DDS (Ver_10-03-17.01) - NTFSX64 DSREPAIR
Run by CrimsonSky at 20:20:37.32 on Wed 09/22/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_21
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4095.2985 [GMT 3:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\AEADISRV.EXE
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesApp64.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\x64\klwtblfs.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Steam\steam.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\CrimsonSky\Desktop\Downloads\dds.scr
C:\Windows\system32\conhost.exe
============== Pseudo HJT Report ===============
mLocal Page = c:\windows\syswow64\blank.htm
mWinlogon: Userinit=userinit.exe
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\ievkbd.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\klwtbbho.dll
uRun: [Steam] "c:\program files (x86)\steam\Steam.exe" -silent
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [Kone] "c:\program files (x86)\roccat\kone mouse\KoneHID.EXE"
mRun: [SoundMAXPnP] c:\program files (x86)\analog devices\core\smax4pnp.exe
mRun: [JMB36X IDE Setup] c:\windows\raidtool\xInsIDE.exe
mRun: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
mRun: [AVP] "c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\avp.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\klwtbbho.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\klwtbbho.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
TCP: {D697D1E0-F6AF-4074-86A5-33E488C8B310} = 192.168.123.1
AppInit_DLLs: c:\progra~2\kasper~1\kasper~1\mzvkbd3.dll
BHO-X64: IEVkbdBHO Class: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\x64\ievkbd.dll
BHO-X64: IEVkbdBHO - No File
BHO-X64: FilterBHO Class: {E33CF602-D945-461A-83F0-819F76A199F8} - c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\x64\klwtbbho.dll
BHO-X64: link filter bho - No File
mRun-x64: [SoundMAX] c:\program files (x86)\analog devices\soundmax\soundmax.exe /tray
================= FIREFOX ===================
FF - ProfilePath - c:\users\crimso~1\appdata\roaming\mozilla\firefox\profiles\zmiqjktq.default\
FF - component: c:\program files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru\components\kavlinkfilter.dll
FF - plugin: c:\program files (x86)\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files (x86)\mozilla firefox\plugins\npwachk.dll
FF - plugin: c:\program files (x86)\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: c:\program files (x86)\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: c:\windows\syswow64\macromed\flash\NPSWF32.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - truec:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files (x86)\mozilla firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files (x86)\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
============= SERVICES / DRIVERS ===============
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2010-6-9 11864]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2010-4-22 27736]
R2 AVP;Kaspersky Anti-Virus Service;c:\program files (x86)\kaspersky lab\kaspersky anti-virus 2011\avp.exe [2010-7-1 352976]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\nvidia corporation\3d vision\nvSCPAPISvr.exe [2010-7-10 248936]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\tuneup utilities 2010\TuneUpUtilitiesService64.exe [2010-8-28 1403200]
R3 KoneFltr;ROCCAT Kone;c:\windows\system32\drivers\Kone.sys [2010-9-16 15488]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2009-6-10 187392]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\tuneup utilities 2010\TuneUpUtilitiesDriver64.sys [2010-2-25 11856]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x64.sys [2009-5-20 393728]
S2 !SASCORE;SAS Core Service;"c:\program files\superantispyware\sascore64.exe" --> c:\program files\superantispyware\SASCORE64.EXE [?]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 22544]
S3 SwitchBoard;SwitchBoard;c:\program files (x86)\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]
============== File Associations ===============
exefile=c:\windows\svchost.com "%1" %*
=============== Created Last 30 ================
2010-09-22 14:16:26 149773 ----a-w- c:\windows\system32\drivers\klin.dat
2010-09-22 14:16:26 106765 ----a-w- c:\windows\system32\drivers\klick.dat
2010-09-22 14:15:23 0 d-----w- c:\program files (x86)\Kaspersky Lab
2010-09-22 14:15:22 0 d-----w- c:\programdata\Kaspersky Lab
2010-09-22 13:40:54 0 d-----w- c:\programdata\Kaspersky Lab Setup Files
2010-09-22 13:17:41 0 d-----w- c:\programdata\Blizzard Entertainment
2010-09-22 13:17:41 0 d-----w- c:\program files (x86)\StarCraft II
2010-09-22 11:57:37 0 d-----w- c:\programdata\!SASCORE
2010-09-22 11:11:27 0 --sha-w- C:\ntuser.dat.LOG2
2010-09-22 11:11:27 0 --sha-w- C:\ntuser.dat.LOG1
2010-09-22 11:11:27 0 ----a-w- C:\ntuser.dat
2010-09-21 20:02:12 0 d-----w- c:\programdata\Sun
2010-09-21 20:02:00 423656 ----a-w- c:\windows\syswow64\deployJava1.dll
2010-09-21 20:02:00 153376 ----a-w- c:\windows\syswow64\javaws.exe
2010-09-21 20:02:00 145184 ----a-w- c:\windows\syswow64\javaw.exe
2010-09-21 20:02:00 145184 ----a-w- c:\windows\syswow64\java.exe
2010-09-20 20:23:05 35 ----a-w- c:\windows\directx.sys
2010-09-20 20:22:56 0 ----a-w- c:\windows\svchost.com
2010-09-20 10:54:07 0 d-----w- c:\program files (x86)\Valve
2010-09-19 10:50:43 0 d-----w- c:\windows\pss
2010-09-19 09:04:20 355990955 ----a-w- c:\windows\MEMORY.DMP
2010-09-16 22:06:00 0 d-----w- c:\users\crimso~1\appdata\roaming\YouTube HD Transfer
2010-09-16 22:05:56 609824 ----a-w- c:\windows\syswow64\COMCTL32.OCX
2010-09-16 22:05:56 212240 ----a-w- c:\windows\syswow64\richtx32.ocx
2010-09-16 22:05:56 124688 ----a-w- c:\windows\syswow64\MSWINSCK.OCX
2010-09-16 22:05:56 0 d-----w- c:\program files (x86)\YouTube HD Transfer
2010-09-16 13:46:12 1081616 ----a-w- c:\windows\system32\mscomctl.ocx
2010-09-16 13:19:41 83888 ----a-w- c:\windows\War3Unin.dat
2010-09-16 13:19:41 2829 ----a-w- c:\windows\War3Unin.pif
2010-09-16 13:19:41 139264 ----a-w- c:\windows\War3Unin.exe
2010-09-16 13:19:03 0 d-----w- c:\program files (x86)\Garena
2010-09-16 13:14:14 0 d-----w- c:\windows\system32\appmgmt
2010-09-16 08:44:12 0 d-----w- c:\windows\Panther
2010-09-16 08:44:00 8192 --sha-r- C:\BOOTSECT.BAK
2010-09-16 08:43:59 383562 --sh--r- C:\bootmgr
2010-09-16 08:43:59 0 d-sh--w- C:\Boot
2010-09-16 07:52:53 171136 --sha-r- C:\w7ldr
2010-09-16 07:52:08 0 d-sh--w- C:\Recovery
2010-09-16 02:26:55 0 d-----w- c:\programdata\regid.1986-12.com.adobe
2010-09-16 02:22:59 0 d-----w- c:\program files\Adobe
2010-09-16 02:22:10 0 d-----w- c:\program files\common files\Adobe
2010-09-16 01:49:51 0 d-----w- c:\programdata\Adobe
2010-09-16 01:43:37 0 d-----w- c:\program files (x86)\common files\Blizzard Entertainment
2010-09-16 01:38:00 0 d-----w- c:\programdata\Yahoo!
2010-09-16 01:37:23 0 d-----w- c:\program files (x86)\Yahoo!
2010-09-16 01:25:34 0 d-----w- c:\programdata\Creative
2010-09-16 01:08:49 4174814 ------w- c:\windows\syswow64\CT4MGM.SF2
2010-09-16 01:08:49 4174814 ------w- c:\windows\system32\CT4MGM.SF2
2010-09-16 01:08:49 2167684 ------w- c:\windows\syswow64\CT2MGM.SF2
2010-09-16 01:08:49 2167684 ------w- c:\windows\system32\CT2MGM.SF2
2010-09-16 01:08:30 11264 ----a-w- c:\windows\syswow64\INRES.DLL
2010-09-16 01:08:30 10752 ----a-w- c:\windows\system32\INRES.DLL
2010-09-16 01:08:29 1892352 ------w- c:\windows\system32\Sens_oal.dll
2010-09-16 01:08:29 1544192 ------w- c:\windows\syswow64\Sens_oal.dll
2010-09-16 01:08:17 83456 ------w- c:\windows\system32\CmdRtr64.dll
2010-09-16 01:08:17 69120 ------w- c:\windows\syswow64\CmdRtr.dll
2010-09-16 01:08:17 139264 ------w- c:\windows\system32\APOMgr64.dll
2010-09-16 01:08:17 108544 ------w- c:\windows\syswow64\APOMngr.dll
2010-09-16 01:04:56 2868224 ----a-w- c:\windows\explorer_edit_w7sbc.exe
2010-09-16 01:04:56 2868224 ----a-w- c:\windows\explorer_backup_w7sbc.exe
2010-09-16 01:04:56 2385408 ----a-w- c:\windows\explorer.exe
2010-09-16 01:04:56 0 d-----w- c:\windows\W7SBC
2010-09-16 00:51:56 0 d-----w- c:\program files (x86)\OpenAL
2010-09-16 00:41:41 102400 ----a-w- c:\windows\temp.000
2010-09-16 00:13:41 15416 ----a-w- c:\windows\system32\drivers\ASACPI.sys
2010-09-16 00:13:09 0 d-----w- c:\program files (x86)\Marvell
2010-09-16 00:12:51 315904 ----a-w- c:\windows\syswow64\Difx464.rra
2010-09-16 00:12:51 1970176 ----a-w- c:\windows\syswow64\xRaidSetup.exe
2010-09-16 00:12:51 151552 ----a-w- c:\windows\syswow64\xRaidAPI.dll
2010-09-16 00:12:46 0 d-----w- c:\windows\RaidTool
2010-09-16 00:12:29 109480 ----a-w- c:\windows\system32\drivers\jraid.sys
2010-09-16 00:12:01 53248 ----a-w- c:\windows\syswow64\CSVer.dll
2010-09-16 00:11:32 0 d-----w- C:\Intel
2010-09-16 00:10:50 1769 ----a-w- c:\windows\Language_trs.ini
2010-09-16 00:10:04 419840 ----a-w- c:\windows\system32\wrap_oal.dll
2010-09-16 00:10:04 413696 ----a-w- c:\windows\syswow64\wrap_oal.dll
2010-09-16 00:10:04 1828352 ------w- c:\windows\system32\adi_oal.dll
2010-09-16 00:10:04 1503232 ------w- c:\windows\syswow64\adi_oal.dll
2010-09-16 00:10:04 133632 ----a-w- c:\windows\system32\OpenAL32.dll
2010-09-16 00:10:04 110592 ----a-w- c:\windows\syswow64\OpenAL32.dll
2010-09-16 00:10:04 0 d-----w- c:\program files (x86)\Creative
2010-09-16 00:09:48 0 d-----w- c:\programdata\SonicFocus
2010-09-16 00:09:43 0 d-----w- c:\program files (x86)\Analog Devices
2010-09-15 23:54:59 0 d-----w- c:\program files (x86)\common files\Steam
2010-09-15 23:54:58 0 d-----w- c:\program files (x86)\Steam
2010-09-15 23:51:27 0 d-----w- c:\windows\syswow64\Macromed
2010-09-15 23:44:23 0 d-----w- c:\users\crimso~1\appdata\roaming\BSplayer PRO
2010-09-15 23:44:22 0 d-----w- c:\program files (x86)\Webteh
2010-09-15 23:39:19 91568 ----a-w- c:\windows\system32\drivers\scdemu.sys
2010-09-15 23:39:19 0 d-----w- c:\program files (x86)\PowerISO
2010-09-15 23:38:23 34624 ----a-w- c:\windows\system32\TURegOpt.exe
2010-09-15 23:38:22 36160 ----a-w- c:\windows\system32\uxtuneup.dll
2010-09-15 23:38:22 30016 ----a-w- c:\windows\syswow64\uxtuneup.dll
2010-09-15 23:38:22 25920 ----a-w- c:\windows\system32\authuitu.dll
2010-09-15 23:38:22 21312 ----a-w- c:\windows\syswow64\authuitu.dll
2010-09-15 23:38:16 0 d-----w- c:\users\crimso~1\appdata\roaming\TuneUp Software
2010-09-15 23:38:14 0 d-----w- c:\program files (x86)\TuneUp Utilities 2010
2010-09-15 23:38:01 0 d-----w- c:\programdata\TuneUp Software
2010-09-15 23:37:58 0 d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-09-15 23:22:05 0 d-----w- c:\users\crimso~1\appdata\roaming\ROCCAT
2010-09-15 23:18:28 0 d-----w- c:\program files (x86)\Winamp Detect
2010-09-15 23:17:50 206312 --sh--r- C:\XELDZ
2010-09-15 23:14:44 2414360 ----a-w- c:\windows\syswow64\d3dx9_31.dll
2010-09-15 23:14:44 1892184 ----a-w- c:\windows\syswow64\D3DX9_42.dll
2010-09-15 23:14:29 0 d-----w- c:\program files (x86)\common files\PX Storage Engine
2010-09-15 23:11:52 0 d-----w- c:\programdata\ROCCAT
2010-09-15 23:11:48 15488 ----a-w- c:\windows\system32\drivers\Kone.sys
2010-09-15 23:11:48 0 d-----w- c:\program files (x86)\ROCCAT
2010-09-15 23:07:21 0 d-----w- c:\program files\WinRAR
2010-09-15 22:48:29 0 d-----w- c:\program files (x86)\uTorrent
2010-09-15 22:48:11 0 d-----w- c:\users\crimso~1\appdata\roaming\uTorrent
2010-09-15 22:41:34 0 d-----w- c:\program files (x86)\Realtek
2010-09-15 22:24:17 0 d-----w- c:\programdata\NVIDIA
2010-09-15 22:23:46 0 d-----w- c:\program files (x86)\NVIDIA Corporation
2010-09-15 22:23:43 0 d-sh--w- c:\windows\Installer
2010-09-15 22:23:42 0 d-----w- c:\programdata\NVIDIA Corporation
2010-09-15 22:23:39 0 d-----w- c:\program files\NVIDIA Corporation
2010-09-15 22:22:40 1196 ----a-w- c:\users\crimsonsky\Downloads - Shortcut.lnk
2010-09-15 22:19:56 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-09-15 22:07:38 270208 ------w- c:\windows\system32\MpSigStub.exe
==================== Find3M ====================
2010-09-16 13:53:56 6082566 ----a-w- c:\program files (x86)\war3patch.mpq
2010-09-15 22:41:36 319456 ----a-w- c:\windows\DIFxAPI.dll
2010-09-15 22:41:33 315392 ----a-w- c:\windows\HideWin.exe
2010-07-09 23:27:02 61032 ----a-w- c:\windows\system32\nvshext.dll
2010-07-09 23:27:02 159336 ----a-w- c:\windows\system32\nvvsvc.exe
2010-07-09 23:27:02 1585256 ----a-w- c:\windows\system32\nvsvc64.dll
2010-07-09 23:27:02 15314024 ----a-w- c:\windows\system32\nvcpl.dll
2010-07-09 23:27:02 116328 ----a-w- c:\windows\system32\nvmctray.dll
2010-07-01 18:39:00 233656 ----a-w- c:\windows\system32\klogon.dll
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:54:24 174 --sha-w- c:\program files\desktop.ini
2009-07-14 04:54:24 174 --sha-w- c:\program files (x86)\desktop.ini
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 20:44:08 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-07-14 04:55:03 16384 --sha-w- c:\windows\syswow64\config\systemprofile\appdata\local\microsoft\windows\history\history.ie5\index.dat
2009-07-14 04:55:03 32768 --sha-w- c:\windows\syswow64\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-07-14 04:55:03 16384 --sha-w- c:\windows\syswow64\config\systemprofile\appdata\roaming\microsoft\windows\cookies\index.dat
2009-07-14 01:39:53 398848 --sha-w- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
============= FINISH: 20:20:55.42 ===============
(anything) is not a valid Win32 application (2) added dds
