QuickScan 32-bitv0.9.9.

137
-------------------------Scan date: Tue Jun 02 16:06:32 2015
Machine ID: 8CB1F152

No infection found.
-------------------

Processes
--------(unsigned) ATI External Event Utility for Windows
\ati2evxx.exe
(unsigned) ATI External Event Utility for Windows
\ati2evxx.exe
(unsigned) Catalyst Control Centre
I Technologies\ATI.ACE\Core-Static\CCC.exe
(unsigned) Catalyst Control Centre
I Technologies\ATI.ACE\Core-Static\MOM.exe

916

C:\WINDOWS\system32

1388

C:\WINDOWS\system32

128

C:\Program Files\AT

596

C:\Program Files\AT

(verified) Antivirus_Free_Edition_x86.exe
2064
C:\Documents and Se
ttings\Florin Iulian\My Documents\Antivirus_Free_Edition_x86.exe
(verified) Bitdefender 2012
236
C:\DOCUME~1\FLORIN~
1\LOCALS~1\Temp\RarSFX0\Installer.exe
(verified) Microsoft Windows Operating System
1764
C:\WINDOWS\explorer.exe
(verified) Microsoft Windows Operating System
824
C:\WINDOWS\system32\alg
.exe
(verified) Microsoft Windows Operating System
668
C:\WINDOWS\system32\csr
ss.exe
(verified) Microsoft Windows Operating System
576
C:\WINDOWS\system32\ctf
mon.exe
(verified) Microsoft Windows Operating System
756
C:\WINDOWS\system32\lsa
ss.exe
(verified) Microsoft Windows Operating System
744
C:\WINDOWS\system32\ser
vices.exe
(verified) Microsoft Windows Operating System
620
C:\WINDOWS\system32\sms
s.exe
(verified) Microsoft Windows Operating System
1612
C:\WINDOWS\system32\spo
olsv.exe
(verified) Microsoft Windows Operating System
932
C:\WINDOWS\system32\svc
host.exe
(verified) Microsoft Windows Operating System
1004
C:\WINDOWS\system32\svc
host.exe
(verified) Microsoft Windows Operating System
1108
C:\WINDOWS\system32\svc
host.exe
(verified) Microsoft Windows Operating System
1228
C:\WINDOWS\system32\svc
host.exe
(verified) Microsoft Windows Operating System
1304
C:\WINDOWS\system32\svc
host.exe
(verified) Microsoft Windows Operating System
1832
C:\WINDOWS\system32\svc
host.exe
(verified) Microsoft Windows Operating System
700
C:\WINDOWS\system32\win
logon.exe
(verified) Microsoft Windows Operating System
3556
C:\WINDOWS\system32\wua
uclt.exe

Autoruns and critical files

--------------------------(verified) Adobe Flash Player Installer/Uninstal
ash\FlashUtil32_17_0_0_188_pepper.exe
(verified) Adobe Flash Player Update Service
ash\FlashPlayerUpdateService.exe
(unsigned) ATI External Event Utility for Windows
x.dll
(unsigned) CLIStart.exe
logies\ATI.ACE\Core-Static\CLIStart.exe
(verified) Microsoft Windows Operating System
l
(verified) Microsoft Windows Operating System
(verified) Microsoft Windows Operating System
l
(verified) Microsoft Windows Operating System
(verified) Microsoft Windows Operating System
l
(verified) Microsoft Windows Operating System
(verified) Microsoft Windows Operating System
(verified) Microsoft Windows Operating System
e
(verified) Microsoft Windows Operating System
l
(verified) Microsoft Windows Operating System
eobj.dll
(verified) Microsoft Windows Operating System
(verified) Opera Internet Browser
cher.exe
(verified) Realtek HD Audio Sound Effect Manager
(verified) Realtek Voice Manager
(unsigned) UnlockerAssistant.exe
rAssistant.exe
(verified) Microsoft Windows Operating System
(verified) Microsoft Windows Operating System
(verified) Microsoft Windows Operating System
l
(verified) Microsoft Windows Operating System
l
(verified) Realtek AC97 Audio - Event Monitor
(verified) Windows Internet Explorer
dll
Scan
---MD5:
ocal
MD5:
ocal
MD5:
ocal
MD5:
ocal
MD5:
ocal
MD5:
ocal
MD5:

f39a06583b9830bc2b5421592370ca0e C:\Documents
Settings\Temp\RarSFX0\additional.dll
d6b4dd48e3506887fe0d401ff0292ad5 C:\Documents
Settings\Temp\RarSFX0\bdmetrics.dll
973e9e23c84767058857787865e98dd5 C:\Documents
Settings\Temp\RarSFX0\bdnc.dll
66668490ac6165fda83089bf71511bf4 C:\Documents
Settings\Temp\RarSFX0\bdselfpr.sys
69743fcfcca50a2f473ffc8e9ea94b89 C:\Documents
Settings\Temp\RarSFX0\gzfltum.dll
9e0453906cf2d2c81f456e67a44ac04f C:\Documents
Settings\Temp\RarSFX0\htmlayout.dll
d620f4cc59880b7fb2ed4c1424030b2d C:\Documents

C:\WINDOWS\system32\Macromed\Fl
C:\WINDOWS\system32\Macromed\Fl
C:\WINDOWS\system32\ati2evx
C:\Program Files\ATI Techno
C:\WINDOWS\system32\browseui.dl
C:\WINDOWS\system32\crypt32.dll
C:\WINDOWS\system32\cryptnet.dl
C:\WINDOWS\system32\cscdll.dll
C:\WINDOWS\system32\dimsntfy.dl
C:\WINDOWS\system32\logon.scr
C:\WINDOWS\system32\shell32.dll
c:\WINDOWS\system32\userinit.ex
C:\WINDOWS\system32\wlnotify.dl
C:\WINDOWS\system32\wpdshservic
C:\WINDOWS\system32\xp_eos.exe
C:\Program Files\Opera\laun
C:\WINDOWS\RTHDCPL.exe
C:\WINDOWS\SkyTel.exe
C:\WINDOWS\system32\Unlocke
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\system32\sclgntfy.dl
C:\WINDOWS\system32\stobject.dl
C:\WINDOWS\Alcmtr.exe
C:\WINDOWS\system32\webcheck.

and Settings\Florin Iulian\L

and Settings\Florin Iulian\L
and Settings\Florin Iulian\L
and Settings\Florin Iulian\L
and Settings\Florin Iulian\L
and Settings\Florin Iulian\L
and Settings\Florin Iulian\L

ocal Settings\Temp\RarSFX0\Installer.exe
MD5: 1db0f4e9fa8e99bf4c92c66fb75f115e C:\Documents and Settings\Florin Iulian\L
ocal Settings\Temp\RarSFX0\unrar.dll
MD5: 5016deacccd15b7e07a7c085bb2ad112 C:\Documents and Settings\Florin Iulian\L
ocal Settings\Temp\RarSFX0\wsutils.dll
MD5: 5dcb5ccedac03172525868e52a4bd436 C:\Documents and Settings\Florin Iulian\M
y Documents\Antivirus_Free_Edition_x86.exe
MD5: d0c439372438ae8abd4211cfc1042c8a C:\Program Files\ATI Technologies\ATI.ACE
\Branding\Branding.dll
MD5: 3a9f70479a886dcc8e5151326156472d C:\Program Files\ATI Technologies\ATI.ACE
\Core-Static\atiacmxx.dll
MD5: 0fc4ca031c46ce1bbdd8a7e91ed2251b C:\Program Files\ATI Technologies\ATI.ACE
\Core-Static\CCC.exe
MD5: 033ff248550305ed52ed2d2844a8a11b C:\Program Files\ATI Technologies\ATI.ACE
\Core-Static\CLIStart.exe
MD5: 36b9fc05b2091a5782d4a0189fe1735c C:\Program Files\ATI Technologies\ATI.ACE
\Core-Static\MOM.exe
MD5: 9765c6373a259bfe07bf281fe70ea66c C:\Program Files\Opera\launcher.exe
MD5: 835b8f5523f2dc6b3f09b52dea5b7623 C:\Program Files\WinRAR\RarExt.dll
MD5: 310c15fd8358b2c4cd7a5b98a112883f C:\WINDOWS\AppPatch\AcGenral.dll
MD5: 09acf833ca462cce1b3f335da8584bd8 C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0
.0__b77a5c561934e089\mscorlib.dll
MD5: 7d8495351f970c304bb71df0458885b9 C:\WINDOWS\assembly\GAC_32\System.Web\2.0
.0.0__b03f5f7f11d50a3a\System.Web.dll
MD5: a5a56b4957bd59d324821522fe14f751 C:\WINDOWS\assembly\GAC_MSIL\Accessibilit
y\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
MD5: 93d5b9634c4744fb115785081ecf9738 C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics
.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysMa
nager.Shared.DLL
MD5: 4d08d9d664eebcd6f7793e1d0fbe8002 C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.
CCAA.Shared\2.0.2665.42157__90ba9c70f846762e\AEM.Actions.CCAA.Shared.DLL
MD5: 85ec421a4731a2c69417df9e38b00d34 C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundati
on\2.0.2665.42150__90ba9c70f846762e\AEM.Foundation.DLL
MD5: 6c041e0154c30751792bfaa2ef5416f0 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.D
PPE.Shared\2.0.2665.42196__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.DLL
MD5: 925481cf1bf22885da19cb050fd19995 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.E
EU.Shared\2.0.2665.42166__90ba9c70f846762e\AEM.Plugin.EEU.Shared.DLL
MD5: f595a1da0ba8db725cee241cf10f9c91 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.H
otkeys.Shared\2.0.2665.42187__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.DLL
MD5: d3f593b145cf563eceb702f788266ca9 C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.S
ource.Kit.Server\2.0.2713.38696__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.D
LL
MD5: 215b54759b870a46c290d6df81710c37 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.S
hared\2.0.2665.42160__90ba9c70f846762e\AEM.Server.Shared.DLL
MD5: 3a4b35c1abcd4ffa0a9e38b8418f0428 C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2
.0.2713.38365__90ba9c70f846762e\AEM.Server.DLL
MD5: 47bd747572f7b8911eeadb5e71438ffe C:\WINDOWS\assembly\GAC_MSIL\APM.Foundati
on\2.0.2665.42187__90ba9c70f846762e\APM.Foundation.DLL
MD5: 5f0ddcc94470ba9327f44bc48c6f0ec5 C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0
.0.0__90ba9c70f846762e\ATICCCom.DLL
MD5: ae66c84b420b58a3b46849d0ac98e0bf C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0
.2713.38367__90ba9c70f846762e\ATIDEMOS.DLL
MD5: 74a97243ab81f912efb1e75c0233cbae C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0
.0.0__90ba9c70f846762e\atixclib.DLL
MD5: 2105d2e114f3f99ecf8060c10aaf821f C:\WINDOWS\assembly\GAC_MSIL\CCC.Implemen
tation\2.0.2713.38653__90ba9c70f846762e\CCC.Implementation.DLL
MD5: ac0288512782ba68ea300b2a2d140b25 C:\WINDOWS\assembly\GAC_MSIL\CLI.AIB.Tuto
rialInfoCentre.Tutorial.Dashboard\1.2.2704.27161__90ba9c70f846762e\CLI.AIB.Tutor
ialInfoCentre.Tutorial.Dashboard.DLL
MD5: e936cb35c30e493e4a2379dae7c98950 C:\WINDOWS\assembly\GAC_MSIL\CLI.AIB.Tuto

rialOverDrive3.Tutorial.Dashboard\1.2.2704.27037__90ba9c70f846762e\CLI.AIB.Tutor
ialOverDrive3.Tutorial.Dashboard.DLL
MD5: 2197733c9242914daa2ae303884f4cdf C:\WINDOWS\assembly\GAC_MSIL\CLI.AIB.Vivi
dDesktop.Dashboard\1.2.2692.19837__90ba9c70f846762e\CLI.AIB.VividDesktop.Dashboa
rd.DLL
MD5: 91a33964d51ad2654f58550d00cc0f8d C:\WINDOWS\assembly\GAC_MSIL\CLI.AIB.Vivi
dVideoPlayback.Dashboard\1.2.2692.19886__90ba9c70f846762e\CLI.AIB.VividVideoPlay
back.Dashboard.DLL
MD5: 935db9fb2ad026036e6871dec923ef8d C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.D
isplaysColour2.Graphics.Shared\2.0.2665.42182__90ba9c70f846762e\CLI.Aspect.Displ
aysColour2.Graphics.Shared.DLL
MD5: 7301520f94fc541732711146a51097f0 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.D
isplaysManager.Graphics.Dashboard\2.0.2713.38391__90ba9c70f846762e\CLI.Aspect.Di
splaysManager.Graphics.Dashboard.DLL
MD5: 954b0209e45285620b3d9b9809da990b C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.D
isplaysManager.Graphics.Wizard\2.0.2713.38412__90ba9c70f846762e\CLI.Aspect.Displ
aysManager.Graphics.Wizard.DLL
MD5: 8d7b3e45d68f9b524a519e6a06dd6a26 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.H
otkeysHandling.Graphics.Runtime\2.0.2713.38390__90ba9c70f846762e\CLI.Aspect.Hotk
eysHandling.Graphics.Runtime.DLL
MD5: 1005d5b626678f233142c59e29320a83 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.H
otkeysHandling.Graphics.Shared\2.0.2665.42181__90ba9c70f846762e\CLI.Aspect.Hotke
ysHandling.Graphics.Shared.DLL
MD5: d43cb717f32ade766f2f4aa97cec6d58 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.I
nfoCentre.Graphics.Shared\2.0.2665.42182__90ba9c70f846762e\CLI.Aspect.InfoCentre
.Graphics.Shared.DLL
MD5: ed43d8c426747a62a8c9d647f55fc006 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.M
MVideo.Graphics.Shared\2.0.2665.42184__90ba9c70f846762e\CLI.Aspect.MMVideo.Graph
ics.Shared.DLL
MD5: f6c7097311a0800b657e92bd5b34fac3 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.O
verDrive3.Graphics.Shared\2.0.2665.42183__90ba9c70f846762e\CLI.Aspect.OverDrive3
.Graphics.Shared.DLL
MD5: 9a020f5a5d2b46b8075af69df629bb1e C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.P
owerXpress.Graphics.Shared\2.0.2665.42180__90ba9c70f846762e\CLI.Aspect.PowerXpre
ss.Graphics.Shared.DLL
MD5: d68f1682d16046367b8f4d1f08ed85e8 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.R
adeon3D.Graphics.Shared\2.0.2665.42186__90ba9c70f846762e\CLI.Aspect.Radeon3D.Gra
phics.Shared.DLL
MD5: dd00ddbf86e0960ac4321048efea0c02 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.R
adeon3D.Graphics.Wizard\2.0.2713.38603__90ba9c70f846762e\CLI.Aspect.Radeon3D.Gra
phics.Wizard.DLL
MD5: 951dc5ff00c9d5d315b4168d146c0ac1 C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.T
ransCode.Graphics.Shared\2.0.2665.42198__90ba9c70f846762e\CLI.Aspect.TransCode.G
raphics.Shared.DLL
MD5: 4ef190273b115d092b4f59256c27428b C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.T
ransCode.Graphics.Wizard\2.0.2713.38668__90ba9c70f846762e\CLI.Aspect.TransCode.G
raphics.Wizard.DLL
MD5: 27944b1810be5e2e659838730edca80e C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.W
elcome.Graphics.Dashboard\2.0.2713.38674__90ba9c70f846762e\CLI.Aspect.Welcome.Gr
aphics.Dashboard.DLL
MD5: fa056f0aaa62ee980b464452131a487f C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Gr
aphics.Dashboard.Shared\2.0.2665.42180__90ba9c70f846762e\CLI.Caste.Graphics.Dash
board.Shared.DLL
MD5: 714543bdc73bb5894c4286c0a21e90d9 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Gr
aphics.Dashboard\2.0.2713.38382__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.D
LL
MD5: c5c0391c5353accdea754166e18e4fa9 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Gr
aphics.Runtime\2.0.2713.38368__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.DLL
MD5: e361ea00675b5a40a81c6389721c3d17 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Gr
aphics.Shared\2.0.2665.42162__90ba9c70f846762e\CLI.Caste.Graphics.Shared.DLL

MD5: bb3a5f22c21f72d4e062a219a589b36a C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Gr

aphics.Wizard.Shared\2.0.2665.42181__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.
Shared.DLL
MD5: d62685b6596104fac15a6c7cf4a63775 C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Gr
aphics.Wizard\2.0.2713.38404__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.DLL
MD5: a4ae50d8afb24e4c35b396fba7940eb0 C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Client.Shared.Private\2.0.2665.42160__90ba9c70f846762e\CLI.Component.Client.Sh
ared.Private.DLL
MD5: aa442021fb7db3fc938011c66e486d9e C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Client.Shared\2.0.2665.42156__90ba9c70f846762e\CLI.Component.Client.Shared.DLL
MD5: 0e60b4cf042a59f124860e27b707a4af C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Dashboard.Shared.Private\2.0.2665.42167__90ba9c70f846762e\CLI.Component.Dashbo
ard.Shared.Private.DLL
MD5: 7b906b28e402d29043701fe8da01e73f C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Dashboard.Shared\2.0.2665.42161__90ba9c70f846762e\CLI.Component.Dashboard.Shar
ed.DLL
MD5: de4f3773f1ef9b233a882fc12dc7f745 C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Dashboard\2.0.2713.38377__90ba9c70f846762e\CLI.Component.Dashboard.DLL
MD5: 8efc6125f98bd03c076085f26e6315e6 C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Runtime.Extension.EEU\2.0.2713.38365__90ba9c70f846762e\CLI.Component.Runtime.E
xtension.EEU.DLL
MD5: ccdbcac27db313e97623a87b5a381bb9 C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Runtime.Shared.Private\2.0.2665.42165__90ba9c70f846762e\CLI.Component.Runtime.
Shared.Private.DLL
MD5: 22ab9df887cb67920cdcae9066a2fefc C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Runtime.Shared\2.0.2665.42164__90ba9c70f846762e\CLI.Component.Runtime.Shared.D
LL
MD5: c03a88a262533a61b7d3450d7986d047 C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Runtime\2.0.2713.38367__90ba9c70f846762e\CLI.Component.Runtime.DLL
MD5: c23f43cbbc6fff5c748003b52ec1e55a C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Systemtray\2.0.2713.38645__90ba9c70f846762e\CLI.Component.Systemtray.DLL
MD5: 4d658f3b5bdad5bc64a5ef293f0a8ccd C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Wizard.Shared.Private\2.0.2665.42196__90ba9c70f846762e\CLI.Component.Wizard.Sh
ared.Private.DLL
MD5: 5ca7bd4e2ba4f1608dc716f4f3bd11eb C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Wizard.Shared\2.0.2665.42166__90ba9c70f846762e\CLI.Component.Wizard.Shared.DLL
MD5: 3dcdaa8b631a7e49a561506bb556c6d3 C:\WINDOWS\assembly\GAC_MSIL\CLI.Componen
t.Wizard\2.0.2713.38398__90ba9c70f846762e\CLI.Component.Wizard.DLL
MD5: 3b7dc2cd951557717c5781fef1a8bb9e C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundati
on.Private\2.0.2665.42154__90ba9c70f846762e\CLI.Foundation.Private.DLL
MD5: fbc41d9ba7bdf85af6609e2361ca8c71 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundati
on.XManifest\2.0.2665.42240__90ba9c70f846762e\CLI.Foundation.XManifest.DLL
MD5: f18d90567cef39955d8bfb5097184565 C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundati
on\2.0.2665.42152__90ba9c70f846762e\CLI.Foundation.DLL
MD5: fb21e6379376a594fc26368f62077d3a C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics
.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.DLL
MD5: 366cdff207bbfd1f0b630ea3c09323eb C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics
\2.0.2665.42179__90ba9c70f846762e\DEM.Graphics.DLL
MD5: c1b44ac862d64c13e9d499603efa2f6d C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602
\2.0.2665.42178__90ba9c70f846762e\DEM.OS.I0602.DLL
MD5: 7b01b3fdfafe0829143e395210a699bd C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2
665.42177__90ba9c70f846762e\DEM.OS.DLL
MD5: edbe69604a4ab28fc960fec1ef8f1ec6 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundati
on.Implementation.Private\2.0.2665.42169__90ba9c70f846762e\LOG.Foundation.Implem
entation.Private.DLL
MD5: 6d6772630af83d1f50e28355b9ddffbc C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundati
on.Implementation\2.0.2713.38652__90ba9c70f846762e\LOG.Foundation.Implementation
.DLL
MD5: d391a9d05628fd64c79fad6561500f21 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundati
on.Private\2.0.2665.42158__90ba9c70f846762e\LOG.Foundation.Private.DLL

MD5: dbc515b7ee90e94dbc6a54404a3992b9 C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundati

on\2.0.2665.42149__90ba9c70f846762e\LOG.Foundation.DLL
MD5: 1baaf8e1921cc80a6711992c92aabd85 C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundati
on\2.0.2665.42168__90ba9c70f846762e\MOM.Foundation.DLL
MD5: 4beb716ed16d25abfc344c9d43c8485d C:\WINDOWS\assembly\GAC_MSIL\MOM.Implemen
tation\2.0.2713.38653__90ba9c70f846762e\MOM.Implementation.DLL
MD5: bea944358fe10c73b578bffbb64fc2a2 C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Found
ation\2.0.2665.42151__90ba9c70f846762e\NEWAEM.Foundation.DLL
MD5: 9f01035d09841e8247c039ddfc12bbf0 C:\WINDOWS\assembly\GAC_MSIL\System.Confi
guration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
MD5: 579425596c4e66a010213f70be2b2182 C:\WINDOWS\assembly\GAC_MSIL\System.Drawi
ng\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
MD5: ebaadbbfb6c455e54eb6a0e47267d33c C:\WINDOWS\assembly\GAC_MSIL\System.Manag
ement\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
MD5: 2849f13593d2712ccb97ffbdd3c1232e C:\WINDOWS\assembly\GAC_MSIL\System.Runti
me.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MD5: 111c12035c1a4e84d5639539e01b3aef C:\WINDOWS\assembly\GAC_MSIL\System.Windo
ws.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
MD5: d5158d252c15226d01a633e7240df0ba C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2
.0.0.0__b77a5c561934e089\System.XML.dll
MD5: 89542a319d18140413d719615b5433b5 C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0
.0__b77a5c561934e089\System.dll
MD5: 2bb75b7f548d82a099125d0c5971de7d C:\WINDOWS\explorer.exe
MD5: 723528449ed0d1b0ad98af3edf23101d C:\WINDOWS\Microsoft.NET\Framework\v2.0.5
0727\mscorjit.dll
MD5: 60f36ed5a02b41f9f60cb29d88a9cd01 C:\WINDOWS\Microsoft.NET\Framework\v2.0.5
0727\mscorwks.dll
MD5: 35a936c7c029a5b705d3ffd40518d660 C:\WINDOWS\Microsoft.NET\Framework\v2.0.5
0727\WMINet_Utils.dll
MD5: f209365e10daeda9a084dc30a8096487 C:\WINDOWS\msagent\agentsvr.exe
MD5: 9db17ea44276963e155e908b8eaf2def C:\WINDOWS\RTHDCPL.exe
MD5: 1afa1cbbb859a9f335fec2f8cf3d5d0b C:\WINDOWS\SkyTel.exe
MD5: c8a6c82f90b055149925dc7526b2d78c C:\WINDOWS\system32\advapi32.dll
MD5: 9663d8d8f038a8ecbaf608e400af5c96 C:\WINDOWS\system32\ati2edxx.dll
MD5: 4ebc9af70e5ddedfdb8d9ddb530d7929 C:\WINDOWS\system32\ati2evxx.dll
MD5: 471087b5e1e01cc82604e81ea14781d8 C:\WINDOWS\system32\ati2evxx.exe
MD5: c148bd421f063443fe628f08099a1e48 C:\WINDOWS\system32\ati2sgag.exe
MD5: fddb43a59b65006b2917239e1051c1f9 C:\WINDOWS\system32\atiadlxx.dll
MD5: 00c192bf2565c2e5b1ab7845174a50b3 C:\WINDOWS\system32\ATIDEMGX.dll
MD5: 25a6598909434f80535967a6472a4d75 C:\WINDOWS\system32\atipdlxx.dll
MD5: 7ad83a294f5446608743f4e90ccfac96 C:\WINDOWS\system32\atl.dll
MD5: 476f4f8cc006e64362a7b06e7dcd8a11 C:\WINDOWS\system32\avifil32.dll
MD5: fc6d1d80588d371f0321e15a75b2f8f2 C:\WINDOWS\system32\browser.dll
MD5: e092844adf55e99eeb8c7bbb05c1f5dc C:\WINDOWS\system32\browseui.dll
MD5: 93afb83fbc1f9443cac722fca63d73bf C:\WINDOWS\system32\comctl32.dll
MD5: ed0c0df222209e43ad9afbf3fe87dde0 C:\WINDOWS\system32\comsvcs.dll
MD5: 8e20d83d04076a3682706a2be1bba80e C:\WINDOWS\system32\credssp.dll
MD5: 636df3ff20a1b69b3f9d21325e7115c7 C:\WINDOWS\system32\crypt32.dll
MD5: c14350fc0d47d806699c4f907fc6785b C:\WINDOWS\system32\cryptnet.dll
MD5: e69bdcda821e8be9de1ba1ef72f8c94d C:\WINDOWS\system32\cscdll.dll
MD5: 693ad11c59926428871c11fa3c348a2a C:\WINDOWS\system32\csrsrv.dll
MD5: c70dbb09ff4705167fcfd12c1b2fd03d C:\WINDOWS\system32\davclnt.dll
MD5: b1762156256b0238c21baa4c06cef727 C:\WINDOWS\system32\devmgr.dll
MD5: c51de19619d50cbd03708647aca10e70 C:\WINDOWS\system32\dhcpcsvc.dll
MD5: 3d76dd0cbc536e0f8c45d23ed230beb2 C:\WINDOWS\system32\digest.dll
MD5: e2092f0a1d7abc243f9c2362483d150d C:\WINDOWS\system32\dimsntfy.dll
MD5: 64aa11d53a4a84cdf43370d7036517c3 C:\WINDOWS\system32\dnsapi.dll
MD5: d977659ae4d8ece5286d99d1ed34614d C:\WINDOWS\system32\dnsrslvr.dll
MD5: b4109c8c3d54c83246997a777724f318 C:\WINDOWS\system32\dot3svc.dll
MD5: f6b7b1ecd7b41736bdb6ff4b092bcb79 C:\WINDOWS\system32\drivers\afd.sys

MD5: 033448d435e65c4bd72e70521fd05c76
MD5: 5b01af89d16d562825c4db4530f20cbb
MD5: c0b86ecb324e50f6bbd529f9d5c6b24b
MD5: 4b0a100eaf5c49ef3cca8c641431eacc
MD5: 47b6aaec570f2c11d8bad80a064d8ed1
MD5: 46524e4f27a44a86f28772d80bc3ce02
MD5: 4fefd389d71126ee581b9f9cb2918be4
MD5: fb2fccc70f7174c7bf64f48e96d3adf4
MD5: f7b1ad991491f02af6da70b00b8bf114
MD5: 0109c4f3850dfbab279542515386ae22
MD5: 2f597bb467e05b1fe3830eabd821b8e0
MD5: d8e11d311785f89f1d70a28b0e879127
MD5: 77050c6615f6eb5402f832b27fd695e0
MD5: c7d9bc54354b8c706abf172d48313f1b
MD5: 8f924588c272fdaa28cf31a9bbc21a72
MD5: f459dd5ee69d4b68cb6767c9731b5faf
MD5: ded793c377fa132912b4381043a4d554
MD5: b4485881bd8aed9b157a2e6cf43c2d51
MD5: 6225224b8e846ac230f8d9b343635910
MD5: 596d4a7052002d2bd344d8937da6f66d
MD5: 9b390283569ea58d43d2586032b892f5
MD5: 474d3dccb57defcd917311eec47204b9
MD5: 88e0f99fdb8ddcb6e6a15380e164fea2
MD5: c5e11cd822adf0019a5a862d9c4e2222
MD5: 1944f6e04defd811bd46e4f227ba6fb1
MD5: dd4906169d7f99f582276fc4d478c986
MD5: f17f6226bdc0cd5f0bef0daf84d29bec
MD5: f5b754cdea20bbb3a31e16a776ede6d6
MD5: affe0b7126a86603d3f49a19a5b7dc46
MD5: 6dd28a6d99cf7b14b2d1786d143624e0
MD5: 0a878aa66e4dd3e2608192a1eccd9f8f
MD5: de932ec79d79c1495bf685cecb6af0f3
MD5: ac21aab649e781b067db56cfff303cc7
MD5: 16e916243bddbaf44d98e623b2d0cead
MD5: 4f10a2fa76b5bd54cd68afa94e8adb39
MD5: 4260bdcd96976da6f44e9ca8b2e029e5
MD5: 4a45b692d2baa74124df57472d5ea2f1
MD5: 355c90cf387e6d7ff5ce8e221d85cb17
MD5: 9fad7dff67555ff1e06bc4a3893024a7
MD5: 5c53aeac3fd476088e7985c842b9b048
MD5: b04a4810c6cc205f9dc72dc22e4ab236
layerUpdateService.exe
MD5: f0f91c1d126cc9d0fc3b4eb389e3bc4b
til32_17_0_0_188_pepper.exe
MD5: 682b5487811c86c8d7a5c86c34295599
MD5: fc9e716b2913f6d40fa1a8720ed3e73a
MD5: 30b7d847ba9075aa8e1122fb6af3d1b5
MD5: 8b28221c3d95b0477572f58ad6c7039c
MD5: 06b8485fb1da9a552b10ab978cd1ac85
MD5: fcee5fcb99f7c724593365c706d28388
MD5: 03a02d5a2d50198bdf6c62af209438d0
MD5: 46954876ed60fed39c10e527d56c8e19
MD5: bbdfdbead1b7a1cfd44bfffd177fb627
MD5: 6f8dcd60628da34ab303ceadb5186043
MD5: 06cf9eedb7e827205c6948c9daf56974
MD5: 062f837c1fbdb6a0a75f82efc2ee8e74
MD5: 15ce4dbc22fab90b3ca5352af1fff81c
MD5: 30fe5893927f94cbbc84c2bdd0765093
MD5: 584c4da856450cb22ebbe7a68cc6250f
MD5: 1d604a51408d039e5692160c2dc44ff7

C:\WINDOWS\system32\drivers\AmdPPM.sys
C:\WINDOWS\system32\drivers\ASPI32.SYS
C:\WINDOWS\system32\drivers\ati2mtag.sys
C:\WINDOWS\system32\drivers\cdrom.sys
C:\WINDOWS\system32\drivers\disk.sys
C:\WINDOWS\system32\drivers\gzflt.sys
C:\WINDOWS\system32\drivers\mrxdav.sys
C:\WINDOWS\system32\drivers\mrxsmb.sys
C:\WINDOWS\system32\drivers\mup.sys
C:\WINDOWS\system32\drivers\ndistapi.sys
C:\WINDOWS\system32\drivers\ndproxy.sys
C:\WINDOWS\system32\drivers\psched.sys
C:\WINDOWS\system32\drivers\rdbss.sys
C:\WINDOWS\system32\drivers\rdpwd.sys
C:\WINDOWS\system32\drivers\RtkHDAud.sys
C:\WINDOWS\system32\drivers\si3112.sys
C:\WINDOWS\system32\drivers\SiSGbeXP.sys
C:\WINDOWS\system32\drivers\siside.sys
C:\WINDOWS\system32\drivers\sisidex.sys
C:\WINDOWS\system32\drivers\sisperf.sys
C:\WINDOWS\system32\drivers\srv.sys
C:\WINDOWS\system32\drivers\tcpip.sys
C:\WINDOWS\system32\drivers\trufos.sys
C:\WINDOWS\system32\drivers\usbohci.sys
C:\WINDOWS\system32\drprov.dll
C:\WINDOWS\system32\dskquoui.dll
C:\WINDOWS\system32\es.dll
C:\WINDOWS\system32\esent.dll
C:\WINDOWS\system32\gdi32.dll
C:\WINDOWS\system32\grpconv.exe
C:\WINDOWS\system32\hnetcfg.dll
C:\WINDOWS\system32\ieframe.dll
C:\WINDOWS\system32\iertutil.dll
C:\WINDOWS\system32\imagehlp.dll
C:\WINDOWS\system32\ipnathlp.dll
C:\WINDOWS\system32\kerberos.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\localspl.dll
C:\WINDOWS\system32\logon.scr
C:\WINDOWS\system32\lsasrv.dll
C:\WINDOWS\system32\Macromed\Flash\FlashP
C:\WINDOWS\system32\Macromed\Flash\FlashU
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\msasn1.dll
C:\WINDOWS\system32\MSCTFIME.IME
C:\WINDOWS\system32\msi.dll
C:\WINDOWS\system32\msvcrt.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\msxml3.dll
C:\WINDOWS\system32\mtxclu.dll
C:\WINDOWS\system32\mucltui.dll
C:\WINDOWS\system32\netapi32.dll
C:\WINDOWS\system32\netlogon.dll
C:\WINDOWS\system32\netshell.dll
C:\WINDOWS\system32\ntdll.dll
C:\WINDOWS\system32\ntdsapi.dll
C:\WINDOWS\system32\oakley.dll
C:\WINDOWS\system32\odbc32.dll

MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:
MD5:

59b408e5b8489b0b36a0d783d150edcc
20200ee3cfe10e9f0c028d8653be11c6
6874d2a757f06dc1d8b3c80a47755013
9c300a0ca0a6cbd50d22b3d725edea30
afff5c71fb6d60f8a0486c5d5118c24d
c84b060a6181a2e70de0a77142df975e
fc1f164b1df33802cc7dc15203c043f4
57e036885a222d1a8ef237c7399be98b
fbdb9d0935b9907b809b381fddf1627f
bd6c1488f63d64dea8ee514802fc2cdd
44c164b34a72f29087eca32411f2ed44
9222562d44021b988b9f9f62207fb6f2
a176d8473da0e7cb4e3bc73244a2df5b
c10f6916c61a70926adf2365b56f2fea
fb6a2ad43b478fc9e306c32df975de50
26f1193092b9ac2586deb38dd1cbb25c
c519e15665cd89a91ad383fce3cb556a
ed0ce2deec594778004306e3fa8cac33
dd7758db700bd511255b064c2d9106b3
e5a4870b9bbd3146274240035fbcc5fd
0e235315c8ff6d9c0198f1e74604a681
fe04792b53c9633ae1e6f86b2e9c1e5a
e2a710e33c19e5e9c1acbf5df4156109
29b6a85a733abe65b371023f790b2599
888cd7b39c37e13a2419becfaaf0a28c
258dd5d4283fd9f9a7166be9ae45ce73
3695b8d03745b2f8022b161238347a9d
a3336ebd2527f6eb214f4593dcf67f6c
e2b32b10acc5d97623275aafb67e5f03
5128852a18ae46c387f87bf27da4c9dd
ee9710428ffb95fd3845d41e7148ac31
e23c2933a53b4459482e84bb56d24681
1e178fdbad2fbf68032a808a9f4dec4c
255e405d801cf01247390f38f92d8042
bb879dcfd22926efbeb3298129898cbb
fb11420fc0af573b5a86dc7c1c4737f7
4a5b3897e8de45a978899675884551cf
c2d7189cdd37453234a9bbcb58e50883
a93aee1928a9d7ce3e16d24ec7380f89
f69576955ad53cc33a17ba1e4709aa34
88f5be9ae5b87b82e83718f3e425e82d
91790d6749ebed90e2c40479c0a91879
9f8a0d0cbb2fa265a754516128c00e22
600519339671dcfa3dd20216a19817bb
a688715ee6d068140180bd16b9a95150
bae413e34804ddd5c763b3bec1005fcb
703591cd1403bc19e7198ca7b314e132
d0a8a9fad0a3ecc77d545498651c79eb
e09551776d365bca891bbffb31ee4b4c
53a8857723277b1d6d5ee60a9f85b117
4a953f13942867ba8fb41f141ec1b80c
d72b9ec3337b247a666f098f3d6b43de
a6430b97c05da8a4ba70e8280b2e6287
ba529c83ad2f49693de42ffbde8d37ae
2cc34e8bb667eef78899546e12649196
c77a18954c448dd9f87585247851501a
2e0b0a051ffaa86e358465bb0880d453
c31dd4cec06d2908ae5f212a0b13805b
fc3ec24fce372c89423e015a2ac1a31e
fc1e3b06ae8d160b686c5d04b5e85371

C:\WINDOWS\system32\ole32.dll
C:\WINDOWS\system32\oleacc.dll
C:\WINDOWS\system32\oleaut32.dll
C:\WINDOWS\system32\psbase.dll
C:\WINDOWS\system32\raschap.dll
C:\WINDOWS\system32\rastls.dll
C:\WINDOWS\system32\rcimlby.exe
C:\WINDOWS\system32\rdshost.exe
C:\WINDOWS\system32\regsvr32.exe
C:\WINDOWS\system32\Restore\rstrui.exe
C:\WINDOWS\system32\rpcrt4.dll
C:\WINDOWS\system32\rpcss.dll
C:\WINDOWS\system32\rsmui.exe
C:\WINDOWS\system32\runonce.exe
C:\WINDOWS\system32\sc.exe
C:\WINDOWS\system32\schannel.dll
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\setupapi.dll
C:\WINDOWS\system32\sfc_os.dll
C:\WINDOWS\system32\shdocvw.dll
C:\WINDOWS\system32\shell32.dll
C:\WINDOWS\system32\shimeng.dll
C:\WINDOWS\system32\shlwapi.dll
C:\WINDOWS\system32\shmedia.dll
C:\WINDOWS\system32\shsvcs.dll
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\srvsvc.dll
C:\WINDOWS\system32\sxs.dll
C:\WINDOWS\system32\tapisrv.dll
C:\WINDOWS\system32\termsrv.dll
C:\WINDOWS\system32\themeui.dll
C:\WINDOWS\system32\tspkg.dll
C:\WINDOWS\system32\unimdm.tsp
C:\WINDOWS\system32\UnlockerAssistant.exe
C:\WINDOWS\system32\UnlockerDriver5.sys
C:\WINDOWS\system32\upnpcont.exe
C:\WINDOWS\system32\urlmon.dll
C:\WINDOWS\system32\usbui.dll
c:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\usmt\migwiz.exe
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\verclsid.exe
C:\WINDOWS\system32\w32time.dll
C:\WINDOWS\system32\wbem\fastprox.dll
C:\WINDOWS\system32\wbem\wmiprvsd.dll
C:\WINDOWS\system32\wdigest.dll
C:\WINDOWS\system32\webclnt.dll
C:\WINDOWS\system32\winhttp.dll
C:\WINDOWS\system32\wininet.dll
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winmm.dll
C:\WINDOWS\system32\winrnr.dll
C:\WINDOWS\system32\winsrv.dll
C:\WINDOWS\system32\wintrust.dll
C:\WINDOWS\system32\wlnotify.dll
C:\WINDOWS\system32\wmasf.dll
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuaucpl.cpl
C:\WINDOWS\system32\wuaueng.dll
C:\WINDOWS\system32\wuauserv.dll

MD5: c88c65df1ed4dfd34cfbd11cdfe519a3 C:\WINDOWS\system32\wucltui.dll

MD5: 3458eda96e30fbd0477a2800d3fb1909 C:\WINDOWS\system32\wups.dll
MD5: bdc0c99e472176c8c2c853a68adc5073 C:\WINDOWS\system32\wups2.dll
MD5: 349b8d2bb755e8c3b0e3e82a87663e55 C:\WINDOWS\system32\wzcsvc.dll
MD5: fe2571a8c9ffab1d45502d6b0bf472aa C:\WINDOWS\system32\xp_eos.exe
MD5: 16403217ab6fc5c30c14c6b12098ad4b C:\WINDOWS\system32\xpsp2res.dll
MD5: c9564cf4976e7e96b4052737aa2492b4 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_
1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
MD5: 736b12b725aeb2b07f0241a9f680cb10 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.C
ommon-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MD5: 29ecda17ba5e6d98430f698587569acc C:\WINDOWS\WinSxS\x86_Microsoft.Windows.G
diPlus_6595b64144ccf1df_1.0.6002.23084_x-ww_f3f35550\GdiPlus.dll
No file uploaded.
Scan finished - communication took 2 sec
Total traffic - 0.01 MB sent, 1.05 KB recvd
Scanned 570 files and modules - 27 seconds
==============================================================================