View Single Post
  #2  
Old January 3rd, 2010, 12:07 AM
Vrodrigu13 Vrodrigu13 is offline
New Member
 
Join Date: Jan 2010
Location: United States
Posts: 25
ctd

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrie7&quer y="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:7
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50fftrab&query ="


FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/12/16 21:45:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/12/16 21:45:07 | 00,000,000 | ---D | M]

[2008/06/22 19:49:22 | 00,000,000 | ---D | M] -- C:\Users\Victor\AppData\Roaming\Mozilla\Extensions
[2010/01/01 21:56:45 | 00,000,000 | ---D | M] -- C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Pr ofiles\1mz8vyko.default\extensions
[2009/03/19 18:41:27 | 00,000,000 | ---D | M] (No name found) -- C:\Users\Victor\AppData\Roaming\Mozilla\Firefox\Pr ofiles\1mz8vyko.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2009/12/17 19:32:36 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2008/09/03 19:11:24 | 00,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
[2008/06/30 22:02:00 | 00,663,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\npOGAPlugin.dll
[2007/04/16 12:07:12 | 00,180,293 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll

O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (McAfee Phishing Filter) - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\Program Files\McAfee\MSK\mcapbho.dll ()
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ECenter] c:\DELL\E-Center\EULALauncher.exe ( )
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [PCMService] C:\Program Files\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Aim6] File not found
O4 - HKCU..\Run: [BitTorrent DNA] C:\Users\Victor\Program Files\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [DELL Webcam Manager] C:\Program Files\Dell\DELL Webcam Manager\DellWMgr.exe (Creative Technology Ltd.)
O4 - HKCU..\Run: [DellSupport] C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
O4 - HKCU..\Run: [LosAlamos] C:\Windows\System32\sshnas.DLL ()
O4 - HKCU..\Run: [ooVoo.exe] C:\Program Files\ooVoo\ooVoo.exe (ooVoo)
O4 - HKCU..\Run: [PUT2VIDQLG] C:\Users\Victor\AppData\Local\Temp\c.exe ()
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKCU..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe (Adobe Systems Incorporated)
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -Mozilla\5.0 ( File not found
O4 - HKCU..\RunOnce: [UniblueRegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O8 - Extra context menu item: &AIM Toolbar Search - C:\ProgramData\AIM Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/s...irector/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get.../ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008/04/08 13:10:28 | 00,000,000 | ---D | M] - C:\Automap -- [ NTFS ]
O33 - MountPoints2\{6c8f8873-2303-11de-aee6-0019b983c065}\Shell - "" = AutoRun
O33 - MountPoints2\{9b6e281f-7c1a-11dd-a8c5-0019b983c065}\Shell - "" = AutoRun
O33 - MountPoints2\{bb7abbca-3bf6-11de-9db4-0019b983c065}\Shell\AutoRun\command - "" = JDLightning\Windows\JDLightning.exe
O33 - MountPoints2\{dcafe0de-b891-11de-8a1c-0019b983c065}\Shell - "" = AutoRun
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2009/10/09 15:12:17 | 00,000,000 | ---D | M]
NetSvcs: Irmon - C:\Windows\System32\irmon.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
OTL cannot create restorepoints on Vista OSs!

========== Files/Folders - Created Within 14 Days ==========

[2010/01/02 05:06:46 | 00,000,000 | ---D | C] -- C:\Users\Victor\AppData\Roaming\Uniblue
[2010/01/02 05:06:37 | 00,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2010/01/01 21:52:58 | 00,000,000 | ---D | C] -- C:\Windows\Sun
[2009/12/28 05:24:22 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Jay Sean All Or Nothing 2009
[2009/12/28 05:23:37 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Leona Lewis - Echo (2009)[MasterMix RG]
[2009/12/28 05:20:59 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Lady GaGa - The Fame Monster 2CDRip 2009 [Cov+2CD][Bubanee]
[2009/12/28 05:17:12 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Alicia Keys - The Element Of Freedom (Deluxe) CDRip 2009 [Cov+CD][Bubanee]
[2009/12/28 05:06:51 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Timbaland - Presents Shock Value II (2009) (Advance) www.planet-bytes.org
[2009/12/28 04:48:43 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Ne-Yo - The Collection (2009) - R&B
[2009/12/28 04:41:04 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\50.Cent-Before.I.Self.Destruct-(Retail)-2009-[NoFS]
[2009/12/28 04:38:51 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\J. Cole-The Warm Up-2009-MIXFIEND
[2009/12/28 04:36:32 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Attention Deficit
[2009/12/28 04:34:01 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\A Kid Named Cudi
[2009/12/28 02:37:26 | 00,000,000 | ---D | C] -- C:\Users\Victor\Desktop\Lil_Wayne-No_Ceilings-(RapGodFathers.com)
[2009/12/20 05:04:37 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2008/12/17 21:03:26 | 00,047,360 | ---- | C] (VSO Software) -- C:\Users\Victor\AppData\Roaming\pcouffin.sys
[3 C:\Users\Victor\Documents\*.tmp files -> C:\Users\Victor\Documents\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010/01/02 17:33:45 | 03,670,016 | -HS- | M] () -- C:\Users\Victor\NTUSER.DAT
[2010/01/02 17:26:13 | 00,000,242 | -H-- | M] () -- C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/01/02 17:12:35 | 00,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 17:12:35 | 00,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 17:09:00 | 00,000,286 | -H-- | M] () -- C:\Windows\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010/01/02 17:00:10 | 00,000,392 | ---- | M] () -- C:\Windows\tasks\RegCure Program Check.job
[2010/01/02 05:06:44 | 00,001,031 | ---- | M] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2010/01/01 21:41:04 | 00,240,128 | ---- | M] () -- C:\Windows\System32\sshnas.dll
[2010/01/01 21:40:49 | 00,178,688 | ---- | M] () -- C:\Windows\msa.exe
[2010/01/01 13:13:13 | 00,037,128 | ---- | M] () -- C:\Windows\System32\Config.MPF
[2010/01/01 13:12:55 | 00,000,448 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Privacy Controls_{508A3C8E-E8A8-11DE-8699-0019B983C065}.job
[2010/01/01 13:12:51 | 00,000,368 | ---- | M] () -- C:\Windows\tasks\McQcTask.job
[2010/01/01 13:12:29 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/12/31 03:28:06 | 00,000,374 | ---- | M] () -- C:\Windows\tasks\RegCure.job
[2009/12/31 01:13:04 | 00,000,380 | ---- | M] () -- C:\Windows\tasks\RegCure Startup.job
[2009/12/31 01:12:38 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/12/31 01:12:32 | 21,371,94496 | -HS- | M] () -- C:\hiberfil.sys
[2009/12/31 01:10:59 | 00,524,288 | -HS- | M] () -- C:\Users\Victor\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regt rans-ms
[2009/12/31 01:10:59 | 00,065,536 | -HS- | M] () -- C:\Users\Victor\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2009/12/31 01:10:26 | 02,199,183 | -H-- | M] () -- C:\Users\Victor\AppData\Local\IconCache.db
[2009/12/30 04:37:06 | 00,000,420 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Update Version3.job
[2009/12/28 19:47:46 | 00,690,960 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/12/28 19:47:46 | 00,595,684 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/12/28 19:47:46 | 00,101,350 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/12/28 05:45:15 | 00,060,416 | ---- | M] () -- C:\Users\Victor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/27 04:59:00 | 00,000,456 | ---- | M] () -- C:\Windows\tasks\Driver Robot.job
[2009/12/23 16:16:34 | 00,000,786 | ---- | M] () -- C:\Users\Public\Desktop\RegCure.lnk
[2009/12/20 05:03:24 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_ 07_00.Wdf
[2009/12/20 05:00:02 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_ 00.Wdf
[3 C:\Users\Victor\Documents\*.tmp files -> C:\Users\Victor\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/01/02 05:06:44 | 00,001,031 | ---- | C] () -- C:\Users\Public\Desktop\RegistryBooster.lnk
[2010/01/01 21:41:01 | 00,178,688 | ---- | C] () -- C:\Windows\msa.exe
[2010/01/01 21:40:59 | 00,000,286 | -H-- | C] () -- C:\Windows\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010/01/01 21:40:52 | 00,000,242 | -H-- | C] () -- C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/01/01 21:40:45 | 00,240,128 | ---- | C] () -- C:\Windows\System32\sshnas.dll
[2009/12/20 05:03:24 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_ 07_00.Wdf
[2009/12/20 05:00:02 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_ 00.Wdf
[2009/10/19 16:57:45 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/08/28 01:03:11 | 00,000,760 | ---- | C] () -- C:\Users\Victor\AppData\Roaming\setup_ldm.iss
Reply With Quote