Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Slow Pc After Virus Removal


12 Aug 2011   #1

Windows 7 Ultimate 32bit
 
 
Slow Pc After Virus Removal

Lagging even 70% usage free of memory ..
here my hijack log

Code:
OTL logfile created on: 8/13/2011 6:32:44 AM - Run 1
OTL by OldTimer - Version 3.2.26.1     Folder = C:\Users\Boomer\Downloads
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.00 Gb Total Physical Memory | 1.19 Gb Available Physical Memory | 59.49% Memory free
4.00 Gb Paging File | 3.01 Gb Available in Paging File | 75.21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 66.41 Gb Total Space | 20.93 Gb Free Space | 31.52% Space Free | Partition Type: NTFS
Drive D: | 61.04 Gb Total Space | 4.46 Gb Free Space | 7.30% Space Free | Partition Type: NTFS
Drive E: | 70.30 Gb Total Space | 3.34 Gb Free Space | 4.75% Space Free | Partition Type: NTFS
Drive F: | 35.14 Gb Total Space | 4.94 Gb Free Space | 14.05% Space Free | Partition Type: NTFS
 
Computer Name: EVANGELISTA-PC | User Name: Boomer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011/08/13 06:32:00 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Boomer\Downloads\OTL.exe
PRC - [2011/08/13 06:26:11 | 000,012,970 | ---- | M] () -- C:\Users\Boomer\AppData\Local\Temp\vhupir.exe
PRC - [2011/07/06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011/06/27 16:19:36 | 002,211,984 | ---- | M] (Giraffic) -- C:\Program Files\Giraffic\GirafficWatchdog.exe
PRC - [2011/06/27 16:19:20 | 003,624,576 | ---- | M] (Giraffic) -- C:\Program Files\Giraffic\Giraffic.exe
PRC - [2011/05/28 14:46:56 | 000,353,168 | ---- | M] (IObit) -- C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
PRC - [2011/05/05 17:37:37 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011/01/07 21:06:12 | 000,803,432 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2011/01/07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010/12/03 07:48:00 | 000,218,432 | ---- | M] () -- C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
PRC - [2010/12/03 07:47:54 | 000,664,896 | ---- | M] () -- C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
PRC - [2010/03/25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2011/08/13 06:32:00 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Boomer\Downloads\OTL.exe
MOD - [2010/11/20 19:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2011/07/06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/06/27 16:19:36 | 002,211,984 | ---- | M] (Giraffic) [Auto | Running] -- C:\Program Files\Giraffic\GirafficWatchdog.exe -- (Giraffic)
SRV - [2011/05/28 14:46:56 | 000,353,168 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe -- (AdvancedSystemCareService)
SRV - [2011/03/12 16:56:04 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/01/07 19:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010/12/03 07:48:00 | 000,218,432 | ---- | M] () [Auto | Running] -- C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe -- (MotoHelper)
SRV - [2010/10/28 04:43:25 | 003,990,992 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010/03/25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2010/01/21 17:51:12 | 030,963,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2009/07/14 09:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 09:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 09:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2011/07/06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2011/07/06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011/01/08 11:27:00 | 010,467,656 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010/12/03 14:03:08 | 000,020,352 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motccgp.sys -- (motccgp)
DRV - [2010/11/20 20:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 20:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 20:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 18:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 18:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 17:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 17:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/11/09 15:35:30 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\cpuz135_x32.sys -- (cpuz135)
DRV - [2010/09/29 17:13:46 | 000,024,064 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem)
DRV - [2010/09/08 12:20:01 | 000,037,920 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2009/12/12 07:48:04 | 000,025,984 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2009/10/13 17:50:00 | 000,133,632 | ---- | M] (AhnLab, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Mkd2kfNT.sys -- (Mkd2kfNt)
DRV - [2009/07/13 17:37:00 | 000,079,360 | ---- | M] (AhnLab, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Mkd2Nadr.sys -- (Mkd2Nadr)
DRV - [2009/05/08 10:56:12 | 000,042,752 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motodrv.sys -- (MotDev)
DRV - [2009/01/29 16:18:00 | 000,008,320 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motccgpfl.sys -- (motccgpfl)
DRV - [2007/06/23 13:45:58 | 000,480,128 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vvftav303.sys -- (vvftav303)
DRV - [2007/05/15 10:14:24 | 001,472,768 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbVM303.sys -- (ZSMC0303)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\URLSearchHook: {fcbf663e-8530-46f8-a880-ac5abe9d2b23} - C:\Program Files\mobilewitch\prxtbmob0.dll (Conduit Ltd.)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN | Philippines - Hotmail, Messenger, Free online News, Video, Photos, Movies, Entertainment, Sports & more..
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BE 42 3F FA 5B E0 CB 01  [binary data]
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {cd90bf73-20f6-44ef-993d-bb920303bd2e} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {fcbf663e-8530-46f8-a880-ac5abe9d2b23} - C:\Program Files\mobilewitch\prxtbmob0.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local;192.168.*.*;*.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Yahoo-FileServe"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Veoh Web Player Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2653012&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=937811"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.search.selectedEngineURL: "http://fileservehome.com/?&prt=fileservetb01ff&clid=88c2eda64dc4417da86e620483f4b301&subid=&Keywords={searchTerms}"
FF - prefs.js..browser.startup.homepage: "http://search.bearshare.com/"
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {fcbf663e-8530-46f8-a880-ac5abe9d2b23}:3.2.3.3
FF - prefs.js..extensions.enabledItems: {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.5
FF - prefs.js..extensions.enabledItems: fileserve@fileserve.com:2.9
FF - prefs.js..keyword.URL: "http://fileservehome.com/?prt=mp3tubetb02ff&Keywords="
 
FF - user.js..keyword.URL: "http://fileservehome.com/?prt=mp3tubetb02ff&Keywords="
FF - user.js..keyword.enabled: 1
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.3146: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Users\Boomer\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2011/03/31 18:11:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5}: C:\Program Files\FileServe Manager\FireFox_Extension\{9F6FB1C9-22DA-4123-A7D4-9E7844B60EE5} [2011/05/07 23:23:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/06/06 03:18:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/06/06 03:18:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/07/01 15:19:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/26 16:48:43 | 000,000,000 | ---D | M]
 
[2011/03/12 22:25:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Boomer\AppData\Roaming\Mozilla\Extensions
[2011/08/10 13:15:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\extensions
[2011/08/10 13:15:13 | 000,000,000 | ---D | M] (MediaBar) -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}
[2011/07/01 15:51:02 | 000,000,000 | ---D | M] (Veoh Web Player Community Toolbar) -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\extensions\{cd90bf73-20f6-44ef-993d-bb920303bd2e}
[2011/05/07 13:00:16 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\extensions\engine@conduit.com
[2010/09/14 20:48:25 | 000,002,506 | ---- | M] () -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\searchplugins\BearShareWebSearch.xml
[2011/03/21 14:46:56 | 000,000,933 | ---- | M] () -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\searchplugins\conduit.xml
[2011/06/25 14:39:01 | 000,001,213 | ---- | M] () -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\searchplugins\fileserve.xml
[2010/08/12 16:21:14 | 000,002,486 | ---- | M] () -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\searchplugins\iMeshWebSearch.xml
[2011/08/10 13:15:07 | 000,002,505 | ---- | M] () -- C:\Users\Boomer\AppData\Roaming\Mozilla\Firefox\Profiles\ijy0ri2j.default\searchplugins\SearchResults.xml
[2011/07/27 10:09:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/03/18 07:39:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) -- 
[2011/07/01 15:19:29 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/08/24 17:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2011/05/10 18:07:53 | 002,179,072 | ---- | M] (DNAML Pty Ltd) -- C:\Program Files\mozilla firefox\plugins\npdbplug.dll
[2011/03/18 07:38:50 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/09/14 20:48:25 | 000,002,506 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\BearShareWebSearch.xml
[2010/01/01 16:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/06/25 14:39:01 | 000,001,213 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fileserve.xml
[2010/08/12 16:21:14 | 000,002,486 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\iMeshWebSearch.xml
[2011/08/10 13:15:07 | 000,002,505 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
 
O1 HOSTS File: ([2009/06/11 05:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (FileServeManager) - {00000001-AB3B-4334-9DA2-EC6B2A02AFC6} - C:\Program Files\FileServe Manager\FileServeBHO.dll (FileServe Limited)
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (no name) - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - No CLSID value found.
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (IeMonitorBho Class) - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited)
O2 - BHO: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll ()
O2 - BHO: (mobilewitch Toolbar) - {fcbf663e-8530-46f8-a880-ac5abe9d2b23} - C:\Program Files\mobilewitch\prxtbmob0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (MediaBar) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\Program Files\BearShare Applications\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll ()
O3 - HKLM\..\Toolbar: (mobilewitch Toolbar) - {fcbf663e-8530-46f8-a880-ac5abe9d2b23} - C:\Program Files\mobilewitch\prxtbmob0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (mobilewitch Toolbar) - {FCBF663E-8530-46F8-A880-AC5ABE9D2B23} - C:\Program Files\mobilewitch\prxtbmob0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [BearShare] C:\Program Files\BearShare Applications\BearShare\BearShare.exe (MusicLab, LLC)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Download by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Download with FileServe Manager - C:\Program Files\FileServe Manager\GetUrl.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pu...sh/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll) -  File not found
O20 - AppInit_DLLs: (C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011/08/12 06:43:35 | 000,000,257 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/08/11 09:35:15 | 000,000,256 | RHS- | M] () - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/08/11 09:35:15 | 000,000,211 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2011/08/11 09:35:15 | 000,000,224 | RHS- | M] () - F:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011/08/13 06:22:44 | 000,000,000 | ---D | C] -- C:\ProgramData\2C31B
[2011/08/11 11:54:16 | 001,275,144 | ---- | C] (Free Music Zilla: Free Pandora™, IMEEM™, Last.fm™, Myspace, eSnips™... Downloader - Download Pandora™, IMEEM™, Last.fm™, Myspace, eSnips™... Free!                                      ) -- C:\Users\Evangelista\Desktop\FMZ_2.0.0.5_setup.exe
[2011/08/10 13:15:07 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2011/08/10 13:15:01 | 000,000,000 | ---D | C] -- C:\Users\Evangelista\AppData\Roaming\MusicNet
[2011/08/10 13:14:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BearShare
[2011/08/10 13:14:12 | 000,000,000 | ---D | C] -- C:\ProgramData\BearShare
[2011/08/10 13:06:27 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B6A11573-C610-4862-BB78-32F6AFC4F74D}
[2011/08/09 22:26:30 | 000,000,000 | ---D | C] -- C:\Users\Evangelista\AppData\Roaming\Dev-Cpp
[2011/08/09 22:26:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++
[2011/08/09 22:26:15 | 000,000,000 | ---D | C] -- C:\Dev-Cpp
[2011/08/07 06:58:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Booster
[2011/08/06 18:56:46 | 000,000,000 | ---D | C] -- C:\Users\Evangelista\Desktop\4shared Movies
[2011/08/06 18:56:45 | 000,000,000 | ---D | C] -- C:\Users\Evangelista\Desktop\Garena HostBot v4.0
[2011/08/06 18:56:45 | 000,000,000 | ---D | C] -- C:\Users\Evangelista\Desktop\Freemusiczilla
[2011/08/02 16:37:51 | 000,000,000 | ---D | C] -- C:\Down
[2011/08/02 16:36:27 | 000,000,000 | ---D | C] -- C:\Windyzone
[2011/08/02 16:32:20 | 000,000,000 | ---D | C] -- C:\Program Files\Perfectworld Entertainment
[2011/08/02 16:32:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
[2011/07/31 17:44:19 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\New folder
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\widgets
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\unite
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\trust_and_security_button
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\tab_button
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\speeddial
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\smilies
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\selector_button
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\search
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\scrollbar_knob
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\scrollbar
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\scroll_marker
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Evangelista\Documents\radio_button
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\progress
[2011/07/31 17:41:54 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\panel_toggle
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\pagebar
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\notifier
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- 
C:\Users\Boomer\Documents\media
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- 
C:\Users\Boomer\Documents\link
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- 
C:\Users\Boomer\Documents\icons
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\html_compose
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\expand_button
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- 
C:\Users\Boomer\Documents\edit
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\drop_insert
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\drag_scrollbar
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\dialog_images
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\contacts
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\checkbox
[2011/07/31 17:41:53 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\caption
[2011/07/31 17:41:52 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\buttons
[2011/07/31 17:41:52 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\border
[2011/07/31 17:41:52 | 000,000,000 | ---D | C] -- C:\Users\Boomer\Documents\backgrounds
[2011/07/31 17:41:52 | 000,000,000 | ---D | C] --
 C:\Users\Boomer\Documents\anims
[2011/07/31 17:41:52 | 000,000,000 | ---D | C] -- 
C:\Users\Boomer\Documents\a
[2011/07/27 12:50:41 | 000,000,000 | ---D | C] -- C:\Users\Boomer\AppData\Roaming\Auslogics
[2011/07/27 12:47:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[2011/07/27 12:47:34 | 000,000,000 | ---D | C] -- C:\Program Files\Auslogics
[2011/07/27 10:06:50 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/07/26 18:42:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wizet
[2011/07/26 18:38:04 | 000,000,000 | ---D | C] -- C:\Program Files\Wizet
[2011/07/26 16:33:29 | 000,021,992 | ---- | C] (CPUID) -- C:\Windows\System32\drivers\cpuz135_x32.sys
[2011/07/26 16:33:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
[2011/07/26 16:33:28 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2011/07/26 11:22:01 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU
[2011/07/26 11:18:55 | 000,774,144 | ---- | C] (Terra Informatica Software, Inc., British Columbia, Canada.) -- C:\Windows\System32\htmlayout.dll
[2011/07/26 11:18:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVSMedia
[2011/07/26 11:18:15 | 000,000,000 | ---D | C] -- C:\Program Files\AVS4YOU
[2011/07/24 16:50:37 | 000,000,000 | ---D | C] -- C:\Users\Boomer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2011/07/24 16:50:37 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2011/07/15 21:29:06 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2011/07/15 16:30:55 | 000,000,000 | ---D | C] -- C:\Users\Boomer\AppData\Local\Ares
[2011/07/15 16:30:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011/08/13 06:29:30 | 000,017,360 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/13 06:29:30 | 000,017,360 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/13 06:22:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/08/13 06:22:01 | 1610,063,872 | -HS- | M] () -- C:\hiberfil.sys
[2011/08/12 19:48:27 | 000,103,140 | ---- | M] () -- C:\amarw.exe
[2011/08/12 17:23:41 | 000,008,126 | ---- | M] () -- C:\Users\Boomer\AppData\Roaming\Cabos.plist
[2011/08/12 09:21:36 | 000,000,603 | ---- | M] () -- 
C:\Users\Boomer\Desktop\Dev-C++.lnk
[2011/08/12 06:43:35 | 000,000,257 | RHS- | M] () -- C:\autorun.inf
[2011/08/11 11:54:18 | 001,275,144 | ---- | M] (Free Music Zilla: Free Pandora™, IMEEM™, Last.fm™, Myspace, eSnips™... Downloader - Download Pandora™, IMEEM™, Last.fm™, Myspace, eSnips™... Free!                                      ) -- C:\Users\Boomer\Desktop\FMZ_2.0.0.5_setup.exe
[2011/08/10 15:43:34 | 000,000,193 | ---- | M] () -- C:\Users\Boomer\Desktop\RustyHearts.url
[2011/08/10 15:40:08 | 000,623,940 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/08/10 15:40:08 | 000,106,316 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/08/10 13:14:13 | 000,001,182 | ---- | M] () -- C:\Users\Boomer\Application Data\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk
[2011/08/10 13:14:13 | 000,001,158 | ---- | M] () -- C:\Users\Boomer\Desktop\BearShare.lnk
[2011/08/09 22:26:25 | 000,000,609 | ---- | M] () -- C:\Users\Boomer\Application Data\Microsoft\Internet Explorer\Quick Launch\Dev-C++.lnk
[2011/08/09 22:21:15 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011/08/09 22:21:15 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011/08/08 20:58:19 | 000,051,078 | ---- | M] () -- C:\Users\Evangelista\AppData\Roaming\room_v3.dat
[2011/08/07 06:58:06 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
[2011/08/07 06:58:06 | 000,001,118 | ---- | M] () -- C:\Users\Public\Desktop\Game Booster.lnk
[2011/08/05 07:16:09 | 000,000,914 | ---- | M] () -- C:\Users\Boomer\_=Demonoid.me=_-Perry_Stone_Secrets_from_Beyond_The_Grave_(2010)_[ePub]_11313737.985.torrent
[2011/08/04 17:19:40 | 020,727,592 | ---- | M] () -- C:\Users\Boomer\Maranatha - Heart Of Worship Vol 1.zip
[2011/08/04 10:43:48 | 000,415,015 | ---- | M] () -- C:\Users\Boomer\Documents\Secrets_from_Beyond_The_Grave.epub
[2011/08/04 10:31:00 | 000,004,970 | ---- | M] () -- C:\Users\Boomer\Julian_of_Norwich_o-Demonoid.me-o_11313737.985.torrent
[2011/08/04 10:26:42 | 000,000,914 | ---- | M] () -- C:\Users\Boomer\Perry_Stone_Secrets_from_Beyond_The_Grave_(2010)_[ePub]_x-Demonoid.me-x_11313737.985.torrent
[2011/08/04 08:53:00 | 000,011,614 | ---- | M] () -- C:\Users\Boomer\6B98F76B863A27F7E360A5E5AF086D7ADC0B97E7.torrent
[2011/08/04 08:05:34 | 000,022,468 | ---- | M] () -- C:\Users\Boomer\Heaven_ISO_full_US_[absolutorrent.com].torrent
[2011/08/04 08:03:20 | 000,014,996 | ---- | M] () -- C:\Users\Boomer\52A4C0922030C0BF9074923AE7094D966F127920.torrent
[2011/08/04 08:00:33 | 000,022,474 | ---- | M] () -- C:\Users\Boomer\01356C6A41493EE4D9E7291EA69763413F5FDF86.torrent
[2011/08/03 22:01:42 | 002,095,008 | ---- | M] () -- C:\Users\Boomer\Revelation_Illustrated.avi
[2011/08/02 17:06:11 | 000,002,769 | ---- | M] () -- C:\Users\Boomer\Desktop\RustyHearts.lnk
[2011/08/01 23:25:25 | 000,807,090 | ---- | M] () -- C:\Users\Boomer\The.Ten.Commandments.1956.720p.BluRay.x264-AMIABLE.BOZX.6287198.TPB.torrent
[2011/08/01 23:18:10 | 000,012,068 | ---- | M] () -- C:\Users\Boomer\4D674359BD690154C59E23FEC7D769D557E6AE54.torrent
[2011/07/31 14:00:17 | 000,001,779 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2011/07/30 14:45:19 | 000,090,942 | ---- | M] () -- C:\Users\Boomer\Desktop\application_form.pdf
[2011/07/27 12:48:18 | 000,001,208 | ---- | M] () -- C:\Users\Boomer\Desktop\Auslogics Disk Defrag.lnk
[2011/07/27 12:47:35 | 000,001,256 | ---- | M] () -- C:\Users\Boomer\Desktop\Auslogics Registry Defrag.lnk
[2011/07/27 06:56:07 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/07/26 18:42:31 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\MapleStory.lnk
[2011/07/24 17:01:37 | 000,000,436 | RHS- | M] () -- C:\Users\Boomer\ntuser.pol
[2011/07/22 21:46:28 | 000,176,128 | ---- | M] () -- C:\Windows\System32\wzmss.dll
[2011/07/17 11:14:31 | 000,000,342 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperResumePrompt_Evangelista.job
[2011/07/15 23:48:32 | 000,409,152 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011/08/12 19:48:27 | 000,103,140 | ---- | C] () -- C:\amarw.exe
[2011/08/12 09:21:36 | 000,000,603 | ---- | C] () -- 
C:\Users\Boomer\Desktop\Dev-C++.lnk
[2011/08/12 06:43:29 | 000,000,257 | RHS- | C] () -- C:\autorun.inf
[2011/08/10 13:14:13 | 000,001,182 | ---- | C] () -- C:\Users\Boomer\Application Data\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk
[2011/08/10 13:14:13 | 000,001,158 | ---- | C] () -- C:\Users\Boomer\Desktop\BearShare.lnk
[2011/08/09 22:26:25 | 000,000,609 | ---- | C] () -- C:\Users\Boomer\Application Data\Microsoft\Internet Explorer\Quick Launch\Dev-C++.lnk
[2011/08/09 22:21:15 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2011/08/09 22:21:15 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011/08/08 19:58:54 | 000,001,414 | ---- | C] () -- 
C:\UsersBoomer\Desktop\Clear Memory.lnk
[2011/08/07 06:58:06 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\Switch to Gaming Mode.lnk
[2011/08/07 06:58:06 | 000,001,118 | ---- | C] () -- C:\Users\Public\Desktop\Game Booster.lnk
[2011/08/05 07:16:09 | 000,000,914 | ---- | C] () -- C:\Users\Evangelista\_=Demonoid.me=_-Perry_Stone_Secrets_from_Beyond_The_Grave_(2010)_[ePub]_11313737.985.torrent
[2011/08/04 17:15:16 | 020,727,592 | ---- | C] () -- C:\Users\Boomer\Maranatha - Heart Of Worship Vol 1.zip
[2011/08/04 11:09:40 | 000,415,015 | ---- | C] () -- C:\Users\Boomer\Documents\Secrets_from_Beyond_The_Grave.epub
[2011/08/04 10:31:00 | 000,004,970 | ---- | C] () -- C:\Users\Boomer\Julian_of_Norwich_o-Demonoid.me-o_11313737.985.torrent
[2011/08/04 10:26:42 | 000,000,914 | ---- | C] () -- C:\Users\Boomer\Perry_Stone_Secrets_from_Beyond_The_Grave_(2010)_[ePub]_x-Demonoid.me-x_11313737.985.torrent
[2011/08/04 08:53:00 | 000,011,614 | ---- | C] () -- C:\Users\Boomer\6B98F76B863A27F7E360A5E5AF086D7ADC0B97E7.torrent
[2011/08/04 08:05:34 | 000,022,468 | ---- | C] () -- C:\Users\Boomer\Heaven_ISO_full_US_[absolutorrent.com].torrent
[2011/08/04 08:02:22 | 000,014,996 | ---- | C] () -- C:\Users\Boomer\52A4C0922030C0BF9074923AE7094D966F127920.torrent
[2011/08/04 08:00:33 | 000,022,474 | ---- | C] () -- C:\Users\Boomer\01356C6A41493EE4D9E7291EA69763413F5FDF86.torrent
[2011/08/03 22:01:25 | 002,095,008 | ---- | C] () -- C:\Users\Boomer\Revelation_Illustrated.avi
[2011/08/02 19:50:17 | 000,000,193 | ---- | C] () -- C:\Users\Boomer\Desktop\RustyHearts.url
[2011/08/02 16:59:30 | 000,002,769 | ---- | C] () -- C:\Users\Boomer\Desktop\RustyHearts.lnk
[2011/08/01 23:25:20 | 000,807,090 | ---- | C] () -- C:\Users\Boomer\The.Ten.Commandments.1956.720p.BluRay.x264-AMIABLE.BOZX.6287198.TPB.torrent
[2011/08/01 23:18:09 | 000,012,068 | ---- | C] () -- C:\Users\Boomer\4D674359BD690154C59E23FEC7D769D557E6AE54.torrent
[2011/07/31 17:41:54 | 000,087,576 | ---- | C] () -- C:\Users\Boomer\Documents\skin.ini
[2011/07/31 14:00:17 | 000,001,791 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011/07/31 14:00:17 | 000,001,779 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2011/07/30 14:45:08 | 000,090,942 | ---- | C] () -- C:\Users\Boomer\Desktop\application_form.pdf
[2011/07/27 12:48:18 | 000,001,208 | ---- | C] () -- C:\Users\Boomer\Desktop\Auslogics Disk Defrag.lnk
[2011/07/27 12:47:35 | 000,001,256 | ---- | C] () -- C:\Users\Boomer\Desktop\Auslogics Registry Defrag.lnk
[2011/07/26 18:42:31 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\MapleStory.lnk
[2011/07/24 17:01:37 | 000,000,436 | RHS- | C] () -- C:\Users\Boomer\ntuser.pol
[2011/07/22 21:46:25 | 000,176,128 | ---- | C] () -- C:\Windows\System32\wzmss.dll
[2011/05/25 21:31:43 | 000,051,078 | ---- | C] () -- C:\Users\Boomer\AppData\Roaming\room_v3.dat
[2011/05/10 18:07:54 | 000,894,616 | ---- | C] () -- C:\Windows\dbplugin.exe
[2011/05/10 18:07:54 | 000,245,840 | ---- | C] () -- C:\Windows\System32\DNLEng.dll
[2011/05/07 02:44:56 | 000,000,001 | ---- | C] () -- C:\ProgramData\flagposition.out
[2011/05/06 21:40:32 | 000,000,022 | ---- | C] () -- C:\Windows\pspvc_path.ini
[2011/04/03 18:56:59 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011/04/03 18:33:48 | 000,122,880 | ---- | C] () -- C:\Windows\rm303b.exe
[2011/04/03 18:33:48 | 000,049,152 | ---- | C] () -- C:\Windows\Domino.exe
[2011/03/22 17:20:24 | 000,046,742 | ---- | C] () -- C:\Users\Boomer\AppData\Roaming\room.dat
[2011/03/18 02:58:04 | 000,008,126 | ---- | C] () -- C:\Users\Boomer\AppData\Roaming\Cabos.plist
[2011/03/13 17:44:37 | 000,005,632 | ---- | C] () -- C:\Users\Boomer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/13 12:43:55 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011/03/13 12:42:34 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011/03/13 02:39:08 | 000,921,600 | ---- | C] () -- C:\Windows\vorbisenc.dll
[2011/03/13 02:39:08 | 000,237,568 | ---- | C] () -- C:\Windows\OggDS.dll
[2011/03/13 02:39:08 | 000,188,416 | ---- | C] () -- C:\Windows\vorbis.dll
[2011/03/13 02:39:08 | 000,066,048 | ---- | C] () -- C:\Windows\MP4.dll
[2011/03/13 02:39:08 | 000,045,056 | ---- | C] () -- C:\Windows\ogg.dll
[2011/03/13 02:39:08 | 000,023,552 | ---- | C] () -- C:\Windows\mkunicode.dll
[2011/03/12 15:27:22 | 000,055,382 | ---- | C] () -- C:\Windows\War3Unin.dat
[2011/03/12 11:59:56 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/03/12 11:59:22 | 000,146,432 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2011/03/12 11:59:22 | 000,072,704 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2009/11/25 13:40:50 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009/07/14 12:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 12:33:53 | 000,409,152 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/14 10:05:48 | 000,623,940 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/14 10:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/14 10:05:48 | 000,106,316 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/14 10:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/14 10:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/14 10:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/14 07:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/14 07:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 07:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/06/11 05:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
 
========== LOP Check ==========
 
[2011/08/06 07:23:13 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\4shared Desktop
[2011/03/13 04:48:23 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\adma
[2011/05/16 04:19:05 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\aMule
[2011/07/27 12:54:52 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Auslogics
[2011/03/13 18:09:53 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\BitComet
[2011/08/12 17:23:41 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Cabos
[2011/08/09 22:31:15 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Dev-Cpp
[2011/03/15 16:45:41 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Downloaded Installations
[2011/03/13 15:46:16 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\FMZilla
[2011/05/19 07:23:10 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\FrostWire
[2011/03/24 20:37:40 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\GrabPro
[2011/03/12 15:23:40 | 000,000,000 | ---D | M] -- C:\UsersBoomer\AppData\Roaming\ImgBurn
[2011/05/05 17:13:32 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\IObit
[2011/03/20 22:54:43 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\LimeRunner
[2011/05/07 23:35:22 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Megaupload
[2011/08/10 13:15:01 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\MusicNet
[2011/03/27 14:10:18 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\NPLUTO Corporation
[2011/03/12 10:40:33 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Opera
[2011/08/07 21:07:06 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Orbit
[2011/05/01 23:02:45 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Pi Eye Games
[2011/03/24 20:26:51 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\ProgSense
[2011/07/06 18:35:34 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Rovio
[2011/03/18 16:21:46 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Sony
[2011/04/05 22:11:37 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\SystemRequirementsLab
[2011/03/13 01:31:07 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\URSoft
[2011/08/13 06:22:35 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\uTorrent
[2011/05/30 16:46:17 | 000,000,000 | ---D | M] -- C:\Users\Boomer\AppData\Roaming\Windupdt
[2011/07/17 11:14:31 | 000,000,342 | ---- | M] () -- C:\Windows\Tasks\RNUpgradeHelperResumePrompt_Evangelista.job
[2011/06/05 03:44:03 | 000,000,284 | ---- | M] () -- C:\Windows\Tasks\RunAsStdUser Task for VeohWebPlayer.job
[2011/04/05 16:26:59 | 000,032,638 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 168 bytes -> C:\ProgramData\TEMP:1CE11B51
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:EBAA0CD9
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:587EB586

< End of report >


My System SpecsSystem Spec
.

Reply

 Slow Pc After Virus Removal




Thread Tools



Similar help and support threads for2: Slow Pc After Virus Removal
Thread Forum
Want ideas for Virus removal if virus shows up in safemode CMD System Security
Solved Slow browser after virus removal Browsers & Mail
BSOD after virus removal BSOD Help and Support
Virus Removal System Security
happili virus removal System Security
Virus, Malware Removal System Security
After Virus Removal System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:28 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33