Potential Malware Issue

  1. #1
    Shadefyre is offline Full Member

    Potential Malware Issue

    Hi, I posted a thread in the Windows 7 area earlier about a wireless card that suddenly stopped working with my system (http://www.d-a-l.com/help/windows-7-...tml#post250675). Since it works just fine with a seperate Windows 7 computer and was previously working fine with my system, I'm concerned that something malicious on my system is preventing the drivers from being used.As always, I'd like to rule out malware before just buying a new card.

    Malwarebytes Antimalware Scan Log
    Malwarebytes' Anti-Malware 1.51.2.1300
    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Database version: 7622

    Windows 6.1.7601 Service Pack 1
    Internet Explorer 8.0.7601.17514

    19/12/2011 10:45:18 AM
    mbam-log-2011-12-19 (10-45-18).txt

    Scan type: Quick scan
    Objects scanned: 176012
    Time elapsed: 3 minute(s), 7 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)


    GMER Log came up empty, with nothing to post.



    aswMBR Logs
    aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
    Run date: 2011-12-19 11:45:22
    -----------------------------
    11:45:22.405 OS Version: Windows x64 6.1.7601 Service Pack 1
    11:45:22.405 Number of processors: 4 586 0x2A07
    11:45:22.405 ComputerName: ALPHAZERO UserName: Shadefyre
    11:45:24.190 Initialize success
    11:45:24.480 AVAST engine defs: 11121701
    11:45:40.312 Disk 0 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2
    11:45:40.312 Disk 0 Vendor: ST31000528AS CC37 Size: 953869MB BusType: 3
    11:45:40.317 Disk 1 (boot) \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-7
    11:45:40.317 Disk 1 Vendor: ST31000528AS CC38 Size: 953869MB BusType: 3
    11:45:42.332 Disk 1 MBR read successfully
    11:45:42.337 Disk 1 MBR scan
    11:45:42.337 Disk 1 Windows 7 default MBR code
    11:45:42.342 Service scanning
    11:45:43.767 Modules scanning
    11:45:43.767 Disk 1 trace - called modules:
    11:45:43.787 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
    11:45:43.792 1 nt!IofCallDriver -> \Device\Harddisk1\DR1[0xfffffa80051f7060]
    11:45:43.797 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa800469ed10]
    11:45:43.802 5 ACPI.sys[fffff88000f9c7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T1L0-7[0xfffffa800475a060]
    11:45:46.727 AVAST engine scan C:\Windows
    11:45:51.238 AVAST engine scan C:\Windows\system32
    11:47:06.244 AVAST engine scan C:\Windows\system32\drivers
    11:47:12.985 AVAST engine scan C:\Users\Shadefyre
    11:50:03.707 AVAST engine scan C:\ProgramData
    11:50:38.431 Scan finished successfully
    12:02:44.131 Disk 1 MBR has been saved successfully to "H:\Computer Fix\Logs\MBR.dat"
    12:02:44.146 The log file has been saved successfully to "H:\Computer Fix\Logs\aswMBR.txt"


    DDS Log
    .
    DDS (Ver_2011-08-26.01) - NTFSAMD64
    Internet Explorer: 8.0.7601.17514
    Run by Shadefyre at 12:03:10 on 2011-12-19
    Microsoft Windows 7 Ultimate 6.1.7601.1.1252.2.1033.18.4073.2273 [GMT -5:00]
    .
    AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
    SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    FW: ZoneAlarm Free Firewall *Disabled* {E6380B7E-D4B2-19F1-083E-56486607704B}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\atieclxx.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files (x86)\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
    C:\Program Files (x86)\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    C:\Program Files (x86)\RocketDock\RocketDock.exe
    C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\AVAST Software\Avast\AvastUI.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\sppsvc.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
    C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\SysWOW64\cscript.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uInternet Settings,ProxyOverride = *.local
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: ZoneAlarm Security Engine Registrar: {8a4a36c2-0535-4d2c-bd3d-496cb7eed6e3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\b in\TrustCheckerIEPlugin.dll
    BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    TB: ZoneAlarm Security Engine: {ee2ac4e5-b0b0-4ec6-88a9-bca1a32ab107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\b in\TrustCheckerIEPlugin.dll
    uRun: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
    uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
    mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
    mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
    mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.ex e" -launchedbylogin
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
    mRunOnce: [Malwarebytes' Anti-Malware (registration)] regsvr32.exe /s "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll"
    mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    mRunOnce: [InnoSetupRegFile.0000000001] "C:\Windows\is-2GLOH.exe" /REG /REGSVRMODE
    uPolicies-explorer: RestrictRun = 0 (0x0)
    mPolicies-explorer: NoActiveDesktop = 1 (0x1)
    mPolicies-explorer: RestrictRun = 0 (0x0)
    mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableLUA = 0 (0x0)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
    IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
    BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO-X64: ZoneAlarm Security Engine Registrar: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\b in\TrustCheckerIEPlugin.dll
    BHO-X64: ZoneAlarm Security Engine Registrar - No File
    BHO-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
    BHO-X64: URLRedirectionBHO - No File
    BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    TB-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
    TB-X64: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\b in\TrustCheckerIEPlugin.dll
    mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun-x64: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
    mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
    mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun-x64: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
    mRun-x64: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
    mRun-x64: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.ex e" -launchedbylogin
    mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun-x64: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
    mRunOnce-x64: [Malwarebytes' Anti-Malware (registration)] regsvr32.exe /s "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll"
    mRunOnce-x64: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    mRunOnce-x64: [InnoSetupRegFile.0000000001] "C:\Windows\is-2GLOH.exe" /REG /REGSVRMODE
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 mv91xx;mv91xx;C:\Windows\system32\DRIVERS\mv91xx.s ys --> C:\Windows\system32\DRIVERS\mv91xx.sys [?]
    R1 aswSnx;aswSnx;C:\Windows\system32\drivers\aswSnx.s ys --> C:\Windows\system32\drivers\aswSnx.sys [?]
    R1 aswSP;aswSP;C:\Windows\system32\drivers\aswSP.sys --> C:\Windows\system32\drivers\aswSP.sys [?]
    R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys --> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
    R2 aswFsBlk;aswFsBlk;C:\Windows\system32\drivers\aswF sBlk.sys --> C:\Windows\system32\drivers\aswFsBlk.sys [?]
    R2 aswMonFlt;aswMonFlt;\??\C:\Windows\system32\driver s\aswMonFlt.sys --> C:\Windows\system32\drivers\aswMonFlt.sys [?]
    R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-12-5 44768]
    R2 ISWKL;ZoneAlarm Toolbar ISWKL;C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [2011-11-3 33672]
    R2 IswSvc;ZoneAlarm Toolbar IswSvc;C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe [2011-11-3 827520]
    R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atik mdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
    R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atik mpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
    R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
    R3 MEIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
    R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
    R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\ v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework6 4\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe --> C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [?]
    S3 Desura Install Service;Desura Install Service;C:\Program Files (x86)\Common Files\Desura\desura_service.exe [2011-12-6 131912]
    S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?]
    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-6-12 51740536]
    S3 netr7364;Linksys Compact Wireless-G USB Adapter Driver for Vista;C:\Windows\system32\DRIVERS\WUSB54GCx64.sys --> C:\Windows\system32\DRIVERS\WUSB54GCx64.sys [?]
    S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]
    S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EX E [2010-1-9 4925184]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominipor t.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?]
    S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
    S3 Synth3dVsc;Synth3dVsc;C:\Windows\system32\drivers\ synth3dvsc.sys --> C:\Windows\system32\drivers\synth3dvsc.sys [?]
    S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\system32\drivers\terminpt.sys --> C:\Windows\system32\drivers\terminpt.sys [?]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsus bflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
    S3 tsusbhub;tsusbhub;C:\Windows\system32\drivers\tsus bhub.sys --> C:\Windows\system32\drivers\tsusbhub.sys [?]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
    .
    =============== Created Last 30 ================
    .
    2011-12-19 15:40:44 709968 ----a-w- C:\Windows\is-2GLOH.exe
    2011-12-19 08:11:34 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B69E7D51-BA73-4656-B107-5FDFCFCBEF86}\offreg.dll
    2011-12-18 09:26:26 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Quest3D
    2011-12-18 09:22:46 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Nicalis
    2011-12-18 09:21:58 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\SaintXi
    2011-12-18 08:45:02 314016 ----a-w- C:\Windows\System32\drivers\atksgt.sys
    2011-12-18 08:44:59 43680 ----a-w- C:\Windows\System32\drivers\lirsgt.sys
    2011-12-18 08:35:34 -------- d-----w- C:\Program Files (x86)\Firefly Studios
    2011-12-18 08:28:56 -------- d-----w- C:\Program Files (x86)\Nicolas Games
    2011-12-18 08:14:38 2352128 ----a-r- C:\Users\Shadefyre\AppData\Roaming\Microsoft\Insta ller\{932247E9-A3C1-11D4-80B0-00A0D21817C9}\blairwitch2.exe
    2011-12-18 08:14:03 -------- d-----w- C:\Program Files (x86)\HumanHead
    2011-12-18 08:00:01 -------- d-----w- C:\Program Files (x86)\King's Bounty The Legend
    2011-12-18 03:25:47 20747 ----a-w- C:\Windows\SysWow64\drivers\AegisP.sys
    2011-12-18 03:13:12 320512 ----a-w- C:\Windows\System32\drivers\WUSB54GCx64.sys
    2011-12-18 03:12:23 256000 ----a-w- C:\Windows\System32\drivers\netr73.sys
    2011-12-17 19:58:25 734208 ----a-w- C:\Windows\System32\drivers\netr28u.sys
    2011-12-17 19:58:25 221184 ----a-w- C:\Windows\System32\drivers\RaCoInst.dll
    2011-12-17 19:39:01 245248 ----a-w- C:\Windows\SysWow64\rt73.sys
    2011-12-17 19:38:42 -------- d-----w- C:\Program Files (x86)\Compact Wireless-G USB Adapter Wireless Network Monitor
    2011-12-17 19:35:29 94208 ----a-w- C:\Windows\SysWow64\GTW32N50.dll
    2011-12-17 19:35:29 31930 ----a-w- C:\Windows\SysWow64\GTNDIS3.VXD
    2011-12-17 19:35:29 15872 ----a-w- C:\Windows\SysWow64\GTNDIS5.sys
    2011-12-17 19:35:28 17992 ----a-w- C:\Windows\SysWow64\drivers\bcm42rly.sys
    2011-12-17 19:35:28 17992 ----a-w- C:\Windows\SysWow64\bcm42rly.sys
    2011-12-17 19:35:28 17992 ----a-w- C:\Windows\bcm42rly.sys
    2011-12-17 19:35:25 32768 ----a-w- C:\Windows\SysWow64\GTGina.dll
    2011-12-17 16:55:06 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Malwarebytes
    2011-12-17 16:55:01 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2011-12-17 16:55:01 -------- d-----w- C:\ProgramData\Malwarebytes
    2011-12-17 16:55:00 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2011-12-17 15:48:23 -------- d-----w- C:\Program Files\Computer Artworks
    2011-12-17 15:45:37 225280 ------w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll
    2011-12-17 15:45:36 77824 ------w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
    2011-12-17 15:45:36 32768 ------w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
    2011-12-17 15:45:36 176128 ------w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
    2011-12-16 17:53:33 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B69E7D51-BA73-4656-B107-5FDFCFCBEF86}\mpengine.dll
    2011-12-16 07:02:02 -------- d-----w- C:\Users\Shadefyre\AppData\Local\dxhr
    2011-12-16 06:31:45 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Registry Mechanic
    2011-12-16 06:27:40 880640 ----a-w- C:\Windows\SysWow64\UniBox10.ocx
    2011-12-16 06:27:40 40408 ----a-w- C:\Windows\System32\CleanMFT64.exe
    2011-12-16 06:27:40 212992 ----a-w- C:\Windows\SysWow64\UniBoxVB12.ocx
    2011-12-16 06:27:40 1101824 ----a-w- C:\Windows\SysWow64\UniBox210.ocx
    2011-12-16 06:27:39 658432 ----a-w- C:\Windows\SysWow64\MSCOMCT2.OCX
    2011-12-16 06:27:39 506368 ----a-w- C:\Windows\SysWow64\msxml.dll
    2011-12-16 06:27:39 1081616 ----a-w- C:\Windows\SysWow64\MSCOMCTL.OCX
    2011-12-16 06:27:36 -------- d-----w- C:\Program Files (x86)\Common Files\PC Tools
    2011-12-15 10:15:28 -------- d-----w- C:\Program Files (x86)\Capcom
    2011-12-15 10:12:01 -------- d-----w- C:\Program Files (x86)\SaintXi
    2011-12-15 10:05:31 -------- d-----w- C:\Program Files (x86)\Ship Simulator Extremes
    2011-12-14 13:17:20 -------- d-----w- C:\Windows\Stalin vs. Martians
    2011-12-14 13:17:20 -------- d-----w- C:\Program Files (x86)\Stalin vs. Martians
    2011-12-14 13:13:30 -------- d-----w- C:\Program Files (x86)\Lame For Audacity
    2011-12-14 13:10:39 -------- d-----w- C:\Program Files (x86)\The Adventure Company
    2011-12-14 13:07:09 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Codemasters
    2011-12-14 13:05:41 -------- d-----w- C:\Windows\85EBB28365AF4C539EBE7C0A232762F7.TMP
    2011-12-14 13:05:36 -------- d-----w- C:\ProgramData\Media Center Programs
    2011-12-14 13:02:48 86960 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
    2011-12-14 13:02:48 78784 ----a-w- C:\Windows\SysWow64\ISUSPM.cpl
    2011-12-14 13:02:48 394184 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\_isusres.dll
    2011-12-14 13:02:48 29640 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\_ispmres.dll
    2011-12-14 13:02:48 218032 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
    2011-12-14 13:02:47 992176 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
    2011-12-14 13:02:47 283568 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISDM.exe
    2011-12-14 13:02:17 -------- d-----w- C:\Program Files (x86)\Codemasters
    2011-12-14 12:53:12 -------- d-----w- C:\Program Files (x86)\Thief - Deadly Shadows
    2011-12-14 12:52:57 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\ctor.dll
    2011-12-14 12:52:57 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\DotNetInstaller.exe
    2011-12-14 12:52:57 266240 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\iscript.dll
    2011-12-14 12:52:57 192512 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\iuser.dll
    2011-12-14 12:52:56 729088 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\iKernel.dll
    2011-12-14 12:52:55 311428 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\setup.dll
    2011-12-14 12:52:55 188548 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\09\01\Int el32\iGdi.dll
    2011-12-14 06:17:15 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Ice-pick Lodge
    2011-12-14 05:49:14 -------- d-----w- C:\Program Files (x86)\Cargo!
    2011-12-13 08:48:15 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Skyrim
    2011-12-13 07:22:25 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Ubisoft
    2011-12-12 04:51:25 -------- d-----w- C:\Users\Shadefyre\AppData\Local\4A Games
    2011-12-08 15:12:34 -------- d-----w- C:\Program Files (x86)\Combined Community Codec Pack
    2011-12-07 16:34:10 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Tropico 4
    2011-12-07 16:33:45 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Kalypso Media
    2011-12-07 15:53:29 -------- d-----w- C:\Program Files (x86)\Kalypso Media
    2011-12-07 15:52:38 -------- d-----w- C:\Program Files (x86)\To the Moon
    2011-12-07 10:01:29 -------- d-----w- C:\Program Files (x86)\Bethesda Softworks
    2011-12-07 10:01:16 57344 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\ctor.dll
    2011-12-07 10:01:16 237568 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\iscript.dll
    2011-12-07 10:01:16 151552 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\iuser.dll
    2011-12-07 10:01:15 634880 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\iKernel.dll
    2011-12-07 10:01:15 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\DotNetInstaller.exe
    2011-12-07 10:01:06 270468 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\Setup.dll
    2011-12-07 10:01:06 159876 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\0700\Inte l32\IGdi.dll
    2011-12-07 09:48:27 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Stardock
    2011-12-07 09:47:08 -------- d-----w- C:\Program Files (x86)\Fort Zombie
    2011-12-07 09:46:17 -------- d-----w- C:\Program Files (x86)\Microsoft XNA
    2011-12-07 09:45:46 68448 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\XNA\Framework\Shared\xnavisualizer.dll
    2011-12-07 09:45:46 2239328 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\XNA\Framework\v3.0\XnaNative.dll
    2011-12-07 09:45:46 16736 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\XNA\Framework\Shared\XnaVisualizerPS.dll
    2011-12-07 09:36:44 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Wings of Prey
    2011-12-07 08:54:20 -------- d-----w- C:\Program Files (x86)\Wings of Prey
    2011-12-07 08:27:23 -------- d-----w- C:\Program Files (x86)\The Cursed Crusade
    2011-12-07 08:01:02 -------- d-----w- C:\Program Files (x86)\Eidos
    2011-12-07 08:00:43 63488 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\ISBEW64.exe
    2011-12-07 08:00:42 753664 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\iKernel.dll
    2011-12-07 08:00:42 69714 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\ctor.dll
    2011-12-07 08:00:42 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\DotNetInstaller.exe
    2011-12-07 08:00:42 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\iscript.dll
    2011-12-07 08:00:42 184320 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\iuser.dll
    2011-12-07 08:00:39 331908 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\setup.dll
    2011-12-07 08:00:39 200836 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Int el32\iGdi.dll
    2011-12-07 07:56:40 -------- d-----w- C:\Program Files (x86)\Buka
    2011-12-07 07:51:16 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
    2011-12-07 07:37:19 -------- d-----w- C:\Program Files (x86)\Aspyr
    2011-12-06 16:54:53 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\CheckPoint
    2011-12-06 16:54:36 -------- d-----w- C:\Program Files\CheckPoint
    2011-12-06 16:54:24 -------- d-----w- C:\ProgramData\CheckPoint
    2011-12-06 15:26:02 -------- d-----w- C:\Program Files (x86)\Frozen Synapse
    2011-12-06 15:24:15 -------- d-----w- C:\Amorous Professor Cherry
    2011-12-06 14:59:30 -------- d-----w- C:\ProgramData\Ice-pick Lodge
    2011-12-06 14:56:25 -------- d-----w- C:\Users\Shadefyre\AppData\Local\DFH
    2011-12-06 14:53:48 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Sudeki
    2011-12-06 14:48:44 -------- d-----w- C:\Program Files (x86)\Common Files\Blizzard Entertainment
    2011-12-06 14:47:21 -------- d-----w- C:\ProgramData\Solidshield
    2011-12-06 14:46:07 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Microsoft Games
    2011-12-06 14:45:05 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Namco
    2011-12-06 14:43:36 -------- d-----w- C:\ProgramData\PopCap Games
    2011-12-06 14:43:15 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
    2011-12-06 14:27:22 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\Hothead Games
    2011-12-06 14:21:12 -------- d-----w- C:\Users\Shadefyre\AppData\Local\AlienShooter2 Reloaded
    2011-12-06 14:15:48 -------- d-----w- C:\Users\Shadefyre\Stubbs The Zombie - Rebel Without A Pulse
    2011-12-06 14:05:29 -------- d-----w- C:\ProgramData\regid.1986-12.com.adobe
    2011-12-06 13:56:00 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Adobe
    2011-12-06 13:12:40 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Sony
    2011-12-06 13:09:57 -------- d-----w- C:\Program Files\Sony
    2011-12-06 13:09:57 -------- d-----w- C:\Program Files (x86)\Sony
    2011-12-06 12:38:00 -------- d-----w- C:\Program Files (x86)\Common Files\Desura
    2011-12-06 12:36:21 -------- d-----w- C:\ProgramData\Desura
    2011-12-06 12:36:18 -------- d-----w- C:\Program Files (x86)\Desura
    2011-12-06 12:35:28 -------- d-----w- C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)
    2011-12-06 12:34:14 -------- d-----w- C:\Program Files (x86)\Unlocker
    2011-12-06 12:33:41 -------- d-----w- C:\Program Files (x86)\Comical
    2011-12-06 12:28:06 -------- d-----w- C:\Program Files (x86)\Octodad
    2011-12-06 12:26:06 -------- d-----w- C:\Program Files\Microsoft Analysis Services
    2011-12-06 12:26:06 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services
    2011-12-06 12:25:42 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Microsoft Help
    2011-12-06 12:25:13 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\SonyEricsson
    2011-12-06 12:25:07 -------- d-----w- C:\Program Files (x86)\Sony Ericsson
    2011-12-06 12:21:01 279616 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
    2011-12-06 12:20:50 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Lite
    2011-12-06 12:20:17 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\DAEMON Tools Lite
    2011-12-06 12:20:13 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
    2011-12-06 12:11:15 -------- d-----w- C:\Windows\SysWow64\RTCOM
    2011-12-06 11:08:51 -------- d-----w- C:\Users\Shadefyre\AppData\Local\SKIDROW
    2011-12-06 11:05:50 -------- d-----w- C:\ProgramData\EA Core
    2011-12-06 11:05:49 -------- d-----w- C:\ProgramData\Electronic Arts
    2011-12-06 08:07:58 288768 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
    2011-12-06 08:06:43 566208 ----a-w- C:\Windows\System32\winresume.efi
    2011-12-06 08:01:54 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
    2011-12-06 01:06:41 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2011-12-06 01:01:17 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Apple Computer
    2011-12-06 01:01:01 34152 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
    2011-12-06 01:01:01 126312 ----a-w- C:\Windows\System32\GEARAspi64.dll
    2011-12-06 01:01:01 107368 ----a-w- C:\Windows\SysWow64\GEARAspi.dll
    2011-12-06 01:00:41 -------- d-----w- C:\Program Files\iPod
    2011-12-06 01:00:40 -------- d-----w- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
    2011-12-06 01:00:40 -------- d-----w- C:\Program Files\iTunes
    2011-12-06 01:00:40 -------- d-----w- C:\Program Files (x86)\iTunes
    2011-12-06 00:59:48 -------- d-----w- C:\Program Files\Bonjour
    2011-12-06 00:59:48 -------- d-----w- C:\Program Files (x86)\Bonjour
    2011-12-05 22:56:53 -------- d-----w- C:\Windows\SysWow64\directx
    2011-12-05 22:34:30 -------- d-----w- C:\Users\Shadefyre\Tracing
    2011-12-05 22:33:02 -------- d-----w- C:\Program Files (x86)\Microsoft
    2011-12-05 22:32:40 -------- d-----w- C:\Program Files (x86)\Windows Live SkyDrive
    2011-12-05 22:31:53 -------- d-----w- C:\Windows\PCHEALTH
    2011-12-05 22:29:31 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live
    2011-12-05 22:28:34 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Mozilla
    2011-12-05 13:40:04 -------- d-----w- C:\Users\Shadefyre\AppData\Local\28050
    2011-12-05 13:32:59 540688 ----a-w- C:\Windows\System32\d3dx10_38.dll
    2011-12-05 13:05:29 -------- d-----w- C:\Users\Shadefyre\AppData\Local\ElevatedDiagnosti cs
    2011-12-05 12:57:00 -------- d-----w- C:\Program Files (x86)\Marvell
    2011-12-05 12:56:16 -------- d-----w- C:\Program Files (x86)\Renesas Electronics
    2011-12-05 12:54:54 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll
    2011-12-05 12:54:54 406632 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
    2011-12-05 12:54:54 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
    2011-12-05 12:54:50 -------- d-----w- C:\Program Files (x86)\Realtek
    2011-12-05 12:54:16 16896 ----a-w- C:\Windows\AsTaskSched.dll
    2011-12-05 12:53:30 8192 ----a-w- C:\Windows\System32\drivers\IntelMEFWVer.dll
    2011-12-05 12:53:16 56344 ----a-w- C:\Windows\System32\drivers\HECIx64.sys
    2011-12-05 12:51:51 53248 ----a-r- C:\Windows\SysWow64\CSVer.dll
    2011-12-05 12:08:27 -------- d-----w- C:\Program Files (x86)\uTorrent
    2011-12-05 12:07:54 -------- d-----w- C:\Users\Shadefyre\AppData\Roaming\uTorrent
    2011-12-05 12:01:07 203264 ----a-w- C:\Windows\System32\unrar.dll
    2011-12-05 12:01:06 86016 ----a-w- C:\Windows\System32\ff_vfw.dll
    2011-12-05 12:01:05 -------- d-----w- C:\Program Files\K-Lite Codec Pack x64
    2011-12-05 12:00:22 175616 ----a-w- C:\Windows\SysWow64\unrar.dll
    2011-12-05 12:00:17 839680 ----a-w- C:\Windows\SysWow64\lameACM.acm
    2011-12-05 12:00:14 650752 ----a-w- C:\Windows\SysWow64\xvidcore.dll
    2011-12-05 12:00:14 243200 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
    2011-12-05 12:00:14 151552 ----a-w- C:\Windows\SysWow64\ac3acm.acm
    2011-12-05 12:00:13 74752 ----a-w- C:\Windows\SysWow64\ff_vfw.dll
    2011-12-05 12:00:12 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
    2011-12-05 11:57:28 -------- d-----w- C:\Users\Shadefyre\AppData\Local\Apple
    2011-12-05 11:55:39 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation
    2011-12-05 11:55:35 -------- d-----w- C:\Program Files (x86)\RocketDock
    2011-12-05 11:54:47 -------- d-----w- C:\Program Files (x86)\CheckPoint
    2011-12-05 11:53:12 -------- d-----w- C:\Program Files (x86)\VideoLAN
    2011-12-05 11:46:00 -------- d-----w- C:\Program Files\Realtek
    2011-12-05 11:45:20 -------- d--h--w- C:\Program Files (x86)\Temp
    2011-12-05 11:45:10 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\ctor.dll
    2011-12-05 11:45:10 65024 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\ISBEW64.exe
    2011-12-05 11:45:10 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps. dll
    2011-12-05 11:45:10 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\iscript.dll
    2011-12-05 11:45:10 204800 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\iuser.dll
    2011-12-05 11:45:09 757760 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\iKernel.dll
    2011-12-05 11:45:08 200836 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\iGdi.dll
    2011-12-05 11:45:05 331908 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\setup.dll
    2011-12-05 11:38:51 591192 ----a-w- C:\Windows\System32\drivers\aswSnx.sys
    2011-12-05 11:38:47 66904 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
    2011-12-05 11:37:37 41184 ----a-w- C:\Windows\avastSS.scr
    2011-12-05 11:37:33 -------- d-----w- C:\ProgramData\AVAST Software
    2011-12-05 11:37:33 -------- d-----w- C:\Program Files\AVAST Software
    2011-12-05 11:34:00 -------- d-----w- C:\Users\Shadefyre\AppData\Local\ATI
    2011-12-05 11:33:03 0 ----a-w- C:\Windows\ativpsrm.bin
    2011-12-05 11:31:24 -------- d-----w- C:\Program Files (x86)\My Company Name
    2011-12-05 11:30:50 -------- d-----w- C:\Program Files\Common Files\ATI Technologies
    2011-12-05 11:30:40 116240 ----a-w- C:\Windows\System32\drivers\AtihdW76.sys
    2011-12-05 11:30:25 58880 ----a-w- C:\Windows\System32\coinst.dll
    2011-12-05 11:30:24 450560 ----a-w- C:\Windows\System32\ATIDEMGX.dll
    2011-12-05 11:30:03 -------- d-----w- C:\Program Files\ATI
    2011-12-05 11:29:58 -------- d-----w- C:\Program Files (x86)\ATI Technologies
    2011-12-05 11:29:17 -------- d-----w- C:\Program Files\ATI Technologies
    2011-12-05 11:28:16 -------- d-sh--w- C:\Windows\Installer
    2011-12-05 11:13:22 -------- d-----w- C:\Windows\SysWow64\Wat
    2011-12-05 11:13:22 -------- d-----w- C:\Windows\System32\Wat
    2011-12-05 11:10:44 -------- d-sh--w- C:\Recovery
    2011-12-05 10:36:01 -------- d-----w- C:\Windows\Panther
    2011-12-05 10:24:55 -------- d-----w- C:\Windows.old
    2011-12-05 07:22:47 -------- d-sh--w- C:\Boot
    .
    ==================== Find3M ====================
    .
    2011-12-05 11:58:53 466456 ----a-w- C:\Windows\System32\wrap_oal.dll
    2011-12-05 11:58:53 444952 ----a-w- C:\Windows\SysWow64\wrap_oal.dll
    2011-12-05 11:58:53 122904 ----a-w- C:\Windows\System32\OpenAL32.dll
    2011-12-05 11:58:53 109080 ----a-w- C:\Windows\SysWow64\OpenAL32.dll
    2011-12-05 11:13:41 419840 ----a-w- C:\Windows\System32\systemcpl.dll
    2011-12-05 11:13:41 14848 ----a-w- C:\Windows\System32\slwga.dll
    2011-12-05 11:13:41 13824 ----a-w- C:\Windows\SysWow64\slwga.dll
    2011-12-05 11:13:40 833024 ----a-w- C:\Windows\SysWow64\user32.dll
    2011-12-05 11:13:40 1008640 ----a-w- C:\Windows\System32\user32.dll
    2011-11-24 04:52:09 3145216 ----a-w- C:\Windows\System32\win32k.sys
    2011-11-05 05:41:43 1188864 ----a-w- C:\Windows\System32\wininet.dll
    2011-11-05 05:32:50 2048 ----a-w- C:\Windows\System32\tzres.dll
    2011-11-05 04:35:00 981504 ----a-w- C:\Windows\SysWow64\wininet.dll
    2011-11-05 04:26:03 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
    2011-11-05 03:32:47 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
    2011-11-05 02:48:51 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
    2011-10-26 05:21:20 43520 ----a-w- C:\Windows\System32\csrsrv.dll
    2011-10-24 22:29:02 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
    2011-10-24 22:29:02 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
    2011-10-15 06:31:56 723456 ----a-w- C:\Windows\System32\EncDec.dll
    2011-10-15 05:38:59 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
    2011-09-29 16:29:28 1923952 ----a-w- C:\Windows\System32\drivers\tcpip.sys
    .
    ============= FINISH: 12:04:56.05 ===============



    DDS Attach Log
    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows 7 Ultimate
    Boot Device: \Device\HarddiskVolume1
    Install Date: 05/12/2011 6:13:42 AM
    System Uptime: 19/12/2011 3:08:49 AM (9 hours ago)
    .
    Motherboard: ASUSTeK Computer INC. | | P8P67
    Processor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz | LGA1155 | 3301/100mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 146 GiB total, 18.812 GiB free.
    D: is CDROM (CDFS)
    E: is CDROM ()
    F: is FIXED (NTFS) - 785 GiB total, 23.841 GiB free.
    G: is FIXED (NTFS) - 932 GiB total, 328.589 GiB free.
    H: is Removable
    I: is FIXED (NTFS) - 466 GiB total, 4.726 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID:
    Description:
    Device ID: USB\VID_0CF3&PID_3000\6&DF2EE03&0&7
    Manufacturer:
    Name:
    PNP Device ID: USB\VID_0CF3&PID_3000\6&DF2EE03&0&7
    Service:
    .
    ==== System Restore Points ===================
    .
    RP53: 17/12/2011 10:45:55 AM - Installed The Thing
    RP54: 17/12/2011 11:28:55 AM - Restore Operation
    RP55: 17/12/2011 2:30:32 PM - Installed Compact Wireless-G USB Adapter
    RP56: 17/12/2011 2:31:30 PM - Removed Compact Wireless-G USB Adapter
    RP57: 17/12/2011 2:35:10 PM - Installed Compact Wireless-G USB Adapter
    RP58: 17/12/2011 2:36:55 PM - Installed Compact Wireless-G USB Adapter
    RP59: 17/12/2011 2:38:04 PM - Removed Compact Wireless-G USB Adapter
    RP60: 17/12/2011 2:38:43 PM - Installed Compact Wireless-G USB Adapter
    RP61: 17/12/2011 3:13:12 PM - Installed Compact Wireless-G USB Adapter
    RP62: 17/12/2011 3:35:04 PM - Installed Ralink Wireless LAN
    RP63: 17/12/2011 10:23:49 PM - Installed Compact Wireless-G USB Adapter
    RP64: 17/12/2011 10:24:42 PM - Removed Compact Wireless-G USB Adapter
    RP65: 17/12/2011 10:25:18 PM - Installed Compact Wireless-G USB Adapter
    RP66: 18/12/2011 3:13:02 AM - Installed Blair Witch II
    RP67: 18/12/2011 3:26:15 AM - Installed DirectX
    RP68: 18/12/2011 3:28:38 AM - Installed Afterfall InSanity.
    RP69: 18/12/2011 3:43:16 AM - Installed DirectX
    RP70: 19/12/2011 3:20:23 AM - Removed Ralink Wireless LAN
    .
    ==== Installed Programs ======================
    .
    Adobe AIR
    Adobe Community Help
    Adobe Media Player
    Adobe Photoshop CS5
    Afterfall InSanity
    Amorous Professor Cherry v1.0
    Anno 1404
    Apple Application Support
    Apple Software Update
    ASUS VGA Driver
    µTorrent
    Audacity 1.3.13 (Unicode)
    avast! Free Antivirus
    Blair Witch II
    Call Of Cthulhu DCoTE
    Cargo! version 1.0
    Catalyst Control Center - Branding
    Catalyst Control Center Graphics Previews Vista
    Catalyst Control Center InstallProxy
    Catalyst Control Center Localization All
    ccc-core-static
    CCC Help English
    Clive Barker's Jericho
    Combined Community Codec Pack 2011-11-11
    Comical 0.8
    Compact Wireless-G USB Adapter
    DAEMON Tools Lite
    Dark Sector
    Desura
    Dungeon Defenders
    Fort Zombie
    Fraps (remove only)
    Frozen Synapse PRO
    Galactic Civilizations II - Ultimate Edition
    Half-Life
    Intel(R) Management Engine Components
    Java Auto Updater
    Java(TM) 6 Update 29
    Jurassic Park The Game
    Just Cause 1.00.0000
    K-Lite Codec Pack 8.0.0 (Full)
    King's Bounty. The Legend (Remove Only)
    LAME v3.98.3 for Audacity
    Light of Altair 1.00
    Malwarebytes' Anti-Malware version 1.51.2.1300
    marvell 91xx console driver
    Microsoft Choice Guard
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
    Microsoft XNA Framework Redistributable 3.0
    Microsoft_VC80_ATL_x86
    Microsoft_VC80_CRT_x86
    Microsoft_VC80_MFC_x86
    Microsoft_VC80_MFCLOC_x86
    Microsoft_VC90_ATL_x86
    Microsoft_VC90_CRT_x86
    Microsoft_VC90_MFC_x86
    MSVCRT
    NVIDIA PhysX
    Octodad
    OpenAL
    Outcry
    Pathologic
    PDF Settings CS5
    PoxNora
    QuickTime
    Realtek Ethernet Controller Driver
    Realtek High Definition Audio Driver
    Registry Mechanic 10.0
    Renegade Ops
    Renesas Electronics USB 3.0 Host Controller Driver
    Resident Evil 4 1.10
    RocketDock 1.3.5
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
    Ship Simulator Extremes
    Sony Ericsson DRM Packager 1.35
    Stalin vs. Martians
    Stronghold 3
    Stubbs the Zombie in Rebel Without a Pulse
    The Cursed Crusade (c) DTP version 1
    The Suffering (remove only)
    The Thing
    Thief - Deadly Shadows
    Thief - Deadly Shadows Collective Texture Pack by John P., ver. 1.0.3
    To the Moon
    Trespasser
    Tropico 4 1.00
    Ubisoft Game Launcher
    Unlocker 1.9.1
    Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
    VC 9.0 Runtime
    VLC media player 1.0.5
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Live Upload Tool
    Wings of Prey
    Zombie Panic Source
    ZoneAlarm Firewall
    ZoneAlarm Free
    ZoneAlarm Security
    .
    ==== Event Viewer Messages From Past Week ========
    .
    19/12/2011 3:27:03 AM, Error: Service Control Manager [7000] - The GTNDIS4 NDIS Protocol Driver service failed to start due to the following error: The system cannot find the file specified.
    19/12/2011 2:43:49 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR9.
    19/12/2011 10:38:52 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR2.
    17/12/2011 12:56:08 PM, Error: cdrom [11] - The driver detected a controller error on \Device\CdRom0.
    17/12/2011 11:49:49 AM, Error: Service Control Manager [7031] - The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
    17/12/2011 11:48:23 AM, Error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
    17/12/2011 11:48:13 AM, Error: Service Control Manager [7031] - The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
    17/12/2011 11:47:01 AM, Error: Service Control Manager [7034] - The PC Tools Startup and Shutdown Monitor service service terminated unexpectedly. It has done this 1 time(s).
    17/12/2011 11:22:35 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Program Compatibility Assistant Service service, but this action failed with the following error: An instance of the service is already running.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7034] - The Diagnostic System Host service terminated unexpectedly. It has done this 1 time(s).
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The WLAN AutoConfig service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Windows Audio Endpoint Builder service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Superfetch service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Program Compatibility Assistant Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Offline Files service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Network Connections service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Distributed Link Tracking Client service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
    17/12/2011 11:21:35 AM, Error: Service Control Manager [7031] - The Desktop Window Manager Session Manager service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
    17/12/2011 10:25:55 PM, Error: Service Control Manager [7030] - The WUSB54GCSVC service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    17/12/2011 10:18:57 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk3\DR5.
    16/12/2011 1:08:34 AM, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 10.
    .
    ==== End Of File ===========================

  2. #2
    broni is offline Senior Member
    Save 20% on AVG Internet Security 2012 Suite!
    I don't see anything malicious.

+ Reply to Thread