悪代官の伏魔殿掲示板

LaSuperbaの件

LaSuperbaに悩まされています。
バタバタして暫く放置したままでFirefoxの動作もおかしくなってきてしまいました。
ご教授の程よろしくお願いします。

ばんぶー
MAIL
2015/10/17 (Sat) 23:00:26

Re: LaSuperbaの件

テキストを添付していませんでした。申し訳ございません。

HJT
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 23:22:28, on 2015/10/17
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18057)

FIREFOX: 40.0.3 (x86 ja)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files (x86)\GIZMO2\GIZMO.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Users\banzabu6\AppData\Local\GIZMO2\Data\deck\basic\basic.exe
C:\Users\banzabu6\AppData\Local\GIZMO2\Data\deck\peta\peta.exe
C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_207.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_207.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_226.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_226.exe
C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Users\banzabu6\Downloads\HijackThis(1).exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Windows Live ID サインインヘルパー - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ContentBlockerBrowserHelperObject - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Safe Money Plugin - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSOIEAddonBHO - {DA5BCE70-D057-4D63-943D-5F3927EC59F1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
O4 - HKLM\..\Run: [RemoteControl9] "c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
O4 - HKLM\..\Run: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [GIZMO2] "C:\Program Files (x86)\GIZMO2\GIZMO.exe" -BootProcess
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [Mobile Partner] C:\Program Files (x86)\MobileWiFi\MobileWiFi
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - Startup: インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
O4 - Global Startup: SignalNowExpress.lnk = ?
O9 - Extra button: セキュリティキーボード - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: リサーチ - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O20 - Winlogon Notify: FastAccess - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll
O23 - Service: McAfee Application Installer Cleanup (0323541431150564) (0323541431150564mcinstcleanup) - Unknown owner - C:\Users\banzabu6\AppData\Local\Temp\032354~1.EXE (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: IntelR CentrinoR Wireless BluetoothR 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus Service 15.0.2 (AVP15.0.2) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour サービス (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: CLHNService3 - Unknown owner - C:\Program Files (x86)\CyberLink\RemoteMedia\Kernel\DMP\CLHNService.exe
O23 - Service: CyberLink Product - 2012/06/27 14:28:08 (CLKMSVC10_9EC60124) - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: CyberLink Media Server Monitor Service - Unknown owner - C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSMonitorService.exe
O23 - Service: CyberLink Media Server Service - CyberLink - C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FAService - Sensible Vision - C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update サービス (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update サービス (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HWDeviceService64.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod サービス (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Morrin Thumbnail Synchronized Service 5 (MrnTS_Sync5) - 株式会社モーリン - C:\Program Files (x86)\Common Files\Creoapp\MrnTS_Sync5.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Dell DataSafe Online (NOBU) - Dell, Inc. - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\OpenMG\PACSPTISVR.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SonicStage Back-End Service2 - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeService2.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16813 bytes

-----------------------------------------------

CC
2007 Office system 互換機能パック Microsoft Corporation 2015/10/14 361 MB 12.0.6612.1000
AccelerometerP11 STMicroelectronics 2012/06/27 2.00.11.22
Adobe AIR Adobe Systems Incorporated 2012/06/28 2.6.0.19120
Adobe Flash Player 19 ActiveX Adobe Systems Incorporated 2015/10/17 3.43 MB 19.0.0.226
Adobe Flash Player 19 NPAPI Adobe Systems Incorporated 2015/10/17 3.81 MB 19.0.0.226
Adobe Reader X (10.1.16) MUI Adobe Systems Incorporated 2015/10/14 481 MB 10.1.16
Advanced Audio FX Engine Creative Technology Ltd 2012/06/28 1.12.05
Apple Application Support（32 ビット） Apple Inc. 2015/09/26 114 MB 4.0.3
Apple Application Support（64 ビット） Apple Inc. 2015/09/26 121 MB 4.0.3
Apple Mobile Device Support Apple Inc. 2015/09/26 28.0 MB 9.0.0.26
Apple Software Update Apple Inc. 2015/09/26 2.40 MB 2.1.4.131
Bonjour Apple Inc. 2015/09/26 2.01 MB 3.1.0.1
Canon Easy-WebPrint EX Canon Inc. 2014/05/15 1.4.1.0
Canon IJ Network Scan Utility 2012/08/25
Canon IJ Network Scanner Selector EX Canon Inc. 2014/05/15
Canon IJ Network Tool Canon Inc. 2014/05/15 3.3.0
Canon IJ Scan Utility Canon Inc. 2014/05/15
Canon MG7100 series MP Drivers Canon Inc. 2014/05/15 1.00
Canon MG7100 series On-screen Manual Canon Inc. 2014/05/15 7.6.1
Canon MP970 series 2012/08/25
Canon My Image Garden Canon Inc. 2014/05/15 2.0.1
Canon My Image Garden Design Files Canon Inc. 2014/05/15 2.0.0
Canon Quick Menu Canon Inc. 2014/05/15 2.2.1
Canon マイプリンタ Canon Inc. 2014/05/15 3.1.0
CanoScan LiDE 90 2012/08/25
CCleaner Piriform 2015/10/17 5.10
CyberLink PowerDVD 9.6 CyberLink Corp. 2012/06/27 9.6.1.4827
Dell DataSafe Local Backup Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Local Backup - Support Software Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Online Dell 2012/06/27 6.46 MB 2.1.19634
Dell Getting Started Guide Dell Inc. 2012/06/27 1.00.0000
Dell PhotoStage ArcSoft 2012/06/27 165 MB 1.5.0.130
Dell Stage Fingertapps 2012/06/27 1.7.209.0
Dell Stage Remote ArcSoft 2012/06/27 80.8 MB 2.0.0.43
Dell VideoStage CyberLink Corp. 2012/06/27 1.3.0.2513
Dell Webcam Central Creative Technology Ltd 2012/06/28 2.00.44
Dell ミュージックステージ Fingertapps 2012/06/27 1.6.225.0
FastAccess Sensible Vision 2015/10/04 152 MB 4.1.224.1
GIZMO ants Inc. 2012/07/08 8.02 MB 3.21.4000
Google Chrome Google Inc. 2014/05/31 46.0.2490.71
iCloud Apple Inc. 2015/05/09 92.9 MB 4.1.1.53
inSSIDer 2.0 MetaGeek 2012/07/08 3.55 MB 2.0.7
Intel(R) Control Center Intel Corporation 2013/06/29 1.2.1.1007
Intel(R) Management Engine Components Intel Corporation 2013/10/15 7.0.0.1144
Intel(R) Processor Graphics Intel Corporation 2013/10/09 8.15.10.2455
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology Intel Corporation 2012/06/27 90.1 MB 1.2.1.0608
Intel(R) WiDi Intel Corporation 2012/06/27 139 MB 2.1.39.0
iTunes Apple Inc. 2015/09/26 218 MB 12.3.0.44
Java 8 Update 60 Oracle Corporation 2015/09/26 88.4 MB 8.0.600.27
LG United Mobile Driver LG Electronics 2012/09/12 2.2
LINE NHN Japan 2013/03/20 3.1.4.73
Media Go Sony 2014/12/07 148 MB 2.8.303
Media Go Network Downloader Sony 2014/09/28 1.33 MB 1.5.19.0
Media Go Video Playback Engine 2.12.105.06300 Sony 2015/03/26 21.0 MB 2.12.105.06300
MeoTV TAXAN 2013/09/03 4.95 MB 12.8.10
Microsoft .NET Framework 4.5.2 Microsoft Corporation 2015/09/26 38.8 MB 4.5.51209
Microsoft Office File Validation Add-In Microsoft Corporation 2014/05/15 10.9 MB 14.0.5130.5003
Microsoft Office Professional Edition 2003 Microsoft Corporation 2014/04/10 1.21 GB 11.0.8173.0
Microsoft Silverlight Microsoft Corporation 2015/08/13 348 MB 5.1.40728.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 2012/07/09 298 KB 8.0.61001
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 2012/06/27 788 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 2012/07/09 788 KB 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 2012/06/27 598 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 2012/06/27 596 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 2012/06/27 595 KB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 2012/07/09 600 KB 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Corporation 2012/07/14 11.0 MB 10.0.30319
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 Microsoft Corporation 2015/10/04 11.0.51106.1
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 2015/02/12 17.3 MB 11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Corporation 2014/09/28 17.1 MB 12.0.21005.1
MobileWiFi Huawei Technologies Co.,Ltd 2014/05/24 TOOL-ConnLaucher_WIN1.09.02.00
Moo0 HDD掃除機 1.16 2012/07/15
Mozilla Firefox 40.0.3 (x86 ja) Mozilla 2015/10/17 91.7 MB 40.0.3
Mozilla Maintenance Service Mozilla 2015/10/17 397 KB 40.0.3
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 2012/07/03 1.27 MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 2012/07/03 1.33 MB 4.20.9876.0
NVIDIA 3D Vision ドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
NVIDIA グラフィックスドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
Quickset64 Dell Inc. 2012/06/27 11.0.10
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 2012/06/27 6.0.1.6312
RemoteMedia CyberLink Corp. 2012/06/28 1.6.6622
Roxio Creator Starter Roxio 2012/06/28 1.63 GB 12.1.77.0
Shared C Run-time for x64 McAfee 2012/10/26 2.78 MB 10.0.0
SignalNow Express ストラテジー株式会社 2015/03/11 2.0.0.0
SignalNow Express ストラテジー株式会社 2012/07/03 5.08 MB 1.30.1
Skype Click to Call Microsoft Corporation 2015/10/15 13.2 MB 7.5.0.9082
Skype(TM) 6.20 Skype Technologies S.A. 2014/09/24 27.0 MB 6.20.104
Sony Media Library Earth 9.2.00 Sony Corporation 2015/03/27 49.5 MB 9.2.00.01271
Sony Mobile Update Engine Sony Mobile Communications Inc. 2015/07/26 2.15.10.201507101148
Sony PC Companion 2.10.275 Sony 2015/07/10 21.2 MB 2.10.275
Synaptics Pointing Device Driver Synaptics Incorporated 2012/06/28 46.4 MB 15.2.6.0
SyncUP Nero AG 2012/06/27 288 MB 10.2.16500
Windows Live Essentials Microsoft Corporation 2012/07/14 15.4.3555.0308
Windows Media Player Firefox Plugin Microsoft Corp 2012/09/30 296 KB 1.0.0.8
x-アプリ 6.0.01 Sony Corporation 2015/03/27 88.5 MB 10.0.01
Zinio Reader 4 Zinio LLC 2012/06/28 4.2.4164
インテル(R) PROSet/Wireless WiFi ソフトウェア Intel Corporation 2012/06/27 136 MB 14.03.0000
インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0 インテル 2012/06/27 2.1.23.0
カスペルスキーインターネットセキュリティ Kaspersky Lab 2015/10/05 15.0.2.396
ペタろう株式会社ants 2012/07/08 1.74 MB 5.30.2
リモート接続用の Windows Live Mesh ActiveX コントロール (日本語) Microsoft Corporation 2012/06/27 5.57 MB 15.4.5722.2
筆まめ Ver.14 販売元：株式会社クレオ　開発元：株式会社モーリン 2012/12/23 278 MB 14.00.0000
読取革命Lite パナソニックソリューションテクノロジー株式会社 2014/05/15 38.4 MB 1.15.0000

ばんぶー
MAIL
2015/10/17 (Sat) 23:30:25

返信フォームへ

まずはGIZMOの掃除から

こんばんは。
ここの管理人の悪代官です。
桃太郎侍様に退治されるのが嫌なので、美少女戦隊のキュ○ピーチ様にお仕置きされてます。
悪いの悪いの飛んで逝けーっっっ！（←アタマが？

説明とログを見せていただきました。
あなたもLaSuperbaですか。
今や当掲示板で、これの相談が来ない日はないほどになりましたね。

では慎重に調べていきましょう。

まず最初にお伝えしておきます。
見てのとおり現在相談者さん多数のため、相談受けてから皆さんに順番にレスできるまで、毎回1日かそれ以上かかる可能性もあるので、すみませんがご了承ください。

では以下の説明をよく見てから、順番に作業をお願いします。
既に準備した物もあるはずですが、一応説明を再度見ておいてください。

隠しファイルと拡張子を表示設定にしてください(やり方↓）
http://pasofaq.jp/windows/mycomputer/hiddenfile.htm
http://support.microsoft.com/kb/978449/ja

下記のツールをダウンロードして、基本の使い方を把握しておいてください。
ただし、配布サイトで他のアプリをダウンロードしろと勧めてくるような広告も出てきたらそれらは絶対にクリックしないでください。
「GeekUninstaller」（通称：GU）
説明ページ↓
http://www.gigafree.net/system/install/geekuninstaller.html
ダウンロード↓
http://www.geekuninstaller.com/download
「download free」をクリック、保存後、解凍してください。
片付ける時はフォルダごと手動で削除してください。

「CCleaner」（通称：CC）
説明↓
http://www.gigafree.net/system/clean/ccleaner.html
http://note.chiebukuro.yahoo.co.jp/detail/n178757
ダウンロード↓
http://www.piriform.com/ccleaner/download/standard
最新バージョンをダウンロードしてください。なお、インストール時におまけのアプリも勧めてくることがありますが、それらはチェック外してインストールは避けてください。
片付けるときはアンインストールしてください。

ここで重要な注意です。
CCは本来は高い性能を持つメンテナンスソフトですが、間違った使い方すると
【Windowsにダメージを与えてしまうおそれもある】
ので、ここでは解析ツールとしてのみ使います。
説明をしっかり読んで、自分が指示した以外の操作はしないように。

そして下記ページは作業開始前に必ず熟読して、必要な場合が出たらそれに沿って対処してください。この対処が必要な事例が増えています。
http://note.chiebukuro.yahoo.co.jp/detail/n335704

準備できたら作業開始です。
なお、このあとの作業で探しても見つからないものはスルーして進めていいですが、指示した対象外の物は絶対にいじらないようによく見て作業してください。

また、作業のうえで削除指示するものもあるはずですが、ご自身で必要として入れたものがあればそれの削除は保留して、次のレスでその旨を教えてください。

少なくとも下記のアプリは旧バージョンです。
Moo0 HDD掃除機 1.16 2012/07/15

Mozilla Firefox 40.0.3 (x86 ja) Mozilla 2015/10/17 91.7 MB 40.0.3

Skype(TM) 6.20 Skype Technologies S.A. 2014/09/24 27.0 MB 6.20.104

各種アプリの更新を怠っただけでも、脆弱性を悪用されて深刻な感染はあっさり起きます。
使うなら最新版に更新してください。使わないアプリならアンインストールが安全です。
他にも旧バージョンないか調べて、あれば同様に更新するか、アンインストールしてください。

ここで再度GUを使って、下記をアンインストールしてください。
GIZMO ants Inc. 2012/07/08 8.02 MB 3.21.4000

次にWindowsの標準機能である「システムの復元」での復元ポイントをひとつ、手動で作成しておいてください。
これはこの後の作業で、間違って対象外のものをいじってしまうとそれだけでWindowsに深刻な不具合を起こすこともあるので、万一の際に復元可能にしておくためです。
http://windows.microsoft.com/ja-jp/windows7/create-a-restore-point

今度はPCをセーフモードで起動してください（やり方↓）
http://www.pc-master.jp/sousa/s-safemode.html

セーフモードでGUを使って、下記をアンインストールしてください。
Adobe Reader X (10.1.16) MUI Adobe Systems Incorporated 2015/10/14 481 MB 10.1.16

続いてセーフモードのままでスタートメニューの「アクセサリ」→「システムツール」から「ディスククリーンアップ」を起動してください。
起動したら対象ドライブでCドライブを選択してスキャンして、表示された中の「ダウンロードされたプログラムファイル」「インターネット一時ファイル」「一時ファイル」の項目だけチェックを入れてから「OK」「ファイルの削除」を押してください。
これを実行すると選択した部分のゴミファイルが掃除されます。

これを実行することで作業時にスキャンで検出される無駄なゴミファイルも減るのでその分かなり時間や解析も楽になるのです。
「ごみ箱」など他の項目にチェックしないのは、間違って正常なファイルを削除しないためと、もし正常なファイルを削除してごみ箱に入れても戻せるようにするための措置です。

HJTを起動させ、スキャンを行ってください。
スキャン結果が表示されましたら、以下の項目にチェックを入れてください。
ただし、特にHJTでの作業は一歩間違えれば簡単にPCが起動しなくなるため、こちらが指示した以外のものは絶対にチェックを入れないでください。
O4 - HKLM\..\Run: [GIZMO2] "C:\Program Files (x86)\GIZMO2\GIZMO.exe" -BootProcess

O23 - Service: McAfee Application Installer Cleanup (0323541431150564) (0323541431150564mcinstcleanup) - Unknown owner - C:\Users\banzabu6\AppData\Local\Temp\032354~1.EXE (file missing)

必要な項目すべてにチェックが入りましたら、Fix checkedをクリックしてください。
探しても見つからないものはスルーして進めていいです。

ここでPCを通常モードで再起動してから、今度はCCを起動してください。
起動したら、「ツール」→」「スタートアップ」→「Windows」タブを開いてください。
そこで右下の「テキストとして保存」を押すと、表示の内容がログとして保存できるので、ログをデスクトップにでも保存しておいてください。

続いて「InternetExplorer」タブ以下の各タブも順番に開いて、そのログもとっておいてください。

CCの各ログをとったらCCは終了してください。

このあとブラウザを起動して、数時間ほどPC状態を様子見したあと、あらたにHJTとCCでのインストール情報ログを取り直してください。

取り直した両ログと、CCの各ログを返信に貼って、状態報告とともにレスください。
それらを見てから続きの作業を指示します。

悪代官
2015/10/18 (Sun) 20:57:50

返信フォームへ

Re: LaSuperba　状況報告

お世話になります。
ご指示通り出来ているか心配ですが、ログを送ります。
因みに動作検証のためFirefoxの最新版をインストールしました。
よろしくお願いします。

HJT
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 23:12:31, on 2015/10/18
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18057)

FIREFOX: 41.0.2 (x86 ja)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
C:\Users\banzabu6\Downloads\HijackThis(1).exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Windows Live ID サインインヘルパー - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ContentBlockerBrowserHelperObject - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Safe Money Plugin - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSOIEAddonBHO - {DA5BCE70-D057-4D63-943D-5F3927EC59F1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
O4 - HKLM\..\Run: [RemoteControl9] "c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
O4 - HKLM\..\Run: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [Mobile Partner] C:\Program Files (x86)\MobileWiFi\MobileWiFi
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - Startup: インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
O4 - Global Startup: SignalNowExpress.lnk = ?
O9 - Extra button: セキュリティキーボード - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: リサーチ - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O20 - Winlogon Notify: FastAccess - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll
O23 - Service: McAfee Application Installer Cleanup (0323541431150564) (0323541431150564mcinstcleanup) - Unknown owner - C:\Users\banzabu6\AppData\Local\Temp\032354~1.EXE (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: IntelR CentrinoR Wireless BluetoothR 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus Service 15.0.2 (AVP15.0.2) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour サービス (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: CLHNService3 - Unknown owner - C:\Program Files (x86)\CyberLink\RemoteMedia\Kernel\DMP\CLHNService.exe
O23 - Service: CyberLink Product - 2012/06/27 14:28:08 (CLKMSVC10_9EC60124) - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: CyberLink Media Server Monitor Service - Unknown owner - C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSMonitorService.exe
O23 - Service: CyberLink Media Server Service - CyberLink - C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FAService - Sensible Vision - C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update サービス (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update サービス (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HWDeviceService64.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod サービス (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Morrin Thumbnail Synchronized Service 5 (MrnTS_Sync5) - 株式会社モーリン - C:\Program Files (x86)\Common Files\Creoapp\MrnTS_Sync5.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Dell DataSafe Online (NOBU) - Dell, Inc. - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\OpenMG\PACSPTISVR.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SonicStage Back-End Service2 - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeService2.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15541 bytes

-----------------------------------------
CC
2007 Office system 互換機能パック Microsoft Corporation 2015/10/14 361 MB 12.0.6612.1000
AccelerometerP11 STMicroelectronics 2012/06/27 2.00.11.22
Adobe AIR Adobe Systems Incorporated 2012/06/28 2.6.0.19120
Adobe Flash Player 19 ActiveX Adobe Systems Incorporated 2015/10/17 3.43 MB 19.0.0.226
Adobe Flash Player 19 NPAPI Adobe Systems Incorporated 2015/10/17 3.81 MB 19.0.0.226
Adobe Reader X (10.1.16) MUI
Advanced Audio FX Engine Creative Technology Ltd 2012/06/28 1.12.05
Apple Application Support（32 ビット） Apple Inc. 2015/09/26 114 MB 4.0.3
Apple Application Support（64 ビット） Apple Inc. 2015/09/26 121 MB 4.0.3
Apple Mobile Device Support Apple Inc. 2015/09/26 28.0 MB 9.0.0.26
Apple Software Update Apple Inc. 2015/09/26 2.40 MB 2.1.4.131
Bonjour Apple Inc. 2015/09/26 2.01 MB 3.1.0.1
Canon Easy-WebPrint EX Canon Inc. 2014/05/15 1.4.1.0
Canon IJ Network Scan Utility 2012/08/25
Canon IJ Network Scanner Selector EX Canon Inc. 2014/05/15
Canon IJ Network Tool Canon Inc. 2014/05/15 3.3.0
Canon IJ Scan Utility Canon Inc. 2014/05/15
Canon MG7100 series MP Drivers Canon Inc. 2014/05/15 1.00
Canon MG7100 series On-screen Manual Canon Inc. 2014/05/15 7.6.1
Canon MP970 series 2012/08/25
Canon My Image Garden Canon Inc. 2014/05/15 2.0.1
Canon My Image Garden Design Files Canon Inc. 2014/05/15 2.0.0
Canon Quick Menu Canon Inc. 2014/05/15 2.2.1
Canon マイプリンタ Canon Inc. 2014/05/15 3.1.0
CanoScan LiDE 90 2012/08/25
CCleaner Piriform 2015/10/17 5.10
CyberLink PowerDVD 9.6 CyberLink Corp. 2012/06/27 9.6.1.4827
Dell DataSafe Local Backup Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Local Backup - Support Software Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Online Dell 2012/06/27 6.46 MB 2.1.19634
Dell Getting Started Guide Dell Inc. 2012/06/27 1.00.0000
Dell PhotoStage ArcSoft 2012/06/27 165 MB 1.5.0.130
Dell Stage Fingertapps 2012/06/27 1.7.209.0
Dell Stage Remote ArcSoft 2012/06/27 80.8 MB 2.0.0.43
Dell VideoStage CyberLink Corp. 2012/06/27 1.3.0.2513
Dell Webcam Central Creative Technology Ltd 2012/06/28 2.00.44
Dell ミュージックステージ Fingertapps 2012/06/27 1.6.225.0
FastAccess Sensible Vision 2015/10/04 152 MB 4.1.224.1
Google Chrome Google Inc. 2014/05/31 46.0.2490.71
iCloud Apple Inc. 2015/05/09 92.9 MB 4.1.1.53
inSSIDer 2.0 MetaGeek 2012/07/08 3.55 MB 2.0.7
Intel(R) Control Center Intel Corporation 1.2.1.1007
Intel(R) Management Engine Components Intel Corporation 7.0.0.1144
Intel(R) Processor Graphics Intel Corporation 8.15.10.2455
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology Intel Corporation 2012/06/27 90.1 MB 1.2.1.0608
Intel(R) WiDi Intel Corporation 2012/06/27 139 MB 2.1.39.0
iTunes Apple Inc. 2015/09/26 218 MB 12.3.0.44
Java 8 Update 60 Oracle Corporation 2015/09/26 88.4 MB 8.0.600.27
LG United Mobile Driver LG Electronics 2012/09/12 2.2
LINE NHN Japan 2013/03/20 3.1.4.73
Media Go Sony 2014/12/07 148 MB 2.8.303
Media Go Network Downloader Sony 2014/09/28 1.33 MB 1.5.19.0
Media Go Video Playback Engine 2.12.105.06300 Sony 2015/03/26 21.0 MB 2.12.105.06300
MeoTV TAXAN 2013/09/03 4.95 MB 12.8.10
Microsoft .NET Framework 4.5.2 Microsoft Corporation 2015/09/26 38.8 MB 4.5.51209
Microsoft Office File Validation Add-In Microsoft Corporation 2014/05/15 10.9 MB 14.0.5130.5003
Microsoft Office Professional Edition 2003 Microsoft Corporation 2014/04/10 1.21 GB 11.0.8173.0
Microsoft Silverlight Microsoft Corporation 2015/08/13 348 MB 5.1.40728.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 2012/07/09 298 KB 8.0.61001
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 2012/06/27 788 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 2012/07/09 788 KB 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 2012/06/27 598 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 2012/06/27 596 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 2012/06/27 595 KB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 2012/07/09 600 KB 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Corporation 2012/07/14 11.0 MB 10.0.30319
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 Microsoft Corporation 2015/10/04 11.0.51106.1
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 2015/02/12 17.3 MB 11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Corporation 2014/09/28 17.1 MB 12.0.21005.1
MobileWiFi Huawei Technologies Co.,Ltd 2014/05/24 TOOL-ConnLaucher_WIN1.09.02.00
Mozilla Firefox 41.0.2 (x86 ja) Mozilla 2015/10/18 92.7 MB 41.0.2
Mozilla Maintenance Service Mozilla 2015/10/18 250 KB 41.0.2
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 2012/07/03 1.27 MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 2012/07/03 1.33 MB 4.20.9876.0
NVIDIA 3D Vision ドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
NVIDIA グラフィックスドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
Quickset64 Dell Inc. 2012/06/27 11.0.10
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 2012/06/27 6.0.1.6312
RemoteMedia CyberLink Corp. 2012/06/28 1.6.6622
Roxio Creator Starter Roxio 2012/06/28 1.63 GB 12.1.77.0
Shared C Run-time for x64 McAfee 2012/10/26 2.78 MB 10.0.0
SignalNow Express ストラテジー株式会社 2012/07/03 5.08 MB 1.30.1
SignalNow Express ストラテジー株式会社 2015/03/11 2.0.0.0
Skype Click to Call Microsoft Corporation 2015/10/15 13.2 MB 7.5.0.9082
Sony Media Library Earth 9.2.00 Sony Corporation 2015/03/27 49.5 MB 9.2.00.01271
Sony Mobile Update Engine Sony Mobile Communications Inc. 2015/07/26 2.15.10.201507101148
Sony PC Companion 2.10.275 Sony 2015/07/10 21.2 MB 2.10.275
Synaptics Pointing Device Driver Synaptics Incorporated 2012/06/28 46.4 MB 15.2.6.0
SyncUP Nero AG 2012/06/27 288 MB 10.2.16500
Windows Live Essentials Microsoft Corporation 2012/07/14 15.4.3555.0308
Windows Media Player Firefox Plugin Microsoft Corp 2012/09/30 296 KB 1.0.0.8
x-アプリ 6.0.01 Sony Corporation 2015/03/27 88.5 MB 10.0.01
Zinio Reader 4 Zinio LLC 2012/06/28 4.2.4164
インテル(R) PROSet/Wireless WiFi ソフトウェア Intel Corporation 2012/06/27 136 MB 14.03.0000
インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0 インテル 2012/06/27 2.1.23.0
カスペルスキーインターネットセキュリティ Kaspersky Lab 2015/10/05 15.0.2.396
ペタろう株式会社ants 2012/07/08 1.74 MB 5.30.2
リモート接続用の Windows Live Mesh ActiveX コントロール (日本語) Microsoft Corporation 2012/06/27 5.57 MB 15.4.5722.2
筆まめ Ver.14 販売元：株式会社クレオ　開発元：株式会社モーリン 2012/12/23 278 MB 14.00.0000
読取革命Lite パナソニックソリューションテクノロジー株式会社 2014/05/15 38.4 MB 1.15.0000

ばんぶー
2015/10/18 (Sun) 23:29:20

返信フォームへ

Re: LaSuperbaの状況報告続き

ccのタブごとのログです。

---------------------------------------------------------------
有効 HKCU:Run CCleaner Monitoring Piriform Ltd "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
有効 HKCU:Run iCloudDrive Apple Inc. C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
有効 HKCU:Run iCloudServices Apple Inc. C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
有効 HKCU:Run Mobile Partner C:\Program Files (x86)\MobileWiFi\MobileWiFi
有効 HKCU:Run Sidebar Microsoft Corporation C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
有効 HKLM:Run AccuWeatherWidget Unlimited Realities "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
有効 HKLM:Run APSDaemon Apple Inc. "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
有効 HKLM:Run BDRegion cyberlink c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
有効 HKLM:Run BTMTrayAgent Microsoft Corporation rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
有効 HKLM:Run CanonQuickMenu CANON INC. C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
有効 HKLM:Run Dell DataSafe Online Dell, Inc. C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
有効 HKLM:Run Dell Webcam Central Creative Technology Ltd "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
有効 HKLM:Run DellStage Unlimited Realities "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup
有効 HKLM:Run Desktop Disc Tool Sonic Solutions "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
有効 HKLM:Run FAStartup
有効 HKLM:Run FATrayAlert Sensible Vision C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
有効 HKLM:Run FreeFallProtection STMicroelectronics C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
有効 HKLM:Run HotKeysCmds Intel Corporation C:\Windows\system32\hkcmd.exe
有効 HKLM:Run IgfxTray Intel Corporation C:\Windows\system32\igfxtray.exe
有効 HKLM:Run IJNetworkScannerSelectorEX CANON INC. C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
有効 HKLM:Run IJNetworkScanUtility CANON INC. C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
有効 HKLM:Run IntelPAN Intel(R) Corporation "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
有効 HKLM:Run IntelTBRunOnce Microsoft Corporation wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
有効 HKLM:Run iTunesHelper Apple Inc. "C:\Program Files\iTunes\iTunesHelper.exe"
有効 HKLM:Run mcui_exe "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
有効 HKLM:Run NeroLauncher Nero AG C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
有効 HKLM:Run NVHotkey Microsoft Corporation rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
有効 HKLM:Run PDVD9LanguageShortcut CyberLink Corp. "c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
有効 HKLM:Run Persistence Intel Corporation C:\Windows\system32\igfxpers.exe
有効 HKLM:Run QuickSet Dell Inc. c:\Program Files\Dell\QuickSet\QuickSet.exe
有効 HKLM:Run RemoteControl9 CyberLink Corp. "c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
有効 HKLM:Run RoxWatchTray Sonic Solutions "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
有効 HKLM:Run RtHDVBg Realtek Semiconductor C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
有効 HKLM:Run RTHDVCPL Realtek Semiconductor C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
有効 HKLM:Run Stage Remote ArcSoft, Inc. C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet
有効 HKLM:Run SunJavaUpdateSched Oracle Corporation "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
有効 HKLM:Run SynTPEnh Synaptics Incorporated %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
有効 Startup Common SignalNowExpress.lnk ストラテジー株式会社 C:\Program Files (x86)\ストラテジー株式会社\SignalNow Express\SignalNowExpress.exe
有効 Startup User インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0.lnk Intel® Corporation C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe

-------------------------------------------------------------
有効 Extension Skype Click to Call settings Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
有効 Extension Skype Click to Call settings Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
有効 Extension リサーチ Microsoft Corporation C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
無効 Helper Canon Easy-WebPrint EX BHO CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
無効 Helper Canon Easy-WebPrint EX BHO CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll
有効 Helper Content Blocker Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
有効 Helper Content Blocker Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll
有効 Helper Face recognition web login for FastAccess Sensible Vision C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
有効 Helper Face recognition web login for FastAccess Sensible Vision C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll
有効 Helper Java(tm) Plug-In 2 SSV Helper Oracle Corporation C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
有効 Helper Java(tm) Plug-In SSV Helper Oracle Corporation C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
有効 Helper Safe Money Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
有効 Helper Safe Money Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll
無効 Helper Skype Click to Call for Internet Explorer Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
無効 Helper Skype Click to Call for Internet Explorer Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
有効 Helper Virtual Keyboard Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
有効 Helper Virtual Keyboard Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll
有効 Helper Windows Live ID Sign-in Helper Microsoft Corp. C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
有効 Helper Windows Live ID サインインヘルパー Microsoft Corp. C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
無効 Toolbar Canon Easy-WebPrint EX CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
無効 Toolbar Canon Easy-WebPrint EX CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll

-----------------------------------------------------------------------
有効 Extension 4.5.1.379 default C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com
有効 Extension Adblock Plus 2.6.11 Wladimir Palant default C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
有効 Extension Fast Dial 4.12.1-signed telega default C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\fastdial@telega.phpnet.us
無効 Extension FastAccess Web Login 1.87 Sensible Vision default C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso
有効 Extension Skype Click to Call 7.5.0.9082 Microsoft Corporation default C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi
有効 Extension 楽天ツールバー 1.300.436.6 讌ｽ螟ｩ譬ｪ蠑丈ｼ夂､ｾ default C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi
有効 Plugin Adobe Acrobat 10.1.16.13 default C:\Program Files (x86)\Adobe\Reader 10.0\Reader\browser\nppdf32.dll
有効 Plugin CANON iMAGE GATEWAY Album Plugin Utility for IJ 5.0.0.0 CANON INC. default C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
有効 Plugin Content Blocker KAV 4.5.1.379 Kaspersky Lab default C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
有効 Plugin Fast Access SSO 1.0.0.85 default C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll
有効 Plugin Google Update 1.3.28.15 Google Inc. default C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
有効 Plugin iTunes Application Detector 1.0.1.1 Apple Inc. default C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
有効 Plugin Java Deployment Toolkit 8.0.600.27 11.60.2.27 Oracle Corporation default C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npdeployJava1.dll
有効 Plugin Java(TM) Platform SE 8 U60 11.60.2.27 Oracle Corporation default C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll
有効 Plugin NVIDIA 3D Vision 7.17.12.8577 NVIDIA Corporation default C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
有効 Plugin NVIDIA 3D VISION 7.17.12.8577 NVIDIA Corporation default C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
有効 Plugin Online Banking KAV 4.5.1.379 Kaspersky Lab default C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
有効 Plugin OpenH264 Video Codec 1.4 default C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\gmp-gmpopenh264\1.4\gmpopenh264.dll
有効 Plugin Primetime Content Decryption Module provided by Adobe Systems, Incorporated 13 Adobe Systems Inc default C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\gmp-eme-adobe\13\eme-adobe.dll
有効 Plugin Shockwave Flash 16.0.0.296 Adobe Systems Incorporated default C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll
有効 Plugin Shockwave Flash 19.0.0.207 default C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_207.dll
有効 Plugin Shockwave Flash 19.0.0.226 Adobe Systems Incorporated default C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll
有効 Plugin Silverlight Plug-In 5.1.40728.0 Microsoft Corporation default C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll
有効 Plugin Virtual Keyboard KAV 4.5.1.379 Kaspersky Lab default C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll

------------------------------------------------------------------
有効 App Gmail 8.1 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0
有効 App Google Search 0.0.0.30 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0
有効 App Google ドライブ 14.0 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0
有効 App YouTube 4.2.8 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0
有効 Extension Google オフラインドキュメント 1.0 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.0_0
有効 Extension Google ドキュメント 0.9 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0
有効 Extension カスペルスキープラグイン 4.0.9.130 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0

--------------------------------------------------------------------
有効 Task Adobe Flash Player Updater Adobe Systems Incorporated C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
有効 Task CCleanerSkipUAC Piriform Ltd "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
有効 Task GoogleUpdateTaskMachineCore Google Inc. C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
有効 Task GoogleUpdateTaskMachineUA Google Inc. C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
有効 Task {0F330042-CC9F-4E7F-A413-F9F755F7A650} Microsoft Corporation C:\Windows\system32\pcalua.exe -a C:\Users\banzabu6\Downloads\EX-S600_102.exe -d "C:\Program Files (x86)\Mozilla Firefox"
有効 Task {D9656429-8EB7-4CCD-B31B-E5466FE07E8B} Microsoft Corporation C:\Windows\system32\pcalua.exe -a C:\Users\banzabu6\Downloads\mp970swin64102ej.exe -d C:\Users\banzabu6\Downloads

-----------------------------------------------------------------------------------------
有効 Directory Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 Drive Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 File BTMSentToExt Intel Corporation C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll
有効 File Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 File PhotoStreamsExt Apple Inc. C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
有効 File Roxio Burn TODO: <Company name> C:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll
有効 Folder Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll

ばんぶー
MAIL
2015/10/19 (Mon) 06:36:37

返信フォームへ

次はMBAMでスキャンを

作業と報告、ご苦労様です。
続きのログも見せてもらいましたが、現在の状態としてはどうでしょうか？
いくらか沈静化したか、それとも同じ異常が続いているかを次回レスで教えてください。

ではまた説明に沿って続きの作業をお願いします。

今度は下記のツールを準備してください。
「AdwCleaner」（通称：AC）
http://www.bleepingcomputer.com/download/adwcleaner/dl/125/
ファイル直リンです。アクセスしてファイルをデスクトップにでも保存しておいてください。
片付けるときは起動後に「uninstall」ボタンを押せば自動で削除されます。
使い方は下記サイト様に詳しい説明があるのでサンショウウオ↓
http://www.japan-secure.com/entry/adwcleaner.html

Malwarebytes' Anti-Malware（通称・MBAM）
本家サイト
http://www.malwarebytes.org/

ですが、MBAMは現在安定性や動作でかなり難が出ており、普通に使っても正常にスキャンができないバグまで多発中です。
そのため本家サイトから最新版のダウンロードせず、ここではあえて旧バージョンで作業します。

旧バージョンの説明サイト↓
http://www.japan-secure.com/entry/blog-entry-7.html

以下のURLからMBAMの旧バージョンをダウンロードしてください。
http://www.oldapps.com/malwarebytes.php?old_malwarebytes=12090?download
ファイル直リンです。保存しておいてください。

注）インストール時に日本語でインストールすると文字化けすることがあります。英語でインストール後に日本語化してください。
MBAM起動して「Settings」タブ→「Language」→「Japanese」で日本語化できます。

準備できたらMBAMをインストールとアップデートまでしておいてください。
ただし、ここではまだスキャンはしないように。
なお、ここでMBAMの更新で「プログラム」自体は更新せず、定義だけ更新しておいてください。
プログラム本体を更新すると、バグ多発中の最新版になってしまうので、せっかく旧バージョンでインストールした意味がなくなります。

続いてここで一度ACを起動してください。
起動するとまず定義の更新が行われるはずなので、更新だけしてから、それができたらACは一旦終了してください。
ここではスキャンもしなくていいです。

両ツールのアップデートができたらPCをセーフモードで再起動してから、ディスククリーンアップを使ってゴミファイルの掃除してください。

続いてPCをセーフモード起動してから、先に一度起動したACを再度起動してください。
起動したら今度は「スキャン」したあと、そのスキャン終了後に検出されたものがあったら「除去」を押してください。
表示された画面で「はい」を選択すると処置開始されます。

処置完了したらそこでPCを通常モードで再起動してください。

再起動後にACのあらたなログが出るので、それをデスクトップにでも保存しておいてください。
ですが、もし作業後にログが出ないorわからない場合はマイコンピュータのCドライブを開くとその直下に以下のような名前のファイルが作成されているので、それがACのログです。
>AdwCleaner[英数字].txt
同じような名前のログが複数ある時は、作成日時が作業処置時のファイルが対象のログです。

ACでの作業ができたら次はMBAMの作業です。
セーフモードのままMBAM起動してスキャンしてください。
MBAM起動したら「スキャナー」タブから「フルスキャン」です。
対象ドライブはCを含めて全ドライブを選択してください。
ですが、もし「フルスキャン」というボタンが表示されない場合はMBAMを最新版に更新してしまった可能性があるので、この時は「カスタムスキャン」を選択してください。
この操作が最新版MBAMでのフルスキャンにあたります。
スキャン対象は全ドライブを選択（チェック）してください。時間はかかりますができるだけ細かくスキャンするためです。
順番はどちらからでもいいですが、なにか検出されたらそれを選択して「remove」（隔離）したあと、再起動を促す表示が出たらそこで一度PCを再起動してください。
もし再起動表示が出ないときは手動で再起動してください。

またMBAMスキャン終了後、「詳細を表示」を押すとその結果が表示されるはずなので、そこで「ログを保存」を押すとそのログが保存可能になります。
そのログをデスクトップにでも保存しておいてください。
このログ確認が特に重要なので、忘れないようにお願いします。

このあとしばらくPC状態を様子見後、作業後に保存したACとMBAMのログを返信に貼り付けて、それを状態報告とともにレスで見せてください

悪代官
2015/10/19 (Mon) 20:43:07

返信フォームへ

Re: LaSuperbaの状況報告続き

お世話さまです。
状況に変化は表面上はありません。
Firefoxのタブがリロードを繰り返しています。
また、再起動時のFastAccesにもフェイクらしい
動きがあります。

ログは以下の通りです。
よろしくお願い致します。

AC
# AdwCleaner v5.014 - ログファイルの作成日 19/10/2015 作成時間 21:57:24
# 更新日 18/10/2015 作成元 Xplode
# データベース : 2015-10-18.5 [ローカル]
# オペレーティングシステム : Windows 7 Home Premium Service Pack 1 (x64)
# ユーザー名 : banzabu6 - BANZABU6-PC
# 実行場所 : C:\Users\banzabu6\Downloads\AdwCleaner.exe
# オプション : 削除
# サポート : http://toolslib.net/forum

***** [ サービス ] *****

***** [ フォルダ ] *****

***** [ ファイル ] *****

***** [ DLLs ] *****

***** [ ショートカット ] *****

***** [ スケジュールタスク ] *****

***** [ レジストリ ] *****

***** [ Webブラウザ ] *****

*************************

:: Winsock設定を初期化しました

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [701 バイト] ##########

---------------------------------------------------------

MBAM
Malwarebytes Anti-Malware (試用) 1.75.0.1300
www.malwarebytes.org

定義バージョン： v2015.10.19.02

Windows 7 Service Pack 1 x64 NTFS (セーフモード)
Internet Explorer 11.0.9600.18059
banzabu6 :: BANZABU6-PC [管理者]

リアルタイム保護: 無効

2015/10/19 22:09:10
MBAM-log-2015-10-19 (23-44-04).txt

スキャンタイプ：フルスキャン (C:\|D:\|E:\|G:\|)
有効なスキャン領域：メモリ | スタートアップ | レジストリ | ファイルシステム | ヒューリスティック/追加アイテムのスキャン　 | ヒューリスティック/Shuriken　エンジンを使用してスキャン　 | 不審なプログラム　（PUP） | 不審な変更　（PUM）
無効なスキャン領域: ピア・ツー・ピアプログラム（P2P）
スキャンしたアイテム数: 625017
経過時間： 1 時間, 25 分, 39 秒

メモリプロセスの検出: 0
(悪意のあるアイテムは検出されていません。)

メモリモジュールの検出: 0
(悪意のあるアイテムは検出されていません。)

レジストリキーの検出: 5
HKCR\CLSID\{C0AA878E-97A5-44df-B7EF-2E732F7B2FEC} (Trojan.FakeMS) -> 何の措置も取られませんでした。
HKCR\IMEPad.HWR.TCIME7 (Trojan.FakeMS) -> 何の措置も取られませんでした。
HKCR\IMEPad.HWR.TCIME (Trojan.FakeMS) -> 何の措置も取られませんでした。
HKLM\SOFTWARE\Wow6432Node\daugava (PUP.Optional.Shopperz.BrwsrFlsh) -> 何の措置も取られませんでした。
HKLM\Software\daugava (PUP.Optional.Shopperz.BrwsrFlsh) -> 何の措置も取られませんでした。

レジストリ値の検出: 0
(悪意のあるアイテムは検出されていません。)

レジストリデータ項目の検出: 0
(悪意のあるアイテムは検出されていません。)

フォルダの検出: 3
C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A} (PUP.Optional.VBates) -> 何の措置も取られませんでした。
C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4} (PUP.Optional.VBates) -> 何の措置も取られませんでした。
C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5 (PUP.Optional.VBates) -> 何の措置も取られませんでした。

ファイルの検出: 6
C:\$Recycle.Bin\S-1-5-21-1013665564-3434395393-1885991050-1001\$REEI3HJ.exe (PUP.Optional.FilesFrog) -> 何の措置も取られませんでした。
C:\AdwCleaner\Quarantine\C\Program Files\Web Assistant\ExtensionUpdaterService.exe.vir (PUP.Optional.SweetPacks) -> 何の措置も取られませんでした。
C:\Windows\System32\IME\IMETC10\applets\IMTCCAC.dll (Trojan.FakeMS) -> 何の措置も取られませんでした。
C:\Windows\winsxs\amd64_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.1.7600.16385_none_571e064f15300c7b\IMTCCAC.dll (Trojan.FakeMS) -> 何の措置も取られませんでした。
C:\Windows\winsxs\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.1.7600.16385_none_faff6acb5cd29b45\IMTCCAC.dll (Trojan.FakeMS) -> 何の措置も取られませんでした。
C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\config.js (PUP.Optional.VBates) -> 何の措置も取られませんでした。

(終)

ばんぶー
MAIL
2015/10/20 (Tue) 00:02:02

返信フォームへ

ACログが妙にきれいですが…

作業と報告、ご苦労様です。

>状況に変化は表面上はありません。
>Firefoxのタブがリロードを繰り返しています。
>また、再起動時のFastAccesにもフェイクらしい
>動きがあります。

はい、ログも見せていただきました。
MBAMではいくつか検出がありましたが、ACのほうで何も検出ないのは珍しいですね？
とりあえずMBAMで検出されたものは全部隔離処置しておいていいです。

では異常も続いているので、また次の解析にかかりましょう。

今度は以下のツールを準備してください。
OTL(OldTimer Listit)
「Download」ボタンからDLしたら保存しておいてください。
http://oldtimer.geekstogo.com/OTL.exe
片付けるときは起動後に「Cleanup」ボタンを押せば自動で削除されます。

他のプログラムを起動しない状態でOTLを起動してください。
起動したら、ウィンドウの上の方にある「Scan All Users」にチェックを入れ、以下のコマンドを「Custom Scan/Fixes」にコピペしてください。

SHOWHIDDEN
%windir%\tasks\*.job
DRIVES
BASESERVICES
%SYSTEMDRIVE%\*.exe
ACTIVEX
CREATERESTOREPOINT

その後、左上の「Run Scan」を押すとスキャン開始されます。
スキャン開始後、PC環境にもよりますが数分ほどすると、「OTL.txt」と「Extras.txt」がOTL.exeと同じ場所に作成されるはずなので、この2つのファイルをデスクトップあたりに保存しておいてください。
なお、Extras.txtは出ないこともありますが、その場合はOTL.txtだけでもいいです。

このあとOTLログを丸ごと返信に貼り付けてレスで見せてください。
ただしOTLログはかなり長くなるため、一度に送信してもfc2の文字数制限で途切れます。
なのでログも適当なところで分割して、複数回に分けてレス送信してください。

OTLでスキャンしただけでは何も変化は起きません。
この結果を見て、検出されたものを次回以降の作業で処置することになるはずです

悪代官
2015/10/20 (Tue) 20:39:27

返信フォームへ

Re: LaSuperbaの件

長期出張のため作業ができずご報告が遅れ
大変失礼致しました。今後も引き続きご指導の程
よろしくお願い致します。

早速ですが、ログを送りますのでご診断お願い致します。

OLT-1

OTL logfile created on: 2015/10/31 17:34:36 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\banzabu6\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18059)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

7.90 Gb Total Physical Memory | 4.28 Gb Available Physical Memory | 54.15% Memory free
15.79 Gb Paging File | 11.56 Gb Available in Paging File | 73.21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 347.72 Gb Total Space | 149.91 Gb Free Space | 43.11% Space Free | Partition Type: NTFS
Drive E: | 331.28 Gb Total Space | 272.85 Gb Free Space | 82.36% Space Free | Partition Type: NTFS
Drive G: | 931.51 Gb Total Space | 554.33 Gb Free Space | 59.51% Space Free | Partition Type: NTFS

Computer Name: BANZABU6-PC | User Name: banzabu6 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2015/10/31 17:32:27 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\banzabu6\Downloads\OTL.exe
PRC - [2015/10/31 17:31:14 | 000,997,704 | ---- | M] (Google Inc.) -- C:\Windows\Temp\CR_028D7.tmp\setup.exe
PRC - [2015/10/23 02:46:00 | 000,939,088 | ---- | M] () -- C:\Program Files (x86)\Google\Update\Install\{9085D750-7017-48F8-A0A1-A18A5978B265}\46.0.2490.80_46.0.2490.71_chrome_updater.exe
PRC - [2015/10/17 22:52:53 | 003,426,504 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_226.exe
PRC - [2015/10/15 10:14:22 | 000,377,000 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2015/10/12 09:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2015/10/12 09:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2015/09/23 16:47:38 | 000,060,688 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
PRC - [2015/09/14 09:25:38 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2015/08/08 11:52:22 | 009,579,752 | ---- | M] (Sensible Vision ) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
PRC - [2015/08/08 11:52:22 | 000,095,464 | ---- | M] (Sensible Vision ) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
PRC - [2015/08/08 11:52:06 | 002,943,208 | ---- | M] (Sensible Vision ) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
PRC - [2015/08/08 11:38:04 | 004,358,888 | ---- | M] () -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAAppMonOT.exe
PRC - [2015/08/08 11:38:00 | 000,633,576 | ---- | M] (Sensible Vision ) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAsenmon.exe
PRC - [2015/08/04 12:47:08 | 000,923,696 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2015/06/22 22:22:29 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe
PRC - [2015/06/22 22:22:29 | 000,192,768 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe
PRC - [2015/04/26 14:02:14 | 000,043,816 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
PRC - [2015/04/26 14:01:50 | 000,043,816 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/02/19 16:38:58 | 000,453,736 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
PRC - [2012/03/11 07:55:02 | 000,150,312 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
PRC - [2012/02/17 02:49:44 | 001,695,040 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
PRC - [2012/01/28 06:30:16 | 000,465,216 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
PRC - [2012/01/27 11:49:34 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
PRC - [2012/01/27 11:47:36 | 004,293,952 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
PRC - [2011/12/17 09:17:48 | 000,075,048 | ---- | M] (cyberlink) -- C:\Program Files (x86)\CyberLink\Shared files\brs.exe
PRC - [2011/11/25 16:32:36 | 000,687,400 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2011/11/04 22:19:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/11/04 03:24:06 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/10/19 01:50:10 | 001,001,808 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
PRC - [2011/10/19 01:50:04 | 001,354,064 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
PRC - [2011/10/19 01:49:52 | 000,936,272 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
PRC - [2011/10/19 01:49:48 | 000,846,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
PRC - [2011/06/29 22:52:54 | 000,474,176 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
PRC - [2011/06/28 09:26:30 | 002,022,976 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
PRC - [2011/04/14 00:39:14 | 000,503,942 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2011/03/15 00:27:28 | 000,236,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
PRC - [2010/12/21 08:24:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010/12/21 08:24:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010/12/18 00:25:22 | 000,686,704 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
PRC - [2010/11/18 00:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2010/10/02 06:55:28 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
PRC - [2009/06/23 11:54:58 | 000,087,336 | ---- | M] () -- C:\Program Files (x86)\CyberLink\RemoteMedia\Kernel\DMP\CLHNService.exe
PRC - [2009/06/23 06:50:54 | 000,292,224 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSServer.exe
PRC - [2009/06/23 06:50:54 | 000,050,472 | ---- | M] () -- C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSMonitorService.exe
PRC - [2007/05/21 08:37:00 | 000,124,512 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
PRC - [2003/07/19 11:38:18 | 000,258,048 | ---- | M] (株式会社モーリン) -- C:\Program Files (x86)\Common Files\Creoapp\MrnTS_Sync5.exe

[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2015/10/17 22:52:52 | 017,599,688 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll
MOD - [2015/09/26 18:17:55 | 010,069,504 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\d18e2115a3270f89663fce831547f534\System.ni.dll
MOD - [2015/09/26 18:17:39 | 013,041,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\e175ffa45bb703c03f0e63806724539f\System.Windows.Forms.ni.dll
MOD - [2015/09/26 18:17:33 | 001,642,496 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\65d703080abd6a293ba1d1e9d74d7ca8\System.Drawing.ni.dll
MOD - [2015/09/26 15:40:39 | 001,172,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\a48bd2a02ed1ae2fbb79ef8797f0c5f6\System.Management.ni.dll
MOD - [2015/09/26 15:39:57 | 017,207,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\d1265d6159ea876f9d63ea4c1361b587\mscorlib.ni.dll
MOD - [2015/09/23 16:47:46 | 000,073,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2015/09/23 16:47:42 | 001,040,144 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2015/09/10 06:47:04 | 001,358,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\6f8ff4b03f95470706ad0b955cd13637\System.WorkflowServices.ni.dll
MOD - [2015/09/10 06:25:12 | 011,923,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\38234ab6b7aa0762a54e27862d8bbdfe\System.Web.ni.dll
MOD - [2015/09/10 06:24:50 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96d744857eeaf0f2445213d08032e5cc\PresentationFramework.ni.dll
MOD - [2015/09/10 06:24:37 | 012,438,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\09e9b52418dba5729ace249cf0487675\System.Windows.Forms.ni.dll
MOD - [2015/09/10 06:24:30 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\82ecf48db57ddf66f74fca17b0f99453\System.Drawing.ni.dll
MOD - [2015/09/10 06:24:26 | 012,255,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\9c4c2749b3cc38c602b59ee4fd68a8b4\PresentationCore.ni.dll
MOD - [2015/08/13 08:36:38 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3d4521ea040737939f831af5a10cd6ad\PresentationFramework.Aero.ni.dll
MOD - [2015/08/13 08:36:09 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\a6265e4a24c4f8361d84fc84f10e9736\WindowsBase.ni.dll
MOD - [2015/08/08 11:52:26 | 000,060,136 | ---- | M] () -- C:\Windows\SysWOW64\FAib.dll
MOD - [2015/08/08 11:52:06 | 000,084,712 | ---- | M] () -- C:\Windows\SysWOW64\FAIEExtension.dll
MOD - [2015/08/08 11:51:52 | 000,591,592 | ---- | M] () -- C:\Windows\SysWOW64\FACrashRpt.dll
MOD - [2015/08/08 11:38:04 | 004,358,888 | ---- | M] () -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAAppMonOT.exe
MOD - [2015/05/14 03:42:57 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\aed7d83172e09689d6aac4c4e91d57c7\System.Xml.Linq.ni.dll
MOD - [2015/05/14 03:42:18 | 002,297,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\63e9d5c341d64a753cde97f5a3d65c71\System.Core.ni.dll
MOD - [2015/05/14 03:42:00 | 001,084,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\24c86dae3f0bf05fba1a0651ad05c49e\System.IdentityModel.ni.dll
MOD - [2015/05/14 03:41:59 | 017,477,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\938c8303818ae5a2ea69045177a80430\System.ServiceModel.ni.dll
MOD - [2015/05/14 03:35:22 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll
MOD - [2015/04/15 22:10:55 | 001,707,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9224459e26f4811c1d3012434e05c79b\System.ServiceModel.Web.ni.dll
MOD - [2014/12/23 16:54:24 | 000,608,040 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll
MOD - [2014/12/23 16:54:24 | 000,502,056 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
MOD - [2014/12/23 16:54:24 | 000,338,216 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
MOD - [2014/10/15 19:25:21 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\b1e0939384cc320d6ac7b8921ccc2877\System.Runtime.Serialization.ni.dll
MOD - [2014/10/15 19:25:20 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\da4175d4363c1bcecb984a44cd53664f\SMDiagnostics.ni.dll
MOD - [2014/10/15 18:34:10 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
MOD - [2014/10/15 18:32:50 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
MOD - [2014/09/11 06:22:14 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
MOD - [2012/07/03 23:21:18 | 000,008,704 | ---- | M] () -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.9.gadget\GetCoreTempInfoNET.dll
MOD - [2012/07/03 23:21:18 | 000,007,680 | ---- | M] () -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.9.gadget\SystemInfo.dll
MOD - [2012/07/03 23:21:18 | 000,006,144 | ---- | M] () -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.9.gadget\CoreTempReader.dll
MOD - [2012/06/28 06:12:24 | 000,348,160 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_ja_b77a5c561934e089\mscorlib.resources.dll
MOD - [2012/01/27 11:49:34 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
MOD - [2011/11/04 22:19:00 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
MOD - [2011/06/29 22:52:54 | 000,474,176 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
MOD - [2011/06/28 09:26:30 | 002,022,976 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
MOD - [2011/06/28 09:25:30 | 000,058,944 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
MOD - [2011/06/25 13:35:20 | 000,323,136 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\ja-JP\UI\ManagerUI.dll
MOD - [2011/06/25 13:20:26 | 000,565,968 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
MOD - [2010/12/18 00:25:22 | 000,686,704 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
MOD - [2010/11/25 12:44:02 | 000,375,280 | ---- | M] () -- c:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\SQLite352.dll
MOD - [2010/11/21 16:13:44 | 000,548,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.ServiceModel.resources\3.0.0.0_ja_b77a5c561934e089\System.ServiceModel.resources.dll
MOD - [2010/11/21 16:13:44 | 000,262,144 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_ja_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2010/11/21 16:13:30 | 000,233,472 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_ja_b77a5c561934e089\System.resources.dll
MOD - [2010/11/18 00:35:34 | 000,514,544 | ---- | M] () -- C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
MOD - [2010/03/23 05:52:42 | 006,776,832 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
MOD - [2010/03/17 10:28:28 | 000,326,144 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
MOD - [2010/03/17 10:28:16 | 000,635,904 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
MOD - [2010/03/17 10:28:04 | 001,926,144 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
MOD - [2010/03/12 09:52:34 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
MOD - [2010/03/12 09:52:34 | 000,028,160 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
MOD - [2010/03/06 05:07:58 | 000,125,952 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
MOD - [2010/03/06 05:07:58 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll

[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2015/09/16 13:08:40 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2015/07/23 09:02:54 | 001,390,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2013/05/27 14:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2011/11/02 03:37:56 | 001,518,352 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:[b]64bit:[/b] - [2011/11/02 03:25:42 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:[b]64bit:[/b] - [2011/11/02 03:22:28 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:[b]64bit:[/b] - [2011/10/21 08:33:22 | 000,135,440 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:[b]64bit:[/b] - [2011/10/20 04:25:00 | 000,661,504 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:[b]64bit:[/b] - [2010/11/30 05:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Running] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2009/11/18 11:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV - [2015/10/17 22:52:53 | 000,269,000 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015/10/15 10:14:39 | 000,147,624 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2015/10/12 09:28:44 | 001,433,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2015/10/12 09:28:42 | 001,773,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2015/09/14 09:25:38 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2015/08/08 11:52:06 | 002,943,208 | ---- | M] (Sensible Vision ) [Auto | Running] -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe -- (FAService)
SRV - [2015/06/22 22:22:29 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe -- (AVP15.0.2)
SRV - [2015/06/10 11:11:26 | 000,155,520 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2015/02/05 17:25:38 | 000,131,608 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeService2.exe -- (SonicStage Back-End Service2)
SRV - [2015/01/27 10:12:02 | 000,167,208 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\OpenMG\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2014/04/11 23:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2014/03/21 07:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/02/17 02:49:44 | 001,695,040 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)
SRV - [2011/12/17 06:17:48 | 000,248,304 | ---- | M] (CyberLink) [Auto | Stopped] -- c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2011/11/25 16:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011/11/04 22:19:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/11/04 03:24:06 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/10/19 01:50:10 | 001,001,808 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
SRV - [2011/10/19 01:50:04 | 001,354,064 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
SRV - [2011/10/19 01:49:52 | 000,936,272 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
SRV - [2011/03/15 00:27:34 | 000,346,976 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe)
SRV - [2010/12/21 08:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/12/21 08:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010/11/25 19:34:18 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010/11/25 19:33:18 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010/08/26 10:28:54 | 002,823,000 | ---- | M] (Dell, Inc.) [Auto | Running] -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe -- (NOBU)
SRV - [2009/06/23 11:54:58 | 000,087,336 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CyberLink\RemoteMedia\Kernel\DMP\CLHNService.exe -- (CLHNService3)
SRV - [2009/06/23 06:50:54 | 000,292,224 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSServer.exe -- (CyberLink Media Server Service)
SRV - [2009/06/23 06:50:54 | 000,050,472 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSMonitorService.exe -- (CyberLink Media Server Monitor Service)
SRV - [2003/07/19 11:38:18 | 000,258,048 | ---- | M] (株式会社モーリン) [Auto | Running] -- C:\Program Files (x86)\Common Files\Creoapp\MrnTS_Sync5.exe -- (MrnTS_Sync5)

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2015/10/05 18:45:31 | 000,831,672 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
DRV:[b]64bit:[/b] - [2015/10/05 18:45:31 | 000,190,648 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
DRV:[b]64bit:[/b] - [2015/06/29 18:55:47 | 000,225,976 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klhk.sys -- (klhk)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:08 | 000,085,360 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klwtp.sys -- (Klwtp)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:08 | 000,065,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:08 | 000,024,944 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klpd.sys -- (klpd)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:07 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:06 | 000,478,392 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:06 | 000,064,368 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\kldisk.sys -- (kldisk)
DRV:[b]64bit:[/b] - [2015/06/22 22:23:00 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
DRV:[b]64bit:[/b] - [2015/06/22 22:22:59 | 000,040,304 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
DRV:[b]64bit:[/b] - [2015/06/22 22:22:53 | 000,159,960 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klflt.sys -- (klflt)
DRV:[b]64bit:[/b] - [2015/06/22 22:22:45 | 000,247,016 | ---- | M] (Kaspersky Lab UK Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cm_km_w.sys -- (cm_km_w)
DRV:[b]64bit:[/b] - [2015/06/10 23:08:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2014/11/27 23:08:37 | 000,030,424 | ---- | M] (Sony Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsomc.sys -- (ggsomc)
DRV:[b]64bit:[/b] - [2014/11/27 23:08:37 | 000,016,088 | ---- | M] (Sony Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2013/02/12 13:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2012/09/03 17:27:46 | 000,038,400 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\facap.sys -- (FACAP)
DRV:[b]64bit:[/b] - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/08/15 15:24:54 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2012/06/28 06:12:52 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012/06/28 06:12:29 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2012/06/28 06:12:29 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011/12/09 19:45:00 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:[b]64bit:[/b] - [2011/12/02 10:57:06 | 008,615,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:[b]64bit:[/b] - [2011/11/15 01:13:00 | 000,327,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:[b]64bit:[/b] - [2011/11/04 22:19:00 | 000,249,152 | ---- | M] (NVIDIA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\nvkflt.sys -- (nvkflt)
DRV:[b]64bit:[/b] - [2011/11/04 22:19:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2011/10/20 04:19:08 | 000,195,072 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:[b]64bit:[/b] - [2011/10/20 04:19:08 | 000,195,072 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:[b]64bit:[/b] - [2011/10/16 09:18:08 | 000,291,648 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
DRV:[b]64bit:[/b] - [2011/09/14 09:14:44 | 000,212,992 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:[b]64bit:[/b] - [2011/09/14 09:14:42 | 000,095,744 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:[b]64bit:[/b] - [2011/08/30 06:32:18 | 000,053,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:[b]64bit:[/b] - [2011/08/24 14:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011/07/20 22:39:58 | 012,287,456 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2011/05/19 15:17:02 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio)
DRV:[b]64bit:[/b] - [2011/05/17 23:27:52 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:[b]64bit:[/b] - [2011/05/17 23:27:50 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:[b]64bit:[/b] - [2011/02/25 18:02:38 | 000,098,816 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV:[b]64bit:[/b] - [2011/01/30 18:19:34 | 000,069,632 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys -- (huawei_cdcecm)
DRV:[b]64bit:[/b] - [2011/01/30 18:19:34 | 000,028,672 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl)
DRV:[b]64bit:[/b] - [2011/01/30 18:19:32 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV:[b]64bit:[/b] - [2011/01/21 01:20:46 | 000,176,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:[b]64bit:[/b] - [2011/01/13 10:51:44 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2010/12/18 02:06:32 | 001,404,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2010/12/16 02:02:04 | 000,174,168 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2010/12/14 02:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)
DRV:[b]64bit:[/b] - [2010/12/07 14:23:02 | 000,034,304 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandmodem64.sys -- (ANDModem)
DRV:[b]64bit:[/b] - [2010/12/07 14:23:00 | 000,027,648 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lganddiag64.sys -- (AndDiag)
DRV:[b]64bit:[/b] - [2010/12/07 14:23:00 | 000,027,136 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandgps64.sys -- (AndGps)
DRV:[b]64bit:[/b] - [2010/12/07 14:22:58 | 000,019,456 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandbus64.sys -- (Andbus)
DRV:[b]64bit:[/b] - [2010/11/30 05:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:[b]64bit:[/b] - [2010/11/21 12:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010/11/21 12:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010/11/21 12:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010/11/21 12:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010/10/20 09:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2010/10/16 09:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2010/08/20 11:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
DRV:[b]64bit:[/b] - [2010/07/27 09:52:16 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV:[b]64bit:[/b] - [2010/07/13 11:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)
DRV:[b]64bit:[/b] - [2010/02/28 00:32:14 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:[b]64bit:[/b] - [2009/07/14 10:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 10:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 10:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 09:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2009/06/11 05:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/11 05:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/11 05:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/11 05:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2006/11/01 18:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009/07/14 10:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009/06/23 11:55:02 | 000,082,416 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\RemoteMedia\Kernel\DMP\ntk3_64.sys -- (ntk3)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]

[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{5187BAC4-567A-47BF-A050-49B0F467AAA7}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {5187BAC4-567A-47BF-A050-49B0F467AAA7}
IE - HKLM\..\SearchScopes\{5187BAC4-567A-47BF-A050-49B0F467AAA7}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/USCON/3
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://jp.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ja-JP
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C2 58 A0 33 8C 5E CD 01 [binary data]
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\..\SearchScopes,DefaultScope = {33117B6F-BED5-4A62-BD11-C7EA4CB809E1}
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\..\SearchScopes\{33117B6F-BED5-4A62-BD11-C7EA4CB809E1}: "URL" = http://search.yahoo.co.jp/search?ei=UTF-8&fr=mcafeess1&p={searchTerms}
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "JP"
FF - prefs.js..browser.search.defaultenginename: "Amazon.co.jp"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "JP"
FF - prefs.js..browser.search.selectedEngine: "Amazon.co.jp"
FF - prefs.js..browser.startup.homepage: "chrome://fastdial/content/fastdial.html"
FF - prefs.js..extensions.enabledAddons: %7B8b5bea8c-6194-4c7c-a440-d5ca181480c3%7D:1.300.436.6
FF - prefs.js..extensions.enabledAddons: online_banking_08806E753BE44495B44E90AA2513BDC5%40kaspersky.com:4.5.1.379
FF - prefs.js..extensions.enabledAddons: fastdial%40telega.phpnet.us:4.12.1-signed
FF - prefs.js..extensions.enabledAddons: content_blocker_663BE84DBCC949E88C7600F63CA7F098%40kaspersky.com:4.5.1.379
FF - prefs.js..extensions.enabledAddons: virtual_keyboard_07402848C2F6470194F131B0F3DE025E%40kaspersky.com:4.5.1.379
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:41.0.2
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015/05/09 15:09:35 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@kaspersky.com/online_banking_08806E753BE44495B44E90AA2513BDC5: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015/05/09 15:09:36 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015/05/09 15:09:38 | 000,000,000 | ---D | M]
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@sensiblevision.com/FastAccess,version=4.1.110: C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll ( )
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: File not found

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\PROGRAM FILES (X86)\MCAFEE\SITEADVISOR
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker_663BE84DBCC949E88C7600F63CA7F098@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2015/05/09 15:09:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard_07402848C2F6470194F131B0F3DE025E@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2015/05/09 15:09:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking_08806E753BE44495B44E90AA2513BDC5@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2015/05/09 15:09:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fassoxpcom@sensiblevision.com: C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\ [2015/10/04 19:50:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 41.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 41.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2015/10/17 10:41:26 | 000,000,000 | ---D | M]

[2012/07/19 00:31:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\banzabu6\AppData\Roaming\Mozilla\Extensions
[2015/09/26 11:22:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions
[2015/05/30 08:27:33 | 000,000,000 | ---D | M] (Fast Dial) -- C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\fastdial@telega.phpnet.us
[2015/03/03 23:50:29 | 000,256,129 | ---- | M] () (No name found) -- C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi
[2015/09/26 11:22:25 | 000,962,762 | ---- | M] () (No name found) -- C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015/10/18 22:52:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2015/10/18 22:52:04 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/05/09 15:09:35 | 000,000,000 | ---D | M] (コンテンツブロック) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 15.0.2\FFEXT\CONTENT_BLOCKER@KASPERSKY.COM
[2015/05/09 15:09:36 | 000,000,000 | ---D | M] (ネット決済保護) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 15.0.2\FFEXT\ONLINE_BANKING@KASPERSKY.COM
[2015/05/09 15:09:38 | 000,000,000 | ---D | M] (セキュリティキーボード) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 15.0.2\FFEXT\VIRTUAL_KEYBOARD@KASPERSKY.COM

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.0_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2009/06/11 06:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
O2:[b]64bit:[/b] - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2:[b]64bit:[/b] - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2:[b]64bit:[/b] - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Face recognition web login for FastAccess) - {DA5BCE70-D057-4D63-943D-5F3927EC59F1} - C:\Program Files (x86)\Sensible Vision\Fast Access\x64\FAIESSO.dll (Sensible Vision )
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Face recognition web login for FastAccess) - {DA5BCE70-D057-4D63-943D-5F3927EC59F1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll (Sensible Vision )
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:[b]64bit:[/b] - HKLM..\Run: [NVHotkey] C:\Windows\SysNative\nvHotkey.dll (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [QuickSet] c:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [Stage Remote] C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AccuWeatherWidget] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe ()
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BDRegion] c:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink)
O4 - HKLM..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [FAStartup] File not found
O4 - HKLM..\Run: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe (Sensible Vision )
O4 - HKLM..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE (CANON INC.)
O4 - HKLM..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey File not found
O4 - HKLM..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe ()
O4 - HKLM..\Run: [PDVD9LanguageShortcut] c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1013665564-3434395393-1885991050-1000..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe (Apple Inc.)
O4 - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001..\Run: [Mobile Partner] C:\Program Files (x86)\MobileWiFi\MobileWiFi.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-1013665564-3434395393-1885991050-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\banzabu6\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9:[b]64bit:[/b] - Extra Button: セキュリティキーボード - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: セキュリティキーボード - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BC2E372-DBE4-47C6-BEDA-B05D4CCD9103}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B2483C38-3C52-47F4-9CC6-6864BEFE8E13}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D2CF52FC-4231-41D9-BBDB-EBA956D80B39}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F350C534-CA37-4B6B-B792-904C0C646245}: DhcpNameServer = 13.36.0.102
O18:[b]64bit:[/b] - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll File not found
O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll File not found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll File not found
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\FastAccess: DllName - (C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll) - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll (Sensible Vision )
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{44a33172-95a3-11e3-8dfa-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{44a33172-95a3-11e3-8dfa-00dbdf0f65a3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{44a33174-95a3-11e3-8dfa-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{44a33174-95a3-11e3-8dfa-00dbdf0f65a3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{8386f76a-e8da-11e1-a8c6-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{8386f76a-e8da-11e1-a8c6-00dbdf0f65a3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{96d8e5b0-392f-11e4-8909-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{96d8e5b0-392f-11e4-8909-00dbdf0f65a3}\Shell\AutoRun\command - "" = F:\Startme.exe
O33 - MountPoints2\{99f73d6d-710b-11e2-8b59-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{99f73d6d-710b-11e2-8b59-00dbdf0f65a3}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d68cc8e4-e12c-11e3-8ce2-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{d68cc8e4-e12c-11e3-8ce2-00dbdf0f65a3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{d68cc8fb-e12c-11e3-8ce2-00dbdf0f65a3}\Shell - "" = AutoRun
O33 - MountPoints2\{d68cc8fb-e12c-11e3-8ce2-00dbdf0f65a3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{d68cc90e-e12c-11e3-8ce2-00dbdf0f65a3}\Shell - "" = Aut

ばんぶー
MAIL
2015/10/31 (Sat) 18:21:25

返信フォームへ

Re: LaSuperbaの件

OLT-2

e Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/10/19 21:23:01 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Roaming\Malwarebytes
[2015/10/19 21:22:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2015/10/19 21:22:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015/10/19 21:22:23 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2015/10/19 21:22:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2015/10/18 23:32:10 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\Desktop\未送信log
[2015/10/18 23:31:13 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\Desktop\送信済log
[2015/10/18 22:52:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2015/10/18 21:30:39 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Roaming\Geek Uninstaller
[2015/10/18 13:52:47 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{211E50ED-DB28-4476-9EEF-BFB96C7FFDFE}
[2015/10/17 23:24:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015/10/17 23:24:20 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2015/10/17 23:14:54 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{F83F67FA-22FE-4635-B25A-5974F7DCB39B}
[2015/10/17 10:45:27 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{FA238EE0-9852-410C-A1B7-197A3E7B814B}
[2015/10/17 10:41:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015/10/16 20:55:27 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{93617867-0D46-4509-99A3-E1CE77C1B524}
[2015/10/15 20:01:48 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{21F3CA99-3F45-4B2E-854E-7AE3B8B52B05}
[2015/10/15 06:28:47 | 001,291,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
[2015/10/15 06:28:47 | 001,163,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2015/10/15 06:28:47 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
[2015/10/15 06:28:47 | 000,700,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
[2015/10/15 06:28:47 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
[2015/10/15 06:28:47 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
[2015/10/15 06:28:47 | 000,025,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
[2015/10/14 06:55:07 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{4129140C-73AF-46E2-98BC-1CF1E471F816}
[2015/10/14 06:36:07 | 001,866,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2015/10/14 06:36:03 | 001,498,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2015/10/14 06:35:47 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2015/10/14 06:35:47 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2015/10/14 06:35:47 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2015/10/14 06:35:47 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
[2015/10/14 06:35:44 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2015/10/14 06:35:44 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2015/10/14 06:35:44 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2015/10/14 06:35:44 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
[2015/10/14 06:35:44 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2015/10/14 06:35:44 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2015/10/14 06:35:43 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2015/10/14 06:35:43 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2015/10/14 06:35:43 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2015/10/14 06:35:43 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2015/10/14 06:35:42 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2015/10/14 06:35:42 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2015/10/14 06:35:42 | 000,663,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2015/10/14 06:35:42 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2015/10/14 06:35:42 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2015/10/14 06:35:42 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2015/10/14 06:35:42 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2015/10/14 06:35:42 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2015/10/14 06:35:41 | 002,126,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2015/10/14 06:35:41 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2015/10/14 06:35:41 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2015/10/14 06:35:41 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2015/10/14 06:35:41 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2015/10/14 06:35:40 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2015/10/14 06:35:40 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2015/10/14 06:35:40 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2015/10/14 06:35:40 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2015/10/14 06:35:40 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2015/10/14 06:35:39 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2015/10/14 06:35:39 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2015/10/14 06:35:38 | 005,990,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2015/10/14 06:35:38 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2015/10/14 06:35:38 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2015/10/14 06:35:38 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2015/10/14 06:35:37 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2015/10/14 06:35:37 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2015/10/14 06:35:37 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
[2015/10/14 06:35:13 | 003,168,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2015/10/14 06:35:13 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2015/10/14 06:35:13 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2015/10/14 06:35:13 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2015/10/14 06:35:13 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2015/10/14 06:35:13 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2015/10/14 06:35:13 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2015/10/14 06:35:13 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2015/10/14 06:35:13 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
[2015/10/14 06:35:13 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2015/10/14 06:35:13 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2015/10/14 06:35:13 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2015/10/14 06:35:13 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2015/10/14 06:35:13 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2015/10/14 06:35:13 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
[2015/10/14 06:35:05 | 005,569,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2015/10/14 06:35:04 | 003,936,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2015/10/14 06:35:02 | 003,990,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2015/10/14 06:35:00 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2015/10/14 06:34:59 | 001,730,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2015/10/14 06:34:59 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2015/10/14 06:34:59 | 001,216,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2015/10/14 06:34:59 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2015/10/14 06:34:59 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2015/10/14 06:34:59 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2015/10/14 06:34:59 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2015/10/14 06:34:59 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2015/10/14 06:34:59 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2015/10/14 06:34:58 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2015/10/14 06:34:58 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2015/10/14 06:34:58 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2015/10/14 06:34:58 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2015/10/14 06:34:58 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
[2015/10/14 06:34:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2015/10/14 06:34:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
[2015/10/14 06:34:58 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
[2015/10/14 06:34:58 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2015/10/14 06:34:58 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2015/10/14 06:34:58 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2015/10/14 06:34:58 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2015/10/14 06:34:58 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2015/10/14 06:34:58 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2015/10/14 06:34:58 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2015/10/14 06:34:58 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2015/10/14 06:34:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2015/10/14 06:34:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2015/10/14 06:34:58 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2015/10/14 06:34:58 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2015/10/14 06:34:58 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2015/10/14 06:34:58 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2015/10/14 06:34:58 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2015/10/14 06:34:58 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2015/10/14 06:34:58 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2015/10/14 06:34:58 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2015/10/14 06:34:57 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2015/10/14 06:34:57 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2015/10/14 06:34:57 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
[2015/10/14 06:34:57 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
[2015/10/14 06:34:57 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
[2015/10/14 06:34:57 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
[2015/10/14 06:34:57 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2015/10/14 06:34:57 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2015/10/14 06:34:57 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2015/10/14 06:34:57 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2015/10/14 06:34:57 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2015/10/14 06:34:40 | 000,692,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2015/10/14 06:34:40 | 000,616,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2015/10/14 06:34:40 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
[2015/10/14 06:34:40 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2015/10/14 06:34:40 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
[2015/10/14 06:34:40 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
[2015/10/14 06:34:40 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
[2015/10/14 06:34:24 | 000,984,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ucrtbase.dll
[2015/10/14 06:34:23 | 000,901,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ucrtbase.dll
[2015/10/14 06:34:23 | 000,066,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-private-l1-1-0.dll
[2015/10/14 06:34:23 | 000,063,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-private-l1-1-0.dll
[2015/10/14 06:34:23 | 000,022,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-math-l1-1-0.dll
[2015/10/14 06:34:23 | 000,020,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-math-l1-1-0.dll
[2015/10/14 06:34:23 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-multibyte-l1-1-0.dll
[2015/10/14 06:34:23 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-multibyte-l1-1-0.dll
[2015/10/14 06:34:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-string-l1-1-0.dll
[2015/10/14 06:34:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-string-l1-1-0.dll
[2015/10/14 06:34:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-stdio-l1-1-0.dll
[2015/10/14 06:34:23 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-stdio-l1-1-0.dll
[2015/10/14 06:34:23 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-runtime-l1-1-0.dll
[2015/10/14 06:34:23 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-runtime-l1-1-0.dll
[2015/10/14 06:34:23 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-convert-l1-1-0.dll
[2015/10/14 06:34:23 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-convert-l1-1-0.dll
[2015/10/14 06:34:23 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-time-l1-1-0.dll
[2015/10/14 06:34:23 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-time-l1-1-0.dll
[2015/10/14 06:34:23 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-2-0.dll
[2015/10/14 06:34:23 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-2-0.dll
[2015/10/14 06:34:23 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-filesystem-l1-1-0.dll
[2015/10/14 06:34:23 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-filesystem-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-process-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-process-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-heap-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-heap-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-conio-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-conio-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-utility-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-utility-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-locale-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-locale-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-crt-environment-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-crt-environment-l1-1-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-2-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-2-0.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-1.dll
[2015/10/14 06:34:23 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-1.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-eventing-provider-l1-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-eventing-provider-l1-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l2-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l2-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-timezone-l1-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-timezone-l1-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l2-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l2-1-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-2-0.dll
[2015/10/14 06:34:23 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-2-0.dll
[2015/10/12 23:20:12 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{583C8EB9-534F-4A11-A724-C73B93503728}
[2015/10/11 23:42:58 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{047F40FA-5074-4348-8135-5BD8C2A4BE91}
[2015/10/07 18:39:01 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{D2334F8A-D628-4DBD-ADDF-74EACFD30720}
[2015/10/05 23:35:42 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{E727370A-6618-49DC-84B1-DC4A966B836D}
[2015/10/04 20:27:18 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{D14C1B75-4F7B-40AA-8725-421429861535}
[2015/10/04 19:50:34 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastAccess Facial Recognition
[1 C:\*.tmp files -> C:\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/10/31 17:35:18 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/10/31 17:35:18 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/10/31 17:29:27 | 000,000,626 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/10/31 17:29:26 | 000,000,690 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015/10/31 17:29:26 | 000,000,686 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/10/31 17:29:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/10/19 23:52:43 | 001,313,166 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2015/10/19 23:52:43 | 000,654,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2015/10/19 23:52:43 | 000,411,412 | ---- | M] () -- C:\Windows\SysNative\perfh011.dat
[2015/10/19 23:52:43 | 000,122,426 | ---- | M] () -- C:\Windows\SysNative\perfc011.dat
[2015/10/19 23:52:43 | 000,122,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2015/10/19 23:47:08 | 2064,252,927 | -HS- | M] () -- C:\hiberfil.sys
[2015/10/19 21:22:24 | 000,001,115 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/10/18 23:11:22 | 000,001,189 | ---- | M] () -- C:\Users\banzabu6\Desktop\HijackThis(1).exe - ショートカット.lnk
[2015/10/18 22:52:09 | 000,001,153 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2015/10/18 21:38:49 | 000,000,784 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015/10/17 22:52:53 | 000,780,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2015/10/17 22:52:53 | 000,142,536 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2015/10/15 06:24:46 | 000,002,171 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2015/10/05 18:45:31 | 000,831,672 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klif.sys
[2015/10/05 18:45:31 | 000,190,648 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kneps.sys
[2015/10/04 19:53:26 | 000,460,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2015/10/02 03:06:49 | 000,692,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2015/10/02 03:04:11 | 000,616,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2015/10/02 03:00:59 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2015/10/02 03:00:43 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
[2015/10/02 03:00:06 | 000,147,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
[2015/10/02 03:00:06 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
[2015/10/02 02:50:35 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
[1 C:\*.tmp files -> C:\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/10/19 21:22:24 | 000,001,115 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2015/10/18 23:11:22 | 000,001,189 | ---- | C] () -- C:\Users\banzabu6\Desktop\HijackThis(1).exe - ショートカット.lnk
[2015/10/18 22:52:09 | 000,001,153 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2015/10/18 22:52:08 | 000,001,165 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2015/10/17 23:24:21 | 000,000,784 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015/08/08 11:52:26 | 000,060,136 | ---- | C] () -- C:\Windows\SysWow64\FAib.dll
[2015/08/08 11:52:06 | 000,084,712 | ---- | C] () -- C:\Windows\SysWow64\FAIEExtension.dll
[2015/08/08 11:51:52 | 000,591,592 | ---- | C] () -- C:\Windows\SysWow64\FACrashRpt.dll
[2013/11/11 23:33:20 | 000,209,228 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2013/03/16 23:33:51 | 000,004,096 | -H-- | C] () -- C:\Users\banzabu6\AppData\Local\keyfile3.drm
[2013/01/30 07:03:24 | 000,007,597 | ---- | C] () -- C:\Users\banzabu6\AppData\Local\resmon.resmoncfg
[2012/07/14 14:01:24 | 000,000,412 | ---- | C] () -- C:\Users\banzabu6\AppData\Roaming\All CPU Meter_Settings.ini
[2006/11/02 21:50:50 | 000,000,174 | -HS- | C] () -- C:\Program Files (x86)\desktop (1).ini

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 13:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2015/08/07 03:04:07 | 014,176,768 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/08/07 02:44:51 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 10:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/21 12:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 10:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== Custom Scans ==========[/color]
[2015/05/09 14:51:20 | 000,000,000 | -H-D | M] -- C:\kleaner.tmp
[2015/10/19 21:22:24 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012/07/14 14:55:37 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\CanonBJ
[2015/07/10 18:45:00 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
[2013/11/28 15:16:58 | 000,310,896 | -H-- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Easy-WebPrint EX\Maint.exe
[2012/12/10 15:20:30 | 000,421,032 | -H-- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\MAINT.exe
[2012/12/10 15:16:50 | 000,421,032 | -H-- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\IJ Scan Utility\MAINT.exe
[2012/11/21 15:39:10 | 001,852,576 | -H-- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\My Image Garden\uninst.exe
[2012/11/21 15:39:10 | 001,852,576 | -H-- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\My Image Garden\AddOn\uninst.exe
[2012/11/21 15:39:10 | 001,852,576 | -H-- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Quick Menu\uninst.exe
[2012/07/14 14:55:37 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\CanonBJ\IJPrinter
[2012/07/14 14:55:42 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\CanonBJ\IJPrinter\Canon MP970 series
[2014/05/15 20:23:53 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ
[2012/09/12 14:45:12 | 001,852,576 | -H-- | M] (CANON INC.) -- C:\Program Files\Canon\MyPrinter\uninst.exe
[2014/05/15 20:23:53 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\CanonIJ Uninstaller Information
[2014/05/15 20:23:32 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJPrinter
[2012/08/25 19:00:39 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJScan
[2014/05/15 20:23:53 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series
[2014/05/15 20:39:29 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJPrinter\Canon MG7100 series
[2012/08/25 19:03:31 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJPrinter\Canon MP970 series
[2012/08/25 19:00:52 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ\IJScan\CNQ2412
[2012/06/28 03:56:31 | 000,000,000 | -H-D | M] -- C:\Program Files\Intel\WiFi\bin\WLANProfiles
[2012/08/25 19:03:37 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ
[2014/05/15 20:33:46 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonIJQuickMenu
[2015/09/26 23:17:26 | 000,000,000 | -H-D | M] -- C:\ProgramData\Apple Computer\iTunes\SC Info
[2015/05/05 21:34:56 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter
[2014/05/15 20:23:57 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter\CNMWindows
[2015/03/22 23:56:24 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter\CNMWindows\Canon MG7100 series Printer
[2013/03/17 11:05:44 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ\IJPrinter\CNMWindows\Canon MP970 series Printer
[2012/06/28 04:28:08 | 000,000,000 | -H-D | M] -- C:\ProgramData\CyberLink\BDNAV
[2012/07/03 22:52:39 | 000,000,000 | -H-D | M] -- C:\ProgramData\Intel\Wireless\PANDevices
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\ProgramData\Intel\Wireless\Settings
[2012/06/28 03:56:31 | 000,000,000 | -H-D | M] -- C:\ProgramData\Intel\Wireless\WLANProfiles
[2012/09/12 19:57:22 | 000,000,000 | -H-D | M] -- C:\ProgramData\LGMOBILEAX\Phone
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc
[2010/11/21 16:25:02 | 000,000,000 | RH-D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc\Profiles
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\ProgramData\Roaming\Intel\Wireless\Settings
[2015/03/26 23:38:05 | 000,000,000 | -H-D | M] -- C:\ProgramData\Sony Corporation\Media Go Video Playback Engine\2-2.12.105.06300
[2015/03/26 23:38:05 | 000,000,000 | -H-D | M] -- C:\ProgramData\Sony Corporation\Media Go Video Playback Engine\3-2.12.105.06300
[2012/07/03 21:46:25 | 000,000,000 | RH-D | M] -- C:\Users\Default
[2012/08/25 19:03:37 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ
[2014/05/15 20:33:46 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonIJQuickMenu
[2015/09/26 23:17:26 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Apple Computer\iTunes\SC Info
[2015/05/05 21:34:56 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter
[2014/05/15 20:23:57 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter\CNMWindows
[2015/03/22 23:56:24 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter\CNMWindows\Canon MG7100 series Printer
[2013/03/17 11:05:44 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CanonBJ\IJPrinter\CNMWindows\Canon MP970 series Printer
[2012/06/28 04:28:08 | 000,000,000 | -H-D | M] -- C:\Users\All Users\CyberLink\BDNAV
[2012/07/03 22:52:39 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Intel\Wireless\PANDevices
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Intel\Wireless\Settings
[2012/06/28 03:56:31 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Intel\Wireless\WLANProfiles
[2012/09/12 19:57:22 | 000,000,000 | -H-D | M] -- C:\Users\All Users\LGMOBILEAX\Phone
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Microsoft\WwanSvc
[2010/11/21 16:25:02 | 000,000,000 | RH-D | M] -- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Tablet PC
[2009/07/14 14:32:38 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Microsoft\WwanSvc\Profiles
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Roaming\Intel\Wireless\Settings
[2015/03/26 23:38:05 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Sony Corporation\Media Go Video Playback Engine\2-2.12.105.06300
[2015/03/26 23:38:05 | 000,000,000 | -H-D | M] -- C:\Users\All Users\Sony Corporation\Media Go Video Playback Engine\3-2.12.105.06300
[2012/07/03 21:46:36 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData
[2015/03/21 00:18:16 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads
[2012/07/03 21:53:21 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
[2012/07/14 10:02:49 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
[2012/07/07 01:23:43 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Media Player\アートキャッシュ
[2015/02/13 00:56:20 | 000,000,000 | RH-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows\Burn\Burn
[2012/08/21 18:44:04 | 000,000,000 | RH-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows\Burn\Burn1
[2012/07/08 18:26:07 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows\GameExplorer\GameStatistics
[2012/07/08 18:06:36 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows\GameExplorer\GameStatistics\{084434BC-021F-4086-815C-B4D716386B93}
[2012/07/08 18:26:07 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows\GameExplorer\GameStatistics\{89FE5CB3-11CB-489C-AC0D-0C0B6707E1F6}
[2012/07/08 18:26:01 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Local\Microsoft\Windows\GameExplorer\GameStatistics\{F284254F-0243-46A7-A328-DD99F72267E8}
[2012/07/03 21:46:37 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Roaming\Intel\Wireless\Settings
[2012/07/03 21:53:36 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Roaming\Intel\Wireless\WLANProfiles
[2012/07/14 15:53:58 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\Users\banzabu6\Roaming\Intel\Wireless\Settings
[2009/07/14 12:20:08 | 000,000,000 | -H-D | M] -- C:\Users\Default\AppData
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\Users\Default\Roaming\Intel\Wireless\Settings
[2015/10/19 21:22:24 | 000,000,000 | RH-D | M] -- C:\Users\Public\Desktop
[2009/07/14 11:34:59 | 000,000,000 | RH-D | M] -- C:\Users\Public\Favorites
[2012/08/21 18:32:28 | 000,000,000 | RH-D | M] -- C:\Users\Public\Libraries
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\Users\Public\Roaming\Intel\Wireless\Settings
[2012/06/28 03:31:20 | 000,000,000 | -H-D | M] -- C:\Users\UpdatusUser\AppData
[2012/06/28 03:56:02 | 000,000,000 | -H-D | M] -- C:\Users\UpdatusUser\Roaming\Intel\Wireless\Settings
[2012/07/09 18:25:50 | 000,000,000 | -H-D | M] -- C:\Windows\ServiceProfiles\LocalService\AppData
[2009/07/14 13:45:47 | 000,000,000 | -H-D | M] -- C:\Windows\ServiceProfiles\NetworkService\AppData
[2012/08/25 19:03:31 | 000,000,000 | -H-D | M] -- C:\Windows\SysNative\CanonIJ Uninstaller Information

[color=#A23BEC]< %windir%\tasks\*.job >[/color]
[2015/10/31 17:52:05 | 000,000,626 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/10/31 17:29:26 | 000,000,686 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015/10/31 17:29:26 | 000,000,690 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[color=#E56717]========== Drive Information ==========[/color]

Physical Drives
---------------

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: ST9750420AS
Partitions: 4
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE1 - External hard disk media
Interface type: USB
Media Type: External hard disk media
Model: StoreJet Transcend USB Device
Partitions: 1
Status: OK
Status Info: 0

Partitions
---------------

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 102.00MB
Starting Offset: 32256
Hidden sectors: 0

DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 20.00GB
Starting Offset: 109051904
Hidden sectors: 0

DeviceID: Disk #0, Partition #2
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 348.00GB
Starting Offset: 21080571904
Hidden sectors: 0

DeviceID: Disk #0, Partition #3
PartitionType: Extended w/Extended Int 13
Bootable: False
BootPartition: False
PrimaryPartition: False
Size: 331.00GB
Starting Offset: 394445979648
Hidden sectors: 0

DeviceID: Disk #1, Partition #0
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 932.00GB
Starting Offset: 32768
Hidden sectors: 0

[color=#E56717]========== Base Services ==========[/color]
SRV:[b]64bit:[/b] - [2015/03/04 13:41:26 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\aelupsvc.dll -- (AeLookupSvc)
SRV:[b]64bit:[/b] - [2015/06/25 19:01:17 | 000,070,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appinfo.dll -- (Appinfo)
SRV:[b]64bit:[/b] - [2009/07/14 10:38:55 | 000,079,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\alg.exe -- (ALG)
SRV:[b]64bit:[/b] - [2010/11/21 12:23:51 | 000,849,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\qmgr.dll -- (BITS)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:00 | 000,705,024 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\BFE.DLL -- (BFE)
SRV:[b]64bit:[/b] - [2015/09/16 03:10:32 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lsass.exe -- (KeyIso)
SRV:[b]64bit:[/b] - [2009/07/14 10:40:50 | 000,402,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\es.dll -- (EventSystem)
SRV - [2009/07/14 10:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem)
SRV:[b]64bit:[/b] - [2012/07/05 07:13:27 | 000,136,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\browser.dll -- (Browser)
SRV:[b]64bit:[/b] - [2015/04/28 04:23:13 | 000,188,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cryptsvc.dll -- (CryptSvc)
SRV - [2015/04/28 04:04:37 | 000,143,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (DcomLaunch)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:00 | 000,317,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV - [2010/11/21 12:24:09 | 000,254,464 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV:[b]64bit:[/b] - [2012/06/28 06:12:28 | 000,183,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dnsrslvr.dll -- (Dnscache)
SRV:[b]64bit:[/b] - [2009/07/14 10:40:35 | 000,111,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\eapsvc.dll -- (EapHost)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:00 | 000,038,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\hidserv.dll -- (hidserv)
SRV - [2009/07/14 10:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:10 | 000,359,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipnathlp.dll -- (SharedAccess)
SRV:[b]64bit:[/b] - [2010/11/21 12:23:48 | 000,501,248 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\IPSECSVC.DLL -- (PolicyAgent)
No service found with a name of MsMpSvc
No service found with a name of NisSrv
SRV:[b]64bit:[/b] - [2009/07/14 10:41:54 | 000,524,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\swprv.dll -- (swprv)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:26 | 000,067,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\mmcss.dll -- (MMCSS)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:52 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netman.dll -- (Netman)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:52 | 000,459,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofm.dll -- (netprofm)
SRV - [2009/07/14 10:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2014/12/06 13:17:27 | 000,303,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nlasvc.dll -- (NlaSvc)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:53 | 000,025,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\nsisvc.dll -- (nsi)
SRV:[b]64bit:[/b] - [2012/06/28 06:12:33 | 000,404,480 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\umpnpmgr.dll -- (PlugPlay)
SRV:[b]64bit:[/b] - [2012/02/11 15:36:02 | 000,559,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\spoolsv.exe -- (Spooler)
SRV:[b]64bit:[/b] - [2015/09/16 03:10:32 | 000,031,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lsass.exe -- (ProtectedStorage)
No service found with a name of EMDMgmt
SRV:[b]64bit:[/b] - [2009/07/14 10:41:53 | 000,099,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasauto.dll -- (RasAuto)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:17 | 000,344,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\rasmans.dll -- (RasMan)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:01 | 000,512,000 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\rpcss.dll -- (RpcSs)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\seclogon.dll -- (seclogon)
SRV:[b]64bit:[/b] - [2015/09/16 03:10:32 | 000,031,232 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsass.exe -- (SamSs)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:58 | 000,097,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wscsvc.dll -- (wscsvc)
SRV:[b]64bit:[/b] - [2010/11/21 12:23:48 | 000,236,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\srvsvc.dll -- (LanmanServer)
SRV:[b]64bit:[/b] - [2010/11/21 12:23:55 | 000,370,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\shsvcs.dll -- (ShellHWDetection)
SRV - [2010/11/21 12:24:03 | 000,328,192 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection)
No service found with a name of slsvc
SRV:[b]64bit:[/b] - [2015/08/06 02:56:14 | 001,110,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\schedsvc.dll -- (Schedule)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:32 | 000,316,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tapisrv.dll -- (TapiSrv)
SRV - [2010/11/21 12:24:00 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:55 | 000,044,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:[b]64bit:[/b] - [2014/12/19 12:06:55 | 000,210,432 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\profsvc.dll -- (ProfSvc)
SRV:[b]64bit:[/b] - [2010/11/21 12:23:55 | 001,600,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\VSSVC.exe -- (VSS)
SRV:[b]64bit:[/b] - [2015/02/03 12:30:55 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioSrv)
SRV:[b]64bit:[/b] - [2015/02/03 12:30:55 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\audiosrv.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2010/11/21 12:25:06 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\sdrsvc.dll -- (SDRSVC)
SRV:[b]64bit:[/b] - [2013/05/27 14:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2010/11/21 12:23:55 | 001,646,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wevtsvc.dll -- (eventlog)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:28 | 000,828,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\MPSSVC.dll -- (MpsSvc)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:48 | 000,580,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wiaservc.dll -- (stisvc)
SRV:[b]64bit:[/b] - [2015/06/16 06:44:47 | 000,128,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\msiexec.exe -- (msiserver)
SRV - [2015/06/16 06:42:49 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:56 | 000,242,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wbem\WMIsvc.dll -- (Winmgmt)
SRV:[b]64bit:[/b] - [2015/09/26 03:07:19 | 002,607,104 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wuaueng.dll -- (wuauserv)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:09 | 000,252,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dot3svc.dll -- (dot3svc)
SRV:[b]64bit:[/b] - [2009/07/14 10:41:56 | 000,886,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlansvc.dll -- (Wlansvc)
SRV:[b]64bit:[/b] - [2010/11/21 12:24:32 | 000,118,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wkssvc.dll -- (LanmanWorkstation)

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

< End of report >

ばんぶー
MAIL
2015/10/31 (Sat) 18:22:33

返信フォームへ

Re: LaSuperbaの件

Extras

OTL Extras logfile created on: 2015/10/31 17:34:36 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\banzabu6\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18059)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

7.90 Gb Total Physical Memory | 4.28 Gb Available Physical Memory | 54.15% Memory free
15.79 Gb Paging File | 11.56 Gb Available in Paging File | 73.21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 347.72 Gb Total Space | 149.91 Gb Free Space | 43.11% Space Free | Partition Type: NTFS
Drive E: | 331.28 Gb Total Space | 272.85 Gb Free Space | 82.36% Space Free | Partition Type: NTFS
Drive G: | 931.51 Gb Total Space | 554.33 Gb Free Space | 59.51% Space Free | Partition Type: NTFS

Computer Name: BANZABU6-PC | User Name: banzabu6 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]

[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]

[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00E5F03A-95EA-4F44-A0FD-2A217E278668}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0A9B893D-62F1-472D-85B2-D21AEBCD98A4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{10CB027E-962E-48FA-94CB-7437E0C59960}" = lport=9702 | protocol=6 | dir=in | name=syncup_tcp_9702 |
"{1AAC211A-531F-4A8A-8AAF-4ABD92134622}" = rport=445 | protocol=6 | dir=out | app=system |
"{2B5A8C2D-AB4E-4240-9ABF-3C64E2B58022}" = rport=137 | protocol=17 | dir=out | app=system |
"{2F04AAEA-AFC6-4647-93AA-06B98B71796F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{57C31DC9-CAA5-4F7B-9F92-B0E8FB197502}" = lport=2869 | protocol=6 | dir=in | app=system |
"{66B7C151-6860-4F07-BD46-879E981EBCEA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{6970709A-1656-4E81-94DE-1AB8E3CA76CF}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{786648D2-D9B4-478C-8D7C-65943BF737B5}" = lport=138 | protocol=17 | dir=in | app=system |
"{7A12C219-E56D-4335-96A3-6E115AA7ADB4}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{7C02B1A5-36EA-4797-B087-1C1975BF4715}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7C39C0FF-CD8D-483B-9A0A-B2ED715CF8EC}" = lport=445 | protocol=6 | dir=in | app=system |
"{8980DB2A-95BF-4E47-975C-F17742C2B0E3}" = rport=139 | protocol=6 | dir=out | app=system |
"{9172614A-C13C-4E5C-891D-BEDEFF29706F}" = lport=9701 | protocol=6 | dir=in | name=syncup_tcp_9701 |
"{91CA06B6-DA8E-4CAC-A6DD-610A118110B5}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{99B7FA60-6018-405A-864C-B6F8E2C57AB6}" = lport=9700 | protocol=6 | dir=in | name=syncup_tcp_9700 |
"{A2A21732-FB38-484B-8A23-76EB495F4398}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BB1D74BB-337F-4DCB-8CF8-CE68E5D4230D}" = rport=138 | protocol=17 | dir=out | app=system |
"{D5D5134F-81FC-495C-82DC-4A6E2D07CE2E}" = lport=10243 | protocol=6 | dir=in | app=system |
"{D996CDED-A29D-41EB-A82B-2C0EBFC3AABC}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{E3784006-7895-4C85-85D7-33672BD2C157}" = lport=137 | protocol=17 | dir=in | app=system |
"{E5C4CE39-397C-4708-B000-04C5BE247004}" = lport=9700 | protocol=17 | dir=in | name=syncup_udp_9700 |
"{E75D2DAA-FC16-4F9D-97D9-4DA234EC33F5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{ECB8F783-3750-44E5-9F1B-BC4E756A089C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{ED26E8DD-12DE-4EE6-91D5-71DE3DCA7C93}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F15BA9AD-5B57-43C2-92B8-354E668FA012}" = lport=139 | protocol=6 | dir=in | app=system |
"{FF76395F-8C83-48B9-8189-A51820AB2D5B}" = rport=10243 | protocol=6 | dir=out | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04924588-56ED-4DD0-B97D-24812B2D7222}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |
"{05D46DA6-13F6-482D-B765-912D2BA9B308}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
"{05F4A2E4-16F2-4972-B34B-D558D61918C6}" = dir=in | app=c:\program files (x86)\cyberlink\mediasharing\kernel\dms\clmsserver.exe |
"{0C5D1FEA-547B-45B3-B3A5-0EA1A01605FD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1078F6EF-C323-4A41-9E10-DDC17273DAB8}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{1293B4F0-E7D1-4E46-9E3C-6A60293858A7}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{197FB95E-8C74-4106-8D01-36B257DF89EF}" = dir=in | app=c:\program files\dell stage\musicstage\musicstageengine.exe |
"{1F643595-8A26-4B22-88E9-526FD160F1AB}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |
"{21B765B9-0A5D-40B3-AAF0-D3E025B9E925}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremote.exe |
"{24E0DDCC-D303-491D-9FAC-89F30C8F7E40}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{28E27E85-AFB5-43BD-A9E2-3C090DF6CABB}" = dir=in | app=c:\program files (x86)\cyberlink\mediasharing\kernel\dms\clmsservice.exe |
"{2F100BBC-6E40-4A22-AD45-33630A8869D3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{32126E59-A7B8-45C6-AD92-85C13DBBA5A5}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{33AC0155-06FC-45C6-91D4-76044439355C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{3CEAF27A-01E7-41A3-BA0E-3110C5BD85BE}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4032AA2E-CA28-4008-B0F9-A644F95CFAA2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{42F81B59-5A01-4D2D-B536-D405EF26985D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4B701DF0-4D35-4E50-9F3F-FAD925D8353F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4C2A7778-5205-4CBF-9D19-1B07D0ACB02D}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |
"{5206DD65-8EE4-4591-B2AA-C5F893E86898}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{5C0DCF3E-5D06-4A1B-B3A2-449A6311778A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{64670849-F595-404C-A76C-98E7622445B9}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |
"{658FAF8D-A81B-43A0-A028-35E823F850E4}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\controller.exe |
"{65998586-11ED-40BD-A987-DF1469C8A30B}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd cinema\powerdvdcinema.exe |
"{6C21307E-7636-48F0-BE01-973DECB2ACCE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{70DC0CD3-BC35-414D-B174-FBC65B0A833A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{7879A54A-BEBD-4FE7-953B-4E844C01B249}" = protocol=6 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |
"{7A14E890-9AA1-4AEC-B983-9833EE2C1DCE}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd9.exe |
"{92843AA5-3413-49A1-AA86-7B6528EF73CA}" = dir=in | app=c:\program files (x86)\dell\videostage\videostage.exe |
"{92F9DDCF-DB7A-4A6B-8E3C-F3703DC936B5}" = dir=in | app=c:\program files (x86)\cyberlink\remotemedia\remotemedia.exe |
"{946CEAE3-4506-402C-AC6A-BE47EC6B401F}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{950BDAAE-23EE-40E7-B91D-B78439E1FA14}" = protocol=6 | dir=out | app=system |
"{9F0DFE9B-A7A0-41DC-AC3D-E6DD36398D52}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\installerhelp.exe |
"{9FA321A0-0159-49E0-ADD1-9CD8C6EBD5A5}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{A1B1359A-85C2-45A4-A456-1B83FCB269FC}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A4562522-34E5-4244-A12A-0BFD8E0F942F}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{A64B1956-F905-4712-8FB6-355C581C51D5}" = protocol=6 | dir=in | app=c:\program files (x86)\sony mobile\update engine\sony mobile update engine.exe |
"{AB49D91E-E421-4C57-9EA4-57C41C399F6A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{AD5BFE3B-7209-4C49-8D28-7E2C04337D38}" = protocol=17 | dir=in | app=c:\program files (x86)\sony mobile\update engine\sony mobile update engine.exe |
"{AFC355A4-2F6B-402B-B2C2-E4E2E405EA77}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\stageremoteservice.exe |
"{B0E3CF43-F6F4-4FC3-9E80-752983BC3275}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{B11F8AAD-37A5-4B53-9050-8F5A0423D586}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{B2633335-1949-4AC4-A4BE-27847C663188}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{BBD3DA18-FA59-4B91-BDF0-1390306AD91C}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{C979451C-3C5B-4582-BAAF-273B4F6E19F3}" = dir=in | app=c:\program files (x86)\cyberlink\mediasharing\mediasharing.exe |
"{CBDCC3DF-AC86-4596-BA19-B0C326AAA5D0}" = dir=in | app=c:\program files\dell stage\dell stage\stage_primary.exe |
"{D088A505-8758-46B6-8A46-0C1A45A604B8}" = protocol=17 | dir=in | app=c:\program files (x86)\dell\stage remote\dmr.exe |
"{D6B2B20C-18A8-4E1D-8CB9-A109D6042385}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{D9348976-DE9B-4B43-A407-63B9A1048C81}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DAA48359-FEE8-4612-8BCB-4501FAA0ED11}" = dir=in | app=c:\program files\dell stage\dell stage\accuweather\accuweather.exe |
"{EAEFEE9F-5984-4BE2-BAAF-81589B98AAA8}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{F08F18FF-F76F-4E9C-8EF0-C656577D5B02}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F33558FB-A7F7-4E11-BE8A-92E24F29CC2C}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe |
"{FF139327-04E7-437D-9EFE-34FDA074D788}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{6DDAE7CE-176A-4967-BA0F-1240111C862F}C:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe" = protocol=6 | dir=in | app=c:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe |
"TCP Query User{7C91505E-AF84-4D50-993D-A925B075DB26}C:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe" = protocol=6 | dir=in | app=c:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe |
"UDP Query User{2FF62B5E-AB2F-4DAF-92AD-A02C371D7C88}C:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe" = protocol=17 | dir=in | app=c:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe |
"UDP Query User{3DA82CA5-683B-49A8-8A4A-1E3F9F2F4AD7}C:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe" = protocol=17 | dir=in | app=c:\users\banzabu6\appdata\local\gizmo2\data\deck\peta\peta.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{0AFC35F8-CBCF-4E4D-B098-34739BC8C25A}" = FastAccess
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG7100_series" = Canon MG7100 series MP Drivers
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP970_series" = Canon MP970 series
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2412" = CanoScan LiDE 90
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1F72FDD5-A069-45B4-928F-D0F16492DC69}" = Apple Application Support（64 ビット）
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel(R) Wireless Display
"{2ABA2E8D-23CF-418F-BC8F-2EC99FA51A3F}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}" = Bonjour
"{57019733-78E6-43DE-8E6D-55349F0FDE6F}" = inSSIDer 2.0
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{709A2D23-C25E-47B5-9268-CB6FEE648504}" = iCloud
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96984DE8-1DB8-425C-AC8C-3098BC696F04}" = iTunes
"{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision ドライバー 285.77
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA コントロールパネル 285.77
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA グラフィックスドライバー 285.77
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.5.21
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0
"{D61E4101-9E15-4D0E-ABD1-1ABD36B43330}" = インテル(R) PROSet/Wireless WiFi ソフトウェア
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64
"{F1F01B31-84D4-4FD1-8235-26E36CBBB18F}" = SignalNow Express
"{FD244E19-6EFE-4A2D-948A-0D45D4C168BE}" = Apple Mobile Device Support
"CCleaner" = CCleaner
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02FECEE0-16B2-43DB-BC3B-C844477FC142}" = カスペルスキーインターネットセキュリティ
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0DD706AF-B542-438C-999E-B30C7F625C8D}" = Intel(R) WiDi
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{125192C3-E702-4BA4-BBD8-C79A24CFFEB9}" = ペタろう
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{14BF28ED-011F-64B1-F830-A5D351E6ACDB}" = Media Go Video Playback Engine 2.12.105.06300
"{15D95497-8F76-41E5-8894-EDDB59E39BD9}" = Windows Live メール
"{162B6299-BB26-416A-AF4C-0F24A843A9E8}" = SignalNow Express
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{223469C7-3B3F-4D18-AB4A-4F4B298D0DB2}" = x-APPLICATION Components
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83218060F0}" = Java 8 Update 60
"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{31582519-4FF8-4ED9-BD28-CB0C44CD7060}" = 読取革命Lite
"{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{3BB91D6B-258C-44E7-B5D1-55031D3C22BD}" = x-アプリ
"{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}" = SyncUP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5562F05F-908C-4F15-9B3C-98D5FD32DCAB}" = Media Go Network Downloader
"{561A6F14-EDFB-43FC-9803-CAD174D08F26}" = Sony Media Library Earth 9.2.00
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{675D8E1E-2388-4718-902C-E5FC4888AC0E}" = Windows Live Essentials
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7746BFAA-2B5D-4FFD-A0E8-4558F4668105}" = Roxio Burn
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7EC66A95-AC2D-4127-940B-0445A526AB2F}" = Dell DataSafe Online
"{7FB00B6B-6843-97EC-EED6-78BD6D35370A}" = Zinio Reader 4
"{820B6609-4C97-3A2B-B644-573B06A0F0CC}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{88A686A9-D687-4295-B633-50D8A4B88371}" = Windows Live Writer Resources
"{8A66A2C8-0032-4949-8D99-C293A3EACF79}" = Windows Live Photo Common
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
"{90110411-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0411-0000-0000000FF1CE}" = 2007 Office system 互換機能パック
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9193490D-5229-4FC4-9BB9-A6D63C09574A}" = High-Definition Video Playback
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A50679D9-6CBD-4FCD-BACB-62EF3894F6F3}" = Apple Application Support（32 ビット）
"{A6C4FB40-FB0F-45A8-9C5D-4BCE7433E1EB}" = 筆まめ Ver.14
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = RemoteMedia
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-0804-1033-1959-001824157129}" = Adobe Refresh Manager
"{AF06B8FA-B916-4001-AE51-6645488DEF09}" = Media Go
"{AF4D3C63-009B-4A17-B02E-D395065DD3F0}" = Dell Stage Remote
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B1563C32-42DF-4E94-B04A-C12D0759ED0B}" = MeoTV
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{BAF0CA91-4642-46C8-9BCD-C93B61508701}" = リモート接続用の Windows Live Mesh ActiveX コントロール (日本語)
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C2F96794-6450-4935-BB46-67813BA3383C}" = Dell Stage
"{ce085a78-074e-4823-8dc1-8a721b94b76d}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D4041395-E8ED-42DA-BFFF-54E092191ADB}" = Dell ミュージックステージ
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D92C9CCE-E5F0-4125-977A-0590F3225B74}" = SyncUP
"{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4335E82-17B3-460F-9E70-39D9BC269DB3}" = Dell PhotoStage
"{EE408577-9C0E-4E5F-BCB2-DB5B3A220958}" = Windows Live UX Platform Language Pack
"{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter
"{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.275
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}" = Apple Software Update
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 19 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 19 NPAPI
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Canon MG7100 series On-screen Manual" = Canon MG7100 series On-screen Manual
"Canon My Image Garden" = Canon My Image Garden
"Canon My Image Garden Design Files" = Canon My Image Garden Design Files
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_Scanner_Selector_EX" = Canon IJ Network Scanner Selector EX
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"Canon_IJ_Scan_Utility" = Canon IJ Scan Utility
"CanonMyPrinter" = Canon マイプリンタ
"CanonQuickMenu" = Canon Quick Menu
"Dell Webcam Central" = Dell Webcam Central
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"Google Chrome" = Google Chrome
"InstallShield_{3BB91D6B-258C-44E7-B5D1-55031D3C22BD}" = x-アプリ 6.0.01
"InstallShield_{561A6F14-EDFB-43FC-9803-CAD174D08F26}" = Sony Media Library Earth 9.2.00
"InstallShield_{A6C4FB40-FB0F-45A8-9C5D-4BCE7433E1EB}" = 筆まめ Ver.14
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage
"InstallWIX_{02FECEE0-16B2-43DB-BC3B-C844477FC142}" = カスペルスキーインターネットセキュリティ
"LINE" = LINE
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware バージョン 1.75.0.1300
"MobileWiFi" = MobileWiFi
"Mozilla Firefox 41.0.2 (x86 ja)" = Mozilla Firefox 41.0.2 (x86 ja)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"ProInst" = Intel PROSet Wireless
"Update Engine" = Sony Mobile Update Engine
"WinLiveSuite" = Windows Live Essentials
"ZinioReader4" = Zinio Reader 4

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2015/07/14 13:20:44 | Computer Name = banzabu6-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2106

Error - 2015/07/14 13:21:01 | Computer Name = banzabu6-PC | Source = Application Error | ID = 1000
Description = 障害が発生しているアプリケーション名: GWXUX.exe、バージョン: 6.3.9600.17813、タイムスタンプ: 0x554a15f3
障害が発生しているモジュール名:
mshtml.dll、バージョン: 11.0.9600.17842、タイムスタンプ: 0x5565d4c6 例外コード: 0xc0000005 障害オフセット:
0x0000000000009296 障害が発生しているプロセス ID: 0x5bda0 障害が発生しているアプリケーションの開始時刻: 0x01d0be5973d2a908
障害が発生しているアプリケーション
パス: C:\Windows\System32\GWX\GWXUX.exe 障害が発生しているモジュールパス: C:\Windows\System32\mshtml.dll
レポート
ID: b2bd6907-2a4c-11e5-a3d0-00dbdf0f65a3

Error - 2015/07/15 4:54:48 | Computer Name = banzabu6-PC | Source = WinMgmt | ID = 10
Description =

Error - 2015/07/15 14:10:33 | Computer Name = banzabu6-PC | Source = WinMgmt | ID = 10
Description =

Error - 2015/07/15 14:11:02 | Computer Name = banzabu6-PC | Source = WinMgmt | ID = 10
Description =

Error - 2015/07/17 4:36:58 | Computer Name = banzabu6-PC | Source = WinMgmt | ID = 10
Description =

Error - 2015/07/17 13:29:12 | Computer Name = banzabu6-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2015/07/17 13:29:12 | Computer Name = banzabu6-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2964

Error - 2015/07/17 13:29:12 | Computer Name = banzabu6-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2964

Error - 2015/07/19 9:24:36 | Computer Name = banzabu6-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 2015/10/19 9:07:33 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 9:07:33 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 9:07:33 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 10:26:56 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 10:44:07 | Computer Name = banzabu6-PC | Source = DCOM | ID = 10005
Description =

Error - 2015/10/19 10:44:07 | Computer Name = banzabu6-PC | Source = DCOM | ID = 10005
Description =

Error - 2015/10/19 10:44:07 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 10:44:26 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 10:46:12 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2015/10/19 10:47:34 | Computer Name = banzabu6-PC | Source = Service Control Manager | ID = 7000
Description = McAfee SiteAdvisor Service サービスを、次のエラーが原因で開始できませんでした: %%2

< End of report >

ばんぶー
MAIL
2015/10/31 (Sat) 18:23:48

返信フォームへ

OTLから掃除しましょう

作業と報告、ご苦労様です。
お忙しかったようですが、こちらのほうはお時間と余裕ある時にレスくれればいいです。

OTLスキャンログも見せてもらいました。
では早速次の作業です。
今度はOTLを使っての処置します。

このレスの最後にスクリプトを貼っておくので、それを丸ごとコピーして、それをWindowsのメモ帳ファイルに貼り付けて保存しておいてください。

用意できたらPCをまたセーフモードで再起動してOTL起動してください。
起動したらOTLのウインドウ下部にスクリプトを貼り付けて、今度は「Run fix」（赤字のボタン）を押してください。
これでOTLでの処置が開始されます。

しばらく待って処置ができたらPCを通常モードで再起動すると、またOTLのログが出るはずなので、それを保存してから、しばらく様子見の後、OTLのログとともに状態報告をレスください。
OTLのスクリプトは以下になります。破線(-----)を含まない箇所を丸ごとコピーして、それをOTLに貼って作業してください
------------------------------------------
:OTL
PRC - [2015/10/31 17:31:14 | 000,997,704 | ---- | M] (Google Inc.) -- C:\Windows\Temp\CR_028D7.tmp\setup.exe
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{5187BAC4-567A-47BF-A050-49B0F467AAA7}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
IE - HKLM\..\SearchScopes,DefaultScope = {5187BAC4-567A-47BF-A050-49B0F467AAA7}
IE - HKLM\..\SearchScopes\{5187BAC4-567A-47BF-A050-49B0F467AAA7}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDR&src=IE-SearchBox
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ja-JP
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C2 58 A0 33 8C 5E CD 01 [binary data]
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\..\SearchScopes,DefaultScope = {33117B6F-BED5-4A62-BD11-C7EA4CB809E1}
IE - HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\..\SearchScopes\{33117B6F-BED5-4A62-BD11-C7EA4CB809E1}: "URL" = http://search.yahoo.co.jp/search?ei=UTF-8&fr=mcafeess1&p={searchTerms}
FF - prefs.js..browser.startup.homepage: "chrome://fastdial/content/fastdial.html"
FF - prefs.js..extensions.enabledAddons: %7B8b5bea8c-6194-4c7c-a440-d5ca181480c3%7D:1.300.436.6
CHR - Extension: No name found = C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\
[2015/10/17 23:14:54 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{F83F67FA-22FE-4635-B25A-5974F7DCB39B}
[2015/10/17 10:45:27 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{FA238EE0-9852-410C-A1B7-197A3E7B814B}
[2015/10/16 20:55:27 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{93617867-0D46-4509-99A3-E1CE77C1B524}
[2015/10/15 20:01:48 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{21F3CA99-3F45-4B2E-854E-7AE3B8B52B05}
[2015/10/14 06:55:07 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{4129140C-73AF-46E2-98BC-1CF1E471F816}
[2015/10/12 23:20:12 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{583C8EB9-534F-4A11-A724-C73B93503728}
[2015/10/11 23:42:58 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{047F40FA-5074-4348-8135-5BD8C2A4BE91}
[2015/10/07 18:39:01 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{D2334F8A-D628-4DBD-ADDF-74EACFD30720}
[2015/10/05 23:35:42 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{E727370A-6618-49DC-84B1-DC4A966B836D}
[2015/10/04 20:27:18 | 000,000,000 | ---D | C] -- C:\Users\banzabu6\AppData\Local\{D14C1B75-4F7B-40AA-8725-421429861535}

:Files
C:\Windows\Temp\CR_028D7.tmp
C:\Users\banzabu6\AppData\Local\{F83F67FA-22FE-4635-B25A-5974F7DCB39B}
C:\Users\banzabu6\AppData\Local\{FA238EE0-9852-410C-A1B7-197A3E7B814B}
C:\Users\banzabu6\AppData\Local\{93617867-0D46-4509-99A3-E1CE77C1B524}
C:\Users\banzabu6\AppData\Local\{21F3CA99-3F45-4B2E-854E-7AE3B8B52B05}
C:\Users\banzabu6\AppData\Local\{4129140C-73AF-46E2-98BC-1CF1E471F816}
C:\Users\banzabu6\AppData\Local\{583C8EB9-534F-4A11-A724-C73B93503728}
C:\Users\banzabu6\AppData\Local\{047F40FA-5074-4348-8135-5BD8C2A4BE91}
C:\Users\banzabu6\AppData\Local\{D2334F8A-D628-4DBD-ADDF-74EACFD30720}
C:\Users\banzabu6\AppData\Local\{E727370A-6618-49DC-84B1-DC4A966B836D}
C:\Users\banzabu6\AppData\Local\{D14C1B75-4F7B-40AA-8725-421429861535}

:Commands
[purity]
[resethosts]
[emptytemp]
[createrestorepoint]
[reboot]
------------------------------------------

悪代官
2015/10/31 (Sat) 21:54:08

返信フォームへ

Re: LaSuperbaの件

お疲れ様です。
OTL処置以降、しばらく様子を見ていますが、
LaSuperbaの広告は今のところ見かけません。
また、以前あったリロードの繰り返しも表面上
は見えません。
とりあえずログを送ります。よろしくお願いします。

All processes killed
========== OTL ==========
No active process named setup.exe was found!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5187BAC4-567A-47BF-A050-49B0F467AAA7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5187BAC4-567A-47BF-A050-49B0F467AAA7}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5187BAC4-567A-47BF-A050-49B0F467AAA7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5187BAC4-567A-47BF-A050-49B0F467AAA7}\ not found.
HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs| /E : value set successfully!
HKU\S-1-5-21-1013665564-3434395393-1885991050-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
HKEY_USERS\S-1-5-21-1013665564-3434395393-1885991050-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-1013665564-3434395393-1885991050-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33117B6F-BED5-4A62-BD11-C7EA4CB809E1}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33117B6F-BED5-4A62-BD11-C7EA4CB809E1}\ not found.
Prefs.js: "chrome://fastdial/content/fastdial.html" removed from browser.startup.homepage
Prefs.js: %7B8b5bea8c-6194-4c7c-a440-d5ca181480c3%7D:1.300.436.6 removed from extensions.enabledAddons
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_metadata folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\zh_TW folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\zh_CN folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\zh-Hant folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\vi folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\uk folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\tr folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\sv folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\sr folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\sq folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\ru folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\ro folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\pt_PT folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\pt_BR folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\pl folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\no folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\nl folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\mk folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\lv folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\lt folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\ko folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\ja folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\it folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\id folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\hu folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\fr folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\fi folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\fa folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\et folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\es_419 folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\es folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\en folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\el folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\de folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\da folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\cs folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\bg folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales\ar folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\_locales folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\pages folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\images folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\content_scripts\vk folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\content_scripts\ua folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\content_scripts\cb folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\content_scripts folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\vk folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\ua folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\ob folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\manageability folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\common folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\cb folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background\ab folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\background folder moved successfully.
C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0 folder moved successfully.
C:\Users\banzabu6\AppData\Local\{F83F67FA-22FE-4635-B25A-5974F7DCB39B} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{FA238EE0-9852-410C-A1B7-197A3E7B814B} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{93617867-0D46-4509-99A3-E1CE77C1B524} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{21F3CA99-3F45-4B2E-854E-7AE3B8B52B05} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{4129140C-73AF-46E2-98BC-1CF1E471F816} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{583C8EB9-534F-4A11-A724-C73B93503728} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{047F40FA-5074-4348-8135-5BD8C2A4BE91} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{D2334F8A-D628-4DBD-ADDF-74EACFD30720} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{E727370A-6618-49DC-84B1-DC4A966B836D} folder moved successfully.
C:\Users\banzabu6\AppData\Local\{D14C1B75-4F7B-40AA-8725-421429861535} folder moved successfully.
========== FILES ==========
C:\Windows\Temp\CR_028D7.tmp folder moved successfully.
File\Folder C:\Users\banzabu6\AppData\Local\{F83F67FA-22FE-4635-B25A-5974F7DCB39B} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{FA238EE0-9852-410C-A1B7-197A3E7B814B} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{93617867-0D46-4509-99A3-E1CE77C1B524} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{21F3CA99-3F45-4B2E-854E-7AE3B8B52B05} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{4129140C-73AF-46E2-98BC-1CF1E471F816} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{583C8EB9-534F-4A11-A724-C73B93503728} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{047F40FA-5074-4348-8135-5BD8C2A4BE91} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{D2334F8A-D628-4DBD-ADDF-74EACFD30720} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{E727370A-6618-49DC-84B1-DC4A966B836D} not found.
File\Folder C:\Users\banzabu6\AppData\Local\{D14C1B75-4F7B-40AA-8725-421429861535} not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: banzabu6
->Temp folder emptied: 14422299 bytes
->Temporary Internet Files folder emptied: 14641022 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 322380576 bytes
->Google Chrome cache emptied: 103599592 bytes
->Flash cache emptied: 721 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56466 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 722739386 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42304116 bytes
RecycleBin emptied: 39653263738 bytes

Total Files Cleaned = 38,980.00 mb

Unable to start System Restore Service. Error code 1084

OTL by OldTimer - Version 3.2.69.0 log created on 10312015_232228

Files\Folders moved on Reboot...
C:\Users\banzabu6\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\banzabu6\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

ばんぶー
MAIL
2015/10/31 (Sat) 23:59:10

返信フォームへ

ここでログから全体の再確認です

作業と報告、ご苦労様です。

>OTL処置以降、しばらく様子を見ていますが、
>LaSuperbaの広告は今のところ見かけません。
>また、以前あったリロードの繰り返しも表面上
>は見えません。

はい、ログでも処置はできたようです。
各エントリともsuccessfully（処置成功）になってますね。

ではここで各ログから全体の見直ししましょう。
お手数ですがCCで各タブのログとインストール情報と、HJTログを取り直して、それらをまた見せてください

悪代官
2015/11/01 (Sun) 19:50:36

返信フォームへ

Re: LaSuperbaの件

お疲れ様です。
状況は変わらず広告等は出ております。

早速ですがログを送ります。
よろしくお願いします。

cc

インストール情報
2007 Office system 互換機能パック Microsoft Corporation 2015/10/14 361 MB 12.0.6612.1000
AccelerometerP11 STMicroelectronics 2012/06/27 2.00.11.22
Adobe AIR Adobe Systems Incorporated 2012/06/28 2.6.0.19120
Adobe Flash Player 19 ActiveX Adobe Systems Incorporated 2015/10/17 3.43 MB 19.0.0.226
Adobe Flash Player 19 NPAPI Adobe Systems Incorporated 2015/10/17 3.81 MB 19.0.0.226
Adobe Reader X (10.1.16) MUI 2015/10/14
Advanced Audio FX Engine Creative Technology Ltd 2012/06/28 1.12.05
Apple Application Support（32 ビット） Apple Inc. 2015/11/01 114 MB 4.1
Apple Application Support（64 ビット） Apple Inc. 2015/11/01 128 MB 4.1
Apple Mobile Device Support Apple Inc. 2015/11/01 28.0 MB 9.1.0.6
Apple Software Update Apple Inc. 2015/09/26 2.40 MB 2.1.4.131
Bonjour Apple Inc. 2015/09/26 2.01 MB 3.1.0.1
Canon Easy-WebPrint EX Canon Inc. 2014/05/15 1.4.1.0
Canon IJ Network Scan Utility 2012/08/25
Canon IJ Network Scanner Selector EX Canon Inc. 2014/05/15
Canon IJ Network Tool Canon Inc. 2014/05/15 3.3.0
Canon IJ Scan Utility Canon Inc. 2014/05/15
Canon MG7100 series MP Drivers Canon Inc. 2014/05/15 1.00
Canon MG7100 series On-screen Manual Canon Inc. 2014/05/15 7.6.1
Canon MP970 series 2012/08/25
Canon My Image Garden Canon Inc. 2014/05/15 2.0.1
Canon My Image Garden Design Files Canon Inc. 2014/05/15 2.0.0
Canon Quick Menu Canon Inc. 2014/05/15 2.2.1
Canon マイプリンタ Canon Inc. 2014/05/15 3.1.0
CanoScan LiDE 90 2012/08/25
CCleaner Piriform 2015/10/17 5.10
CyberLink PowerDVD 9.6 CyberLink Corp. 2012/06/27 9.6.1.4827
Dell DataSafe Local Backup Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Local Backup - Support Software Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Online Dell 2012/06/27 6.46 MB 2.1.19634
Dell Getting Started Guide Dell Inc. 2012/06/27 1.00.0000
Dell PhotoStage ArcSoft 2012/06/27 165 MB 1.5.0.130
Dell Stage Fingertapps 2012/06/27 1.7.209.0
Dell Stage Remote ArcSoft 2012/06/27 80.8 MB 2.0.0.43
Dell VideoStage CyberLink Corp. 2012/06/27 1.3.0.2513
Dell Webcam Central Creative Technology Ltd 2012/06/28 2.00.44
Dell ミュージックステージ Fingertapps 2012/06/27 1.6.225.0
Google Chrome Google Inc. 2014/05/31 46.0.2490.80
iCloud Apple Inc. 2015/11/01 119 MB 5.0.2.61
inSSIDer 2.0 MetaGeek 2012/07/08 3.55 MB 2.0.7
Intel(R) Control Center Intel Corporation 2013/06/29 1.2.1.1007
Intel(R) Management Engine Components Intel Corporation 2013/10/15 7.0.0.1144
Intel(R) Processor Graphics Intel Corporation 2013/10/09 8.15.10.2455
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology Intel Corporation 2012/06/27 90.1 MB 1.2.1.0608
Intel(R) WiDi Intel Corporation 2012/06/27 139 MB 2.1.39.0
iTunes Apple Inc. 2015/11/01 218 MB 12.3.1.23
Java 8 Update 60 Oracle Corporation 2015/09/26 88.4 MB 8.0.600.27
LG United Mobile Driver LG Electronics 2012/09/12 2.2
LINE NHN Japan 2013/03/20 3.1.4.73
Malwarebytes Anti-Malware バージョン 1.75.0.1300 Malwarebytes Corporation 2015/10/19 19.2 MB 1.75.0.1300
Media Go Sony 2014/12/07 148 MB 2.8.303
Media Go Network Downloader Sony 2014/09/28 1.33 MB 1.5.19.0
Media Go Video Playback Engine 2.12.105.06300 Sony 2015/03/26 21.0 MB 2.12.105.06300
MeoTV TAXAN 2013/09/03 4.95 MB 12.8.10
Microsoft .NET Framework 4.5.2 Microsoft Corporation 2015/09/26 38.8 MB 4.5.51209
Microsoft Office File Validation Add-In Microsoft Corporation 2014/05/15 10.9 MB 14.0.5130.5003
Microsoft Office Professional Edition 2003 Microsoft Corporation 2014/04/10 1.21 GB 11.0.8173.0
Microsoft Silverlight Microsoft Corporation 2015/08/13 348 MB 5.1.40728.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 2012/07/09 298 KB 8.0.61001
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 2012/06/27 788 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 2012/07/09 788 KB 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 2012/06/27 598 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 2012/06/27 596 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 2012/06/27 595 KB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 2012/07/09 600 KB 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Corporation 2012/07/14 11.0 MB 10.0.30319
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 Microsoft Corporation 2015/10/04 11.0.51106.1
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 2015/02/12 17.3 MB 11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Corporation 2014/09/28 17.1 MB 12.0.21005.1
MobileWiFi Huawei Technologies Co.,Ltd 2014/05/24 TOOL-ConnLaucher_WIN1.09.02.00
Mozilla Firefox 41.0.2 (x86 ja) Mozilla 2015/10/18 92.7 MB 41.0.2
Mozilla Maintenance Service Mozilla 2015/10/18 250 KB 41.0.2
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 2012/07/03 1.27 MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 2012/07/03 1.33 MB 4.20.9876.0
NVIDIA 3D Vision ドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
NVIDIA グラフィックスドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
Quickset64 Dell Inc. 2012/06/27 11.0.10
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 2012/06/27 6.0.1.6312
RemoteMedia CyberLink Corp. 2012/06/28 1.6.6622
Roxio Creator Starter Roxio 2012/06/28 1.63 GB 12.1.77.0
Shared C Run-time for x64 McAfee 2012/10/26 2.78 MB 10.0.0
SignalNow Express ストラテジー株式会社 2015/03/11 2.0.0.0
SignalNow Express ストラテジー株式会社 2012/07/03 5.08 MB 1.30.1
Skype Click to Call Microsoft Corporation 2015/10/15 13.2 MB 7.5.0.9082
Sony Media Library Earth 9.2.00 Sony Corporation 2015/03/27 49.5 MB 9.2.00.01271
Sony Mobile Update Engine Sony Mobile Communications Inc. 2015/07/26 2.15.10.201507101148
Sony PC Companion 2.10.275 Sony 2015/07/10 21.2 MB 2.10.275
Synaptics Pointing Device Driver Synaptics Incorporated 2012/06/28 46.4 MB 15.2.6.0
SyncUP Nero AG 2012/06/27 288 MB 10.2.16500
Windows Live Essentials Microsoft Corporation 2012/07/14 15.4.3555.0308
Windows Media Player Firefox Plugin Microsoft Corp 2012/09/30 296 KB 1.0.0.8
x-アプリ 6.0.01 Sony Corporation 2015/03/27 88.5 MB 10.0.01
Zinio Reader 4 Zinio LLC 2012/06/28 4.2.4164
インテル(R) PROSet/Wireless WiFi ソフトウェア Intel Corporation 2012/06/27 136 MB 14.03.0000
インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0 インテル 2012/06/27 2.1.23.0
カスペルスキーインターネットセキュリティ Kaspersky Lab 2015/10/05 15.0.2.396
ペタろう株式会社ants 2012/07/08 1.74 MB 5.30.2
リモート接続用の Windows Live Mesh ActiveX コントロール (日本語) Microsoft Corporation 2012/06/27 5.57 MB 15.4.5722.2
筆まめ Ver.14 販売元：株式会社クレオ　開発元：株式会社モーリン 2012/12/23 278 MB 14.00.0000
読取革命Lite パナソニックソリューションテクノロジー株式会社 2014/05/15 38.4 MB 1.15.0000

スタートアップ
有効 HKCU:Run CCleaner Monitoring Piriform Ltd "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
有効 HKCU:Run iCloudDrive Apple Inc. C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
有効 HKCU:Run iCloudServices Apple Inc. C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
有効 HKCU:Run Mobile Partner C:\Program Files (x86)\MobileWiFi\MobileWiFi
有効 HKCU:Run Sidebar Microsoft Corporation C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
有効 HKLM:Run AccuWeatherWidget Unlimited Realities "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
有効 HKLM:Run APSDaemon Apple Inc. "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
有効 HKLM:Run BDRegion cyberlink c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
有効 HKLM:Run BTMTrayAgent Microsoft Corporation rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
有効 HKLM:Run CanonQuickMenu CANON INC. C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
有効 HKLM:Run Dell DataSafe Online Dell, Inc. C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
有効 HKLM:Run Dell Webcam Central Creative Technology Ltd "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
有効 HKLM:Run DellStage Unlimited Realities "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup
有効 HKLM:Run Desktop Disc Tool Sonic Solutions "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
有効 HKLM:Run FreeFallProtection STMicroelectronics C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
有効 HKLM:Run HotKeysCmds Intel Corporation C:\Windows\system32\hkcmd.exe
有効 HKLM:Run IgfxTray Intel Corporation C:\Windows\system32\igfxtray.exe
有効 HKLM:Run IJNetworkScannerSelectorEX CANON INC. C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
有効 HKLM:Run IJNetworkScanUtility CANON INC. C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
有効 HKLM:Run IntelPAN Intel(R) Corporation "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
有効 HKLM:Run IntelTBRunOnce Microsoft Corporation wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
有効 HKLM:Run iTunesHelper Apple Inc. "C:\Program Files\iTunes\iTunesHelper.exe"
有効 HKLM:Run mcui_exe "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
有効 HKLM:Run NeroLauncher Nero AG C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
有効 HKLM:Run NVHotkey Microsoft Corporation rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
有効 HKLM:Run PDVD9LanguageShortcut CyberLink Corp. "c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
有効 HKLM:Run Persistence Intel Corporation C:\Windows\system32\igfxpers.exe
有効 HKLM:Run QuickSet Dell Inc. c:\Program Files\Dell\QuickSet\QuickSet.exe
有効 HKLM:Run RemoteControl9 CyberLink Corp. "c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
有効 HKLM:Run RoxWatchTray Sonic Solutions "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
有効 HKLM:Run RtHDVBg Realtek Semiconductor C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3
有効 HKLM:Run RTHDVCPL Realtek Semiconductor C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
有効 HKLM:Run Stage Remote ArcSoft, Inc. C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet
有効 HKLM:Run SunJavaUpdateSched Oracle Corporation "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
有効 HKLM:Run SynTPEnh Synaptics Incorporated %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
有効 Startup Common SignalNowExpress.lnk ストラテジー株式会社 C:\Program Files (x86)\ストラテジー株式会社\SignalNow Express\SignalNowExpress.exe
有効 Startup User インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0.lnk Intel® Corporation C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe

ie
有効 Extension Skype Click to Call settings Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
有効 Extension Skype Click to Call settings Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
有効 Extension リサーチ Microsoft Corporation C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
無効 Helper Canon Easy-WebPrint EX BHO CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
無効 Helper Canon Easy-WebPrint EX BHO CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll
有効 Helper Content Blocker Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
有効 Helper Content Blocker Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll
有効 Helper Java(tm) Plug-In 2 SSV Helper Oracle Corporation C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
有効 Helper Java(tm) Plug-In SSV Helper Oracle Corporation C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
有効 Helper Safe Money Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
有効 Helper Safe Money Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll
無効 Helper Skype Click to Call for Internet Explorer Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
無効 Helper Skype Click to Call for Internet Explorer Microsoft Corporation C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
有効 Helper Virtual Keyboard Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
有効 Helper Virtual Keyboard Plugin Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll
有効 Helper Windows Live ID Sign-in Helper Microsoft Corp. C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
有効 Helper Windows Live ID サインインヘルパー Microsoft Corp. C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
無効 Toolbar Canon Easy-WebPrint EX CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
無効 Toolbar Canon Easy-WebPrint EX CANON INC. C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll

Firefox
有効 Extension 4.5.1.379 default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com
有効 Extension Adblock Plus 2.6.11 Wladimir Palant default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
有効 Extension Fast Dial 4.12.1-signed telega default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\fastdial@telega.phpnet.us
有効 Extension Skype Click to Call 7.5.0.9082 Microsoft Corporation default Firefox 41.0.2 C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi
有効 Extension 楽天ツールバー 1.300.436.6 讌ｽ螟ｩ譬ｪ蠑丈ｼ夂､ｾ default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi
有効 Plugin 0 default Firefox 41.0.2
有効 Plugin CANON iMAGE GATEWAY Album Plugin Utility for IJ 5.0.0.0 CANON INC. default Firefox 41.0.2 C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
有効 Plugin Content Blocker KAV 4.5.1.379 Kaspersky Lab default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
有効 Plugin Google Update 1.3.28.15 Google Inc. default Firefox 41.0.2 C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
有効 Plugin iTunes Application Detector 1.0.1.1 Apple Inc. default Firefox 41.0.2 C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
有効 Plugin Java Deployment Toolkit 8.0.600.27 11.60.2.27 Oracle Corporation default Firefox 41.0.2 C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npdeployJava1.dll
有効 Plugin Java(TM) Platform SE 8 U60 11.60.2.27 Oracle Corporation default Firefox 41.0.2 C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll
有効 Plugin NVIDIA 3D Vision 7.17.12.8577 NVIDIA Corporation default Firefox 41.0.2 C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
有効 Plugin NVIDIA 3D VISION 7.17.12.8577 NVIDIA Corporation default Firefox 41.0.2 C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
有効 Plugin Online Banking KAV 4.5.1.379 Kaspersky Lab default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
有効 Plugin OpenH264 Video Codec 1.4 default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\gmp-gmpopenh264\1.4\gmpopenh264.dll
有効 Plugin Shockwave Flash 16.0.0.296 Adobe Systems Incorporated default Firefox 41.0.2 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll
有効 Plugin Shockwave Flash 19.0.0.226 Adobe Systems Incorporated default Firefox 41.0.2 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll
有効 Plugin Silverlight Plug-In 5.1.40728.0 Microsoft Corporation default Firefox 41.0.2 C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll
有効 Plugin Virtual Keyboard KAV 4.5.1.379 Kaspersky Lab default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll

chrome
有効 App Gmail 8.1 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0
有効 App Google Search 0.0.0.30 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0
有効 App Google ドライブ 14.0 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0
有効 App YouTube 4.2.8 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0
有効 Extension Google オフラインドキュメント 1.0 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.0_0
有効 Extension Google ドキュメント 0.9 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0
有効 Extension カスペルスキープラグイン 4.0.9.130 最初のユーザー C:\Users\banzabu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0

スケジュール
有効 Task Adobe Flash Player Updater Adobe Systems Incorporated C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
有効 Task CCleanerSkipUAC Piriform Ltd "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
有効 Task GoogleUpdateTaskMachineCore Google Inc. C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
有効 Task GoogleUpdateTaskMachineUA Google Inc. C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
有効 Task {0F330042-CC9F-4E7F-A413-F9F755F7A650} Microsoft Corporation C:\Windows\system32\pcalua.exe -a C:\Users\banzabu6\Downloads\EX-S600_102.exe -d "C:\Program Files (x86)\Mozilla Firefox"
有効 Task {D9656429-8EB7-4CCD-B31B-E5466FE07E8B} Microsoft Corporation C:\Windows\system32\pcalua.exe -a C:\Users\banzabu6\Downloads\mp970swin64102ej.exe -d C:\Users\banzabu6\Downloads

コンテキストメニュー
有効 Directory Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 Drive Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 File BTMSentToExt Intel Corporation C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll
有効 File Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 File MBAMShlExt Malwarebytes Corporation C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
有効 File PhotoStreamsExt Apple Inc. C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
有効 File Roxio Burn TODO: <Company name> C:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll
有効 Folder Kaspersky Anti-Virus 15.0.2 Kaspersky Lab ZAO C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\shellex.dll
有効 Folder MBAMShlExt Malwarebytes Corporation C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll

HJT
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 20:43:17, on 2015/11/01
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18057)

FIREFOX: 41.0.2 (x86 ja)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Program Files (x86)\Nero\SyncUP\Nero.AndroidServer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\banzabu6\Downloads\HijackThis(1).exe

F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll
O2 - BHO: Windows Live ID サインインヘルパー - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ContentBlockerBrowserHelperObject - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: Safe Money Plugin - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
O4 - HKLM\..\Run: [RemoteControl9] "c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [NeroLauncher] C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
O4 - HKLM\..\Run: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [Mobile Partner] C:\Program Files (x86)\MobileWiFi\MobileWiFi
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - Startup: インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0.lnk = C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe
O4 - Global Startup: SignalNowExpress.lnk = ?
O9 - Extra button: セキュリティキーボード - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: リサーチ - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
O18 - Protocol: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\Windows\SysWOW64\urlmon.dll
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\msvidctl.dll
O18 - Protocol hijack: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B}
O18 - Protocol hijack: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B}
O18 - Protocol hijack: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B}
O18 - Protocol: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\SysWOW64\urlmon.dll
O18 - Protocol hijack: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6}
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
O18 - Protocol: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\SysWOW64\urlmon.dll
O18 - Protocol: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Protocol hijack: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B}
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Protocol hijack: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol hijack: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: McAfee Application Installer Cleanup (0323541431150564) (0323541431150564mcinstcleanup) - Unknown owner - C:\Users\banzabu6\AppData\Local\Temp\032354~1.EXE (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: IntelR CentrinoR Wireless BluetoothR 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus Service 15.0.2 (AVP15.0.2) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour サービス (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: CLHNService3 - Unknown owner - C:\Program Files (x86)\CyberLink\RemoteMedia\Kernel\DMP\CLHNService.exe
O23 - Service: CyberLink Product - 2012/06/27 14:28:08 (CLKMSVC10_9EC60124) - CyberLink - c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe
O23 - Service: CyberLink Media Server Monitor Service - Unknown owner - C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSMonitorService.exe
O23 - Service: CyberLink Media Server Service - CyberLink - C:\Program Files (x86)\CyberLink\MediaSharing\Kernel\DMS\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update サービス (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update サービス (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HWDeviceService64.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService64.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod サービス (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Morrin Thumbnail Synchronized Service 5 (MrnTS_Sync5) - 株式会社モーリン - C:\Program Files (x86)\Common Files\Creoapp\MrnTS_Sync5.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Dell DataSafe Online (NOBU) - Dell, Inc. - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\OpenMG\PACSPTISVR.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: SonicStage Back-End Service2 - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SsBeService2.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17566 bytes

ばんぶー
MAIL
2015/11/01 (Sun) 20:59:58

返信フォームへ

Re: LaSuperbaの件

上記現状は「広告等は出ておりません」の間違いです。
失礼しました。

ばんぶー
MAIL
2015/11/01 (Sun) 21:03:29

返信フォームへ

2つほど追加確認を

今夜も遅くなってごめんなさい。

>「広告等は出ておりません」

はい、状態は良好ということですね。
ログも見せていただきました。
ではまた以下の作業をお願いします。

下記は現在最新になってないので、使うなら更新してください。更新しないならアンインストールが安全です。
>Java 8 Update 60 Oracle Corporation 2015/09/26 88.4 MB 8.0.600.27

次にCCで「Firefox」タブ内の下記を見てください。
>有効 Extension 楽天ツールバー 1.300.436.6 讌ｽ螟ｩ譬ｪ蠑丈ｼ夂､ｾ default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi

FFで楽天ツールバーを使っているならこれはそのままでいいですが、使ってないならCC上から無効と削除してください。

上記2点の確認と処置できたら再度CCでFFタブとインストール情報ログだけ取り直して、それをまた見せてください

悪代官
2015/11/02 (Mon) 21:32:39

返信フォームへ

Re: LaSuperbaの件

お疲れ様です。
Javaは最新に更新、楽天ツールバーは使用しているため
アンインストールしていません。
ログを送りますのでよろしくお願い致します。

ccインストール情報
2007 Office system 互換機能パック Microsoft Corporation 2015/10/14 361 MB 12.0.6612.1000
AccelerometerP11 STMicroelectronics 2012/06/27 2.00.11.22
Adobe AIR Adobe Systems Incorporated 2012/06/28 2.6.0.19120
Adobe Flash Player 19 ActiveX Adobe Systems Incorporated 2015/10/17 3.43 MB 19.0.0.226
Adobe Flash Player 19 NPAPI Adobe Systems Incorporated 2015/10/17 3.81 MB 19.0.0.226
Adobe Reader X (10.1.16) MUI 2015/10/14
Advanced Audio FX Engine Creative Technology Ltd 2012/06/28 1.12.05
Apple Application Support（32 ビット） Apple Inc. 2015/11/01 114 MB 4.1
Apple Application Support（64 ビット） Apple Inc. 2015/11/01 128 MB 4.1
Apple Mobile Device Support Apple Inc. 2015/11/01 28.0 MB 9.1.0.6
Apple Software Update Apple Inc. 2015/09/26 2.40 MB 2.1.4.131
Bonjour Apple Inc. 2015/09/26 2.01 MB 3.1.0.1
Canon Easy-WebPrint EX Canon Inc. 2014/05/15 1.4.1.0
Canon IJ Network Scan Utility 2012/08/25
Canon IJ Network Scanner Selector EX Canon Inc. 2014/05/15
Canon IJ Network Tool Canon Inc. 2014/05/15 3.3.0
Canon IJ Scan Utility Canon Inc. 2014/05/15
Canon MG7100 series MP Drivers Canon Inc. 2014/05/15 1.00
Canon MG7100 series On-screen Manual Canon Inc. 2014/05/15 7.6.1
Canon MP970 series 2012/08/25
Canon My Image Garden Canon Inc. 2014/05/15 2.0.1
Canon My Image Garden Design Files Canon Inc. 2014/05/15 2.0.0
Canon Quick Menu Canon Inc. 2014/05/15 2.2.1
Canon マイプリンタ Canon Inc. 2014/05/15 3.1.0
CanoScan LiDE 90 2012/08/25
CCleaner Piriform 2015/10/17 5.10
CyberLink PowerDVD 9.6 CyberLink Corp. 2012/06/27 9.6.1.4827
Dell DataSafe Local Backup Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Local Backup - Support Software Dell Inc. 2012/06/27 9.4.67
Dell DataSafe Online Dell 2012/06/27 6.46 MB 2.1.19634
Dell Getting Started Guide Dell Inc. 2012/06/27 1.00.0000
Dell PhotoStage ArcSoft 2012/06/27 165 MB 1.5.0.130
Dell Stage Fingertapps 2012/06/27 1.7.209.0
Dell Stage Remote ArcSoft 2012/06/27 80.8 MB 2.0.0.43
Dell VideoStage CyberLink Corp. 2012/06/27 1.3.0.2513
Dell Webcam Central Creative Technology Ltd 2012/06/28 2.00.44
Dell ミュージックステージ Fingertapps 2012/06/27 1.6.225.0
Google Chrome Google Inc. 2014/05/31 46.0.2490.80
iCloud Apple Inc. 2015/11/01 119 MB 5.0.2.61
inSSIDer 2.0 MetaGeek 2012/07/08 3.55 MB 2.0.7
Intel(R) Control Center Intel Corporation 2013/06/29 1.2.1.1007
Intel(R) Management Engine Components Intel Corporation 2013/10/15 7.0.0.1144
Intel(R) Processor Graphics Intel Corporation 2013/10/09 8.15.10.2455
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology Intel Corporation 2012/06/27 90.1 MB 1.2.1.0608
Intel(R) WiDi Intel Corporation 2012/06/27 139 MB 2.1.39.0
iTunes Apple Inc. 2015/11/01 218 MB 12.3.1.23
Java 8 Update 65 Oracle Corporation 2015/11/02 21.0 MB 8.0.650.17
LG United Mobile Driver LG Electronics 2012/09/12 2.2
LINE NHN Japan 2013/03/20 3.1.4.73
Malwarebytes Anti-Malware バージョン 1.75.0.1300 Malwarebytes Corporation 2015/10/19 19.2 MB 1.75.0.1300
Media Go Sony 2014/12/07 148 MB 2.8.303
Media Go Network Downloader Sony 2014/09/28 1.33 MB 1.5.19.0
Media Go Video Playback Engine 2.12.105.06300 Sony 2015/03/26 21.0 MB 2.12.105.06300
MeoTV TAXAN 2013/09/03 4.95 MB 12.8.10
Microsoft .NET Framework 4.5.2 Microsoft Corporation 2015/09/26 38.8 MB 4.5.51209
Microsoft Office File Validation Add-In Microsoft Corporation 2014/05/15 10.9 MB 14.0.5130.5003
Microsoft Office Professional Edition 2003 Microsoft Corporation 2014/04/10 1.21 GB 11.0.8173.0
Microsoft Silverlight Microsoft Corporation 2015/08/13 348 MB 5.1.40728.0
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 2012/07/09 298 KB 8.0.61001
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 2012/06/27 788 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 2012/07/09 788 KB 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 2012/06/27 598 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 2012/06/27 596 KB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 2012/06/27 595 KB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 2012/07/09 600 KB 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Corporation 2012/07/14 11.0 MB 10.0.30319
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 Microsoft Corporation 2015/10/04 11.0.51106.1
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 2015/02/12 17.3 MB 11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Corporation 2014/09/28 17.1 MB 12.0.21005.1
MobileWiFi Huawei Technologies Co.,Ltd 2014/05/24 TOOL-ConnLaucher_WIN1.09.02.00
Mozilla Firefox 41.0.2 (x86 ja) Mozilla 2015/10/18 92.7 MB 41.0.2
Mozilla Maintenance Service Mozilla 2015/10/18 250 KB 41.0.2
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 2012/07/03 1.27 MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 2012/07/03 1.33 MB 4.20.9876.0
NVIDIA 3D Vision ドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
NVIDIA グラフィックスドライバー 285.77 NVIDIA Corporation 2012/06/27 285.77
Quickset64 Dell Inc. 2012/06/27 11.0.10
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 2012/06/27 6.0.1.6312
RemoteMedia CyberLink Corp. 2012/06/28 1.6.6622
Roxio Creator Starter Roxio 2012/06/28 1.63 GB 12.1.77.0
Shared C Run-time for x64 McAfee 2012/10/26 2.78 MB 10.0.0
SignalNow Express ストラテジー株式会社 2012/07/03 5.08 MB 1.30.1
SignalNow Express ストラテジー株式会社 2015/03/11 2.0.0.0
Skype Click to Call Microsoft Corporation 2015/10/15 13.2 MB 7.5.0.9082
Sony Media Library Earth 9.2.00 Sony Corporation 2015/03/27 49.5 MB 9.2.00.01271
Sony Mobile Update Engine Sony Mobile Communications Inc. 2015/07/26 2.15.10.201507101148
Sony PC Companion 2.10.275 Sony 2015/07/10 21.2 MB 2.10.275
Synaptics Pointing Device Driver Synaptics Incorporated 2012/06/28 46.4 MB 15.2.6.0
SyncUP Nero AG 2012/06/27 288 MB 10.2.16500
Windows Live Essentials Microsoft Corporation 2012/07/14 15.4.3555.0308
Windows Media Player Firefox Plugin Microsoft Corp 2012/09/30 296 KB 1.0.0.8
x-アプリ 6.0.01 Sony Corporation 2015/03/27 88.5 MB 10.0.01
Zinio Reader 4 Zinio LLC 2012/06/28 4.2.4164
インテル(R) PROSet/Wireless WiFi ソフトウェア Intel Corporation 2012/06/27 136 MB 14.03.0000
インテル(R) ターボ・ブースト・テクノロジー・モニター 2.0 インテル 2012/06/27 2.1.23.0
カスペルスキーインターネットセキュリティ Kaspersky Lab 2015/10/05 15.0.2.396
ペタろう株式会社ants 2012/07/08 1.74 MB 5.30.2
リモート接続用の Windows Live Mesh ActiveX コントロール (日本語) Microsoft Corporation 2012/06/27 5.57 MB 15.4.5722.2
筆まめ Ver.14 販売元：株式会社クレオ　開発元：株式会社モーリン 2012/12/23 278 MB 14.00.0000
読取革命Lite パナソニックソリューションテクノロジー株式会社 2014/05/15 38.4 MB 1.15.0000

firefox
有効 Extension 4.5.1.379 default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com
有効 Extension Adblock Plus 2.6.11 Wladimir Palant default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
有効 Extension Fast Dial 4.12.1-signed telega default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\fastdial@telega.phpnet.us
有効 Extension Skype Click to Call 7.5.0.9082 Microsoft Corporation default Firefox 41.0.2 C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi
有効 Extension 楽天ツールバー 1.300.436.6 讌ｽ螟ｩ譬ｪ蠑丈ｼ夂､ｾ default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi
有効 Plugin 0 default Firefox 41.0.2
有効 Plugin CANON iMAGE GATEWAY Album Plugin Utility for IJ 5.0.0.0 CANON INC. default Firefox 41.0.2 C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll
有効 Plugin Content Blocker KAV 4.5.1.379 Kaspersky Lab default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com\npcontentblocker.dll
有効 Plugin Google Update 1.3.28.15 Google Inc. default Firefox 41.0.2 C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll
有効 Plugin iTunes Application Detector 1.0.1.1 Apple Inc. default Firefox 41.0.2 C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
有効 Plugin Java Deployment Toolkit 8.0.650.17 11.65.2.17 Oracle Corporation default Firefox 41.0.2 C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npdeployJava1.dll
有効 Plugin Java(TM) Platform SE 8 U65 11.65.2.17 Oracle Corporation default Firefox 41.0.2 C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll
有効 Plugin NVIDIA 3D Vision 7.17.12.8577 NVIDIA Corporation default Firefox 41.0.2 C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
有効 Plugin NVIDIA 3D VISION 7.17.12.8577 NVIDIA Corporation default Firefox 41.0.2 C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
有効 Plugin Online Banking KAV 4.5.1.379 Kaspersky Lab default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com\nponlinebanking.dll
有効 Plugin OpenH264 Video Codec 1.4 default Firefox 41.0.2 C:\Users\banzabu6\AppData\Roaming\Mozilla\Firefox\Profiles\3q1t4u6t.default\gmp-gmpopenh264\1.4\gmpopenh264.dll
有効 Plugin Shockwave Flash 16.0.0.296 Adobe Systems Incorporated default Firefox 41.0.2 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll
有効 Plugin Shockwave Flash 19.0.0.226 Adobe Systems Incorporated default Firefox 41.0.2 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll
有効 Plugin Silverlight Plug-In 5.1.40728.0 Microsoft Corporation default Firefox 41.0.2 C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll
有効 Plugin Virtual Keyboard KAV 4.5.1.379 Kaspersky Lab default Firefox 41.0.2 C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com\npvkplugin.dll

ばんぶー
MAIL
2015/11/02 (Mon) 22:20:38

返信フォームへ

あとは様子見の結果待ちですね

今日も遅くなってすみません。

>Javaは最新に更新、楽天ツールバーは使用しているため
>アンインストールしていません。

はい、わかりました。
Javaは更新できたのでいいでしょう。

ではここでしばらく様子見をお願いします。
そのまま普通にPCを使いつつ1週間様子見の後、またCCでインストール情報と各タブのログとHJTログを取り直して、それらを様子見中の状態報告とともにレスください。

この時点でのログと状態がどうなっているかが最後の分かれ目になりそうです

悪代官
2015/11/03 (Tue) 21:01:10

返信フォームへ

Re: LaSuperbaの件

いつも有難うございます。
了解いたしました。
しばらく様子を見てみます。
11/10よりまたしばらく出張となりますので、
戻りましたらご連絡させて頂きます。

ばんぶー
MAIL
2015/11/03 (Tue) 22:15:42

返信フォームへ

返信フォーム

Template by マシマロック

名前件名 URL メールアドレス画像	メッセージプレビュー（投稿前に内容を確認）
	パスワード