Recventi problemi credo scheda Video,improvvisi blocchi del computer,ho eseguito il primo log :
OTL logfile created on: 21/01/2015 23.52.35 - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\CASASALERNO\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy
3,25 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 65,15% Memory free
6,72 Gb Paging File | 5,50 Gb Available in Paging File | 81,75% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,82 Gb Total Space | 416,86 Gb Free Space | 91,45% Space Free | Partition Type: NTFS
Drive D: | 9,93 Gb Total Space | 1,18 Gb Free Space | 11,91% Space Free | Partition Type: NTFS
Computer Name: PC-CASASALERNO | User Name: CASASALERNO | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
========== Processes (SafeList) ========== PRC - C:\Users\CASASALERNO\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programmi\Hola\app\hola_updater.exe (Hola Networks Ltd.)
PRC - C:\Programmi\Unchecky\bin\unchecky_bg.exe (RaMMicHaeL)
PRC - C:\Programmi\Unchecky\bin\unchecky_svc.exe (RaMMicHaeL)
PRC - C:\Programmi\CCleaner\CCleaner.exe (Piriform Ltd)
PRC - C:\Programmi\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Programmi\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programmi\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programmi\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programmi\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Programmi\HP\Common\HPSupportSolutionsFrameworkService.exe (Hewlett-Packard Company)
PRC - C:\WINDOWS\System32\atieclxx.exe (AMD)
PRC - C:\WINDOWS\System32\atiesrxx.exe (AMD)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programmi\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programmi\Common Files\Maxtor\Schedule2\schedul2.exe (Acronis)
PRC - C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Programmi\Common Files\microsoft shared\VS7DEBUG\mdm.exe (Microsoft Corporation)
========== Modules (No Company Name) ========== MOD - C:\Programmi\CCleaner\Lang\lang-1040.dll ()
MOD - C:\WINDOWS\System32\atitmpxx.dll ()
MOD - C:\Programmi\WinRAR\RarExt.dll ()
========== Services (SafeList) ========== SRV - (hola_svc) -- C:\Programmi\Hola\app\hola_svc.exe (Hola Networks Ltd.)
SRV - (hola_updater) -- C:\Programmi\Hola\app\hola_updater.exe (Hola Networks Ltd.)
SRV - (Unchecky) -- C:\Programmi\Unchecky\bin\unchecky_svc.exe (RaMMicHaeL)
SRV - (SkypeUpdate) -- C:\Programmi\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) -- C:\Programmi\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Programmi\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Programmi\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (HPSupportSolutionsFrameworkService) -- C:\Programmi\HP\Common\HPSupportSolutionsFrameworkService.exe (Hewlett-Packard Company)
SRV - (AMD External Events Utility) -- C:\WINDOWS\System32\atiesrxx.exe (AMD)
SRV - (odserv) -- C:\Programmi\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programmi\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Programmi\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (AcrSch2Svc) -- C:\Programmi\Common Files\Maxtor\Schedule2\schedul2.exe (Acronis)
SRV - (IAANTMON) -- C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (MDM) -- C:\Programmi\Common Files\microsoft shared\VS7DEBUG\mdm.exe (Microsoft Corporation)
SRV - (ose) -- C:\Programmi\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
========== Driver Services (SafeList) ========== DRV - (SymIMMP) -- system32\DRIVERS\SymIM.sys File not found
DRV - (SymIM) -- system32\DRIVERS\SymIM.sys File not found
DRV - (PcdrNdisuio) -- system32\DRIVERS\pcdrndisuio.sys File not found
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found
DRV - (ssmdrv) -- C:\WINDOWS\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avipbb) -- C:\WINDOWS\System32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV - (avgntflt) -- C:\WINDOWS\System32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV - (avkmgr) -- C:\WINDOWS\System32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV - (SWDUMon) -- C:\WINDOWS\System32\drivers\SWDUMon.sys ()
DRV - (amdkmdag) -- C:\WINDOWS\System32\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV - (amdkmdap) -- C:\WINDOWS\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (AtiHDAudioService) -- C:\WINDOWS\System32\drivers\AtihdLH3.sys (Advanced Micro Devices)
DRV - (UsbserFilt) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (upperdev) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (nmwcdc) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- C:\WINDOWS\System32\drivers\ccdcmb.sys (Nokia)
DRV - (nm3) -- C:\WINDOWS\System32\drivers\nm3.sys (Microsoft Corporation)
DRV - (RTL8169) -- C:\WINDOWS\System32\drivers\Rtlh86.sys (Realtek Corporation )
DRV - (PAC207) -- C:\WINDOWS\System32\drivers\PFC027.SYS (PixArt Imaging Inc.)
DRV - (Ps2) -- C:\WINDOWS\System32\drivers\PS2.sys (Hewlett-Packard Company)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.comIE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
https://www.google.it/IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{E574ADEA-D849-4388-9D4E-5710CCF72821}: "URL" =
https://www.google.com/search?q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== Chrome ========== CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk\1.4.3_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio\1.6.222_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\CASASALERNO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2015/01/21 15.06.01 | 000,001,903 | ---- | M]) - C:\WINDOWS\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
O1 - Hosts: 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
O1 - Hosts: 0.0.0.0 media.opencandy.com
O1 - Hosts: 0.0.0.0 cdn.opencandy.com
O1 - Hosts: 0.0.0.0 tracking.opencandy.com
O1 - Hosts: 0.0.0.0 api.opencandy.com
O1 - Hosts: 0.0.0.0 installer.betterinstaller.com
O1 - Hosts: 0.0.0.0 installer.filebulldog.com
O1 - Hosts: 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
O1 - Hosts: 0.0.0.0 inno.bisrv.com
O1 - Hosts: 0.0.0.0 nsis.bisrv.com
O1 - Hosts: 0.0.0.0 cdn.file2desktop.com
O1 - Hosts: 0.0.0.0 cdn.goateastcach.us
O1 - Hosts: 0.0.0.0 cdn.guttastatdk.us
O1 - Hosts: 0.0.0.0 cdn.inskinmedia.com
O1 - Hosts: 0.0.0.0 cdn.insta.oibundles2.com
O1 - Hosts: 0.0.0.0 cdn.insta.playbryte.com
O1 - Hosts: 0.0.0.0 cdn.llogetfastcach.us
O1 - Hosts: 0.0.0.0 cdn.montiera.com
O1 - Hosts: 0.0.0.0 cdn.msdwnld.com
O1 - Hosts: 0.0.0.0 cdn.mypcbackup.com
O1 - Hosts: 0.0.0.0 cdn.ppdownload.com
O1 - Hosts: 0.0.0.0 cdn.riceateastcach.us
O1 - Hosts: 0.0.0.0 cdn.shyapotato.us
O1 - Hosts: 11 more lines...
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programmi\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Adblock Plus for IE Browser Helper Object) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Programmi\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
O3 - HKLM\..\Toolbar: (no name) - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [hola] C:\Program Files\Hola\app\hola.exe (Hola Networks Ltd.)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O8 - Extra context menu item: Apri client su monitor &1 - Reg Error: Value error. File not found
O8 - Extra context menu item: Apri client su monitor &2 - Reg Error: Value error. File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: hola.org ([]http in Siti attendibili)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A6BBFA1E-E77A-4BBD-A1E1-F14FFDA3EA89}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programmi\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programmi\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programmi\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wot - No CLSID value found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programmi\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\System32\Userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\img17.jpg
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\img17.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/01/01 22.20.33 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 60 Days ========== [2015/01/21 14.56.16 | 000,000,000 | ---D | C] -- C:\Program Files\Hola
[2015/01/20 21.47.24 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
[2015/01/20 21.47.24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
[2015/01/20 21.47.23 | 000,000,000 | ---D | C] -- C:\Program Files\Eusing Free Registry Cleaner
[2015/01/20 17.30.27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2015/01/20 17.30.27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2015/01/20 17.30.26 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2015/01/18 17.25.25 | 000,000,000 | ---D | C] -- C:\_OTL
[2015/01/17 17.23.52 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2015/01/17 12.20.24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky
[2015/01/17 12.20.23 | 000,000,000 | ---D | C] -- C:\ProgramData\Unchecky
[2015/01/17 12.20.23 | 000,000,000 | ---D | C] -- C:\Program Files\Unchecky
[2015/01/11 20.21.14 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Roaming\Kodi
[2015/01/11 19.44.04 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2015/01/11 19.44.03 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll
[2015/01/10 10.13.05 | 000,000,000 | ---D | C] -- C:\Program Files\WOT
[2015/01/03 23.44.08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015/01/03 23.44.07 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014/12/24 20.50.59 | 000,000,000 | -H-D | C] -- C:\_acestream_cache_
[2014/12/24 20.50.57 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Roaming\.ACEStream
[2014/12/24 20.50.06 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Roaming\ACEStream
[2014/12/24 18.46.19 | 000,701,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014/12/24 18.46.19 | 000,071,344 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014/12/20 15.59.42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/12/20 11.53.37 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Roaming\.Tribler
[2014/12/20 11.53.33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tribler
[2014/12/20 11.53.12 | 000,000,000 | ---D | C] -- C:\Program Files\Tribler
[2014/12/19 15.41.31 | 000,000,000 | ---D | C] -- C:\ProgramData\Ashampoo
[2014/12/17 13.39.18 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Roaming\Avira
[2014/12/17 13.38.51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2014/12/17 13.38.02 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2014/12/17 13.38.01 | 000,136,216 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2014/12/17 13.38.01 | 000,098,160 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2014/12/17 13.38.01 | 000,037,352 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avkmgr.sys
[2014/12/17 13.01.49 | 000,000,000 | ---D | C] -- C:\OETemp
[2014/12/12 15.55.46 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2014/12/12 15.55.31 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Local\Google
[2014/12/12 15.55.06 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Local\Apps
[2014/12/12 15.55.05 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Local\Deployment
[2014/12/03 18.36.00 | 000,000,000 | ---D | C] -- C:\Users\CASASALERNO\AppData\Local\Mozilla
[2014/12/03 18.35.49 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2014/12/03 17.47.59 | 000,114,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2014/12/03 17.47.50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/12/03 17.47.47 | 000,075,480 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/12/03 17.47.47 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/12/03 17.47.47 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/12/03 17.47.47 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
========== Files - Modified Within 60 Days ========== [2015/01/21 23.05.39 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2015/01/21 23.05.39 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2015/01/21 23.02.59 | 000,001,148 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/01/21 16.02.59 | 000,001,144 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/01/21 15.11.26 | 000,714,776 | ---- | M] () -- C:\Windows\System32\perfh010.dat
[2015/01/21 15.11.26 | 000,634,258 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015/01/21 15.11.26 | 000,143,156 | ---- | M] () -- C:\Windows\System32\perfc010.dat
[2015/01/21 15.11.26 | 000,119,824 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2015/01/21 15.05.39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/01/21 15.05.33 | 3486,818,304 | -HS- | M] () -- C:\hiberfil.sys
[2015/01/21 12.08.11 | 000,385,696 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2015/01/17 19.00.09 | 000,114,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2015/01/04 16.28.09 | 000,005,120 | ---- | M] () -- C:\Users\CASASALERNO\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/12/29 18.55.49 | 000,000,680 | ---- | M] () -- C:\Users\CASASALERNO\AppData\Local\d3d9caps.dat
[2014/12/24 18.46.19 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014/12/24 18.46.19 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014/11/27 08.18.05 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2014/11/27 08.18.00 | 000,136,216 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avipbb.sys
[2014/11/27 08.18.00 | 000,098,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avgntflt.sys
[2014/11/27 08.18.00 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\System32\drivers\avkmgr.sys
========== Files Created - No Company Name ========== [2015/01/21 15.35.41 | 000,000,848 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hola.lnk
[2015/01/20 23.21.54 | 3486,818,304 | -HS- | C] () -- C:\hiberfil.sys
[2014/12/25 17.01.35 | 000,005,120 | ---- | C] () -- C:\Users\CASASALERNO\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/12/20 15.58.15 | 000,001,148 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/12/20 15.58.14 | 000,001,144 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/05/19 10.42.32 | 000,013,464 | ---- | C] () -- C:\Windows\System32\drivers\SWDUMon.sys
[2013/12/25 10.18.08 | 000,000,680 | ---- | C] () -- C:\Users\CASASALERNO\AppData\Local\d3d9caps.dat
[2013/12/06 22.38.46 | 000,200,704 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2013/11/08 09.38.57 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2013/11/07 19.36.36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/11/07 18.50.46 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2013/11/07 18.50.46 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2013/11/07 18.14.43 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2013/11/07 09.23.55 | 000,967,208 | ---- | C] () -- C:\ProgramData\LuUninstall.LiveUpdate
[2013/11/01 09.08.32 | 000,721,296 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2013/09/26 22.14.10 | 000,083,552 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2013/09/12 17.31.04 | 000,233,776 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2013/09/12 17.30.56 | 000,234,036 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2013/03/29 03.13.14 | 000,798,734 | ---- | C] () -- C:\Windows\System32\amdocl_ld32.exe
[2013/03/29 03.13.12 | 000,995,342 | ---- | C] () -- C:\Windows\System32\amdocl_as32.exe
========== ZeroAccess Check ========== [2006/11/02 13.54.22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/03/25 14.26.04 | 011,587,584 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 07.28.19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 07.28.25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ========== [2015/01/18 08.31.37 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\.ACEStream
[2015/01/20 23.51.07 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\.Tribler
[2015/01/18 08.35.08 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\ACEStream
[2014/07/11 16.16.58 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\Auslogics
[2014/12/05 19.03.32 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\Canon
[2014/07/20 21.48.30 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\DiskDefrag
[2014/03/16 12.02.48 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\Eusing
[2014/07/21 10.27.05 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\GlarySoft
[2015/01/18 00.05.54 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\Kodi
[2014/09/14 11.35.40 | 000,000,000 | ---D | M] -- C:\Users\CASASALERNO\AppData\Roaming\Oracle
========== Purity Check ========== < End of report >