Process explorer 16 04

To a... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 17.7 MB Download Counter: 77 Released: May 01, 2006 | Added: May 04, 2006 | Viewed: 7184 Remote Process Explorer 2.0 Manage remote processes and control remote computers. Free for personal use, Remote Process Explorer replaces Windows Task Manager with a much more advanced version. Remote Process Explorer allows monitoring all local and remote processes through a single user interface, accessing vital... DOWNLOAD Cost: $0.00 USD License: Freeware Size: 1.5 MB Download Counter: 528 Released: May 11, 2009 | Added: May 16, 2009 | Viewed: 6075 | 1 5 6 7 8 10 Next >> Jessica Alba Screensaver Internet Download Manager 69Spider Free PowerPoint Templates HeatSeek Evidence Begone Free Porn Scan Assorted Proton Half Life Key Chance GreenBrowser Spider Solitaire Piano Tiles Formats Customizer Four Points Tiles MLG 2 Bikes Piano Tiles 2 LangOver Video Booth Syncios Froggy jZip Review License4J Review USB Secure Review iTestBot Review AbsoluteTelnet Telnet / SSH Client Review conaito VoIP SDK ActiveX Review conaito PPT2SWF SDK Review FastPictureViewer Review Ashkon MP3 Tag Editor Review Video Mobile Converter Review

1409 ----a-w- c:\windows\Fonts\OPUSO___.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSNN__.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSM___.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSFS__.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSFBE_.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSFB__.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSCSC_.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSCS__.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUSC___.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\OPUS____.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\INKPEN2_.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\INK2TEXT.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\INK2SPEC.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\INK2SCRI.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\INK2METR.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\INK2CHOR.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\HELST___.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\HELSS___.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\HELSM___.FOT2010-09-27 16:23 . 2010-09-27 16:23 1409 ----a-w- c:\windows\Fonts\HELSINKI.FOT2010-09-18 10:23 . 2008-04-14 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll2010-09-18 06:53 . 2008-04-14 12:00 974848 ----a-w- c:\windows\system32\mfc42.dll2010-09-18 06:53 . 2008-04-14 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll2010-09-18 06:53 . 2008-04-14 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll2010-09-10 05:50 . 2008-04-14 12:00 916480 ----a-w- c:\windows\system32\wininet.dll2010-09-10 05:50 . 2008-04-14 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll2010-09-10 05:50 . 2008-04-14 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl2010-09-07 15:12 . 2010-07-10 18:57 38848 ----a-w- c:\windows\avastSS.scr2010-09-07 15:11 . 2010-05-07 10:47 167592 ----a-w- c:\windows\system32\aswBoot.exe2010-09-07 14:52 . 2010-05-07 10:48 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys2010-09-07 14:52 . 2010-05-07 10:48 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys2010-09-07 14:47 . 2010-05-07 10:48 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys2010-09-07 14:47 . 2010-05-07 10:48 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys2010-09-07 14:47 . 2010-05-07 10:48 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys2010-09-07 14:47 . 2010-05-07 10:48 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys2010-09-07 14:46 . 2010-05-07 10:48 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys2010-09-01 11:51 . 2008-04-14 12:00 285824 ----a-w- c:\windows\system32\atmfd.dll2010-09-01 07:55 . 2008-04-14 12:00 1852928 ----a-w- c:\windows\system32\win32k.sys2010-08-27 08:02 . 2008-04-14 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll2010-08-27 05:58 . 2008-04-14 12:00 99840 ----a-w- c:\windows\system32\srvsvc.dll2010-08-27 01:43 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll2010-08-26 13:39 . 2008-04-14 12:00 357248 ----a-w- c:\windows\system32\drivers\srv.sys2010-08-23 16:12 . 2008-04-14 12:00 617472 ----a-w- c:\windows\system32\comctl32.dll2010-08-17 13:17 . 2008-04-14 12:00 58880 ----a-w- c:\windows\system32\spoolsv.exe2010-08-16 08:44 . 2008-04-14 12:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll.------- Sigcheck -------[-] 2010-05-07 . 8D71F28DEB37CC9C2E344095D8BFE1EE . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe.((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))..*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2010-06-13 138552][HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}][HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1][HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}][HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook][HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]2010-06-13 15:25 1438520 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f913dbd9-c752-05cf-cc77-d6a25d7a7423}]2010-10-20 10:31 2611200 ----a-w- c:\windows\system32\2813913b-710f-1248-3131-0937ea7a3dc8.dll[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2010-06-13 1438520][HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}][HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1][HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}][HKEY_CLASSES_ROOT\SWEETIE.IEToolbar][HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2010-06-13 1438520][HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}][HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1][HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}][HKEY_CLASSES_ROOT\SWEETIE.IEToolbar][HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-06-26 39408][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]"ATIModeChange"="Ati2mdxx.exe" [2010-05-07 28672]"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-25 335872]"HKSERV.EXE"="c:\program files\Sony\HotKey Utility\HKserv.exe" [2004-06-29 122880]"SonyPowerCfg"="c:\program files\sony\vaio power management\SPMgr.exe" [2004-06-29 180224]"Switcher.exe"="c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe"

Time:05:00 PM Posted 06 April 2014 - 08:00 PM # AdwCleaner v3.023 - Report created 06/04/2014 at 17:18:38# Updated 01/04/2014 by Xplode# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)# Username : Elizabeth - LIZ# Running from : C:\Documents and Settings\Elizabeth\Desktop\AdwCleaner.exe# Option : Clean***** [ Services ] ********** [ Files / Folders ] ********** [ Shortcuts ] ********** [ Registry ] ********** [ Browsers ] *****-\\ Internet Explorer v8.0.6001.18702-\\ Mozilla Firefox v28.0 (en-US)[ File : C:\Documents and Settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\iv1foac8.default-1385006228515\prefs.js ][ File : C:\Documents and Settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\zjt3si9m.test\prefs.js ]*************************AdwCleaner[R0].txt - [3661 octets] - [04/04/2014 17:43:16]AdwCleaner[R1].txt - [1061 octets] - [06/04/2014 17:16:34]AdwCleaner[S0].txt - [3704 octets] - [04/04/2014 17:48:00]AdwCleaner[S1].txt - [984 octets] - [06/04/2014 17:18:38]########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1043 octets] ##########~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.1.4 (04.06.2014:1)OS: Microsoft Windows XP x86Ran by Elizabeth on Sun 04/06/2014 at 17:28:23.07~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Services~~~ Registry ValuesSuccessfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayNameSuccessfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL~~~ Registry Keys~~~ Files~~~ Folders~~~ FireFoxSuccessfully deleted: [File] C:\user.js~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Sun 04/06/2014 at 17:35:02.48End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Back to top"> Back to top #9 Clairvoyant Clairvoyant Malware Response Team 1,564 posts OFFLINE Gender:Male Location:somewhere in time Local time:02:00 AM Posted 07 April 2014 - 01:34 PM Hi necklacemaker well done, but you have pasted the wrong AdwCleaner log.We need it before to proceed.You can find it in C:\AdwCleaner\AdwCleaner[S0].txt Please post that log in your next reply.Regards Back to top"> Back to top #10 necklacemaker necklacemaker Topic Starter Members 17 posts OFFLINE Gender:Female Location:Tacoma, WA Local time:05:00 PM Posted 08 April 2014 - 02:37 AM # AdwCleaner v3.023 - Report created 04/04/2014 at 17:48:00# Updated 01/04/2014 by Xplode# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)# Username : Elizabeth - LIZ# Running from : C:\Documents and Settings\Elizabeth\My Documents\Downloads\AdwCleaner.exe# Option : Clean***** [ Services ] **********

15:42 286904 ----a-w- c:\program files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll.Contents of the 'Scheduled Tasks' folder.2016-03-04 c:\windows\Tasks\Adobe Flash Player Updater.job- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-04 11:59].2016-03-04 c:\windows\Tasks\DropboxUpdateTaskMachineCore.job- c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-18 13:27].2016-03-04 c:\windows\Tasks\DropboxUpdateTaskMachineUA.job- c:\program files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-06-18 13:27].2014-12-09 c:\windows\Tasks\Epson Printer Software Downloader.job- c:\program files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE [2009-01-23 15:03].2016-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-06 14:14].2016-03-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-03-06 14:14].2016-03-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1744455475-465955899-1649940808-1001Core.job- c:\users\dom\AppData\Local\Google\Update\GoogleUpdate.exe [2014-09-01 14:32].2016-03-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1744455475-465955899-1649940808-1001UA.job- c:\users\dom\AppData\Local\Google\Update\GoogleUpdate.exe [2014-09-01 14:32]..--------- X64 Entries -----------..[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt1]@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt2]@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt3]@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt4]@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt5]@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt6]@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt7]@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ DropboxExt8]@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]2016-02-16 18:37 236352 ----a-w- c:\program files (x86)\Dropbox\Client\DropboxExt64.33.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]@="{472083B0-C522-11CF-8763-00608CC02F24}"[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]2016-02-26 10:05 905248 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll.[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-31 10775584]"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-05-31 2040352].------- Supplementary Scan -------.uLocal Page = c:\windows\system32\blank.htmuStart Page = hxxp://www.google.commStart Page = about:blankuInternet Settings,ProxyOverride = ;*.localuSearchAssistant = hxxp://www.google.com/ieuSearchURL,(Default) = hxxp://www.google.com/search?q=%sTCP: DhcpNameServer = 8.8.8.8 8.8.4.4FF - ProfilePath - c:\users\dom\AppData\Roaming\Mozilla\Firefox\Profiles\fyimrp9s.default-1426790176510\.- - - - ORPHANS REMOVED - - - -.Toolbar-Locked - (no file)Notify-igfxcui - (no file)ShellIconOverlayIdentifiers-{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} - (no file)HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe...--------------------- LOCKED REGISTRY KEYS ---------------------.[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]@Denied: (A 2) (Everyone)@="FlashBroker""LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_306_ActiveX.exe,-101".[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]"Enabled"=dword:00000001.[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_306_ActiveX.exe".[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]@Denied: (A 2) (Everyone)@="IFlashBroker6".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]@="{00020424-0000-0000-C000-000000000046}".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}""Version"="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]@Denied: (A 2) (Everyone)@="FlashBroker""LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe,-101".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]"Enabled"=dword:00000001.[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_306_ActiveX.exe".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]@Denied: (A 2) (Everyone)@="Shockwave Flash Object".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx""ThreadingModel"="Apartment".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]@="0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]@="ShockwaveFlash.ShockwaveFlash.20".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx, 1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]@="{D27CDB6B-AE6D-11cf-96B8-444553540000}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]@="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]@="ShockwaveFlash.ShockwaveFlash".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]@Denied: (A 2) (Everyone)@="Macromedia Flash Factory Object".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx""ThreadingModel"="Apartment".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]@="FlashFactory.FlashFactory.1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_306.ocx, 1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]@="{D27CDB6B-AE6D-11cf-96B8-444553540000}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]@="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]@="FlashFactory.FlashFactory".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]@Denied: (A 2) (Everyone)@="IFlashBroker6".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]@="{00020424-0000-0000-C000-000000000046}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}""Version"="1.0".[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Windows CE Services]"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\.[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]@Denied: (A) (Users)@Denied: (A) (Everyone)@Allowed: (B 1 2 3 4 5) (S-1-5-20)"BlindDial"=dword:00000000.[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]@Denied: (A) (Users)@Denied: (A) (Everyone)@Allowed: (B 1 2 3 4 5) (S-1-5-20)"BlindDial"=dword:00000000.[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]@Denied: (A) (Users)@Denied: (A) (Everyone)@Allowed: (B 1 2 3 4 5) (S-1-5-20)"BlindDial"=dword:00000000.Completion time: 2016-03-04 15:28:28ComboFix-quarantined-files.txt 2016-03-04 15:28ComboFix2.txt 2014-06-30 14:12.Pre-Run: 117,496,963,072 bytes freePost-Run: 117,104,271,360 bytes free.- - End Of File - - 06E4591854E81CB29C2CB8EA39458340