-331336B8C789}\MpKsl43dec7fa.sys [file not found to scan]
---------Key:
MpKsl4827cce2
\{FA200FC3-0ACF-4696-B54F-C617A393F3F2}\MpKsl4827cce2.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FA200FC3-0ACF
-4696-B54F-C617A393F3F2}\MpKsl4827cce2.sys [file not found to scan]
---------Key:
MpKsl4af71ab5
\{125D1778-DD71-426D-9BB3-F65A9923CA17}\MpKsl4af71ab5.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{125D1778-DD71
-426D-9BB3-F65A9923CA17}\MpKsl4af71ab5.sys [file not found to scan]
---------Key:
MpKsl5ac8e01c
\{EC9E497F-B5E8-44D0-B086-3AF9A4221A07}\MpKsl5ac8e01c.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{EC9E497F-B5E8
-44D0-B086-3AF9A4221A07}\MpKsl5ac8e01c.sys [file not found to scan]
---------Key:
MpKsl5cc2f1c0
\{5CE904C5-2D9B-420D-A218-479DDDAF1220}\MpKsl5cc2f1c0.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5CE904C5-2D9B
-420D-A218-479DDDAF1220}\MpKsl5cc2f1c0.sys [file not found to scan]
---------Key:
MpKsl611ac31f
\{E4A015ED-FE16-4385-96B4-862985D2FFFC}\MpKsl611ac31f.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E4A015ED-FE16
-4385-96B4-862985D2FFFC}\MpKsl611ac31f.sys [file not found to scan]
---------Key:
MpKsl65972984
\{89274BDA-1166-4961-AA83-49BE6A9B35DC}\MpKsl65972984.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{89274BDA-1166

-4961-AA83-49BE6A9B35DC}\MpKsl65972984.sys [file not found to scan]
---------Key:
MpKsl6780b090
\{E7D97244-3332-48C5-AEEF-555B63449487}\MpKsl6780b090.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E7D97244-3332
-48C5-AEEF-555B63449487}\MpKsl6780b090.sys [file not found to scan]
---------Key:
MpKsl6ce2c32c
\{F04B1274-39FA-497F-96A1-1113653CD37C}\MpKsl6ce2c32c.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F04B1274-39FA
-497F-96A1-1113653CD37C}\MpKsl6ce2c32c.sys [file not found to scan]
---------Key:
MpKsl6d167de1
\{FA6905F5-3F3B-402C-9EA0-26F7537EB4E3}\MpKsl6d167de1.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FA6905F5-3F3B
-402C-9EA0-26F7537EB4E3}\MpKsl6d167de1.sys [file not found to scan]
---------Key:
MpKsl6ddfbb59
\{FB066597-4A54-40D8-8EFE-5AC154F5D4A7}\MpKsl6ddfbb59.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FB066597-4A54
-40D8-8EFE-5AC154F5D4A7}\MpKsl6ddfbb59.sys [file not found to scan]
---------Key:
MpKsl6e9cc13c
\{5ADD0A21-979F-4C7F-A9B5-479DBC12613F}\MpKsl6e9cc13c.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{5ADD0A21-979F
-4C7F-A9B5-479DBC12613F}\MpKsl6e9cc13c.sys [file not found to scan]
---------Key:
MpKsl732c6e5b
\{E6FFDF5F-3F32-4295-A28B-415DB46AD9BA}\MpKsl732c6e5b.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E6FFDF5F-3F32
-4295-A28B-415DB46AD9BA}\MpKsl732c6e5b.sys [file not found to scan]
---------Key:
MpKsl77164ad8
\{AE29A31E-1183-4CB2-9700-B161DDDB0700}\MpKsl77164ad8.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AE29A31E-1183
-4CB2-9700-B161DDDB0700}\MpKsl77164ad8.sys [file not found to scan]
---------Key:
MpKsl7a7ef606
\{F9F948D5-68FF-4642-8AE8-44F93EDF9F61}\MpKsl7a7ef606.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F9F948D5-68FF
-4642-8AE8-44F93EDF9F61}\MpKsl7a7ef606.sys [file not found to scan]
---------Key:
MpKsl7e18e2f1
\{FEDAB18A-7B52-47C7-8216-D8E2B3F38CB6}\MpKsl7e18e2f1.sys
-47C7-8216-D8E2B3F38CB6}\MpKsl7e18e2f1.sys [file not found to scan]
---------Key:
MpKsl7ef1c63a
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl7ef1c63a.sys

-4C80-A00B-FB2A4A817156}\MpKsl7ef1c63a.sys [file not found to scan]
---------Key:
MpKsl835cd987
\{E6FFDF5F-3F32-4295-A28B-415DB46AD9BA}\MpKsl835cd987.sys
-4295-A28B-415DB46AD9BA}\MpKsl835cd987.sys [file not found to scan]
---------Key:
MpKsl86faea71
\{1801E2FC-6C49-4AB0-B29A-D5513E9AB219}\MpKsl86faea71.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{1801E2FC-6C49
-4AB0-B29A-D5513E9AB219}\MpKsl86faea71.sys [file not found to scan]
---------Key:
MpKsl887ded04
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl887ded04.sys
-4C80-A00B-FB2A4A817156}\MpKsl887ded04.sys [file not found to scan]
---------Key:
MpKsl96f50f1a
\{FA200FC3-0ACF-4696-B54F-C617A393F3F2}\MpKsl96f50f1a.sys
-4696-B54F-C617A393F3F2}\MpKsl96f50f1a.sys [file not found to scan]
---------Key:
MpKsl9834e373
\{0BA28B78-A5AB-4621-AB03-331336B8C789}\MpKsl9834e373.sys
-4621-AB03-331336B8C789}\MpKsl9834e373.sys [file not found to scan]
---------Key:
MpKsl9b9925f7
\{87A2B06F-AEDB-4DC3-9E40-01F765CF0574}\MpKsl9b9925f7.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{87A2B06F-AEDB
-4DC3-9E40-01F765CF0574}\MpKsl9b9925f7.sys [file not found to scan]
---------Key:
MpKsla40f86f2
\{D93F9AEA-0FB3-43DE-BC08-4D52ADDC31C3}\MpKsla40f86f2.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D93F9AEA-0FB3
-43DE-BC08-4D52ADDC31C3}\MpKsla40f86f2.sys [file not found to scan]
---------Key:
MpKsla4270d7e
\{A8F1F9E2-A163-4A96-986C-DBB1BEFCFB45}\MpKsla4270d7e.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A8F1F9E2-A163
-4A96-986C-DBB1BEFCFB45}\MpKsla4270d7e.sys [file not found to scan]
---------Key:
MpKsla90dfa44
\{F04B1274-39FA-497F-96A1-1113653CD37C}\MpKsla90dfa44.sys
-497F-96A1-1113653CD37C}\MpKsla90dfa44.sys [file not found to scan]
---------Key:
MpKslaed93a83
\{E6FFDF5F-3F32-4295-A28B-415DB46AD9BA}\MpKslaed93a83.sys

-4295-A28B-415DB46AD9BA}\MpKslaed93a83.sys [file not found to scan]
---------Key:
MpKslb3ec5bfc
\{89274BDA-1166-4961-AA83-49BE6A9B35DC}\MpKslb3ec5bfc.sys
-4961-AA83-49BE6A9B35DC}\MpKslb3ec5bfc.sys [file not found to scan]
---------Key:
MpKslba40cab8
\{0BA28B78-A5AB-4621-AB03-331336B8C789}\MpKslba40cab8.sys
-4621-AB03-331336B8C789}\MpKslba40cab8.sys [file not found to scan]
---------Key:
MpKslbab8d99a
\{4E7C2127-2E95-4952-B1E6-230052398D9B}\MpKslbab8d99a.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4E7C2127-2E95
-4952-B1E6-230052398D9B}\MpKslbab8d99a.sys
29904 bytes
Created: 1/6/2012 1:35 PM
Modified: 1/6/2012 1:35 PM
---------Key:
MpKslc726619e
\{E7D97244-3332-48C5-AEEF-555B63449487}\MpKslc726619e.sys
-48C5-AEEF-555B63449487}\MpKslc726619e.sys [file not found to scan]
---------Key:
MpKslc812cda5
\{FA6905F5-3F3B-402C-9EA0-26F7537EB4E3}\MpKslc812cda5.sys
-402C-9EA0-26F7537EB4E3}\MpKslc812cda5.sys [file not found to scan]
---------Key:
MpKslcd559a54
\{4E7C2127-2E95-4952-B1E6-230052398D9B}\MpKslcd559a54.sys
-4952-B1E6-230052398D9B}\MpKslcd559a54.sys
29904 bytes
Created: 1/6/2012 8:44 PM
Modified: 1/6/2012 8:44 PM
---------Key:
MpKsld1a9a4bd
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsld1a9a4bd.sys
-4C80-A00B-FB2A4A817156}\MpKsld1a9a4bd.sys [file not found to scan]
---------Key:
MpKsld5011512
\{4E7C2127-2E95-4952-B1E6-230052398D9B}\MpKsld5011512.sys
-4952-B1E6-230052398D9B}\MpKsld5011512.sys
29904 bytes
Created: 1/6/2012 8:29 PM
Modified: 1/6/2012 8:29 PM

---------Key:
MpKsld6bc2ace
\{41075F48-D9B6-4BEB-8D4B-635A65B8ADDF}\MpKsld6bc2ace.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{41075F48-D9B6
-4BEB-8D4B-635A65B8ADDF}\MpKsld6bc2ace.sys [file not found to scan]
---------Key:
MpKsldab91f44
\{A1890F5B-444C-4721-85E5-2D8B0E3D7118}\MpKsldab91f44.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A1890F5B-444C
-4721-85E5-2D8B0E3D7118}\MpKsldab91f44.sys [file not found to scan]
---------Key:
MpKsldb078f3b
\{18376A16-6A89-4431-9AAE-7757B1860F0B}\MpKsldb078f3b.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{18376A16-6A89
-4431-9AAE-7757B1860F0B}\MpKsldb078f3b.sys [file not found to scan]
---------Key:
MpKslde1c2bee
\{4E7C2127-2E95-4952-B1E6-230052398D9B}\MpKslde1c2bee.sys
-4952-B1E6-230052398D9B}\MpKslde1c2bee.sys
29904 bytes
Created: 1/6/2012 8:12 AM
Modified: 1/6/2012 8:12 AM
---------Key:
MpKsle40809dc
\{BBDC0D42-7802-440D-A612-6A7B59ED49B6}\MpKsle40809dc.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BBDC0D42-7802
-440D-A612-6A7B59ED49B6}\MpKsle40809dc.sys [file not found to scan]
---------Key:
MpKsle6b3f7f6
\{F82BC6C4-990C-4822-A000-19C5D52A07F5}\MpKsle6b3f7f6.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F82BC6C4-990C
-4822-A000-19C5D52A07F5}\MpKsle6b3f7f6.sys [file not found to scan]
---------Key:
MpKsled7ad05b
\{4B60937A-DEE2-41F6-BDC3-0166B4DA7921}\MpKsled7ad05b.sys
c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4B60937A-DEE2
-41F6-BDC3-0166B4DA7921}\MpKsled7ad05b.sys [file not found to scan]
---------Key:
MpKslf8aafc7a
\{0BA28B78-A5AB-4621-AB03-331336B8C789}\MpKslf8aafc7a.sys
-4621-AB03-331336B8C789}\MpKslf8aafc7a.sys [file not found to scan]
---------Key:
MpNWMon
ImagePath: system32\DRIVERS\MpNWMon.sys
C:\Windows\system32\DRIVERS\MpNWMon.sys
43392 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM

---------Key:
mshidkmdf
ImagePath: \SystemRoot\System32\drivers\mshidkmdf.sys
C:\Windows\System32\drivers\mshidkmdf.sys
4096 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
MsMpSvc
ImagePath: "c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe"
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
11736 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
MTConfig
ImagePath: \SystemRoot\system32\DRIVERS\MTConfig.sys
C:\Windows\system32\DRIVERS\MTConfig.sys
12288 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 4:46 AM
---------Key:
NdisCap
ImagePath: system32\DRIVERS\ndiscap.sys
C:\Windows\system32\DRIVERS\ndiscap.sys
27136 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
Nero BackItUp Scheduler 4.0
ImagePath: C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
935208 bytes
Created: 7/20/2009 11:51 AM
Modified: 7/20/2009 11:51 AM
Company: Nero AG
---------Key:
nhdlxgxv
ImagePath: \??\C:\Windows\system32\drivers\nhdlxgxv.sys
C:\Windows\system32\drivers\nhdlxgxv.sys [file not found to scan]
---------Key:
NisDrv
ImagePath: system32\DRIVERS\NisDrvWFP.sys
C:\Windows\system32\DRIVERS\NisDrvWFP.sys
65024 bytes
Created: 4/27/2011 3:25 PM
Modified: 4/27/2011 3:25 PM
---------Key:
NisSrv
ImagePath: "c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe"
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
208944 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM

---------Key:
nlsX86cc
ImagePath: C:\Windows\system32\NLSSRV32.EXE
C:\Windows\system32\NLSSRV32.EXE
68928 bytes
Created: 9/24/2011 3:03 PM
Modified: 9/24/2011 3:03 PM
Company: Nalpeiron Ltd.
---------Key:
pcw
ImagePath: System32\drivers\pcw.sys
C:\Windows\System32\drivers\pcw.sys
43088 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:19 AM
---------Key:
pfc
ImagePath: system32\drivers\pfc.sys
C:\Windows\system32\drivers\pfc.sys
10368 bytes
Created: 1/1/2012 1:04 PM
Modified: 1/1/2012 1:04 PM
Company: Padus, Inc.
---------Key:
pnfaiizi
ImagePath: \??\C:\Windows\system32\drivers\pnfaiizi.sys
C:\Windows\system32\drivers\pnfaiizi.sys [file not found to scan]
---------Key:
qagrlmyw
ImagePath: \??\C:\Windows\system32\drivers\qagrlmyw.sys
C:\Windows\system32\drivers\qagrlmyw.sys [file not found to scan]
---------Key:
qrneyrxl
ImagePath: \??\C:\Windows\system32\drivers\qrneyrxl.sys
C:\Windows\system32\drivers\qrneyrxl.sys [file not found to scan]
---------Key:
RasAgileVpn
ImagePath: system32\DRIVERS\AgileVpn.sys
C:\Windows\system32\DRIVERS\AgileVpn.sys
49152 bytes
Created: 7/14/2009 4:55 AM
Modified: 7/14/2009 4:55 AM
---------Key:
rdpbus
ImagePath: system32\DRIVERS\rdpbus.sys
C:\Windows\system32\DRIVERS\rdpbus.sys
18944 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 5:02 AM
---------Key:
RDPREFMP
ImagePath: system32\drivers\rdprefmp.sys
C:\Windows\system32\drivers\rdprefmp.sys
7168 bytes
Created: 7/14/2009 5:01 AM
Modified: 7/14/2009 5:01 AM

---------Key:
rdyboost
ImagePath: System32\drivers\rdyboost.sys
C:\Windows\System32\drivers\rdyboost.sys
173648 bytes
Created: 7/14/2009 4:22 AM
Modified: 7/14/2009 6:19 AM
---------Key:
s3cap
ImagePath: \SystemRoot\system32\DRIVERS\vms3cap.sys
C:\Windows\system32\DRIVERS\vms3cap.sys
5632 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
scfilter
ImagePath: System32\DRIVERS\scfilter.sys
C:\Windows\System32\DRIVERS\scfilter.sys
26624 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 4:33 AM
---------Key:
sppsvc
ImagePath: %SystemRoot%\system32\sppsvc.exe
C:\Windows\system32\sppsvc.exe
3179520 bytes
Created: 7/14/2009 5:41 AM
Modified: 7/14/2009 6:14 AM
---------Key:
srijevoz
ImagePath: \??\C:\Windows\system32\drivers\srijevoz.sys
C:\Windows\system32\drivers\srijevoz.sys [file not found to scan]
---------Key:
ssmdrv
ImagePath: system32\DRIVERS\ssmdrv.sys
C:\Windows\system32\DRIVERS\ssmdrv.sys
28520 bytes
Created: 12/31/2011 8:57 AM
Modified: 6/17/2010 3:14 PM
Company: Avira GmbH
---------Key:
stexstor
ImagePath: \SystemRoot\system32\DRIVERS\stexstor.sys
C:\Windows\system32\DRIVERS\stexstor.sys
21072 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:19 AM
Company: Promise Technology
---------Key:
storflt
ImagePath: system32\DRIVERS\vmstorfl.sys
C:\Windows\system32\DRIVERS\vmstorfl.sys
40896 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM

---------Key:
storvsc
ImagePath: \SystemRoot\system32\DRIVERS\storvsc.sys
C:\Windows\system32\DRIVERS\storvsc.sys
28224 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
taphss
ImagePath: system32\DRIVERS\taphss.sys
C:\Windows\system32\DRIVERS\taphss.sys
32768 bytes
Created: 7/26/2011 10:49 PM
Modified: 7/26/2011 10:49 PM
Company: AnchorFree Inc
---------Key:
UmPass
ImagePath: \SystemRoot\system32\DRIVERS\umpass.sys
C:\Windows\system32\DRIVERS\umpass.sys
8192 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbuhci
ImagePath: \SystemRoot\system32\DRIVERS\usbuhci.sys
C:\Windows\system32\DRIVERS\usbuhci.sys
24064 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbvideo
ImagePath: System32\Drivers\usbvideo.sys
C:\Windows\System32\Drivers\usbvideo.sys
146176 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
vdrvroot
ImagePath: system32\DRIVERS\vdrvroot.sys
C:\Windows\system32\DRIVERS\vdrvroot.sys
32832 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vhdmp
ImagePath: \SystemRoot\system32\DRIVERS\vhdmp.sys
C:\Windows\system32\DRIVERS\vhdmp.sys
159824 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vmbus
ImagePath: \SystemRoot\system32\DRIVERS\vmbus.sys
C:\Windows\system32\DRIVERS\vmbus.sys
175824 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
VMBusHID
ImagePath: \SystemRoot\system32\DRIVERS\VMBusHID.sys
C:\Windows\system32\DRIVERS\VMBusHID.sys
17920 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
vwifibus
ImagePath: \SystemRoot\System32\drivers\vwifibus.sys
C:\Windows\System32\drivers\vwifibus.sys
19968 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
WfpLwf
ImagePath: system32\DRIVERS\wfplwf.sys
C:\Windows\system32\DRIVERS\wfplwf.sys
9728 bytes
Created: 7/14/2009 4:53 AM
Modified: 7/14/2009 4:53 AM
---------Key:
WIMMount
ImagePath: system32\drivers\wimmount.sys
C:\Windows\system32\drivers\wimmount.sys
19008 bytes
Created: 7/14/2009 4:17 AM
Modified: 7/14/2009 6:19 AM
---------************************************************************
8:56:52 PM: Scanning -----VXD ENTRIES----************************************************************
8:56:52 PM: Scanning ----- WINLOGON\NOTIFY DLLS ----No WINLOGON\NOTIFY DLLs found to scan
************************************************************
8:56:53 PM: Scanning ----- CONTEXTMENUHANDLERS ----Key: BriefcaseMenu
CLSID: {85BBD920-42A0-1069-A2E4-08002B30309D}
Path: %SystemRoot%\system32\syncui.dll
C:\Windows\system32\syncui.dll
158720 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
---------Key: DAP_ShredMenu
CLSID: {BED4C38B-F765-45AC-8C56-613F76BBF43E}
Path: C:\PROGRA~1\DAP\PRIVAC~1\DAPCTX~1.DLL
C:\PROGRA~1\DAP\PRIVAC~1\DAPCTX~1.DLL
55472 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/14/2011 8:58 AM
Company: Speedbit Ltd.
---------Key: EPP
CLSID: {09A47860-11B0-4DA5-AFA5-26D86198A780}
Path: c:\PROGRA~1\MICROS~4\shellext.dll
c:\PROGRA~1\MICROS~4\shellext.dll
301128 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
---------Key: Sharing
CLSID: {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
Path: %SystemRoot%\system32\ntshrui.dll
C:\Windows\system32\ntshrui.dll
442880 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:16 AM
---------Key: Shell Extension for Malware scanning
CLSID: {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
Path: C:\Program Files\Avira\AntiVir Desktop\shlext.dll
C:\Program Files\Avira\AntiVir Desktop\shlext.dll
150480 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
---------************************************************************
8:56:56 PM: Scanning ----- FOLDER\COLUMNHANDLERS ----Key: {B2F55D43-C7A4-4B7C-90D7-7A860DFA9F2A}
File: C:\Program Files\Tracker Software\Shell Extensions\XCShInfo.dll
C:\Program Files\Tracker Software\Shell Extensions\XCShInfo.dll
5972760 bytes
Created: 10/29/2011 4:30 PM
Modified: 1/11/2011 12:18 PM
Company: Tracker Software Products Ltd.
---------************************************************************
8:56:58 PM: Scanning ----- BROWSER HELPER OBJECTS ----Key: {02478D38-C3F9-4EFB-9B51-7695ECA05670}
BHO: C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
439872 bytes
Created: 1/1/2012 1:06 PM
Modified: 6/6/2006 9:28 AM
Company: Yahoo! Inc.
---------Key: {389943B0-C3A2-4E69-82CB-8596A84CB3DC}
BHO: C:\Program Files\SearchPredict\SearchPredict.dll
C:\Program Files\SearchPredict\SearchPredict.dll
498840 bytes
Created: 10/14/2011 8:58 AM

Modified: 6/28/2011 5:41 PM
---------Key: {92A9ACF4-9333-43AE-9698-DB283326F87F}
BHO: C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll
C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll
2660016 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company:
---------Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
BHO: C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
3844768 bytes
Created: 11/29/2011 6:22 AM
Modified: 11/29/2011 6:22 AM
Company: Skype Technologies S.A.
---------Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
BHO: C:\Program Files\Ask.com\GenericAskToolbar.dll
C:\Program Files\Ask.com\GenericAskToolbar.dll
1515688 bytes
Created: 11/21/2011 2:18 AM
Modified: 11/21/2011 2:18 AM
Company: Ask
---------Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
BHO: C:\Program Files\Java\jre6\bin\jp2ssv.dll
C:\Program Files\Java\jre6\bin\jp2ssv.dll
42272 bytes
Created: 10/7/2011 11:23 AM
Modified: 10/7/2011 11:23 AM
---------Key: {FF6C3CF0-4B15-11D1-ABED-709549C10000}
BHO: C:\PROGRA~1\DAP\DAPIEL~1.DLL
C:\PROGRA~1\DAP\DAPIEL~1.DLL
141568 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/14/2011 11:31 AM
BHO: C:\Program Files\SpeedBit Video Downloader\Toolbar\grabber.dll
C:\Program Files\SpeedBit Video Downloader\Toolbar\grabber.dll
356024 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company: SpeedBit
---------************************************************************
8:57:01 PM: Scanning ----- SHELLSERVICEOBJECTS ----************************************************************
8:57:02 PM: Scanning ----- SHAREDTASKSCHEDULER ENTRIES ----No SharedTaskScheduler entries found to scan
************************************************************
8:57:02 PM: Scanning ----- IMAGEFILE DEBUGGERS ----No "Debugger" entries found.
************************************************************
8:57:02 PM: Scanning ----- APPINIT_DLLS ----The following AppInitDLLs entry is hidden/stealthed:
AppInitDLLs entry = [
]
************************************************************
8:57:03 PM: Scanning ----- SECURITY PROVIDER DLLS ----************************************************************
8:57:03 PM: Scanning ------ COMMON STARTUP GROUP -----[C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]
The Common Startup Group attempts to load the following file(s) at boot time:
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-HS- 174 bytes
Created: 7/14/2009 9:41 AM
Modified: 7/14/2009 9:41 AM
Company: [no info]
-------------------************************************************************
8:57:04 PM: Scanning ----- USER STARTUP GROUPS ----Checking Startup Group for: PAKISTAN
[C:\Users\PAKISTAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
]
C:\Users\PAKISTAN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
desktop.ini
-HS- 174 bytes
Created: 10/14/2011 8:50 AM
Modified: 10/14/2011 8:50 AM
Company: [no info]
----------------------------************************************************************
8:57:04 PM: Scanning ----- SCHEDULED TASKS ----Taskname:
FacebookUpdateTaskUserS-1-5-21-184243364-3962860275-1713924723-10
00Core.job
File:
C:\Users\PAKISTAN\AppData\Local\Facebook\Update\FacebookUpdate.ex
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/c /nocrashserver
Next Run Time: 12/5/2011 4:53:00 PM
Status:
The task is ready to run at its next scheduled time
Creator:
PAKISTAN
Comments:
Keeps your Facebook software up to date. If this task is disabled
or stopped, your Facebook software will not be kept up to date, meaning securit
y vulnerabilities that may arise cannot be fixed and features may not work. This
task uninstalls itself when there is no Facebook software using it.
---------Taskname:
00UA.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/ua /installsource scheduler
Next Run Time: 12/4/2011 10:54:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
GoogleUpdateTaskMachineCore.job
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
/c
Next Run Time: 12/5/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
Keeps your Google software up to date. If this task is disabled o
r stopped, your Google software will not be kept up to date, meaning security vu
lnerabilities that may arise cannot be fixed and features may not work. This tas
k uninstalls itself when there is no Google software using it.
---------Taskname:
GoogleUpdateTaskMachineUA.job
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
Next Run Time: 12/4/2011 9:48:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------************************************************************
8:57:06 PM: Scanning ----- SHELLICONOVERLAYIDENTIFIERS ----Key: EnhancedStorageShell
CLSID: {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}
File: %SystemRoot%\system32\EhStorShell.dll
C:\Windows\system32\EhStorShell.dll
189952 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:15 AM
---------Key: SharingPrivate
CLSID: {08244EE6-92F0-47f2-9FC9-929BAA2E7235}
File: %SystemRoot%\system32\ntshrui.dll
C:\Windows\system32\ntshrui.dll - file already scanned
---------************************************************************
8:57:08 PM: ----- ADDITIONAL CHECKS ----Heuristic checks for hidden files/drivers completed
---------Layered Service Provider entries checks completed
---------Windows Explorer Policies checks completed
---------Desktop Wallpaper: C:\Users\PAKISTAN\AppData\Roaming\Microsoft\Windows\Themes\Tr
anscodedWallpaper.jpg
C:\Users\PAKISTAN\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.j
pg
1149968 bytes
Created: 2/20/2011 3:24 PM
Modified: 12/25/2011 9:05 AM
Company: [no info]
---------Web Desktop Wallpaper entry is blank
---------DNS Server information:
Interface:
NameServers: 119.159.255.36 203.99.163.240
Checks for rogue DNS NameServers completed
------------------Additional checks completed
************************************************************
8:57:09 PM: Scanning ----- RUNNING PROCESSES ----C:\Windows\System32\smss.exe
69632 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\csrss.exe
6144 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\wininit.exe
96256 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\csrss.exe - file already scanned
-------------------C:\Windows\system32\services.exe
259072 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\lsass.exe
22528 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\lsm.exe
261120 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\winlogon.exe
285696 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\svchost.exe
20992 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\svchost.exe - file already scanned
-------------------c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe - file alread
y scanned
-------------------C:\Windows\system32\Ati2evxx.exe
684032 bytes
Created: 6/3/2008 3:33 AM
Modified: 6/3/2008 3:33 AM
Company: ATI Technologies Inc.
-------------------C:\Windows\System32\svchost.exe - file already scanned
-------------------C:\Windows\system32\Ati2evxx.exe - file already scanned
-------------------C:\Windows\System32\spoolsv.exe
316416 bytes
Created: 7/14/2009 5:18 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Avira\AntiVir Desktop\sched.exe - file already scanned
-------------------C:\Windows\system32\Dwm.exe
92672 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 6:14 AM

-------------------C:\Windows\Explorer.EXE - file already scanned
-------------------C:\Program Files\USB Disk Security\USBGuard.exe - file already scanned
-------------------C:\Program Files\Common Files\Java\Java Update\jusched.exe - file already scanne
d
-------------------C:\Program Files\Microsoft Security Client\msseces.exe - file already scanned
-------------------C:\Program Files\Ask.com\Updater\Updater.exe - file already scanned
-------------------C:\Program Files\Avira\AntiVir Desktop\avgnt.exe - file already scanned
-------------------C:\Windows\system32\taskhost.exe
49152 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Avira\AntiVir Desktop\avguard.exe - file already scanned
-------------------C:\Program Files\IM Magician\vicamon.exe - file already scanned
-------------------C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe - file already
scanned
-------------------C:\Program Files\DAP\DAP.exe - file already scanned
-------------------C:\Windows\system32\NLSSRV32.EXE - file already scanned
-------------------C:\Program Files\Broadband\Broadband.exe - file already scanned
-------------------C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
80336 bytes
Created: 12/31/2011 8:57 AM
Modified: 10/11/2011 3:00 PM
-------------------C:\Windows\system32\conhost.exe
271360 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE - file already scanned
-------------------C:\Windows\system32\SearchIndexer.exe
428032 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
-------------------c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe - file already
scanned
-------------------C:\Windows\system32\wbem\wmiprvse.exe
254976 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Trojan Remover\Rmvtrjan.exe
FileSize:
2933624
[This is a Trojan Remover component]
-------------------C:\Windows\system32\SearchProtocolHost.exe
164352 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Windows\system32\SearchFilterHost.exe
86528 bytes
Created: 7/14/2009 5:13 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
8:57:22 PM: Checking HOSTS file
No malicious entries were found in the HOSTS file
************************************************************
------ INTERNET EXPLORER HOME/START/SEARCH SETTINGS -----HKLM\Software\Microsoft\Internet Explorer\Main\"Start Page":
http://home.allgameshome.com/
HKLM\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\Windows\System32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main\"Search Page":
http://go.microsoft.com/fwlink/?LinkId=54896
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Page_URL":
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Search_URL":
HKCU\Software\Microsoft\Internet Explorer\Main\"Start Page":
http://www.ask.com/?l=dis&o=APN10023&gct=hp
HKCU\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\Windows\system32\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main\"Search Page":
************************************************************
=== NO CHANGES HAVE BEEN MADE TO YOUR SYSTEM FILES ===
Scan completed at: 8:57:23 PM 04 Dec 2011
Total Scan time: 00:01:53
************************************************************
Scan started at: 11:07:52 PM 15 Nov 2011

File System:
NTFS
an Remover\
over Logfiles\
************************************************************
Avast! Antivirus
Avira AntiVir
************************************************************
************************************************************
11:07:53 PM: ----- SCANNING FOR ROOTKIT SERVICES ----No hidden Services were detected.
************************************************************
11:07:56 PM: Scanning -----WINDOWS REGISTRY-----------------------Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
File: explorer.exe
2613248 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
26112 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:14 AM
Value Name: load
798720 bytes
Created: 10/14/2011 8:59 AM
Modified: 3/27/2008 11:35 AM

421888 bytes
Created: 7/5/2011 6:36 PM
Modified: 7/5/2011 6:36 PM
Company: Apple Inc.
254696 bytes
Created: 6/9/2011 1:06 PM
Modified: 6/9/2011 1:06 PM
-------------------Value Name: MSC
ey
997920 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
-------------------Value Name: avgnt
258512 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
nd to scan]
-------------------Value Name: avast!
Value Data: "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
81000 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
Company: ALWIL Software
/c /nocrashserver
137536 bytes
Created: 10/21/2011 4:48 PM

Modified: 10/21/2011 4:48 PM
2975920 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/29/2011 6:30 AM
-------------------Value Name: Sidebar
Value Data: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
C:\Program Files\Windows Sidebar\sidebar.exe
1173504 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------Value Name: IDMan
Value Data: C:\Program Files\Internet Download Manager\IDMan.exe /onboot
C:\Program Files\Internet Download Manager\IDMan.exe
3437976 bytes
Created: 11/14/2011 6:39 PM
Modified: 11/14/2011 4:52 PM
Company: Tonec Inc.
536576 bytes
Created: 12/23/2011 6:20 AM
Modified: 12/23/2011 6:20 AM
************************************************************
11:07:59 PM: Scanning -----SHELLEXECUTEHOOKS----ShellExecuteHooks key is empty
************************************************************
11:07:59 PM: Scanning -----HIDDEN REGISTRY ENTRIES----Taskdir check completed
---------************************************************************
11:08:00 PM: Scanning -----ACTIVE SCREENSAVER----ScreenSaver: C:\Windows\system32\scrnsave.scr
10240 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
--------------------
************************************************************
11:08:00 PM: Scanning ----- REGISTRY ACTIVE SETUP KEYS ----Key: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}
44544 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
---------************************************************************
11:08:01 PM: Scanning ----- SERVICEDLL REGISTRY KEYS ----Key: AppIDSvc
27648 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: AxInstSV
88064 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: BDESVC
76800 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: bthserv
64512 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: defragsvc
218624 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: Dhcp
253440 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:15 AM

-------------------Key: FontCache
797696 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:15 AM
194560 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:15 AM
165376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: p2pimsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
1004544 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
20480 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Power
119808 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 6:16 AM
43520 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: SensrSvc
25088 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:16 AM
53760 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Themes
37376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WbioSrvc
151552 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WwanSvc
185856 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------************************************************************
11:08:10 PM: Scanning ----- SERVICES REGISTRY KEYS ----Key:
1394ohci
163328 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
AcpiPmi
9728 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 4:16 AM
---------Key:
ALCXWDM
4172832 bytes
Created: 6/18/2009 7:45 PM
Modified: 6/18/2009 7:45 PM
---------Key:
AmdPPM
52736 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
amdsata
79952 bytes
Created: 6/11/2009 2:19 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdsbs
159312 bytes
Created: 6/11/2009 2:20 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdxata
23616 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:26 AM
---------Key:
AntiVirMailService
ImagePath: "C:\Program Files\Avira\AntiVir Desktop\avmailc.exe"
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
342480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM

---------Key:
86224 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirService
110032 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirWebService
463824 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AppID
50176 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 4:36 AM
---------Key:
aswFsBlk
ImagePath: system32\DRIVERS\aswFsBlk.sys
C:\Windows\system32\DRIVERS\aswFsBlk.sys
20560 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:50 AM
---------Key:
aswMonFlt
ImagePath: system32\DRIVERS\aswMonFlt.sys
C:\Windows\system32\DRIVERS\aswMonFlt.sys
53328 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:49 AM
---------Key:
aswUpdSv
ImagePath: "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
18752 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:43 AM
---------Key:
avast! Antivirus
ImagePath: "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
C:\Program Files\Alwil Software\Avast4\ashServ.exe

138680 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Mail Scanner
ImagePath: "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
254040 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Web Scanner
ImagePath: "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
352920 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:48 AM
---------Key:
avgntflt
74640 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avipbb
134344 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avkmgr
36000 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
b06bdrv
430080 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
b57nd60x
229888 bytes
Created: 7/14/2009 3:02 AM
Modified: 7/14/2009 3:02 AM

---------Key:
blbdrive
35328 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 4:23 AM
---------Key:
CmBatt
14080 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
CNG
369568 bytes
Created: 7/14/2009 4:32 AM
Modified: 7/14/2009 6:17 AM
---------Key:
CompositeBus
31232 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
crcdisk
22096 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
discache
32256 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 4:24 AM
---------Key:
ebdrv
3100160 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
flpydisk
19968 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
FsDepends
46160 bytes
Created: 7/14/2009 4:15 AM
Modified: 7/14/2009 6:20 AM
---------Key:
gupdate
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
gupdatem
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
hcw85cir
26624 bytes
Created: 7/14/2009 3:54 AM
Modified: 7/14/2009 3:54 AM
---------Key:
HidBatt
21504 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
HpSAMD
67152 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwdatacard
102912 bytes
Created: 12/23/2011 6:21 AM
Modified: 9/10/2009 3:31 PM

---------Key:
hwpolicy
13904 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwusbdev
101120 bytes
Created: 12/23/2011 6:21 AM
Modified: 10/12/2009 3:22 PM
---------Key:
IDMWFP
ImagePath: system32\DRIVERS\idmwfp.sys
C:\Windows\system32\DRIVERS\idmwfp.sys
89376 bytes
Created: 11/14/2011 6:39 PM
Modified: 7/6/2011 6:14 PM
Company: Tonec Inc.
---------Key:
intelppm
53760 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
iScsiPrt
186960 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
kbdhid
28160 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
KSecPkg
133200 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_FC
95824 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS
89168 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS2
54864 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SCSI
96848 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
MpFilter
165648 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
MpKsl0219da24
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl0219da24.sys
-4C80-A00B-FB2A4A817156}\MpKsl0219da24.sys
29904 bytes
Created: 11/15/2011 5:36 PM
Modified: 11/15/2011 5:36 PM
---------Key:
MpKsl19b7cb5c
---------Key:
MpKsl292c9fc4
----------
Key:
MpKsl2ed2d473
---------Key:
MpKsl43dec7fa
---------Key:
MpKsl4827cce2
---------Key:
MpKsl4af71ab5
---------Key:
MpKsl526b47b7
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl526b47b7.sys
-4C80-A00B-FB2A4A817156}\MpKsl526b47b7.sys
29904 bytes
Created: 11/15/2011 11:00 PM
Modified: 11/15/2011 11:00 PM
---------Key:
MpKsl5ac8e01c
---------Key:
MpKsl611ac31f
---------Key:
MpKsl65972984
---------Key:
MpKsl6780b090
---------Key:
MpKsl6ce2c32c
---------Key:
MpKsl6d167de1
---------Key:
MpKsl6ddfbb59
---------Key:
MpKsl77164ad8
---------Key:
MpKsl7a7ef606
---------Key:
MpKsl7e18e2f1
---------Key:
MpKsl7ef1c63a
-4C80-A00B-FB2A4A817156}\MpKsl7ef1c63a.sys
29904 bytes
Created: 12/21/2011 5:49 AM
Modified: 12/21/2011 5:49 AM
---------Key:
MpKsl86faea71
---------Key:
MpKsl96f50f1a
---------Key:
MpKsl9834e373

---------Key:
MpKsl9b9925f7
---------Key:
MpKsla40f86f2
---------Key:
MpKsla4270d7e
---------Key:
MpKsla90dfa44
---------Key:
MpKslb3ec5bfc
---------Key:
MpKslba40cab8
---------Key:
MpKslc726619e
---------Key:
MpKslc812cda5
---------Key:
MpKsld1a9a4bd
---------Key:
MpKsld6bc2ace

---------Key:
MpKsldb078f3b
---------Key:
MpKsldd7c505c
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsldd7c505c.sys
-4C80-A00B-FB2A4A817156}\MpKsldd7c505c.sys
29904 bytes
Created: 11/15/2011 11:24 AM
Modified: 11/15/2011 11:24 AM
---------Key:
MpKsle40809dc
---------Key:
MpKsle6b3f7f6
---------Key:
MpKsled7ad05b
---------Key:
MpKslf8aafc7a
---------Key:
MpNWMon
43392 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
mshidkmdf
4096 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
MsMpSvc

11736 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
MTConfig
12288 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 4:46 AM
---------Key:
NdisCap
27136 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
935208 bytes
Created: 7/20/2009 11:51 AM
Modified: 7/20/2009 11:51 AM
Company: Nero AG
---------Key:
NisDrv
65024 bytes
Created: 4/27/2011 3:25 PM
Modified: 4/27/2011 3:25 PM
---------Key:
NisSrv
208944 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
nlsX86cc
68928 bytes
Created: 9/24/2011 3:03 PM
Modified: 9/24/2011 3:03 PM
---------Key:
pcw
43088 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:19 AM

---------Key:
RasAgileVpn
49152 bytes
Created: 7/14/2009 4:55 AM
Modified: 7/14/2009 4:55 AM
---------Key:
rdpbus
18944 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 5:02 AM
---------Key:
RDPREFMP
7168 bytes
Created: 7/14/2009 5:01 AM
Modified: 7/14/2009 5:01 AM
---------Key:
rdyboost
173648 bytes
Created: 7/14/2009 4:22 AM
Modified: 7/14/2009 6:19 AM
---------Key:
s3cap
5632 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
scfilter
26624 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 4:33 AM
---------Key:
sppsvc
3179520 bytes
Created: 7/14/2009 5:41 AM
Modified: 7/14/2009 6:14 AM
---------Key:
ssmdrv
28520 bytes
Created: 11/1/2011 10:59 AM
Modified: 6/17/2010 3:14 PM
Company: Avira GmbH
---------Key:
stexstor
21072 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:19 AM
---------Key:
storflt
40896 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
storvsc
28224 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
taphss
32768 bytes
Created: 7/26/2011 10:49 PM
Modified: 7/26/2011 10:49 PM
---------Key:
UmPass
8192 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbuhci
24064 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbvideo
146176 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM

---------Key:
vdrvroot
32832 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vhdmp
159824 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vmbus
175824 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
VMBusHID
17920 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
vwifibus
19968 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
WfpLwf
9728 bytes
Created: 7/14/2009 4:53 AM
Modified: 7/14/2009 4:53 AM
---------Key:
WIMMount
19008 bytes
Created: 7/14/2009 4:17 AM
Modified: 7/14/2009 6:19 AM
---------************************************************************

************************************************************
11:08:40 PM: Scanning ----- CONTEXTMENUHANDLERS ----Key: avast
CLSID: {472083B0-C522-11CF-8763-00608CC02F24}
Path: C:\Program Files\Alwil Software\Avast4\ashShell.dll
C:\Program Files\Alwil Software\Avast4\ashShell.dll
76880 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:47 AM
---------Key: BriefcaseMenu
CLSID: {85BBD920-42A0-1069-A2E4-08002B30309D}
158720 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
55472 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/14/2011 8:58 AM
---------Key: EPP
CLSID: {09A47860-11B0-4DA5-AFA5-26D86198A780}
301128 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
442880 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:16 AM
150480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM

---------************************************************************
5972760 bytes
Created: 10/29/2011 4:30 PM
Modified: 1/11/2011 12:18 PM
---------************************************************************
11:08:42 PM: Scanning ----- BROWSER HELPER OBJECTS ----Key: {389943B0-C3A2-4E69-82CB-8596A84CB3DC}
498840 bytes
Created: 10/14/2011 8:58 AM
Modified: 6/28/2011 5:41 PM
---------Key: {92A9ACF4-9333-43AE-9698-DB283326F87F}
2660016 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company:
---------Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
3844768 bytes
Created: 11/29/2011 6:22 AM
Modified: 11/29/2011 6:22 AM
---------Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
42272 bytes
Created: 10/7/2011 11:23 AM
Modified: 10/7/2011 11:23 AM
141568 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/14/2011 11:31 AM
356024 bytes
Created: 10/14/2011 8:58 AM

Modified: 10/15/2011 8:25 PM
Company: SpeedBit
---------************************************************************
************************************************************
************************************************************
11:08:44 PM: Scanning ----- APPINIT_DLLS ----The following AppInitDLLs entry is hidden/stealthed:
]
************************************************************
-HS- 174 bytes
Created: 7/14/2009 9:41 AM
Modified: 7/14/2009 9:41 AM
Company: [no info]
-------------------************************************************************
]
desktop.ini
-HS- 174 bytes
Created: 10/14/2011 8:50 AM
Modified: 10/14/2011 8:50 AM
Company: [no info]
----------------------------************************************************************
00Core.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/c /nocrashserver
Next Run Time: 11/16/2011 4:53:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
00UA.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
Next Run Time: 11/16/2011 1:54:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
/c
Next Run Time: 11/16/2011 11:48:00 AM
Status:
The task is currently running
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
Next Run Time: 11/15/2011 11:48:00 PM
Status:
Creator:
PAKISTAN
Comments:
----------
************************************************************
189952 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:15 AM
---------Key: IDM Shell Extension
CLSID: {CDC95B92-E27C-4745-A8C5-64A52A78855D}
File: C:\Program Files\Internet Download Manager\IDMShellExt.dll
C:\Program Files\Internet Download Manager\IDMShellExt.dll
21864 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/30/2011 7:50 PM
Company: Tonec Inc.
---------************************************************************
---------Desktop Wallpaper: C:\Users\PAKISTAN\AppData\Roaming\Microsoft\Windows\Themes\Tr
pg
1149968 bytes
Created: 2/20/2011 3:24 PM
Modified: 12/25/2011 9:05 AM
Company: [no info]
---------Checks for rogue DNS NameServers completed
************************************************************
69632 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
6144 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
96256 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
259072 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
22528 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
261120 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 6:14 AM
285696 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:14 AM
20992 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
y scanned
684032 bytes
Created: 6/3/2008 3:33 AM
Modified: 6/3/2008 3:33 AM
--------------------
C:\Windows\system32\svchost.exe - file already scanned

-------------------C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe - file already scanned
-------------------C:\Program Files\Alwil Software\Avast4\ashServ.exe - file already scanned
92672 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 6:14 AM
316416 bytes
Created: 7/14/2009 5:18 AM
Modified: 7/14/2009 6:14 AM
49152 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
scanned
-------------------C:\Windows\system32\taskeng.exe
190464 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Google\Update\GoogleUpdate.exe - file already scanned
d
-------------------C:\Program Files\Alwil Software\Avast4\ashDisp.exe - file already scanned
-------------------C:\Users\PAKISTAN\AppData\Local\Facebook\Update\FacebookUpdate.exe - file alread
y scanned
-------------------C:\Program Files\Windows Sidebar\sidebar.exe - file already scanned

-------------------C:\Program Files\Internet Download Manager\IEMonitor.exe
263600 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/25/2010 5:28 PM
Company: Tonec Inc.
80336 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
271360 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Avira\AntiVir Desktop\avmailc.exe - file already scanned
428032 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Alwil Software\Avast4\ashWebSv.exe - file already scanned
-------------------C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe - file already scanned
scanned
254976 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
FileSize:
2933624
-------------------C:\Program Files\Mozilla Firefox\firefox.exe
924632 bytes
Created: 11/18/2011 5:16 PM
Modified: 11/21/2011 9:04 AM
Company: Mozilla Corporation
-------------------************************************************************
************************************************************
http://www.searchqu.com/406
************************************************************
Scan completed at: 11:08:56 PM 15 Nov 2011
************************************************************
Scan started at: 11:03:01 AM 15 Nov 2011
File System:
NTFS
an Remover\
over Logfiles\
************************************************************
Avast! Antivirus
Avira AntiVir
************************************************************
************************************************************
11:03:02 AM: ----- SCANNING FOR ROOTKIT SERVICES ----No hidden Services were detected.
************************************************************
11:03:03 AM: Scanning -----WINDOWS REGISTRY-----------------------Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon

File: explorer.exe
2613248 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
26112 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:14 AM
Value Name: load
798720 bytes
Created: 10/14/2011 8:59 AM
Modified: 3/27/2008 11:35 AM
421888 bytes
Created: 7/5/2011 6:36 PM
Modified: 7/5/2011 6:36 PM
Company: Apple Inc.
254696 bytes
Created: 6/9/2011 1:06 PM
Modified: 6/9/2011 1:06 PM
-------------------Value Name: MSC
ey
997920 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
-------------------Value Name: avgnt

258512 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
nd to scan]
-------------------Value Name: avast!
81000 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
/c /nocrashserver
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
2975920 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/29/2011 6:30 AM
1173504 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------Value Name: IDMan
3437976 bytes
Created: 11/14/2011 6:39 PM
Modified: 11/14/2011 4:52 PM
Company: Tonec Inc.

536576 bytes
Created: 12/23/2011 6:20 AM
Modified: 12/23/2011 6:20 AM
************************************************************
11:03:07 AM: Scanning -----SHELLEXECUTEHOOKS----ShellExecuteHooks key is empty
************************************************************
11:03:07 AM: Scanning -----HIDDEN REGISTRY ENTRIES----Taskdir check completed
---------************************************************************
11:03:08 AM: Scanning -----ACTIVE SCREENSAVER----ScreenSaver: C:\Windows\system32\scrnsave.scr
10240 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
11:03:08 AM: Scanning ----- REGISTRY ACTIVE SETUP KEYS ----Key: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}
44544 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
---------************************************************************
11:03:09 AM: Scanning ----- SERVICEDLL REGISTRY KEYS ----Key: AppIDSvc
27648 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: AxInstSV
88064 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 6:14 AM

-------------------Key: BDESVC
76800 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: bthserv
64512 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: defragsvc
218624 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: Dhcp
253440 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: FontCache
797696 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:15 AM
194560 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:15 AM
165376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: p2pimsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
1004544 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
20480 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Power
119808 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 6:16 AM
43520 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: SensrSvc
25088 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:16 AM
53760 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:16 AM

-------------------Key: Themes
37376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WbioSrvc
151552 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WwanSvc
185856 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------************************************************************
11:03:18 AM: Scanning ----- SERVICES REGISTRY KEYS ----Key:
1394ohci
163328 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
AcpiPmi
9728 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 4:16 AM
---------Key:
ALCXWDM
4172832 bytes
Created: 6/18/2009 7:45 PM
Modified: 6/18/2009 7:45 PM
---------Key:
AmdPPM
52736 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
amdsata
79952 bytes
Created: 6/11/2009 2:19 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdsbs
159312 bytes
Created: 6/11/2009 2:20 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdxata
23616 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:26 AM
---------Key:
AntiVirMailService
342480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
86224 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirService
110032 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirWebService
463824 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AppID
50176 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 4:36 AM
---------Key:
aswFsBlk
20560 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:50 AM
---------Key:
aswMonFlt
53328 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:49 AM
---------Key:
aswUpdSv
18752 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:43 AM
---------Key:
avast! Antivirus
138680 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Mail Scanner
254040 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Web Scanner
352920 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:48 AM
---------Key:
avgntflt
74640 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avipbb
134344 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avkmgr
36000 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
b06bdrv
430080 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
b57nd60x
229888 bytes
Created: 7/14/2009 3:02 AM
Modified: 7/14/2009 3:02 AM
---------Key:
blbdrive
35328 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 4:23 AM
---------Key:
CmBatt
14080 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
CNG
369568 bytes
Created: 7/14/2009 4:32 AM
Modified: 7/14/2009 6:17 AM
---------Key:
CompositeBus
31232 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
crcdisk
22096 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
discache
32256 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 4:24 AM
---------Key:
ebdrv
3100160 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
flpydisk
19968 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
FsDepends
46160 bytes
Created: 7/14/2009 4:15 AM
Modified: 7/14/2009 6:20 AM
---------Key:
gupdate
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
gupdatem
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
hcw85cir
26624 bytes
Created: 7/14/2009 3:54 AM
Modified: 7/14/2009 3:54 AM
---------Key:
HidBatt
21504 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
HpSAMD
67152 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwdatacard
102912 bytes
Created: 12/23/2011 6:21 AM
Modified: 9/10/2009 3:31 PM
---------Key:
hwpolicy
13904 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwusbdev
101120 bytes
Created: 12/23/2011 6:21 AM
Modified: 10/12/2009 3:22 PM
---------Key:
IDMWFP
89376 bytes
Created: 11/14/2011 6:39 PM
Modified: 7/6/2011 6:14 PM
Company: Tonec Inc.
---------Key:
intelppm
53760 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
iScsiPrt
186960 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
kbdhid
28160 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
KSecPkg
133200 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_FC
95824 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS
89168 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS2
54864 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SCSI
96848 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
MpFilter
165648 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
MpKsl182320cc
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl182320cc.sys
-4C80-A00B-FB2A4A817156}\MpKsl182320cc.sys
29904 bytes
Created: 11/15/2011 9:48 AM
Modified: 11/15/2011 9:48 AM
---------Key:
MpKsl19b7cb5c
---------Key:
MpKsl292c9fc4
---------Key:
MpKsl2ed2d473
---------Key:
MpKsl43dec7fa
---------Key:
MpKsl4827cce2
---------Key:
MpKsl4af71ab5
---------Key:
MpKsl5ac8e01c
---------Key:
MpKsl611ac31f
---------Key:
MpKsl65972984
---------Key:
MpKsl6780b090
---------Key:
MpKsl6ce2c32c
---------Key:
MpKsl6d167de1
---------Key:
MpKsl6ddfbb59
---------Key:
MpKsl77164ad8
---------Key:
MpKsl7a7ef606
---------Key:
MpKsl7e18e2f1
---------Key:
MpKsl7ef1c63a
29904 bytes
Created: 12/21/2011 5:49 AM
Modified: 12/21/2011 5:49 AM
---------Key:
MpKsl86faea71
---------Key:
MpKsl96f50f1a
---------Key:
MpKsl9834e373
---------Key:
MpKsl9b9925f7
---------Key:
MpKsla40f86f2
---------Key:
MpKsla4270d7e
---------Key:
MpKsla90dfa44
---------Key:
MpKslb3ec5bfc
---------Key:
MpKslba40cab8
---------Key:
MpKslc726619e

---------Key:
MpKslc812cda5
---------Key:
MpKsld1a9a4bd
---------Key:
MpKsld6bc2ace
---------Key:
MpKsldb078f3b
---------Key:
MpKsle40809dc
---------Key:
MpKsle6b3f7f6
---------Key:
MpKsled7ad05b
---------Key:
MpKslf8aafc7a
---------Key:
MpNWMon
43392 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
mshidkmdf
4096 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
MsMpSvc
11736 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
MTConfig
12288 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 4:46 AM
---------Key:
NdisCap
27136 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
935208 bytes
Created: 7/20/2009 11:51 AM
Modified: 7/20/2009 11:51 AM
Company: Nero AG
---------Key:
NisDrv
65024 bytes
Created: 4/27/2011 3:25 PM
Modified: 4/27/2011 3:25 PM
---------Key:
NisSrv
208944 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
nlsX86cc
68928 bytes
Created: 9/24/2011 3:03 PM
Modified: 9/24/2011 3:03 PM
---------Key:
pcw
43088 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:19 AM
---------Key:
RasAgileVpn
49152 bytes
Created: 7/14/2009 4:55 AM
Modified: 7/14/2009 4:55 AM
---------Key:
rdpbus
18944 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 5:02 AM
---------Key:
RDPREFMP
7168 bytes
Created: 7/14/2009 5:01 AM
Modified: 7/14/2009 5:01 AM
---------Key:
rdyboost
173648 bytes
Created: 7/14/2009 4:22 AM
Modified: 7/14/2009 6:19 AM
---------Key:
s3cap
5632 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
scfilter
26624 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 4:33 AM
---------Key:
sppsvc
3179520 bytes
Created: 7/14/2009 5:41 AM
Modified: 7/14/2009 6:14 AM
---------Key:
ssmdrv
28520 bytes
Created: 11/1/2011 10:59 AM
Modified: 6/17/2010 3:14 PM
Company: Avira GmbH
---------Key:
stexstor
21072 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:19 AM
---------Key:
storflt
40896 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
storvsc
28224 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
taphss
32768 bytes
Created: 7/26/2011 10:49 PM
Modified: 7/26/2011 10:49 PM
---------Key:
UmPass
8192 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbuhci
24064 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbvideo
146176 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
vdrvroot
32832 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vhdmp
159824 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vmbus
175824 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
VMBusHID
17920 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
vwifibus
19968 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
WfpLwf
9728 bytes
Created: 7/14/2009 4:53 AM
Modified: 7/14/2009 4:53 AM
---------Key:
WIMMount
19008 bytes
Created: 7/14/2009 4:17 AM
Modified: 7/14/2009 6:19 AM
---------************************************************************
11:03:46 AM: Scanning -----VXD ENTRIES----************************************************************
11:03:46 AM: Scanning ----- WINLOGON\NOTIFY DLLS ----No WINLOGON\NOTIFY DLLs found to scan
************************************************************
11:03:46 AM: Scanning ----- CONTEXTMENUHANDLERS ----Key: avast
CLSID: {472083B0-C522-11CF-8763-00608CC02F24}
76880 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:47 AM
CLSID: {85BBD920-42A0-1069-A2E4-08002B30309D}
158720 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
55472 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/14/2011 8:58 AM
---------Key: EPP
CLSID: {09A47860-11B0-4DA5-AFA5-26D86198A780}
301128 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
442880 bytes
Created: 7/14/2009 4:41 AM

Modified: 7/14/2009 6:16 AM
150480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------************************************************************
11:03:48 AM: Scanning ----- FOLDER\COLUMNHANDLERS ----Key: {B2F55D43-C7A4-4B7C-90D7-7A860DFA9F2A}
5972760 bytes
Created: 10/29/2011 4:30 PM
Modified: 1/11/2011 12:18 PM
---------************************************************************
11:03:48 AM: Scanning ----- BROWSER HELPER OBJECTS ----Key: {389943B0-C3A2-4E69-82CB-8596A84CB3DC}
498840 bytes
Created: 10/14/2011 8:58 AM
Modified: 6/28/2011 5:41 PM
---------Key: {92A9ACF4-9333-43AE-9698-DB283326F87F}
2660016 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company:
---------Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
3844768 bytes
Created: 11/29/2011 6:22 AM
Modified: 11/29/2011 6:22 AM
---------Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
42272 bytes
Created: 10/7/2011 11:23 AM
Modified: 10/7/2011 11:23 AM
141568 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/14/2011 11:31 AM
356024 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company: SpeedBit
---------************************************************************
11:03:50 AM: Scanning ----- SHELLSERVICEOBJECTS ----************************************************************
11:03:50 AM: Scanning ----- SHAREDTASKSCHEDULER ENTRIES ----No SharedTaskScheduler entries found to scan
************************************************************
11:03:50 AM: Scanning ----- IMAGEFILE DEBUGGERS ----No "Debugger" entries found.
************************************************************
11:03:50 AM: Scanning ----- APPINIT_DLLS ----The following AppInitDLLs entry is hidden/stealthed:
]
************************************************************
11:03:51 AM: Scanning ----- SECURITY PROVIDER DLLS ----************************************************************
11:03:51 AM: Scanning ------ COMMON STARTUP GROUP -----[C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]
-HS- 174 bytes
Created: 7/14/2009 9:41 AM
Modified: 7/14/2009 9:41 AM
Company: [no info]
-------------------************************************************************
11:03:51 AM: Scanning ----- USER STARTUP GROUPS ----Checking Startup Group for: PAKISTAN
]
desktop.ini
-HS- 174 bytes
Created: 10/14/2011 8:50 AM
Modified: 10/14/2011 8:50 AM
Company: [no info]
-----------------------------
************************************************************
11:03:52 AM: Scanning ----- SCHEDULED TASKS ----Taskname:
00Core.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/c /nocrashserver
Next Run Time: 11/15/2011 4:53:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
00UA.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
Next Run Time: 11/15/2011 1:54:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
/c
Next Run Time: 11/15/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM

Parameters:
Next Run Time: 11/15/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------************************************************************
11:03:53 AM: Scanning ----- SHELLICONOVERLAYIDENTIFIERS ----Key: EnhancedStorageShell
189952 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:15 AM
21864 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/30/2011 7:50 PM
Company: Tonec Inc.
---------************************************************************
11:03:54 AM: ----- ADDITIONAL CHECKS ----Heuristic checks for hidden files/drivers completed
---------Checking autorun.inf in J:\
J:\autorun.inf
-RHS- 144 bytes
Created: 12/12/2011 5:41 PM
Modified: 12/24/2011 3:48 PM
Company: [no info]
J:\autorun.inf: Access Error
----------------------------Desktop Wallpaper: C:\Users\PAKISTAN\AppData\Roaming\Microsoft\Windows\Themes\Tr
pg
1149968 bytes
Created: 2/20/2011 3:24 PM
Modified: 12/25/2011 9:05 AM

Company: [no info]
************************************************************
11:03:55 AM: Scanning ----- RUNNING PROCESSES ----C:\Windows\System32\smss.exe
69632 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
6144 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
96256 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
259072 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
22528 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
261120 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 6:14 AM
285696 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:14 AM
20992 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM

y scanned
684032 bytes
Created: 6/3/2008 3:33 AM
Modified: 6/3/2008 3:33 AM
92672 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 6:14 AM
316416 bytes
Created: 7/14/2009 5:18 AM
Modified: 7/14/2009 6:14 AM
49152 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
190464 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
--------------------
C:\Program Files\Avira\AntiVir Desktop\avguard.exe - file already scanned

scanned
80336 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
271360 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:14 AM
scanned
d
y scanned
428032 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
263600 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/25/2010 5:28 PM
Company: Tonec Inc.

-------------------C:\Program Files\XP Codec Pack\mpc\mplayerc.exe
4308992 bytes
Created: 12/4/2007 4:53 AM
Modified: 12/4/2007 4:53 AM
Company: Gabest
FileSize:
2933624
-------------------************************************************************
11:04:02 AM: Checking HOSTS file
************************************************************
************************************************************
Scan completed at: 11:04:03 AM 15 Nov 2011
************************************************************
File System:
NTFS
an Remover\
over Logfiles\
************************************************************

Avast! Antivirus
Avira AntiVir
************************************************************
************************************************************
************************************************************
File: explorer.exe
2613248 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
26112 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:14 AM
Value Name: load
798720 bytes
Created: 10/14/2011 8:59 AM
Modified: 3/27/2008 11:35 AM
421888 bytes
Created: 7/5/2011 6:36 PM
Modified: 7/5/2011 6:36 PM
Company: Apple Inc.

254696 bytes
Created: 6/9/2011 1:06 PM
Modified: 6/9/2011 1:06 PM
-------------------Value Name: MSC
ey
997920 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
-------------------Value Name: avgnt
258512 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
nd to scan]
-------------------Value Name: TrojanScanner
Value Data: C:\Program Files\Trojan Remover\Trjscan.exe /boot
C:\Program Files\Trojan Remover\Trjscan.exe
1211784 bytes
Created: 11/5/2011 11:56 AM
Modified: 2/21/2009 6:30 PM
Company: Simply Super Software
-------------------Value Name: avast!
81000 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
/c /nocrashserver
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM

2975920 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/29/2011 6:30 AM
1173504 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------Value Name: IDMan
3437976 bytes
Created: 11/14/2011 6:39 PM
Modified: 11/14/2011 4:52 PM
Company: Tonec Inc.
536576 bytes
Created: 12/23/2011 6:20 AM
Modified: 12/23/2011 6:20 AM
************************************************************
************************************************************
---------************************************************************
10240 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
44544 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
---------************************************************************
27648 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: AxInstSV
88064 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: BDESVC
76800 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: bthserv
64512 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: defragsvc
218624 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: Dhcp
253440 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: FontCache
797696 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:15 AM
194560 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:15 AM
165376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: p2pimsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
1004544 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
20480 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Power
119808 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 6:16 AM

43520 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: SensrSvc
25088 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:16 AM
53760 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Themes
37376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WbioSrvc
151552 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WwanSvc
185856 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------************************************************************
1394ohci
163328 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
AcpiPmi
9728 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 4:16 AM
---------Key:
ALCXWDM
4172832 bytes
Created: 6/18/2009 7:45 PM
Modified: 6/18/2009 7:45 PM
---------Key:
AmdPPM
52736 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
amdsata
79952 bytes
Created: 6/11/2009 2:19 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdsbs
159312 bytes
Created: 6/11/2009 2:20 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdxata
23616 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:26 AM
---------Key:
AntiVirMailService
342480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
86224 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirService
110032 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirWebService
463824 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AppID
50176 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 4:36 AM
---------Key:
aswFsBlk
20560 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:50 AM
---------Key:
aswMonFlt
53328 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:49 AM
---------Key:
aswUpdSv
18752 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:43 AM
---------Key:
avast! Antivirus
138680 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Mail Scanner
254040 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Web Scanner
352920 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:48 AM
---------Key:
avgntflt
74640 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avipbb
134344 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avkmgr
36000 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
b06bdrv
430080 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
b57nd60x
229888 bytes
Created: 7/14/2009 3:02 AM
Modified: 7/14/2009 3:02 AM
---------Key:
blbdrive
35328 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 4:23 AM
---------Key:
CmBatt
14080 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
CNG
369568 bytes
Created: 7/14/2009 4:32 AM
Modified: 7/14/2009 6:17 AM
---------Key:
CompositeBus
31232 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
crcdisk
22096 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
discache
32256 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 4:24 AM
---------Key:
ebdrv
3100160 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
flpydisk
19968 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
FsDepends
46160 bytes
Created: 7/14/2009 4:15 AM
Modified: 7/14/2009 6:20 AM
---------Key:
gupdate
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
gupdatem
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
hcw85cir
26624 bytes
Created: 7/14/2009 3:54 AM
Modified: 7/14/2009 3:54 AM
---------Key:
HidBatt
21504 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
HpSAMD
67152 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwdatacard
102912 bytes
Created: 12/23/2011 6:21 AM
Modified: 9/10/2009 3:31 PM
---------Key:
hwpolicy
13904 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwusbdev
101120 bytes
Created: 12/23/2011 6:21 AM
Modified: 10/12/2009 3:22 PM
---------Key:
IDMWFP
89376 bytes
Created: 11/14/2011 6:39 PM
Modified: 7/6/2011 6:14 PM
Company: Tonec Inc.
---------Key:
intelppm
53760 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
iScsiPrt
186960 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
kbdhid
28160 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
KSecPkg
133200 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_FC
95824 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS
89168 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS2
54864 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SCSI
96848 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
MpFilter
165648 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
MpKsl182320cc
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsl182320cc.sys
-4C80-A00B-FB2A4A817156}\MpKsl182320cc.sys
29904 bytes
Created: 11/15/2011 9:48 AM
Modified: 11/15/2011 9:48 AM
---------Key:
MpKsl19b7cb5c
---------Key:
MpKsl292c9fc4
---------Key:
MpKsl2ed2d473
---------Key:
MpKsl43dec7fa
---------Key:
MpKsl4827cce2
---------Key:
MpKsl4af71ab5
---------Key:
MpKsl5ac8e01c
---------Key:
MpKsl611ac31f
---------Key:
MpKsl65972984
---------Key:
MpKsl6780b090
---------Key:
MpKsl6ce2c32c
---------Key:
MpKsl6d167de1
---------Key:
MpKsl6ddfbb59
---------Key:
MpKsl77164ad8
---------Key:
MpKsl7a7ef606
---------Key:
MpKsl7e18e2f1
---------Key:
MpKsl7ef1c63a
29904 bytes
Created: 12/21/2011 5:49 AM
Modified: 12/21/2011 5:49 AM
---------Key:
MpKsl86faea71
---------Key:
MpKsl96f50f1a
---------Key:
MpKsl9834e373
---------Key:
MpKsl9b9925f7
---------Key:
MpKsla40f86f2
---------Key:
MpKsla4270d7e

---------Key:
MpKsla90dfa44
---------Key:
MpKslb3ec5bfc
---------Key:
MpKslba40cab8
---------Key:
MpKslc726619e
---------Key:
MpKslc812cda5
---------Key:
MpKsld1a9a4bd
---------Key:
MpKsld6bc2ace
---------Key:
MpKsldb078f3b
---------Key:
MpKsle40809dc
---------Key:
MpKsle6b3f7f6

---------Key:
MpKsled7ad05b
---------Key:
MpKslf8aafc7a
---------Key:
MpNWMon
43392 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
mshidkmdf
4096 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
MsMpSvc
11736 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
MTConfig
12288 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 4:46 AM
---------Key:
NdisCap
27136 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
935208 bytes
Created: 7/20/2009 11:51 AM
Modified: 7/20/2009 11:51 AM
Company: Nero AG
---------Key:
NisDrv
65024 bytes
Created: 4/27/2011 3:25 PM
Modified: 4/27/2011 3:25 PM
---------Key:
NisSrv
208944 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
nlsX86cc
68928 bytes
Created: 9/24/2011 3:03 PM
Modified: 9/24/2011 3:03 PM
---------Key:
pcw
43088 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:19 AM
---------Key:
RasAgileVpn
49152 bytes
Created: 7/14/2009 4:55 AM
Modified: 7/14/2009 4:55 AM
---------Key:
rdpbus
18944 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 5:02 AM
---------Key:
RDPREFMP
7168 bytes
Created: 7/14/2009 5:01 AM
Modified: 7/14/2009 5:01 AM
---------Key:
rdyboost
173648 bytes
Created: 7/14/2009 4:22 AM
Modified: 7/14/2009 6:19 AM
---------Key:
s3cap
5632 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
scfilter
26624 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 4:33 AM
---------Key:
sppsvc
3179520 bytes
Created: 7/14/2009 5:41 AM
Modified: 7/14/2009 6:14 AM
---------Key:
ssmdrv
28520 bytes
Created: 11/1/2011 10:59 AM
Modified: 6/17/2010 3:14 PM
Company: Avira GmbH
---------Key:
stexstor
21072 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:19 AM
---------Key:
storflt
40896 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
storvsc
28224 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
taphss
32768 bytes
Created: 7/26/2011 10:49 PM
Modified: 7/26/2011 10:49 PM
---------Key:
UmPass
8192 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbuhci
24064 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbvideo
146176 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
vdrvroot
32832 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vhdmp
159824 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vmbus
175824 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
VMBusHID
17920 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
vwifibus
19968 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
WfpLwf
9728 bytes
Created: 7/14/2009 4:53 AM
Modified: 7/14/2009 4:53 AM
---------Key:
WIMMount
19008 bytes
Created: 7/14/2009 4:17 AM
Modified: 7/14/2009 6:19 AM
---------************************************************************
************************************************************
CLSID: {472083B0-C522-11CF-8763-00608CC02F24}
76880 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:47 AM
CLSID: {85BBD920-42A0-1069-A2E4-08002B30309D}
158720 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
55472 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/14/2011 8:58 AM
---------Key: EPP
CLSID: {09A47860-11B0-4DA5-AFA5-26D86198A780}
301128 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
442880 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:16 AM
150480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------************************************************************
5972760 bytes
Created: 10/29/2011 4:30 PM
Modified: 1/11/2011 12:18 PM
---------************************************************************
498840 bytes
Created: 10/14/2011 8:58 AM
Modified: 6/28/2011 5:41 PM
---------Key: {92A9ACF4-9333-43AE-9698-DB283326F87F}

2660016 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company:
---------Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
3844768 bytes
Created: 11/29/2011 6:22 AM
Modified: 11/29/2011 6:22 AM
---------Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
42272 bytes
Created: 10/7/2011 11:23 AM
Modified: 10/7/2011 11:23 AM
141568 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/14/2011 11:31 AM
356024 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company: SpeedBit
---------************************************************************
************************************************************
************************************************************
]
************************************************************

-HS- 174 bytes
Created: 7/14/2009 9:41 AM
Modified: 7/14/2009 9:41 AM
Company: [no info]
-------------------************************************************************
]
desktop.ini
-HS- 174 bytes
Created: 10/14/2011 8:50 AM
Modified: 10/14/2011 8:50 AM
Company: [no info]
----------------------------************************************************************
00Core.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/c /nocrashserver
Next Run Time: 11/15/2011 4:53:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
00UA.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
Next Run Time: 11/15/2011 10:54:00 AM
Status:
Creator:
PAKISTAN
Comments:

---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
/c
Next Run Time: 11/15/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
Next Run Time: 11/15/2011 10:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------************************************************************
189952 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:15 AM
21864 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/30/2011 7:50 PM
Company: Tonec Inc.
----------
************************************************************
J:\autorun.inf
-RHS- 144 bytes
Created: 12/12/2011 5:41 PM
Modified: 12/24/2011 3:48 PM
Company: [no info]
pg
1149968 bytes
Created: 2/20/2011 3:24 PM
Modified: 12/25/2011 9:05 AM
Company: [no info]
************************************************************
69632 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
6144 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
96256 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
259072 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM

22528 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
261120 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 6:14 AM
285696 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:14 AM
20992 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
y scanned
684032 bytes
Created: 6/3/2008 3:33 AM
Modified: 6/3/2008 3:33 AM
92672 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 6:14 AM
--------------------
C:\Windows\Explorer.EXE - file already scanned

316416 bytes
Created: 7/14/2009 5:18 AM
Modified: 7/14/2009 6:14 AM
49152 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
190464 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
scanned
-------------------C:\Windows\system32\taskeng.exe - file already scanned
-------------------C:\Windows\system32\sppsvc.exe - file already scanned
80336 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
271360 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:14 AM
scanned
d
-------------------C:\Program Files\Trojan Remover\Trjscan.exe - file already scanned
y scanned
428032 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
-------------------C:\Program Files\Internet Download Manager\IDMan.exe - file already scanned
263600 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/25/2010 5:28 PM
Company: Tonec Inc.
-------------------C:\PROGRA~1\ALWILS~1\Avast4\ashQuick.exe
262280 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:47 AM
FileSize:
2933624
254976 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
************************************************************
************************************************************
************************************************************
***** THE SYSTEM HAS BEEN RESTARTED *****
11/15/2011 9:48:56 AM: Trojan Remover has been restarted
=======================================================
Removing the following registry keys:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{
99079a25-328f-4bd4-be04-00955acaa0a7} - already removed (or did not exist)
HKCR\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} - already removed (or did not
exist)
D4027C7F-154A-4066-A1AD-4243D8127440} - already removed (or did not exist)
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} - already removed (or did not
exist)
=======================================================
Unable to rename C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll to C:\PRO
GRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll.vir
(C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll does not appear to exist)
Unable to rename C:\Program Files\Ask.com\GenericAskToolbar.dll to C:\Program Fi
les\Ask.com\GenericAskToolbar.dll.vir
(C:\Program Files\Ask.com\GenericAskToolbar.dll does not appear to exist)
11/15/2011 9:48:57 AM: Trojan Remover closed
************************************************************
File System:
NTFS
an Remover\

over Logfiles\
************************************************************
Avira AntiVir
************************************************************
************************************************************
************************************************************
File: explorer.exe
2613248 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
26112 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:14 AM
Value Name: load
798720 bytes
Created: 10/14/2011 8:59 AM
Modified: 3/27/2008 11:35 AM
421888 bytes
Created: 7/5/2011 6:36 PM

Modified: 7/5/2011 6:36 PM
Company: Apple Inc.
254696 bytes
Created: 6/9/2011 1:06 PM
Modified: 6/9/2011 1:06 PM
-------------------Value Name: MSC
ey
997920 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
-------------------Value Name: avgnt
258512 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
nd to scan]
-------------------Value Name: TrojanScanner
Value Data: C:\Program Files\Trojan Remover\Trjscan.exe /boot
C:\Program Files\Trojan Remover\Trjscan.exe
1211784 bytes
Created: 11/5/2011 11:56 AM
Modified: 2/21/2009 6:30 PM
Company: Simply Super Software
-------------------Value Name: avast!
81000 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
/c /nocrashserver
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
2975920 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/29/2011 6:30 AM
1173504 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------Value Name: IDMan
3437976 bytes
Created: 11/14/2011 6:39 PM
Modified: 11/14/2011 4:52 PM
Company: Tonec Inc.
536576 bytes
Created: 12/23/2011 6:20 AM
Modified: 12/23/2011 6:20 AM
************************************************************
************************************************************
---------************************************************************
10240 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
44544 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
---------************************************************************
27648 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: AxInstSV
88064 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: BDESVC
76800 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: bthserv
64512 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: defragsvc
218624 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: Dhcp
253440 bytes
Created: 7/14/2009 4:12 AM

Modified: 7/14/2009 6:15 AM
-------------------Key: FontCache
797696 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:15 AM
194560 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:15 AM
165376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: p2pimsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
1004544 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
20480 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
--------------------
Key: Power
119808 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 6:16 AM
43520 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: SensrSvc
25088 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:16 AM
53760 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Themes
37376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WbioSrvc
151552 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WwanSvc
185856 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------************************************************************
1394ohci
163328 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
AcpiPmi
9728 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 4:16 AM
---------Key:
ALCXWDM
4172832 bytes
Created: 6/18/2009 7:45 PM
Modified: 6/18/2009 7:45 PM
---------Key:
AmdPPM
52736 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
amdsata
79952 bytes
Created: 6/11/2009 2:19 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdsbs
159312 bytes
Created: 6/11/2009 2:20 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdxata
23616 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:26 AM
---------Key:
AntiVirMailService
342480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM

---------Key:
86224 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirService
110032 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirWebService
463824 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AppID
50176 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 4:36 AM
---------Key:
aswFsBlk
20560 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:50 AM
---------Key:
aswMonFlt
53328 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:49 AM
---------Key:
aswUpdSv
18752 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:43 AM
---------Key:
avast! Antivirus

138680 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Mail Scanner
254040 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:51 AM
---------Key:
avast! Web Scanner
352920 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:48 AM
---------Key:
avgntflt
74640 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avipbb
134344 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avkmgr
36000 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
b06bdrv
430080 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
b57nd60x
229888 bytes
Created: 7/14/2009 3:02 AM
Modified: 7/14/2009 3:02 AM

---------Key:
blbdrive
35328 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 4:23 AM
---------Key:
CmBatt
14080 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
CNG
369568 bytes
Created: 7/14/2009 4:32 AM
Modified: 7/14/2009 6:17 AM
---------Key:
CompositeBus
31232 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
crcdisk
22096 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
discache
32256 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 4:24 AM
---------Key:
ebdrv
3100160 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
flpydisk
19968 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
FsDepends
46160 bytes
Created: 7/14/2009 4:15 AM
Modified: 7/14/2009 6:20 AM
---------Key:
gupdate
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
gupdatem
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
hcw85cir
26624 bytes
Created: 7/14/2009 3:54 AM
Modified: 7/14/2009 3:54 AM
---------Key:
HidBatt
21504 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
HpSAMD
67152 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwdatacard
102912 bytes
Created: 12/23/2011 6:21 AM
Modified: 9/10/2009 3:31 PM

---------Key:
hwpolicy
13904 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwusbdev
101120 bytes
Created: 12/23/2011 6:21 AM
Modified: 10/12/2009 3:22 PM
---------Key:
IDMWFP
89376 bytes
Created: 11/14/2011 6:39 PM
Modified: 7/6/2011 6:14 PM
Company: Tonec Inc.
---------Key:
intelppm
53760 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
iScsiPrt
186960 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
kbdhid
28160 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
KSecPkg
133200 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_FC
95824 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS
89168 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS2
54864 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SCSI
96848 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
MpFilter
165648 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
MpKsl19b7cb5c
---------Key:
MpKsl292c9fc4
---------Key:
MpKsl2ed2d473
---------Key:
MpKsl43dec7fa

---------Key:
MpKsl4827cce2
---------Key:
MpKsl4af71ab5
---------Key:
MpKsl5ac8e01c
---------Key:
MpKsl611ac31f
---------Key:
MpKsl65972984
---------Key:
MpKsl6780b090
---------Key:
MpKsl6ce2c32c
---------Key:
MpKsl6d167de1
---------Key:
MpKsl6ddfbb59
---------Key:
MpKsl77164ad8

---------Key:
MpKsl7a7ef606
---------Key:
MpKsl7e18e2f1
---------Key:
MpKsl7ef1c63a
29904 bytes
Created: 12/21/2011 5:49 AM
Modified: 12/21/2011 5:49 AM
---------Key:
MpKsl86faea71
---------Key:
MpKsl96f50f1a
---------Key:
MpKsl9834e373
---------Key:
MpKsl9b9925f7
---------Key:
MpKsla40f86f2
---------Key:
MpKsla4270d7e
---------Key:
MpKsla90dfa44
---------Key:
MpKslb3ec5bfc
---------Key:
MpKslba40cab8
---------Key:
MpKslc726619e
---------Key:
MpKslc812cda5
---------Key:
MpKsld1a9a4bd
---------Key:
MpKsld3a59ca7
\{4E6B76EC-3692-4C80-A00B-FB2A4A817156}\MpKsld3a59ca7.sys
-4C80-A00B-FB2A4A817156}\MpKsld3a59ca7.sys
29904 bytes
Created: 12/25/2011 9:27 AM
Modified: 12/25/2011 9:27 AM
---------Key:
MpKsld6bc2ace
---------Key:
MpKsldb078f3b
---------Key:
MpKsle40809dc

---------Key:
MpKsle6b3f7f6
---------Key:
MpKsled7ad05b
---------Key:
MpKslf8aafc7a
---------Key:
MpNWMon
43392 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
mshidkmdf
4096 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
MsMpSvc
11736 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
MTConfig
12288 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 4:46 AM
---------Key:
NdisCap
27136 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM

---------Key:
935208 bytes
Created: 7/20/2009 11:51 AM
Modified: 7/20/2009 11:51 AM
Company: Nero AG
---------Key:
NisDrv
65024 bytes
Created: 4/27/2011 3:25 PM
Modified: 4/27/2011 3:25 PM
---------Key:
NisSrv
208944 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
nlsX86cc
68928 bytes
Created: 9/24/2011 3:03 PM
Modified: 9/24/2011 3:03 PM
---------Key:
pcw
43088 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:19 AM
---------Key:
RasAgileVpn
49152 bytes
Created: 7/14/2009 4:55 AM
Modified: 7/14/2009 4:55 AM
---------Key:
rdpbus
18944 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 5:02 AM
---------Key:
RDPREFMP
7168 bytes
Created: 7/14/2009 5:01 AM
Modified: 7/14/2009 5:01 AM
---------Key:
rdyboost
173648 bytes
Created: 7/14/2009 4:22 AM
Modified: 7/14/2009 6:19 AM
---------Key:
s3cap
5632 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
scfilter
26624 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 4:33 AM
---------Key:
sppsvc
3179520 bytes
Created: 7/14/2009 5:41 AM
Modified: 7/14/2009 6:14 AM
---------Key:
ssmdrv
28520 bytes
Created: 11/1/2011 10:59 AM
Modified: 6/17/2010 3:14 PM
Company: Avira GmbH
---------Key:
stexstor
21072 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:19 AM
---------Key:
storflt
40896 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM

---------Key:
storvsc
28224 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
taphss
32768 bytes
Created: 7/26/2011 10:49 PM
Modified: 7/26/2011 10:49 PM
---------Key:
UmPass
8192 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbuhci
24064 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbvideo
146176 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
vdrvroot
32832 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vhdmp
159824 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vmbus
175824 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
VMBusHID
17920 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
vwifibus
19968 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
WfpLwf
9728 bytes
Created: 7/14/2009 4:53 AM
Modified: 7/14/2009 4:53 AM
---------Key:
WIMMount
19008 bytes
Created: 7/14/2009 4:17 AM
Modified: 7/14/2009 6:19 AM
---------************************************************************
************************************************************
CLSID: {472083B0-C522-11CF-8763-00608CC02F24}
76880 bytes
Created: 11/15/2011 9:36 AM
Modified: 11/25/2009 4:47 AM
CLSID: {85BBD920-42A0-1069-A2E4-08002B30309D}
158720 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
55472 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/14/2011 8:58 AM
---------Key: EPP
CLSID: {09A47860-11B0-4DA5-AFA5-26D86198A780}
301128 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
442880 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:16 AM
150480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------************************************************************
5972760 bytes
Created: 10/29/2011 4:30 PM
Modified: 1/11/2011 12:18 PM
---------************************************************************
498840 bytes
Created: 10/14/2011 8:58 AM
Modified: 6/28/2011 5:41 PM
---------Key: {92A9ACF4-9333-43AE-9698-DB283326F87F}
2660016 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company:
---------Key: {99079a25-328f-4bd4-be04-00955acaa0a7}
BHO: C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll
C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll - this BHO was being loade
d by the following key:
99079a25-328f-4bd4-be04-00955acaa0a7} - this key has been removed
C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll - this BHO was referenced
by the following key:
HKEY_CLASSES_ROOT\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7} - this key has be
en removed
C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll - unable to take ownership
/change permissions
C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll - marked for renaming when
the PC is restarted (if it exists)
---------Key: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
3844768 bytes
Created: 11/29/2011 6:22 AM
Modified: 11/29/2011 6:22 AM
---------Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
C:\Program Files\Ask.com\GenericAskToolbar.dll - this BHO was being loaded by th
e following key:
D4027C7F-154A-4066-A1AD-4243D8127440} - this key has been removed
C:\Program Files\Ask.com\GenericAskToolbar.dll - this BHO was referenced by the
following key:
HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} - this key has be
en removed
C:\Program Files\Ask.com\GenericAskToolbar.dll - unable to take ownership/change
permissions
C:\Program Files\Ask.com\GenericAskToolbar.dll - marked for renaming when the PC
is restarted (if it exists)
---------Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
42272 bytes
Created: 10/7/2011 11:23 AM
Modified: 10/7/2011 11:23 AM
141568 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/14/2011 11:31 AM
356024 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company: SpeedBit
---------************************************************************
************************************************************
************************************************************
]
************************************************************
-HS- 174 bytes
Created: 7/14/2009 9:41 AM
Modified: 7/14/2009 9:41 AM
Company: [no info]
-------------------************************************************************
]
desktop.ini
-HS- 174 bytes
Created: 10/14/2011 8:50 AM
Modified: 10/14/2011 8:50 AM
Company: [no info]
-----------------------------
************************************************************
00Core.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/c /nocrashserver
Next Run Time: 11/15/2011 4:53:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
00UA.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
Next Run Time: 11/15/2011 10:54:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
/c
Next Run Time: 11/15/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM

Parameters:
Next Run Time: 11/15/2011 9:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------************************************************************
189952 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:15 AM
21864 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/30/2011 7:50 PM
Company: Tonec Inc.
---------************************************************************
J:\autorun.inf
-RHS- 144 bytes
Created: 12/12/2011 5:41 PM
Modified: 12/24/2011 3:48 PM
Company: [no info]
pg
1149968 bytes
Created: 2/20/2011 3:24 PM
Modified: 12/25/2011 9:05 AM

Company: [no info]
************************************************************
69632 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
6144 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
96256 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
259072 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
22528 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
261120 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 6:14 AM
285696 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:14 AM
20992 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM

y scanned
684032 bytes
Created: 6/3/2008 3:33 AM
Modified: 6/3/2008 3:33 AM
316416 bytes
Created: 7/14/2009 5:18 AM
Modified: 7/14/2009 6:14 AM
scanned
49152 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
92672 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 6:14 AM
d
-------------------C:\Program Files\Internet Download Manager\IDMan.exe - file already scanned
263600 bytes
Created: 11/14/2011 6:39 PM
Modified: 5/25/2010 5:28 PM
Company: Tonec Inc.
80336 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
271360 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:14 AM
428032 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
scanned
-------------------D:\Not Alloawed\Softwares\PC Softwares\AVast P_4_8_1367\setupengpro.exe
41455136 bytes
Created: 2/20/2011 3:27 PM
Modified: 11/26/2009 11:08 PM
Company:
-------------------C:\Users\PAKISTAN\AppData\Local\Temp\_av_sfx.tm~a01324\avast.setup
2752560 bytes
Created: 11/15/2011 9:35 AM
Modified: 11/15/2011 9:35 AM
-------------------C:\Program Files\Avira\AntiVir Desktop\avscan.exe

490448 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
FileSize:
2933624
-------------------************************************************************
************************************************************
************************************************************
=== CHANGES WERE MADE TO THE WINDOWS REGISTRY ===
------------------------------------------------------------------------One or more files could not be moved or renamed as requested.
They may be in use by Windows, so Trojan Remover needs
to restart the system in order to deal with these files.
11/15/2011 9:46:28 AM: restart commenced
************************************************************
***** DRIVE/DIRECTORY SCAN *****
File System:
NTFS
an Remover\
over Logfiles\

************************************************************
Avira AntiVir
************************************************************
Carrying out scan on H:\
(including subdirectories)
Archive files will be EXCLUDED.
The scan will also include files aready renamed by Trojan Remover.
----------------------------------------------------------Scan stopped by user after 2072 files were checked
No Malware files detected
Scan stopped at: 11/15/2011 9:43:58 AM
************************************************************
File System:
NTFS
an Remover\
over Logfiles\
************************************************************
Avira AntiVir
************************************************************
Carrying out scan on G:\
The scan will also include files aready renamed by Trojan Remover.
----------------------------------------------------------0 files scanned
Directory scan complete - no Malware files detected
************************************************************

File System:
NTFS
an Remover\
over Logfiles\
************************************************************
Avira AntiVir
************************************************************
Carrying out scan on G:\
----------------------------------------------------------0 files scanned
************************************************************
Scan started at: 4:59:07 PM 23 Nov 2011
File System:
NTFS
User Account Control is DISABLED
an Remover\
over Logfiles\
************************************************************
Carrying out scan on I:\
----------------------------------------------------------174 files scanned
************************************************************
***** INDIVIDUAL FILE SCAN *****

File System:
NTFS
User Account Control is DISABLED
an Remover\
over Logfiles\
************************************************************
Carrying out individual file scan on C:\Users\PAKISTAN\Desktop\19484109-Bhayanak
-Aadmi-Imran-Series.pdf
This file appears to be OK
************************************************************
File System:
NTFS
an Remover\
over Logfiles\
************************************************************
Avira AntiVir
************************************************************
************************************************************
************************************************************
File: explorer.exe
2613248 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
26112 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:14 AM
Value Name: load
798720 bytes
Created: 10/14/2011 8:59 AM
Modified: 3/27/2008 11:35 AM
421888 bytes
Created: 7/5/2011 6:36 PM
Modified: 7/5/2011 6:36 PM
Company: Apple Inc.
254696 bytes
Created: 6/9/2011 1:06 PM
Modified: 6/9/2011 1:06 PM
-------------------Value Name:
Value Data:
Blank entry: []
-------------------Value Name: ApnUpdater
Value Data: "C:\Program Files\Ask.com\Updater\Updater.exe"
C:\Program Files\Ask.com\Updater\Updater.exe
397992 bytes
Created: 7/9/2011 7:13 AM
Modified: 7/9/2011 7:13 AM
Company: {StringFileInfo_CompanyName}
-------------------Value Name: MSC
ey

997920 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
-------------------Value Name: avgnt
258512 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Value Name: Sidebar
1173504 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------Value Name: Facebook Update
/c /nocrashserver
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
2975920 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/29/2011 6:30 AM
************************************************************
************************************************************
---------************************************************************
11:58:31 AM: Scanning -----ACTIVE SCREENSAVER----ScreenSaver: C:\Windows\system32\Bubbles.scr

C:\Windows\system32\Bubbles.scr
878592 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
44544 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:14 AM
---------************************************************************
27648 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: AxInstSV
88064 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: BDESVC
76800 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:14 AM
-------------------Key: bthserv
64512 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: defragsvc
218624 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 6:15 AM

-------------------Key: Dhcp
253440 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:15 AM
-------------------Key: FontCache
797696 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:15 AM
194560 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:15 AM
165376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: p2pimsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
1004544 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
20480 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: PNRPsvc
269824 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Power
119808 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 6:16 AM
43520 bytes
Created: 7/14/2009 4:12 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: SensrSvc
25088 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:16 AM
53760 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: Themes
37376 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WbioSrvc
151552 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:16 AM
-------------------Key: WwanSvc
185856 bytes
Created: 7/14/2009 4:56 AM
Modified: 7/14/2009 6:16 AM

-------------------************************************************************
1394ohci
163328 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
AcpiPmi
9728 bytes
Created: 7/14/2009 4:16 AM
Modified: 7/14/2009 4:16 AM
---------Key:
ALCXWDM
4172832 bytes
Created: 6/18/2009 7:45 PM
Modified: 6/18/2009 7:45 PM
---------Key:
AmdPPM
52736 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
amdsata
79952 bytes
Created: 6/11/2009 2:19 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdsbs
159312 bytes
Created: 6/11/2009 2:20 AM
Modified: 7/14/2009 6:26 AM
---------Key:
amdxata
23616 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:26 AM

---------Key:
AntiVirMailService
342480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
86224 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirService
110032 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AntiVirWebService
463824 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------Key:
AppID
50176 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 4:36 AM
---------Key:
avgntflt
74640 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avipbb
134344 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
avkmgr
36000 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
Company: Avira GmbH
---------Key:
b06bdrv
430080 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
b57nd60x
229888 bytes
Created: 7/14/2009 3:02 AM
Modified: 7/14/2009 3:02 AM
---------Key:
blbdrive
35328 bytes
Created: 7/14/2009 4:23 AM
Modified: 7/14/2009 4:23 AM
---------Key:
CmBatt
14080 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
CNG
369568 bytes
Created: 7/14/2009 4:32 AM
Modified: 7/14/2009 6:17 AM
---------Key:
CompositeBus
31232 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
crcdisk
22096 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM

---------Key:
discache
32256 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 4:24 AM
---------Key:
ebdrv
3100160 bytes
Created: 6/11/2009 2:17 AM
Modified: 7/14/2009 3:02 AM
---------Key:
flpydisk
19968 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM
---------Key:
FsDepends
46160 bytes
Created: 7/14/2009 4:15 AM
Modified: 7/14/2009 6:20 AM
---------Key:
gupdate
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
gupdatem
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
---------Key:
hcw85cir
26624 bytes
Created: 7/14/2009 3:54 AM
Modified: 7/14/2009 3:54 AM
---------Key:
HidBatt
21504 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 4:19 AM
---------Key:
HpSAMD
67152 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwdatacard
102912 bytes
Created: 10/14/2011 8:54 AM
Modified: 9/10/2009 3:31 PM
---------Key:
hwpolicy
13904 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:20 AM
---------Key:
hwusbdev
101120 bytes
Created: 10/14/2011 8:54 AM
Modified: 10/12/2009 3:22 PM
---------Key:
intelppm
53760 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 4:11 AM
---------Key:
iScsiPrt
186960 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:20 AM
---------Key:
kbdhid
28160 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 4:45 AM

---------Key:
KSecPkg
133200 bytes
Created: 7/14/2009 4:34 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_FC
95824 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS
89168 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SAS2
54864 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
LSI_SCSI
96848 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:20 AM
---------Key:
MpFilter
165648 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
MpKsl23da4c8f
\{FA6905F5-3F3B-402C-9EA0-26F7537EB4E3}\MpKsl23da4c8f.sys
-402C-9EA0-26F7537EB4E3}\MpKsl23da4c8f.sys
28752 bytes
Created: 11/11/2011 7:50 AM
Modified: 11/11/2011 7:50 AM
----------
Key:
MpKsl4af71ab5
---------Key:
MpKsl9b9925f7
---------Key:
MpKslc812cda5
---------Key:
MpKsld6bc2ace
---------Key:
MpKsled7ad05b
---------Key:
MpNWMon
43392 bytes
Created: 4/18/2011 1:18 PM
Modified: 4/18/2011 1:18 PM
---------Key:
mshidkmdf
4096 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
MsMpSvc
11736 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
MTConfig
12288 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 4:46 AM

---------Key:
NdisCap
27136 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
935208 bytes
Created: 7/20/2009 11:51 AM
Modified: 7/20/2009 11:51 AM
Company: Nero AG
---------Key:
NisDrv
65024 bytes
Created: 4/27/2011 3:25 PM
Modified: 4/27/2011 3:25 PM
---------Key:
NisSrv
208944 bytes
Created: 4/27/2011 3:39 PM
Modified: 4/27/2011 3:39 PM
---------Key:
nlsX86cc
68928 bytes
Created: 9/24/2011 3:03 PM
Modified: 9/24/2011 3:03 PM
---------Key:
pcw
43088 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:19 AM
---------Key:
RasAgileVpn
49152 bytes
Created: 7/14/2009 4:55 AM
Modified: 7/14/2009 4:55 AM
---------Key:
rdpbus
18944 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 5:02 AM
---------Key:
RDPREFMP
7168 bytes
Created: 7/14/2009 5:01 AM
Modified: 7/14/2009 5:01 AM
---------Key:
rdyboost
173648 bytes
Created: 7/14/2009 4:22 AM
Modified: 7/14/2009 6:19 AM
---------Key:
s3cap
5632 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
scfilter
26624 bytes
Created: 7/14/2009 4:33 AM
Modified: 7/14/2009 4:33 AM
---------Key:
sppsvc
3179520 bytes
Created: 7/14/2009 5:41 AM
Modified: 7/14/2009 6:14 AM
---------Key:
ssmdrv
28520 bytes
Created: 11/1/2011 10:59 AM
Modified: 6/17/2010 3:14 PM
Company: Avira GmbH
---------Key:
stexstor
21072 bytes
Created: 7/14/2009 3:09 AM
Modified: 7/14/2009 6:19 AM

---------Key:
storflt
40896 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
storvsc
28224 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
UmPass
8192 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbuhci
24064 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
usbvideo
146176 bytes
Created: 7/14/2009 4:51 AM
Modified: 7/14/2009 4:51 AM
---------Key:
vdrvroot
32832 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vhdmp
159824 bytes
Created: 7/14/2009 4:46 AM
Modified: 7/14/2009 6:19 AM
---------Key:
vmbus
175824 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 6:19 AM
---------Key:
VMBusHID
17920 bytes
Created: 7/14/2009 12:47 PM
Modified: 7/14/2009 4:28 AM
---------Key:
vwifibus
19968 bytes
Created: 7/14/2009 4:52 AM
Modified: 7/14/2009 4:52 AM
---------Key:
WfpLwf
9728 bytes
Created: 7/14/2009 4:53 AM
Modified: 7/14/2009 4:53 AM
---------Key:
WIMMount
19008 bytes
Created: 7/14/2009 4:17 AM
Modified: 7/14/2009 6:19 AM
---------************************************************************
************************************************************
12:00:03 PM: Scanning ----- CONTEXTMENUHANDLERS ----Key: BriefcaseMenu
CLSID: {85BBD920-42A0-1069-A2E4-08002B30309D}
158720 bytes
Created: 7/14/2009 4:39 AM
Modified: 7/14/2009 6:16 AM
55472 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/14/2011 8:58 AM
---------Key: EPP
CLSID: {09A47860-11B0-4DA5-AFA5-26D86198A780}
301128 bytes
Created: 6/15/2011 3:16 PM
Modified: 6/15/2011 3:16 PM
442880 bytes
Created: 7/14/2009 4:41 AM
Modified: 7/14/2009 6:16 AM
150480 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
---------************************************************************
5972760 bytes
Created: 10/29/2011 4:30 PM
Modified: 1/11/2011 12:18 PM
---------************************************************************
12:00:07 PM: Scanning ----- BROWSER HELPER OBJECTS ----Key: {389943B0-C3A2-4E69-82CB-8596A84CB3DC}
498840 bytes
Created: 10/14/2011 8:58 AM
Modified: 6/28/2011 5:41 PM
---------Key: {92A9ACF4-9333-43AE-9698-DB283326F87F}
2660016 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM

Company:
---------Key: {D4027C7F-154A-4066-A1AD-4243D8127440}
C:\Program Files\Ask.com\GenericAskToolbar.dll
1493160 bytes
Created: 7/9/2011 7:13 AM
Modified: 7/9/2011 7:13 AM
Company: Ask
---------Key: {DBC80044-A445-435b-BC74-9C25C1C588A9}
42272 bytes
Created: 10/7/2011 11:23 AM
Modified: 10/7/2011 11:23 AM
141568 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/14/2011 11:31 AM
356024 bytes
Created: 10/14/2011 8:58 AM
Modified: 10/15/2011 8:25 PM
Company: SpeedBit
---------************************************************************
************************************************************
************************************************************
12:00:10 PM: Scanning ----- APPINIT_DLLS ----The AppInit_DLLs value is blank or does not exist
************************************************************
-HS- 174 bytes
Created: 7/14/2009 9:41 AM

Modified: 7/14/2009 9:41 AM
Company: [no info]
-------------------************************************************************
]
desktop.ini
-HS- 174 bytes
Created: 10/14/2011 8:50 AM
Modified: 10/14/2011 8:50 AM
Company: [no info]
----------------------------************************************************************
00Core.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
/c /nocrashserver
Next Run Time: 11/5/2011 4:53:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
00UA.job
File:
e
137536 bytes
Created: 10/21/2011 4:48 PM
Modified: 10/21/2011 4:48 PM
Parameters:
Next Run Time: 11/5/2011 1:54:00 PM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
/c
Next Run Time: 11/8/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------Taskname:
File:
136176 bytes
Created: 11/8/2011 11:43 AM
Modified: 11/8/2011 11:43 AM
Parameters:
Next Run Time: 11/8/2011 11:48:00 AM
Status:
Creator:
PAKISTAN
Comments:
---------************************************************************
189952 bytes
Created: 7/14/2009 4:45 AM
Modified: 7/14/2009 6:15 AM
---------************************************************************
---------Checking autorun.inf in G:\
G:\autorun.inf
-RHS- 623 bytes
Created: 11/6/2011 1:16 AM
Modified: 11/6/2011 1:16 AM
Company: [no info]

G:\autorun.inf: Access Error
---------Checking autorun.inf in H:\
H:\autorun.inf
-RHS- 114 bytes
Created: 11/2/2011 4:01 AM
Modified: 11/9/2011 5:12 AM
Company: [no info]
H:\autorun.inf: Access Error
---------Checking autorun.inf in I:\
I:\autorun.inf
-RHS- 660 bytes
Created: 11/6/2011 1:17 AM
Modified: 11/6/2011 1:17 AM
Company: [no info]
I:\autorun.inf: Access Error
J:\autorun.inf
-RHS- 660 bytes
Created: 11/6/2011 1:17 AM
Modified: 11/6/2011 1:17 AM
Company: [no info]
pg
929473 bytes
Created: 2/20/2011 3:24 PM
Modified: 11/5/2011 12:00 PM
Company: [no info]
---------DNS Server information:
Interface:
NameServers: 119.159.255.36 203.99.163.240
Checks for rogue DNS NameServers completed
************************************************************
69632 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
6144 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM

96256 bytes
Created: 7/14/2009 4:36 AM
Modified: 7/14/2009 6:14 AM
259072 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
285696 bytes
Created: 7/14/2009 4:37 AM
Modified: 7/14/2009 6:14 AM
22528 bytes
Created: 7/14/2009 4:11 AM
Modified: 7/14/2009 6:14 AM
261120 bytes
Created: 7/14/2009 5:02 AM
Modified: 7/14/2009 6:14 AM
20992 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
y scanned
684032 bytes
Created: 6/3/2008 3:33 AM
Modified: 6/3/2008 3:33 AM

316416 bytes
Created: 7/14/2009 5:18 AM
Modified: 7/14/2009 6:14 AM
scanned
80336 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
271360 bytes
Created: 7/14/2009 4:25 AM
Modified: 7/14/2009 6:14 AM
scanned
428032 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
92672 bytes
Created: 7/14/2009 4:24 AM
Modified: 7/14/2009 6:14 AM
190464 bytes
Created: 7/14/2009 4:30 AM
Modified: 7/14/2009 6:14 AM
49152 bytes
Created: 7/14/2009 4:19 AM
Modified: 7/14/2009 6:14 AM
d
-------------------C:\Program Files\Ask.com\Updater\Updater.exe - file already scanned
-------------------C:\Program Files\Avira\AntiVir Desktop\avscan.exe
490448 bytes
Created: 11/1/2011 10:59 AM
Modified: 10/19/2011 5:03 PM
-------------------C:\Program Files\Common Files\Speedbit\SbUpdate\SBUpdate.exe
92320 bytes
Created: 10/14/2011 11:31 AM
Modified: 10/29/2011 6:30 AM
Company:
-------------------C:\Windows\system32\SearchProtocolHost.exe
164352 bytes
Created: 7/14/2009 5:14 AM
Modified: 7/14/2009 6:14 AM
FileSize:
2933624
-------------------C:\Program Files\Windows Media Player\wmplayer.exe
164864 bytes
Created: 7/14/2009 5:09 AM
Modified: 7/14/2009 6:14 AM
-------------------************************************************************
************************************************************
http://home.speedbit.com/?aff=105
************************************************************
************************************************************

TRLOG

Transféré par

Informations du document

Description originale:

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

TRLOG

Transféré par

Droits d'auteur :

Formats disponibles

***** NORMAL SCAN FOR ACTIVE MALWARE *****

Trojan Remover Ver 6.7.6.2565. For information, email support@simplysup.com

C:\Program Files\USB Disk Security\USBGuard.exe

Company: Microsoft Corporation

c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C2E8B41D-8A3B

c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{89274BDA-1166

c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4E6B76EC-3692

c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E6FFDF5F-3F32

Modified: 1/6/2012 8:29 PM

Modified: 4/18/2011 1:18 PM

Modified: 4/27/2011 3:39 PM

Modified: 7/14/2009 5:01 AM

Modified: 7/14/2009 6:19 AM

Created: 10/14/2011 8:58 AM

Company: Microsoft Corporation

Using Database v7291

Modified: 3/27/2008 11:35 AM

Created: 10/21/2011 4:48 PM

Modified: 7/14/2009 6:15 AM

Company: Avira Operations GmbH & Co. KG

C:\Program Files\Alwil Software\Avast4\ashServ.exe

Company: Broadcom Corporation

Company: Huawei Technologies Co., Ltd.

-4621-AB03-331336B8C789}\MpKsl9834e373.sys [file not found to scan]

-4BEB-8D4B-635A65B8ADDF}\MpKsld6bc2ace.sys [file not found to scan]

c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

Company: Microsoft Corporation

Company: Microsoft Corporation

11:08:39 PM: Scanning -----VXD ENTRIES----************************************************************

Company: Avira Operations GmbH & Co. KG

Created: 10/14/2011 8:58 AM

C:\Windows\system32\svchost.exe - file already scanned

-------------------C:\Program Files\Windows Sidebar\sidebar.exe - file already scanned

Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon

Value Data: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

Value Data: "C:\Program Files\Broadband\Broadband.exe"

Company: Microsoft Corporation

Company: Microsoft Corporation

ImagePath: \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates

Created: 7/14/2009 4:41 AM

Company: Google Inc.

Modified: 12/25/2011 9:05 AM

Modified: 7/14/2009 6:14 AM

C:\Program Files\Avira\AntiVir Desktop\avguard.exe - file already scanned

Company: Tonec Inc.

The following Anti-Malware program(s) are loaded:

C:\Program Files\Common Files\Java\Java Update\jusched.exe

Value Data: "C:\Program Files\DAP\DAP.EXE" /STARTUP

Company: Microsoft Corporation

ImagePath: \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates

ImagePath: \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates

BHO: C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll

9:51:51 AM: Scanning ------ COMMON STARTUP GROUP -----[C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]

task uninstalls itself when there is no Facebook software using it.

Modified: 7/14/2009 6:14 AM

C:\Windows\Explorer.EXE - file already scanned

Database directory: C:\Program Files\Trojan Remover\

Created: 7/5/2011 6:36 PM

Created: 7/14/2009 4:12 AM

Modified: 10/19/2011 5:03 PM

ImagePath: "C:\Program Files\Alwil Software\Avast4\ashServ.exe"

Modified: 7/14/2009 3:02 AM

Modified: 9/10/2009 3:31 PM

* NORMAL SCAN FOR ACTIVE MALWARE *

* INDIVIDUAL FILE SCAN *