Hi, I have read several topic about this here. But the thing is every time, I restart my computer it comes out and eat up my internet quota. So I have run ComboFix, if I run the ComboFix it's gone, or if I leave it for a few minutes it's also gone, but sometimes it's comeback after a few mins or I restart my computer. So I wonder if it's malware. First time I found it is at Resource Monitor, shown as Update.exe where the address is s3-1-w.amazonaws.com. Thank you very much.
ComboFix Log:
ComboFix 14-10-15.01 - Rivaldi 10/15/2014 17:50:49.3.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.44.1033.18.8140.5999 [GMT 8:00]
Running from: c:\users\Rivaldi\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2014-09-15 to 2014-10-15 )))))))))))))))))))))))))))))))
.
.
2014-10-15 09:53 . 2014-10-15 09:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-10-14 15:54 . 2014-10-14 15:54 -------- d-----w- c:\users\Rivaldi\AppData\Local\My Games
2014-10-13 15:15 . 2014-10-13 15:15 -------- d-----w- c:\program files (x86)\Microsoft XNA
2014-10-10 10:16 . 2014-10-12 12:01 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-10-10 10:16 . 2014-10-10 10:16 -------- d-----w- c:\users\Rivaldi\AppData\Local\PunkBuster
2014-10-10 10:16 . 2014-10-10 10:16 -------- d-----w- c:\users\Rivaldi\AppData\Local\ESN
2014-10-10 10:13 . 2014-10-10 10:13 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2014-10-09 20:29 . 2014-10-12 12:01 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-10-09 20:29 . 2014-10-10 10:16 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-10-09 20:29 . 2014-10-09 20:29 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-10-08 15:44 . 2014-09-25 02:08 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-10-08 15:44 . 2014-09-25 01:40 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-10-07 13:32 . 2014-10-07 13:32 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Fujitsu
2014-10-07 13:32 . 2014-10-07 13:32 -------- d-----w- c:\users\Rivaldi\AppData\Local\Fujitsu
2014-10-07 13:30 . 2014-10-07 13:30 256 ---ha-w- c:\windows\SysWow64\LTAW14FN.BIN
2014-10-07 13:30 . 2014-10-07 13:30 256 ---ha-w- c:\windows\SysWow64\FJLTAFOU.BIN
2014-10-07 13:29 . 2014-10-07 13:30 -------- d-----w- c:\program files (x86)\ATLAS V14
2014-10-06 14:28 . 2014-10-06 14:30 -------- d-----w- c:\windows\system32\drivers\NISx64\1506000.020
2014-09-29 09:07 . 2014-09-29 09:07 -------- d--h--r- c:\users\Rivaldi\AppData\Roaming\SecuROM
2014-09-29 08:53 . 2014-09-29 08:52 447752 ----a-w- c:\windows\SysWow64\vp6vfw.dll
2014-09-29 04:47 . 2014-09-29 04:47 -------- d-----w- c:\program files\Common Files\Sony Shared
2014-09-29 04:47 . 2014-09-29 04:47 -------- d-----w- c:\program files (x86)\Common Files\Sony Shared
2014-09-29 04:47 . 2014-09-29 04:47 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Sony Corporation
2014-09-29 04:46 . 2014-09-29 04:47 -------- d-----w- c:\programdata\Sony Corporation
2014-09-29 04:46 . 2014-09-29 04:46 -------- d-----w- c:\program files (x86)\Sony
2014-09-28 08:29 . 2014-09-28 08:29 -------- d-----w- c:\users\Rivaldi\AppData\Local\PopCap Games
2014-09-28 08:28 . 2014-09-28 08:28 -------- d-----w- c:\programdata\EA Core
2014-09-28 08:28 . 2014-10-10 10:16 -------- d-----w- c:\programdata\EA Logs
2014-09-28 08:26 . 2014-09-28 08:28 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
2014-09-28 08:25 . 2014-09-28 08:25 -------- d-----w- c:\programdata\Qualcomm
2014-09-28 08:25 . 2014-09-28 08:25 -------- d-----w- c:\program files\Qualcomm Atheros
2014-09-28 08:24 . 2014-09-28 08:24 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Intel Corporation
2014-09-28 06:23 . 2014-09-28 06:52 -------- d-----w- c:\users\Rivaldi\AppData\Local\dxhr
2014-09-28 06:21 . 2014-09-28 06:21 -------- d-----w- c:\users\Rivaldi\AppData\Local\28050
2014-09-28 05:52 . 2014-09-28 05:52 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Trine2
2014-09-27 19:54 . 2014-10-09 20:30 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2014-09-27 19:14 . 2014-09-28 08:28 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Origin
2014-09-27 19:14 . 2014-09-28 08:41 -------- d-----w- c:\users\Rivaldi\AppData\Local\Origin
2014-09-27 19:09 . 2014-10-05 08:19 -------- d-----w- c:\programdata\Origin
2014-09-27 19:09 . 2014-09-28 08:29 -------- d-----w- c:\programdata\Electronic Arts
2014-09-26 15:01 . 2014-09-26 15:01 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Garena
2014-09-26 15:01 . 2014-09-26 15:01 -------- d-----w- c:\programdata\Garena
2014-09-25 16:17 . 2014-09-25 16:17 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\LolClient
2014-09-25 06:42 . 2014-09-25 06:42 -------- d-----w- c:\programdata\Riot Games
2014-09-25 06:34 . 2008-07-12 00:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2014-09-25 06:34 . 2008-07-12 00:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2014-09-25 06:34 . 2008-07-12 00:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2014-09-25 06:33 . 2014-09-25 06:34 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Riot Games
2014-09-25 05:16 . 2014-09-25 05:16 -------- d-----w- c:\programdata\RzMaelstromVAD_1.1.58.1854
2014-09-25 05:11 . 2014-09-25 05:11 -------- d-----w- c:\users\Rivaldi\AppData\Local\Razer
2014-09-25 04:34 . 2014-09-25 04:33 1199831 ----a-w- c:\windows\unins001.exe
2014-09-25 04:32 . 2014-09-25 04:34 -------- d-----w- c:\program files (x86)\Corsair
2014-09-25 04:32 . 2014-09-25 04:32 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Corsair Vengeance
2014-09-25 04:32 . 2014-09-25 04:31 1186175 ----a-w- c:\windows\unins000.exe
2014-09-25 04:32 . 2012-10-31 08:59 25600 ----a-w- c:\windows\system32\drivers\CORK95.sys
2014-09-24 10:26 . 2014-09-09 22:11 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-24 10:26 . 2014-09-09 21:47 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-09-24 06:02 . 2014-08-18 21:56 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-09-23 09:48 . 2014-09-27 07:56 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\foobar2000
2014-09-23 09:48 . 2014-09-23 09:48 -------- d-----w- c:\program files (x86)\foobar2000
2014-09-22 12:27 . 2014-10-15 08:39 27552 ----a-w- c:\windows\system32\drivers\HWiNFO64A.SYS
2014-09-22 12:27 . 2014-10-15 08:39 -------- d-----w- c:\program files\HWiNFO64
2014-09-22 10:41 . 2014-05-22 05:54 475672 ----a-w- c:\windows\system32\ASProxy64.dll
2014-09-22 10:41 . 2014-05-22 05:54 359960 ----a-w- c:\windows\SysWow64\ASProxy.dll
2014-09-22 10:41 . 2014-05-17 08:45 31744 ----a-w- c:\windows\system32\drivers\asvpndrv.sys
2014-09-18 17:23 . 2014-09-18 17:23 -------- d-----w- C:\ArcheAge
2014-09-18 12:19 . 2014-09-18 12:20 -------- d-----w- c:\program files\TAP-Windows
2014-09-18 12:19 . 2014-09-18 12:19 -------- d-----w- c:\program files (x86)\VPN Unlimited
2014-09-18 11:18 . 2008-10-14 22:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2014-09-17 11:38 . 2014-09-17 11:38 -------- d-----w- c:\users\Rivaldi\AppData\Local\Glyph
2014-09-17 11:38 . 2014-09-17 11:38 -------- d-----w- c:\programdata\Glyph
2014-09-16 02:39 . 2014-09-16 02:39 -------- d-sh--w- c:\users\Rivaldi\AppData\Local\EmieUserList
2014-09-16 02:39 . 2014-09-16 02:39 -------- d-sh--w- c:\users\Rivaldi\AppData\Local\EmieSiteList
2014-09-16 02:32 . 2014-09-16 02:32 -------- d-----w- c:\windows\SysWow64\Wat
2014-09-16 02:32 . 2014-09-16 02:32 -------- d-----w- c:\windows\system32\Wat
2014-09-15 21:39 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-09-15 21:39 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-09-15 21:39 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-09-15 21:39 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-09-15 21:39 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-09-15 21:38 . 2014-09-15 21:38 -------- d-----w- c:\windows\Migration
2014-09-15 21:37 . 2013-10-14 10:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-09-15 21:35 . 2014-09-15 21:35 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-09-15 21:12 . 2014-09-15 21:14 -------- d-----w- c:\windows\system32\MRT
2014-09-15 21:12 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-09-15 21:12 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-09-15 21:10 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-09-15 21:10 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2014-09-15 21:10 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-09-15 21:10 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-09-15 21:10 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2014-09-15 21:10 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2014-09-15 21:10 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-09-15 21:10 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-09-15 20:02 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-09-15 20:02 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll
2014-09-15 19:58 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-09-15 19:58 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-09-15 19:55 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-09-15 19:55 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-09-15 19:54 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-09-15 19:54 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-09-15 19:54 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-09-15 19:54 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-09-15 19:54 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-09-15 19:54 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-09-15 19:54 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-09-15 19:54 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-09-15 19:54 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-09-15 19:54 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-09-15 19:53 . 2014-06-24 03:29 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-09-15 19:53 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-09-15 19:51 . 2014-05-08 09:32 3178496 ----a-w- c:\windows\system32\rdpcorets.dll
2014-09-15 19:51 . 2014-05-08 09:32 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDYAK.DLL
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDTAT.DLL
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDRU1.DLL
2014-09-15 19:46 . 2014-07-09 02:03 6656 ----a-w- c:\windows\system32\KBDRU.DLL
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDBASH.DLL
2014-09-15 19:46 . 2014-07-09 01:31 7168 ----a-w- c:\windows\SysWow64\KBDYAK.DLL
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-11 18:17 . 2014-09-11 18:17 5185536 ----a-r- c:\users\Rivaldi\AppData\Roaming\Microsoft\Installer\{D1E1F028-1953-43A3-BFD8-D2A00EC06E36}\RapeLay.exe
2014-09-11 18:17 . 2014-09-11 18:17 28672 ----a-r- c:\users\Rivaldi\AppData\Roaming\Microsoft\Installer\{D1E1F028-1953-43A3-BFD8-D2A00EC06E36}\_EB52FE80E75B_486E_9850_195DAB8E8D59.exe
2014-09-10 04:57 . 2014-02-06 04:36 16672 ----a-w- c:\windows\system32\drivers\AppleMNT.sys
2014-09-10 04:57 . 2014-02-06 04:36 72992 ----a-w- c:\windows\system32\drivers\AppleHFS.sys
2014-09-10 00:27 . 2013-09-24 14:53 94208 ----a-w- c:\windows\system32\drivers\AtihdW76.sys
2014-09-10 00:27 . 2013-09-24 14:51 110080 ----a-w- c:\windows\system32\DelayAPO.dll
2014-09-10 00:27 . 2013-12-06 22:04 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2014-09-10 00:27 . 2013-12-06 22:03 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-09-10 00:27 . 2013-12-06 22:03 115512 ----a-w- c:\windows\system32\atiu9p64.dll
2014-09-10 00:27 . 2013-12-06 22:02 98496 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-09-10 00:27 . 2013-12-06 21:59 8287008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-09-10 00:27 . 2013-12-06 21:58 6630232 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-09-10 00:27 . 2013-12-06 21:57 8927704 ----a-w- c:\windows\system32\atiumd6a.dll
2014-09-10 00:27 . 2013-12-06 21:56 7751920 ----a-w- c:\windows\system32\atiumd64.dll
2014-09-10 00:27 . 2013-12-06 21:38 230912 ----a-w- c:\windows\system32\clinfo.exe
2014-09-10 00:27 . 2013-12-06 21:38 99840 ----a-w- c:\windows\system32\OpenVideo64.dll
2014-09-10 00:27 . 2013-12-06 21:38 83968 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2014-09-10 00:27 . 2013-12-06 21:38 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2014-09-10 00:27 . 2013-12-06 21:38 73728 ----a-w- c:\windows\SysWow64\OVDecode.dll
2014-09-10 00:27 . 2013-12-06 21:26 129536 ----a-w- c:\windows\system32\coinst_13.251.dll
2014-09-10 00:27 . 2013-12-06 20:58 22157824 ----a-w- c:\windows\SysWow64\atioglxx.dll
2014-09-10 00:27 . 2013-12-06 20:50 190976 ----a-w- c:\windows\system32\atitmm64.dll
2014-09-10 00:27 . 2013-12-06 20:22 89088 ----a-w- c:\windows\system32\atisamu64.dll
2014-09-10 00:27 . 2013-12-06 20:22 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
2014-09-10 00:27 . 2013-12-06 22:07 78432 ----a-w- c:\windows\system32\atimpc64.dll
2014-09-10 00:27 . 2013-12-06 22:07 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2014-09-10 00:27 . 2013-12-06 22:07 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2014-09-10 00:27 . 2013-12-06 22:07 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2014-09-10 00:27 . 2013-12-06 22:01 1318552 ----a-w- c:\windows\system32\aticfx64.dll
2014-09-10 00:27 . 2013-12-06 22:01 1100216 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-09-10 00:27 . 2013-12-06 22:00 9753752 ----a-w- c:\windows\system32\atidxx64.dll
2014-09-10 00:27 . 2013-12-06 21:59 8406024 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-09-10 00:27 . 2013-12-06 21:52 13207552 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2014-09-10 00:27 . 2013-12-06 21:38 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe
2014-09-10 00:27 . 2013-12-06 21:38 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe
2014-09-10 00:27 . 2013-12-06 21:38 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe
2014-09-10 00:27 . 2013-12-06 21:38 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe
2014-09-10 00:27 . 2013-12-06 21:37 29382144 ----a-w- c:\windows\system32\amdocl64.dll
2014-09-10 00:27 . 2013-12-06 21:33 63488 ----a-w- c:\windows\system32\OpenCL.dll
2014-09-10 00:27 . 2013-12-06 21:33 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-09-10 00:27 . 2013-12-06 21:16 26352128 ----a-w- c:\windows\system32\atio6axx.dll
2014-09-10 00:27 . 2013-12-06 21:13 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2014-09-10 00:27 . 2013-12-06 21:12 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2014-09-10 00:27 . 2013-12-06 21:12 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2014-09-10 00:27 . 2013-12-06 21:12 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2014-09-10 00:27 . 2013-12-06 21:12 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2014-09-10 00:27 . 2013-12-06 21:12 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2014-09-10 00:27 . 2013-12-06 21:09 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2014-09-10 00:27 . 2013-12-06 20:53 442368 ----a-w- c:\windows\system32\atidemgy.dll
2014-09-10 00:27 . 2013-12-06 20:53 31232 ----a-w- c:\windows\system32\atimuixx.dll
2014-09-10 00:27 . 2013-12-06 20:53 588288 ----a-w- c:\windows\system32\atieclxx.exe
2014-09-10 00:27 . 2013-12-06 20:52 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2014-09-10 00:27 . 2013-12-06 20:22 1144320 ----a-w- c:\windows\system32\atiadlxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 825344 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2014-09-10 00:27 . 2013-12-06 20:22 74752 ----a-w- c:\windows\system32\atig6pxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 100352 ----a-w- c:\windows\system32\atig6txx.dll
2014-09-10 00:27 . 2013-12-06 20:21 96768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2014-09-10 00:27 . 2013-12-06 20:21 626176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2014-09-10 00:27 . 2013-12-06 20:18 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2014-09-10 00:27 . 2013-04-10 15:34 51200 ----a-w- c:\windows\system32\ATIODCLI.exe
2014-09-10 00:27 . 2013-04-10 15:34 332800 ----a-w- c:\windows\system32\ATIODE.exe
2014-09-10 00:27 . 2013-04-10 15:34 118784 ----a-w- c:\windows\system32\atibtmon.exe
2014-09-10 00:27 . 2013-12-06 22:08 157736 ----a-w- c:\windows\system32\amdhcp64.dll
2014-09-10 00:27 . 2013-12-06 22:08 142304 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2014-09-10 00:27 . 2013-12-06 21:35 24860160 ----a-w- c:\windows\SysWow64\amdocl.dll
2014-09-10 00:27 . 2013-12-06 20:22 96256 ----a-w- c:\windows\system32\amdave64.dll
2014-09-10 00:27 . 2013-12-06 20:22 90112 ----a-w- c:\windows\SysWow64\amdave32.dll
2014-09-09 15:05 . 2014-09-09 15:05 177752 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2014-09-09 15:01 . 2014-09-09 15:01 22280 ----a-w- c:\windows\SysWow64\drivers\AsrDrv101.sys
2014-08-30 13:36 . 2014-08-30 13:36 78336 ----a-w- c:\windows\SysWow64\rzvirtualdev.dll
2014-08-25 03:44 . 2014-08-25 03:44 895488 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2014-08-23 02:07 . 2014-09-10 01:06 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-09-10 01:06 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-08-23 00:59 . 2014-09-10 01:06 3163648 ----a-w- c:\windows\system32\win32k.sys
2014-08-21 03:37 . 2014-08-21 03:37 40104 ----a-w- c:\windows\system32\drivers\rzendpt.sys
2014-08-21 03:37 . 2014-08-21 03:37 156328 ----a-w- c:\windows\system32\drivers\rzudd.sys
2014-08-13 11:28 . 2014-08-13 11:28 356864 ----a-w- c:\windows\SysWow64\rzaudiodll.dll
2014-08-07 09:53 . 2014-08-07 09:53 89088 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2014-08-07 09:53 . 2014-08-07 09:53 155136 ----a-w- c:\windows\SysWow64\rztouchdll.dll
2014-08-07 09:53 . 2014-08-07 09:53 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll
2014-08-01 11:53 . 2014-09-10 01:04 1031168 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-08-01 11:35 . 2014-09-10 01:04 793600 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 18:35 . 2014-07-24 18:35 875688 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-24 15:47 . 2014-07-24 15:47 869544 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2013-12-06 389120]
"GarenaPlus"="f:\program files\Garena Plus\GarenaMessenger.exe" [2014-09-18 9958192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ru n]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2014-02-21 292848]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-11 34672]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-06 766208]
"HFS Activator"="c:\program files (x86)\Paragon Software\HFS+ for Windows 10.0\activation\hfsactivator.exe" [2013-01-16 245456]
"Corsair K95"="c:\program files (x86)\Corsair\K95 Keyboard\K95Hid.exe" [2013-06-26 1785856]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-06-23 585560]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe" [2014-09-22 2711576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\syste m]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"DelayedDesktopSwitchTimeout"= 5 (0x5)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 ASRockIOMon;ASRock IO Monitor Service;c:\program files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe;c:\program files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe ;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AppleHFS;AppleHFS; [x]
R3 AsrHidFilter;AsrHidFilter;c:\windows\system32\DRIVERS\AsrHidFilter.sys;c:\w indows\SYSNATIVE\DRIVERS\AsrHidFilter.sys [x]
R3 AsrSetupDrv;AsrSetupDrv;c:\windows\SysWOW64\Drivers\AsrSetupDrv.sys;c:\wind ows\SysWOW64\Drivers\AsrSetupDrv.sys [x]
R3 asvpndrv;Astrill SSL VPN Adapter;c:\windows\system32\DRIVERS\asvpndrv.sys;c:\windows\SYSNATIVE\DRIVE RS\asvpndrv.sys [x]
R3 AxtuDrv;AxtuDrv;c:\windows\SysWOW64\Drivers\AxtuDrv.sys;c:\windows\SysWOW64 \Drivers\AxtuDrv.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\driv ers\dmvsc.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNA TIVE\drivers\EagleX64.sys [x]
R3 Hfsplus;Hfsplus;c:\windows\system32\DRIVERS\hfsplus.sys;c:\windows\SYSNATIV E\DRIVERS\hfsplus.sys [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCo llector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 iumsvc;Intel(R) Update Manager;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIV E\drivers\rdpvideominiport.sys [x]
R3 SOHDs;Sony Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNA TIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers \TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\Wa tAdminSvc.exe [x]
S0 apmwin;apmwin;c:\windows\system32\DRIVERS\apmwin.sys;c:\windows\SYSNATIVE\D RIVERS\apmwin.sys [x]
S0 AppleMNT;AppleMNT; [x]
S0 AsrRamDisk;AsrRamDisk;c:\windows\system32\DRIVERS\AsrRamDisk.sys;c:\windows \SYSNATIVE\DRIVERS\AsrRamDisk.sys [x]
S0 gpt_loader;GUID Partition table support driver;c:\windows\system32\DRIVERS\gpt_loader.sys;c:\windows\SYSNATIVE\DRIV ERS\gpt_loader.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIV E\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIV E\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVER S\iusb3hcs.sys [x]
S0 mounthlp;Mounter helper driver for HFS+ volumes;c:\windows\system32\DRIVERS\mounthlp.sys;c:\windows\SYSNATIVE\DRIVE RS\mounthlp.sys [x]
S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys;c :\windows\SYSNATIVE\DRIVERS\AsrAppCharger.sys [x]
S1 BfLwf;Qualcomm Atheros Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVE RS\bflwfx64.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO64A.SYS;c:\windows\SYSNATIVE\drive rs\HWiNFO64A.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 HfsplusRec;HfsplusRec;c:\windows\system32\DRIVERS\hfsplusrec.sys;c:\windows \SYSNATIVE\DRIVERS\hfsplusrec.sys [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) ME Service;Intel® ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 ISCTAgent;Intel(R) Smart Connect Technology Agent;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe ;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [x]
S2 OD;Orbweb ME Process;c:\program files (x86)\Kloudian\Orbweb Me\process.exe;c:\program files (x86)\Kloudian\Orbweb Me\process.exe [x]
S2 OM;Orbweb ME;c:\program files (x86)\Kloudian\Orbweb Me\core.exe;c:\program files (x86)\Kloudian\Orbweb Me\core.exe [x]
S2 OU;Orbweb Update;c:\program files (x86)\Kloudian\Orbweb Me\update\update.exe;c:\program files (x86)\Kloudian\Orbweb Me\update\update.exe [x]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [x]
S2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2;c:\program files\Qualcomm Atheros\Network Manager\KillerService.exe;c:\program files\Qualcomm Atheros\Network Manager\KillerService.exe [x]
S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Syn apse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]
S2 SOHDms;Sony Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]
S2 SVCM;Application Publishing Service APS;c:\program files (x86)\kloudian\svcmain.exe;c:\program files (x86)\kloudian\svcmain.exe [x]
S2 VPNUnlimitedService;VPN Unlimited Service;c:\program files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe??????N;c:\program files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe??????N [x]
S3 arusb_lhx;TP-LINK TL-WN821N 11N Wireless device driver;c:\windows\system32\DRIVERS\arusb_lhx.sys;c:\windows\SYSNATIVE\DRIVE RS\arusb_lhx.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVE RS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVE RS\asmtxhci.sys [x]
S3 AsrDrv101;AsrDrv101;c:\windows\SysWOW64\Drivers\AsrDrv101.sys;c:\windows\Sy sWOW64\Drivers\AsrDrv101.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drive rs\AtihdW76.sys [x]
S3 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20141003.001\BHDrvx64.s ys;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20141003.001\BHDrvx64.s ys [x]
S3 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys;c:\wind ows\SYSNATIVE\drivers\NISx64\1506000.020\ccSetx64.sys [x]
S3 CORK95;Corsair K95 Gaming Keyboard;c:\windows\system32\drivers\CORK95.sys;c:\windows\SYSNATIVE\driver s\CORK95.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20141010.001\IDSvia64.sy s;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20141010.001\IDSvia64.sy s [x]
S3 ikbevent;Intel Upper keyboard Class Filter Driver;c:\windows\system32\DRIVERS\ikbevent.sys;c:\windows\SYSNATIVE\DRIVER S\ikbevent.sys [x]
S3 imsevent;Intel Upper Mouse Class Filter Driver;c:\windows\system32\DRIVERS\imsevent.sys;c:\windows\SYSNATIVE\DRIVER S\imsevent.sys [x]
S3 INETMON;INETMON;c:\windows\System32\Drivers\INETMON.sys;c:\windows\SYSNATIV E\Drivers\INETMON.sys [x]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\DRIVERS\ISCTD.sys;c:\windows\SYSNATIVE\DRIVERS\I SCTD.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVER S\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVER S\iusb3xhc.sys [x]
S3 Ke2200;NDIS Miniport Driver for Killer e2201/e2202 PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\e22w7x64.sys;c:\windows\SYSNATIVE\DR IVERS\e22w7x64.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIV E\DRIVERS\rzendpt.sys [x]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE \drivers\RzMaelstromVAD.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\r zudd.sys [x]
S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]
S3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1506000.020\SYMDS64.SYS;c:\windows \SYSNATIVE\drivers\NISx64\1506000.020\SYMDS64.SYS [x]
S3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS;c:\w indows\SYSNATIVE\drivers\NISx64\1506000.020\SYMEFA64.SYS [x]
S3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS;c:\window s\SYSNATIVE\drivers\NISx64\1506000.020\Ironx64.SYS [x]
S3 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS;c:\window s\SYSNATIVE\Drivers\NISx64\1506000.020\SYMNETS.SYS [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-25 04:30 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.124\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-09 15:01]
.
2014-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-09 15:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-07-26 13636824]
"ISCT Tray"="c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe" [2014-04-03 5860656]
"Gesture"="c:\program files (x86)\Kloudian\Orbweb Me\cconsole-7.exe" [2014-10-09 11776]
"apmwinapp"="c:\program files (x86)\Paragon Software\HFS+ for Windows 10.0\apmwinsrv.exe" [2013-01-16 66768]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2014-05-28 36352]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.254
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1506000.020\SYMNETS.SY S"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32;c:\program files (x86)\Norton Internet Security\Engine64\21.6.0.32"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2183377673-1844674717-3060137607-1000\Software\SecuROM\License information*]
"datasecu"=hex:58,86,aa,6f,57,13,5a,75,a7,c3,23,11,b9,05,ca,26,4e,c7,72,51, 7e,
50,ce,6e,08,ce,45,4c,54,3c,d6,7f,14,26,7a,b8,6d,ea,2f,d5,59,d6,0a,50,ec,58, \
"rkeysecu"=hex:8b,a4,13,c7,15,9c,a6,de,a1,c4,08,63,4d,50,f1,43
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-10-15 17:54:06
ComboFix-quarantined-files.txt 2014-10-15 09:54
ComboFix2.txt 2014-10-15 09:41
ComboFix3.txt 2014-10-15 09:22
.
Pre-Run: 71,267,938,304 bytes free
Post-Run: 71,203,610,624 bytes free
.
- - End Of File - - 61325A98FD0843319C32D20D70303EAB
A36C5E4F47E84449FF07ED3517B43A31
ComboFix Log:
ComboFix 14-10-15.01 - Rivaldi 10/15/2014 17:50:49.3.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.44.1033.18.8140.5999 [GMT 8:00]
Running from: c:\users\Rivaldi\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2014-09-15 to 2014-10-15 )))))))))))))))))))))))))))))))
.
.
2014-10-15 09:53 . 2014-10-15 09:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-10-14 15:54 . 2014-10-14 15:54 -------- d-----w- c:\users\Rivaldi\AppData\Local\My Games
2014-10-13 15:15 . 2014-10-13 15:15 -------- d-----w- c:\program files (x86)\Microsoft XNA
2014-10-10 10:16 . 2014-10-12 12:01 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2014-10-10 10:16 . 2014-10-10 10:16 -------- d-----w- c:\users\Rivaldi\AppData\Local\PunkBuster
2014-10-10 10:16 . 2014-10-10 10:16 -------- d-----w- c:\users\Rivaldi\AppData\Local\ESN
2014-10-10 10:13 . 2014-10-10 10:13 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2014-10-09 20:29 . 2014-10-12 12:01 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-10-09 20:29 . 2014-10-10 10:16 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-10-09 20:29 . 2014-10-09 20:29 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2014-10-08 15:44 . 2014-09-25 02:08 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-10-08 15:44 . 2014-09-25 01:40 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-10-07 13:32 . 2014-10-07 13:32 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Fujitsu
2014-10-07 13:32 . 2014-10-07 13:32 -------- d-----w- c:\users\Rivaldi\AppData\Local\Fujitsu
2014-10-07 13:30 . 2014-10-07 13:30 256 ---ha-w- c:\windows\SysWow64\LTAW14FN.BIN
2014-10-07 13:30 . 2014-10-07 13:30 256 ---ha-w- c:\windows\SysWow64\FJLTAFOU.BIN
2014-10-07 13:29 . 2014-10-07 13:30 -------- d-----w- c:\program files (x86)\ATLAS V14
2014-10-06 14:28 . 2014-10-06 14:30 -------- d-----w- c:\windows\system32\drivers\NISx64\1506000.020
2014-09-29 09:07 . 2014-09-29 09:07 -------- d--h--r- c:\users\Rivaldi\AppData\Roaming\SecuROM
2014-09-29 08:53 . 2014-09-29 08:52 447752 ----a-w- c:\windows\SysWow64\vp6vfw.dll
2014-09-29 04:47 . 2014-09-29 04:47 -------- d-----w- c:\program files\Common Files\Sony Shared
2014-09-29 04:47 . 2014-09-29 04:47 -------- d-----w- c:\program files (x86)\Common Files\Sony Shared
2014-09-29 04:47 . 2014-09-29 04:47 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Sony Corporation
2014-09-29 04:46 . 2014-09-29 04:47 -------- d-----w- c:\programdata\Sony Corporation
2014-09-29 04:46 . 2014-09-29 04:46 -------- d-----w- c:\program files (x86)\Sony
2014-09-28 08:29 . 2014-09-28 08:29 -------- d-----w- c:\users\Rivaldi\AppData\Local\PopCap Games
2014-09-28 08:28 . 2014-09-28 08:28 -------- d-----w- c:\programdata\EA Core
2014-09-28 08:28 . 2014-10-10 10:16 -------- d-----w- c:\programdata\EA Logs
2014-09-28 08:26 . 2014-09-28 08:28 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation
2014-09-28 08:25 . 2014-09-28 08:25 -------- d-----w- c:\programdata\Qualcomm
2014-09-28 08:25 . 2014-09-28 08:25 -------- d-----w- c:\program files\Qualcomm Atheros
2014-09-28 08:24 . 2014-09-28 08:24 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Intel Corporation
2014-09-28 06:23 . 2014-09-28 06:52 -------- d-----w- c:\users\Rivaldi\AppData\Local\dxhr
2014-09-28 06:21 . 2014-09-28 06:21 -------- d-----w- c:\users\Rivaldi\AppData\Local\28050
2014-09-28 05:52 . 2014-09-28 05:52 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Trine2
2014-09-27 19:54 . 2014-10-09 20:30 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller
2014-09-27 19:14 . 2014-09-28 08:28 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Origin
2014-09-27 19:14 . 2014-09-28 08:41 -------- d-----w- c:\users\Rivaldi\AppData\Local\Origin
2014-09-27 19:09 . 2014-10-05 08:19 -------- d-----w- c:\programdata\Origin
2014-09-27 19:09 . 2014-09-28 08:29 -------- d-----w- c:\programdata\Electronic Arts
2014-09-26 15:01 . 2014-09-26 15:01 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Garena
2014-09-26 15:01 . 2014-09-26 15:01 -------- d-----w- c:\programdata\Garena
2014-09-25 16:17 . 2014-09-25 16:17 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\LolClient
2014-09-25 06:42 . 2014-09-25 06:42 -------- d-----w- c:\programdata\Riot Games
2014-09-25 06:34 . 2008-07-12 00:18 467984 ----a-w- c:\windows\SysWow64\d3dx10_39.dll
2014-09-25 06:34 . 2008-07-12 00:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2014-09-25 06:34 . 2008-07-12 00:18 1493528 ----a-w- c:\windows\SysWow64\D3DCompiler_39.dll
2014-09-25 06:33 . 2014-09-25 06:34 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Riot Games
2014-09-25 05:16 . 2014-09-25 05:16 -------- d-----w- c:\programdata\RzMaelstromVAD_1.1.58.1854
2014-09-25 05:11 . 2014-09-25 05:11 -------- d-----w- c:\users\Rivaldi\AppData\Local\Razer
2014-09-25 04:34 . 2014-09-25 04:33 1199831 ----a-w- c:\windows\unins001.exe
2014-09-25 04:32 . 2014-09-25 04:34 -------- d-----w- c:\program files (x86)\Corsair
2014-09-25 04:32 . 2014-09-25 04:32 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\Corsair Vengeance
2014-09-25 04:32 . 2014-09-25 04:31 1186175 ----a-w- c:\windows\unins000.exe
2014-09-25 04:32 . 2012-10-31 08:59 25600 ----a-w- c:\windows\system32\drivers\CORK95.sys
2014-09-24 10:26 . 2014-09-09 22:11 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-24 10:26 . 2014-09-09 21:47 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-09-24 06:02 . 2014-08-18 21:56 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-09-23 09:48 . 2014-09-27 07:56 -------- d-----w- c:\users\Rivaldi\AppData\Roaming\foobar2000
2014-09-23 09:48 . 2014-09-23 09:48 -------- d-----w- c:\program files (x86)\foobar2000
2014-09-22 12:27 . 2014-10-15 08:39 27552 ----a-w- c:\windows\system32\drivers\HWiNFO64A.SYS
2014-09-22 12:27 . 2014-10-15 08:39 -------- d-----w- c:\program files\HWiNFO64
2014-09-22 10:41 . 2014-05-22 05:54 475672 ----a-w- c:\windows\system32\ASProxy64.dll
2014-09-22 10:41 . 2014-05-22 05:54 359960 ----a-w- c:\windows\SysWow64\ASProxy.dll
2014-09-22 10:41 . 2014-05-17 08:45 31744 ----a-w- c:\windows\system32\drivers\asvpndrv.sys
2014-09-18 17:23 . 2014-09-18 17:23 -------- d-----w- C:\ArcheAge
2014-09-18 12:19 . 2014-09-18 12:20 -------- d-----w- c:\program files\TAP-Windows
2014-09-18 12:19 . 2014-09-18 12:19 -------- d-----w- c:\program files (x86)\VPN Unlimited
2014-09-18 11:18 . 2008-10-14 22:22 519000 ----a-w- c:\windows\system32\d3dx10_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 2605920 ----a-w- c:\windows\system32\D3DCompiler_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 5631312 ----a-w- c:\windows\system32\D3DX9_40.dll
2014-09-18 11:18 . 2008-10-14 22:22 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll
2014-09-17 11:38 . 2014-09-17 11:38 -------- d-----w- c:\users\Rivaldi\AppData\Local\Glyph
2014-09-17 11:38 . 2014-09-17 11:38 -------- d-----w- c:\programdata\Glyph
2014-09-16 02:39 . 2014-09-16 02:39 -------- d-sh--w- c:\users\Rivaldi\AppData\Local\EmieUserList
2014-09-16 02:39 . 2014-09-16 02:39 -------- d-sh--w- c:\users\Rivaldi\AppData\Local\EmieSiteList
2014-09-16 02:32 . 2014-09-16 02:32 -------- d-----w- c:\windows\SysWow64\Wat
2014-09-16 02:32 . 2014-09-16 02:32 -------- d-----w- c:\windows\system32\Wat
2014-09-15 21:39 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-09-15 21:39 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-09-15 21:39 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-09-15 21:39 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-09-15 21:39 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-09-15 21:38 . 2014-09-15 21:38 -------- d-----w- c:\windows\Migration
2014-09-15 21:37 . 2013-10-14 10:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-09-15 21:35 . 2014-09-15 21:35 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-09-15 21:12 . 2014-09-15 21:14 -------- d-----w- c:\windows\system32\MRT
2014-09-15 21:12 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-09-15 21:12 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-09-15 21:10 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-09-15 21:10 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2014-09-15 21:10 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-09-15 21:10 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-09-15 21:10 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2014-09-15 21:10 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2014-09-15 21:10 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-09-15 21:10 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-09-15 20:02 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-09-15 20:02 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll
2014-09-15 19:58 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-09-15 19:58 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-09-15 19:55 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-09-15 19:55 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-09-15 19:54 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-09-15 19:54 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-09-15 19:54 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-09-15 19:54 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-09-15 19:54 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-09-15 19:54 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-09-15 19:54 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-09-15 19:54 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-09-15 19:54 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-09-15 19:54 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-09-15 19:53 . 2014-06-24 03:29 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-09-15 19:53 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-09-15 19:51 . 2014-05-08 09:32 3178496 ----a-w- c:\windows\system32\rdpcorets.dll
2014-09-15 19:51 . 2014-05-08 09:32 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDYAK.DLL
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDTAT.DLL
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDRU1.DLL
2014-09-15 19:46 . 2014-07-09 02:03 6656 ----a-w- c:\windows\system32\KBDRU.DLL
2014-09-15 19:46 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDBASH.DLL
2014-09-15 19:46 . 2014-07-09 01:31 7168 ----a-w- c:\windows\SysWow64\KBDYAK.DLL
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-11 18:17 . 2014-09-11 18:17 5185536 ----a-r- c:\users\Rivaldi\AppData\Roaming\Microsoft\Installer\{D1E1F028-1953-43A3-BFD8-D2A00EC06E36}\RapeLay.exe
2014-09-11 18:17 . 2014-09-11 18:17 28672 ----a-r- c:\users\Rivaldi\AppData\Roaming\Microsoft\Installer\{D1E1F028-1953-43A3-BFD8-D2A00EC06E36}\_EB52FE80E75B_486E_9850_195DAB8E8D59.exe
2014-09-10 04:57 . 2014-02-06 04:36 16672 ----a-w- c:\windows\system32\drivers\AppleMNT.sys
2014-09-10 04:57 . 2014-02-06 04:36 72992 ----a-w- c:\windows\system32\drivers\AppleHFS.sys
2014-09-10 00:27 . 2013-09-24 14:53 94208 ----a-w- c:\windows\system32\drivers\AtihdW76.sys
2014-09-10 00:27 . 2013-09-24 14:51 110080 ----a-w- c:\windows\system32\DelayAPO.dll
2014-09-10 00:27 . 2013-12-06 22:04 143304 ----a-w- c:\windows\system32\atiuxp64.dll
2014-09-10 00:27 . 2013-12-06 22:03 126336 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2014-09-10 00:27 . 2013-12-06 22:03 115512 ----a-w- c:\windows\system32\atiu9p64.dll
2014-09-10 00:27 . 2013-12-06 22:02 98496 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2014-09-10 00:27 . 2013-12-06 21:59 8287008 ----a-w- c:\windows\SysWow64\atiumdva.dll
2014-09-10 00:27 . 2013-12-06 21:58 6630232 ----a-w- c:\windows\SysWow64\atiumdag.dll
2014-09-10 00:27 . 2013-12-06 21:57 8927704 ----a-w- c:\windows\system32\atiumd6a.dll
2014-09-10 00:27 . 2013-12-06 21:56 7751920 ----a-w- c:\windows\system32\atiumd64.dll
2014-09-10 00:27 . 2013-12-06 21:38 230912 ----a-w- c:\windows\system32\clinfo.exe
2014-09-10 00:27 . 2013-12-06 21:38 99840 ----a-w- c:\windows\system32\OpenVideo64.dll
2014-09-10 00:27 . 2013-12-06 21:38 83968 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2014-09-10 00:27 . 2013-12-06 21:38 86528 ----a-w- c:\windows\system32\OVDecode64.dll
2014-09-10 00:27 . 2013-12-06 21:38 73728 ----a-w- c:\windows\SysWow64\OVDecode.dll
2014-09-10 00:27 . 2013-12-06 21:26 129536 ----a-w- c:\windows\system32\coinst_13.251.dll
2014-09-10 00:27 . 2013-12-06 20:58 22157824 ----a-w- c:\windows\SysWow64\atioglxx.dll
2014-09-10 00:27 . 2013-12-06 20:50 190976 ----a-w- c:\windows\system32\atitmm64.dll
2014-09-10 00:27 . 2013-12-06 20:22 89088 ----a-w- c:\windows\system32\atisamu64.dll
2014-09-10 00:27 . 2013-12-06 20:22 80896 ----a-w- c:\windows\SysWow64\atisamu32.dll
2014-09-10 00:27 . 2013-12-06 22:07 78432 ----a-w- c:\windows\system32\atimpc64.dll
2014-09-10 00:27 . 2013-12-06 22:07 78432 ----a-w- c:\windows\system32\amdpcom64.dll
2014-09-10 00:27 . 2013-12-06 22:07 71704 ----a-w- c:\windows\SysWow64\atimpc32.dll
2014-09-10 00:27 . 2013-12-06 22:07 71704 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2014-09-10 00:27 . 2013-12-06 22:01 1318552 ----a-w- c:\windows\system32\aticfx64.dll
2014-09-10 00:27 . 2013-12-06 22:01 1100216 ----a-w- c:\windows\SysWow64\aticfx32.dll
2014-09-10 00:27 . 2013-12-06 22:00 9753752 ----a-w- c:\windows\system32\atidxx64.dll
2014-09-10 00:27 . 2013-12-06 21:59 8406024 ----a-w- c:\windows\SysWow64\atidxx32.dll
2014-09-10 00:27 . 2013-12-06 21:52 13207552 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2014-09-10 00:27 . 2013-12-06 21:38 1187342 ----a-w- c:\windows\system32\amdocl_as64.exe
2014-09-10 00:27 . 2013-12-06 21:38 1061902 ----a-w- c:\windows\system32\amdocl_ld64.exe
2014-09-10 00:27 . 2013-12-06 21:38 995342 ----a-w- c:\windows\SysWow64\amdocl_as32.exe
2014-09-10 00:27 . 2013-12-06 21:38 798734 ----a-w- c:\windows\SysWow64\amdocl_ld32.exe
2014-09-10 00:27 . 2013-12-06 21:37 29382144 ----a-w- c:\windows\system32\amdocl64.dll
2014-09-10 00:27 . 2013-12-06 21:33 63488 ----a-w- c:\windows\system32\OpenCL.dll
2014-09-10 00:27 . 2013-12-06 21:33 57344 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-09-10 00:27 . 2013-12-06 21:16 26352128 ----a-w- c:\windows\system32\atio6axx.dll
2014-09-10 00:27 . 2013-12-06 21:13 368640 ----a-w- c:\windows\system32\atiapfxx.exe
2014-09-10 00:27 . 2013-12-06 21:12 62464 ----a-w- c:\windows\system32\aticalrt64.dll
2014-09-10 00:27 . 2013-12-06 21:12 52224 ----a-w- c:\windows\SysWow64\aticalrt.dll
2014-09-10 00:27 . 2013-12-06 21:12 55808 ----a-w- c:\windows\system32\aticalcl64.dll
2014-09-10 00:27 . 2013-12-06 21:12 49152 ----a-w- c:\windows\SysWow64\aticalcl.dll
2014-09-10 00:27 . 2013-12-06 21:12 15716352 ----a-w- c:\windows\system32\aticaldd64.dll
2014-09-10 00:27 . 2013-12-06 21:09 14302208 ----a-w- c:\windows\SysWow64\aticaldd.dll
2014-09-10 00:27 . 2013-12-06 20:53 442368 ----a-w- c:\windows\system32\atidemgy.dll
2014-09-10 00:27 . 2013-12-06 20:53 31232 ----a-w- c:\windows\system32\atimuixx.dll
2014-09-10 00:27 . 2013-12-06 20:53 588288 ----a-w- c:\windows\system32\atieclxx.exe
2014-09-10 00:27 . 2013-12-06 20:52 239616 ----a-w- c:\windows\system32\atiesrxx.exe
2014-09-10 00:27 . 2013-12-06 20:22 1144320 ----a-w- c:\windows\system32\atiadlxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 825344 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2014-09-10 00:27 . 2013-12-06 20:22 74752 ----a-w- c:\windows\system32\atig6pxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 69632 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 69632 ----a-w- c:\windows\system32\atiglpxx.dll
2014-09-10 00:27 . 2013-12-06 20:22 100352 ----a-w- c:\windows\system32\atig6txx.dll
2014-09-10 00:27 . 2013-12-06 20:21 96768 ----a-w- c:\windows\SysWow64\atigktxx.dll
2014-09-10 00:27 . 2013-12-06 20:21 626176 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2014-09-10 00:27 . 2013-12-06 20:18 43520 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2014-09-10 00:27 . 2013-04-10 15:34 51200 ----a-w- c:\windows\system32\ATIODCLI.exe
2014-09-10 00:27 . 2013-04-10 15:34 332800 ----a-w- c:\windows\system32\ATIODE.exe
2014-09-10 00:27 . 2013-04-10 15:34 118784 ----a-w- c:\windows\system32\atibtmon.exe
2014-09-10 00:27 . 2013-12-06 22:08 157736 ----a-w- c:\windows\system32\amdhcp64.dll
2014-09-10 00:27 . 2013-12-06 22:08 142304 ----a-w- c:\windows\SysWow64\amdhcp32.dll
2014-09-10 00:27 . 2013-12-06 21:35 24860160 ----a-w- c:\windows\SysWow64\amdocl.dll
2014-09-10 00:27 . 2013-12-06 20:22 96256 ----a-w- c:\windows\system32\amdave64.dll
2014-09-10 00:27 . 2013-12-06 20:22 90112 ----a-w- c:\windows\SysWow64\amdave32.dll
2014-09-09 15:05 . 2014-09-09 15:05 177752 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2014-09-09 15:01 . 2014-09-09 15:01 22280 ----a-w- c:\windows\SysWow64\drivers\AsrDrv101.sys
2014-08-30 13:36 . 2014-08-30 13:36 78336 ----a-w- c:\windows\SysWow64\rzvirtualdev.dll
2014-08-25 03:44 . 2014-08-25 03:44 895488 ----a-w- c:\windows\SysWow64\rzdevicedll.dll
2014-08-23 02:07 . 2014-09-10 01:06 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-09-10 01:06 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-08-23 00:59 . 2014-09-10 01:06 3163648 ----a-w- c:\windows\system32\win32k.sys
2014-08-21 03:37 . 2014-08-21 03:37 40104 ----a-w- c:\windows\system32\drivers\rzendpt.sys
2014-08-21 03:37 . 2014-08-21 03:37 156328 ----a-w- c:\windows\system32\drivers\rzudd.sys
2014-08-13 11:28 . 2014-08-13 11:28 356864 ----a-w- c:\windows\SysWow64\rzaudiodll.dll
2014-08-07 09:53 . 2014-08-07 09:53 89088 ----a-w- c:\windows\SysWow64\rzdevinfo.dll
2014-08-07 09:53 . 2014-08-07 09:53 155136 ----a-w- c:\windows\SysWow64\rztouchdll.dll
2014-08-07 09:53 . 2014-08-07 09:53 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll
2014-08-01 11:53 . 2014-09-10 01:04 1031168 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-08-01 11:35 . 2014-09-10 01:04 793600 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-07-24 18:35 . 2014-07-24 18:35 875688 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-24 15:47 . 2014-07-24 15:47 869544 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2013-12-06 389120]
"GarenaPlus"="f:\program files\Garena Plus\GarenaMessenger.exe" [2014-09-18 9958192]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ru n]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2014-02-21 292848]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-11 34672]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-06 766208]
"HFS Activator"="c:\program files (x86)\Paragon Software\HFS+ for Windows 10.0\activation\hfsactivator.exe" [2013-01-16 245456]
"Corsair K95"="c:\program files (x86)\Corsair\K95 Keyboard\K95Hid.exe" [2013-06-26 1785856]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-06-23 585560]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe" [2014-09-22 2711576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\syste m]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"DelayedDesktopSwitchTimeout"= 5 (0x5)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 ASRockIOMon;ASRock IO Monitor Service;c:\program files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe;c:\program files (x86)\Fatal1ty Utility\F-Stream Tuning\Bin\IOMonitorSrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe ;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AppleHFS;AppleHFS; [x]
R3 AsrHidFilter;AsrHidFilter;c:\windows\system32\DRIVERS\AsrHidFilter.sys;c:\w indows\SYSNATIVE\DRIVERS\AsrHidFilter.sys [x]
R3 AsrSetupDrv;AsrSetupDrv;c:\windows\SysWOW64\Drivers\AsrSetupDrv.sys;c:\wind ows\SysWOW64\Drivers\AsrSetupDrv.sys [x]
R3 asvpndrv;Astrill SSL VPN Adapter;c:\windows\system32\DRIVERS\asvpndrv.sys;c:\windows\SYSNATIVE\DRIVE RS\asvpndrv.sys [x]
R3 AxtuDrv;AxtuDrv;c:\windows\SysWOW64\Drivers\AxtuDrv.sys;c:\windows\SysWOW64 \Drivers\AxtuDrv.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\driv ers\dmvsc.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNA TIVE\drivers\EagleX64.sys [x]
R3 Hfsplus;Hfsplus;c:\windows\system32\DRIVERS\hfsplus.sys;c:\windows\SYSNATIV E\DRIVERS\hfsplus.sys [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCo llector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 iumsvc;Intel(R) Update Manager;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIV E\drivers\rdpvideominiport.sys [x]
R3 SOHDs;Sony Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNA TIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers \TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\Wa tAdminSvc.exe [x]
S0 apmwin;apmwin;c:\windows\system32\DRIVERS\apmwin.sys;c:\windows\SYSNATIVE\D RIVERS\apmwin.sys [x]
S0 AppleMNT;AppleMNT; [x]
S0 AsrRamDisk;AsrRamDisk;c:\windows\system32\DRIVERS\AsrRamDisk.sys;c:\windows \SYSNATIVE\DRIVERS\AsrRamDisk.sys [x]
S0 gpt_loader;GUID Partition table support driver;c:\windows\system32\DRIVERS\gpt_loader.sys;c:\windows\SYSNATIVE\DRIV ERS\gpt_loader.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIV E\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIV E\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVER S\iusb3hcs.sys [x]
S0 mounthlp;Mounter helper driver for HFS+ volumes;c:\windows\system32\DRIVERS\mounthlp.sys;c:\windows\SYSNATIVE\DRIVE RS\mounthlp.sys [x]
S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys;c :\windows\SYSNATIVE\DRIVERS\AsrAppCharger.sys [x]
S1 BfLwf;Qualcomm Atheros Bandwidth Control;c:\windows\system32\DRIVERS\bflwfx64.sys;c:\windows\SYSNATIVE\DRIVE RS\bflwfx64.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO64A.SYS;c:\windows\SYSNATIVE\drive rs\HWiNFO64A.SYS [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 HfsplusRec;HfsplusRec;c:\windows\system32\DRIVERS\hfsplusrec.sys;c:\windows \SYSNATIVE\DRIVERS\hfsplusrec.sys [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) ME Service;Intel® ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 ISCTAgent;Intel(R) Smart Connect Technology Agent;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe ;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [x]
S2 OD;Orbweb ME Process;c:\program files (x86)\Kloudian\Orbweb Me\process.exe;c:\program files (x86)\Kloudian\Orbweb Me\process.exe [x]
S2 OM;Orbweb ME;c:\program files (x86)\Kloudian\Orbweb Me\core.exe;c:\program files (x86)\Kloudian\Orbweb Me\core.exe [x]
S2 OU;Orbweb Update;c:\program files (x86)\Kloudian\Orbweb Me\update\update.exe;c:\program files (x86)\Kloudian\Orbweb Me\update\update.exe [x]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [x]
S2 Qualcomm Atheros Killer Service V2;Qualcomm Atheros Killer Service V2;c:\program files\Qualcomm Atheros\Network Manager\KillerService.exe;c:\program files\Qualcomm Atheros\Network Manager\KillerService.exe [x]
S2 RzMaelstromVADStreamingService;Razer Surround Audio Service;c:\programdata\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe;c:\programdata\Razer\Syn apse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [x]
S2 SOHDms;Sony Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]
S2 SVCM;Application Publishing Service APS;c:\program files (x86)\kloudian\svcmain.exe;c:\program files (x86)\kloudian\svcmain.exe [x]
S2 VPNUnlimitedService;VPN Unlimited Service;c:\program files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe??????N;c:\program files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe??????N [x]
S3 arusb_lhx;TP-LINK TL-WN821N 11N Wireless device driver;c:\windows\system32\DRIVERS\arusb_lhx.sys;c:\windows\SYSNATIVE\DRIVE RS\arusb_lhx.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVE RS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVE RS\asmtxhci.sys [x]
S3 AsrDrv101;AsrDrv101;c:\windows\SysWOW64\Drivers\AsrDrv101.sys;c:\windows\Sy sWOW64\Drivers\AsrDrv101.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drive rs\AtihdW76.sys [x]
S3 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20141003.001\BHDrvx64.s ys;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20141003.001\BHDrvx64.s ys [x]
S3 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys;c:\wind ows\SYSNATIVE\drivers\NISx64\1506000.020\ccSetx64.sys [x]
S3 CORK95;Corsair K95 Gaming Keyboard;c:\windows\system32\drivers\CORK95.sys;c:\windows\SYSNATIVE\driver s\CORK95.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20141010.001\IDSvia64.sy s;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20141010.001\IDSvia64.sy s [x]
S3 ikbevent;Intel Upper keyboard Class Filter Driver;c:\windows\system32\DRIVERS\ikbevent.sys;c:\windows\SYSNATIVE\DRIVER S\ikbevent.sys [x]
S3 imsevent;Intel Upper Mouse Class Filter Driver;c:\windows\system32\DRIVERS\imsevent.sys;c:\windows\SYSNATIVE\DRIVER S\imsevent.sys [x]
S3 INETMON;INETMON;c:\windows\System32\Drivers\INETMON.sys;c:\windows\SYSNATIV E\Drivers\INETMON.sys [x]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\DRIVERS\ISCTD.sys;c:\windows\SYSNATIVE\DRIVERS\I SCTD.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVER S\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVER S\iusb3xhc.sys [x]
S3 Ke2200;NDIS Miniport Driver for Killer e2201/e2202 PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\e22w7x64.sys;c:\windows\SYSNATIVE\DR IVERS\e22w7x64.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIV E\DRIVERS\rzendpt.sys [x]
S3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE \drivers\RzMaelstromVAD.sys [x]
S3 rzudd;Razer Mouse Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\r zudd.sys [x]
S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]
S3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1506000.020\SYMDS64.SYS;c:\windows \SYSNATIVE\drivers\NISx64\1506000.020\SYMDS64.SYS [x]
S3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS;c:\w indows\SYSNATIVE\drivers\NISx64\1506000.020\SYMEFA64.SYS [x]
S3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS;c:\window s\SYSNATIVE\drivers\NISx64\1506000.020\Ironx64.SYS [x]
S3 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS;c:\window s\SYSNATIVE\Drivers\NISx64\1506000.020\SYMNETS.SYS [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-25 04:30 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.124\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2014-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-09 15:01]
.
2014-10-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-09-09 15:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-07-26 13636824]
"ISCT Tray"="c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe" [2014-04-03 5860656]
"Gesture"="c:\program files (x86)\Kloudian\Orbweb Me\cconsole-7.exe" [2014-10-09 11776]
"apmwinapp"="c:\program files (x86)\Paragon Software\HFS+ for Windows 10.0\apmwinsrv.exe" [2013-01-16 66768]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2014-05-28 36352]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.254
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1506000.020\SYMNETS.SY S"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.6.0.32;c:\program files (x86)\Norton Internet Security\Engine64\21.6.0.32"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-2183377673-1844674717-3060137607-1000\Software\SecuROM\License information*]
"datasecu"=hex:58,86,aa,6f,57,13,5a,75,a7,c3,23,11,b9,05,ca,26,4e,c7,72,51, 7e,
50,ce,6e,08,ce,45,4c,54,3c,d6,7f,14,26,7a,b8,6d,ea,2f,d5,59,d6,0a,50,ec,58, \
"rkeysecu"=hex:8b,a4,13,c7,15,9c,a6,de,a1,c4,08,63,4d,50,f1,43
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-10-15 17:54:06
ComboFix-quarantined-files.txt 2014-10-15 09:54
ComboFix2.txt 2014-10-15 09:41
ComboFix3.txt 2014-10-15 09:22
.
Pre-Run: 71,267,938,304 bytes free
Post-Run: 71,203,610,624 bytes free
.
- - End Of File - - 61325A98FD0843319C32D20D70303EAB
A36C5E4F47E84449FF07ED3517B43A31