API tools faq
paste
Advertisement
Guest User

OTL.txt

a guest
Jul 23rd, 2013
370
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 61.83 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 23.7.2013. 18:52:16 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\PRIVATE\Desktop
  3. Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16635)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 3,00 Gb Total Physical Memory | 1,80 Gb Available Physical Memory | 59,96% Memory free
  8. 6,00 Gb Paging File | 4,61 Gb Available in Paging File | 76,81% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 63,38 Gb Total Space | 5,93 Gb Free Space | 9,35% Space Free | Partition Type: NTFS
  13. Drive D: | 195,31 Gb Total Space | 75,38 Gb Free Space | 38,59% Space Free | Partition Type: NTFS
  14. Drive E: | 206,97 Gb Total Space | 159,00 Gb Free Space | 76,82% Space Free | Partition Type: NTFS
  15. Drive G: | 6,04 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
  16.  
  17. Computer Name: PRIVATE-PC | User Name: PRIVATE | Logged in as Administrator.
  18. Boot Mode: Normal | Scan Mode: Current user | Quick Scan
  19. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  20.  
  21. [color=#E56717]========== Processes (SafeList) ==========[/color]
  22.  
  23. PRC - [2013.07.23 18:49:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PRIVATE\Desktop\OTL.exe
  24. PRC - [2013.07.03 17:15:14 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
  25. PRC - [2013.06.26 13:54:26 | 002,236,080 | ---- | M] () -- C:\Program Files\AVG SafeGuard toolbar\vprot.exe
  26. PRC - [2013.06.18 15:56:53 | 001,598,128 | ---- | M] (AVG Secure Search) -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
  27. PRC - [2013.06.18 15:56:53 | 000,152,240 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\loggingserver.exe
  28. PRC - [2013.06.12 19:21:10 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
  29. PRC - [2013.05.29 12:34:28 | 000,449,248 | ---- | M] (Sony) -- C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
  30. PRC - [2013.05.15 11:28:25 | 004,284,976 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
  31. PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  32. PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  33. PRC - [2013.04.13 10:57:40 | 000,020,608 | ---- | M] (Mr. John aka japamd) -- D:\Program Files\RadeonPro\RadeonProSupport.exe
  34. PRC - [2013.03.15 04:59:31 | 000,866,592 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  35. PRC - [2013.03.15 04:59:30 | 001,821,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  36. PRC - [2013.03.14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  37. PRC - [2013.02.04 18:13:54 | 000,070,832 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
  38. PRC - [2012.11.30 04:55:25 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
  39. PRC - [2012.11.23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
  40. PRC - [2012.10.23 10:25:06 | 002,744,960 | ---- | M] (DT Soft Ltd) -- D:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
  41. PRC - [2012.02.27 16:17:25 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  42. PRC - [2012.01.03 15:10:50 | 000,815,512 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
  43. PRC - [2010.11.20 23:29:07 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
  44.  
  45.  
  46. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  47.  
  48. MOD - [2013.07.03 17:15:14 | 003,285,912 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
  49. MOD - [2013.06.26 13:54:26 | 002,236,080 | ---- | M] () -- C:\Program Files\AVG SafeGuard toolbar\vprot.exe
  50. MOD - [2013.06.18 15:56:53 | 000,521,392 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\log4cplusU.dll
  51. MOD - [2013.06.18 15:56:53 | 000,145,072 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\SiteSafety.dll
  52. MOD - [2013.06.12 19:21:09 | 016,033,160 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll
  53. MOD - [2013.05.17 10:51:16 | 000,207,872 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\MExplorer.dll
  54. MOD - [2013.05.15 11:28:25 | 004,284,976 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
  55. MOD - [2013.05.14 09:38:52 | 000,607,744 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PhoneUpdate.dll
  56. MOD - [2013.04.12 19:23:30 | 000,612,664 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\sqlite3.dll
  57. MOD - [2013.02.04 18:13:54 | 000,070,832 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
  58. MOD - [2012.04.30 11:57:42 | 000,039,936 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\TMonitorAPI.dll
  59. MOD - [2011.07.07 14:54:36 | 000,233,984 | ---- | M] () -- C:\Program Files\Sony\Sony PC Companion\Report.dll
  60. MOD - [2008.09.16 21:18:06 | 000,132,608 | ---- | M] () -- C:\Program Files\WinRAR\rarext.dll
  61.  
  62.  
  63. [color=#E56717]========== Services (SafeList) ==========[/color]
  64.  
  65. SRV - File not found [Auto | Stopped] -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  66. SRV - [2013.07.03 17:15:14 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  67. SRV - [2013.06.21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
  68. SRV - [2013.06.18 15:56:53 | 001,598,128 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe -- (vToolbarUpdater15.3.0)
  69. SRV - [2013.06.03 11:57:49 | 003,085,264 | ---- | M] () [Disabled | Stopped] -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
  70. SRV - [2013.05.27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
  71. SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  72. SRV - [2013.04.13 10:57:40 | 000,020,608 | ---- | M] (Mr. John aka japamd) [Auto | Running] -- D:\Program Files\RadeonPro\RadeonProSupport.exe -- (RadeonPro Support Service)
  73. SRV - [2013.03.15 07:46:27 | 001,266,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  74. SRV - [2013.03.14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  75. SRV - [2013.02.23 12:14:16 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
  76. SRV - [2013.02.04 18:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
  77. SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  78. SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
  79.  
  80.  
  81. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  82.  
  83. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva403.sys -- (XDva403)
  84. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
  85. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
  86. DRV - File not found [File_System | Auto | Stopped] -- system32\DRIVERS\eamonm.sys -- (eamonm)
  87. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
  88. DRV - [2013.07.23 18:38:48 | 000,028,160 | ---- | M] (secr9tos) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\oem-drv86.sys -- (oem-drv86)
  89. DRV - [2013.07.13 14:05:02 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  90. DRV - [2013.06.27 23:27:38 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
  91. DRV - [2013.06.27 23:27:38 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
  92. DRV - [2013.06.27 23:27:38 | 000,175,176 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
  93. DRV - [2013.06.18 15:56:53 | 000,037,664 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
  94. DRV - [2013.05.09 10:59:10 | 000,061,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
  95. DRV - [2013.05.09 10:59:10 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
  96. DRV - [2013.05.09 10:59:10 | 000,049,376 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
  97. DRV - [2013.05.09 10:59:09 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
  98. DRV - [2013.05.09 10:59:09 | 000,021,576 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
  99. DRV - [2013.05.09 10:59:08 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
  100. DRV - [2013.03.15 07:46:27 | 008,952,608 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
  101. DRV - [2013.03.14 14:36:22 | 000,016,648 | ---- | M] (XFire) [File_System | On_Demand | Stopped] -- C:\Program Files\Xfire2\XFDriver.sys -- (XFDriver)
  102. DRV - [2012.08.28 14:27:24 | 000,045,736 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbfilter.sys -- (usbfilter)
  103. DRV - [2012.02.27 16:21:18 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  104. DRV - [2011.06.15 10:23:56 | 000,060,156 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
  105. DRV - [2010.12.07 14:23:00 | 000,025,088 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandmodem.sys -- (ANDModem)
  106. DRV - [2010.12.07 14:23:00 | 000,020,736 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lganddiag.sys -- (AndDiag)
  107. DRV - [2010.12.07 14:23:00 | 000,020,096 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandgps.sys -- (AndGps)
  108. DRV - [2010.12.07 14:22:58 | 000,014,336 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgandbus.sys -- (Andbus)
  109. DRV - [2010.11.20 23:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  110. DRV - [2010.11.20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  111. DRV - [2010.11.20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
  112. DRV - [2010.11.20 23:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
  113. DRV - [2010.11.20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
  114. DRV - [2010.11.20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
  115. DRV - [2010.11.20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  116. DRV - [2010.11.20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
  117. DRV - [2010.11.20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
  118. DRV - [2010.11.20 23:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
  119. DRV - [2010.11.20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
  120. DRV - [2010.11.20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
  121. DRV - [2009.07.16 12:36:30 | 000,013,216 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
  122. DRV - [2009.07.14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
  123.  
  124.  
  125. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  126.  
  127.  
  128. [color=#E56717]========== Internet Explorer ==========[/color]
  129.  
  130. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  131. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  132.  
  133. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=1A34002618E4B78F
  134. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  135. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
  136. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  137. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?affID=119816&tt=gc_&babsrc=HP_ss&mntrId=1A34002618E4B78F
  138. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  139. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  140. IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  141. IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  142. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  143. IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=1A34002618E4B78F
  144. IE - HKCU\..\SearchScopes\{2A980437-6AE4-4D2F-8D03-C3DDF82BC5D7}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
  145. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcerms}&src=IE-SearchBox&FORM=IE10SR
  146. IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg.com/search?cid={DE50B376-19CE-4460-A7C3-02B5426F0709}&mid=5ba1c05e854c47d39143d16f5e005e7c-c2f216fdb52782b1475dd664b04415f84bb7bc96&lang=en&ds=xf011&pr=sa&d=2013-05-17 20:50:09&v=15.2.0.5&pid=safeguard&sg=2&sap=dsp&q={searchTerms}
  147. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  148.  
  149. [color=#E56717]========== FireFox ==========[/color]
  150.  
  151. FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
  152. FF - prefs.js..browser.search.order.1: "Delta Search"
  153. FF - prefs.js..browser.search.selectedEngine: "Delta Search"
  154. FF - prefs.js..browser.startup.homepage: "www.google.hr"
  155. FF - prefs.js..extensions.enabledAddons: battlefieldheroespatcher%40ea.com:5.0.203.0
  156. FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:2.0.2
  157. FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.17
  158. FF - prefs.js..extensions.enabledAddons: battlefieldplay4free%40ea.com:1.0.96.0
  159. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
  160.  
  161.  
  162. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
  163. FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll ()
  164. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  165. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
  166. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  167. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  168. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  169. FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
  170. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  171. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  172. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  173. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  174. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  175. FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
  176. FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  177. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: D:\Games\Trials\datapack\orbit\npuplaypc.dll File not found
  178.  
  179. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013.02.23 14:23:06 | 000,000,000 | ---D | M]
  180. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.05.31 05:39:09 | 000,000,000 | ---D | M]
  181. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.07.03 17:15:08 | 000,000,000 | ---D | M]
  182. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  183.  
  184. [2013.02.23 12:51:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\Extensions
  185. [2013.07.22 15:15:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\Firefox\Profiles\ymi3muqz.default\extensions
  186. [2013.07.20 09:08:20 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\Firefox\Profiles\ymi3muqz.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  187. [2013.06.01 12:07:31 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\Firefox\Profiles\ymi3muqz.default\extensions\battlefieldheroespatcher@ea.com
  188. [2013.07.22 10:18:32 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\Firefox\Profiles\ymi3muqz.default\extensions\battlefieldplay4free@ea.com
  189. [2013.05.15 16:06:07 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\Firefox\Profiles\ymi3muqz.default\extensions\ffxtlbr@delta.com
  190. [2013.07.18 23:37:59 | 000,354,970 | ---- | M] () (No name found) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\firefox\profiles\ymi3muqz.default\extensions\client@anonymox.net.xpi
  191. [2013.04.17 15:50:46 | 000,201,930 | ---- | M] () (No name found) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\firefox\profiles\ymi3muqz.default\extensions\hdvc@hdvc.com.xpi
  192. [2013.07.22 15:15:44 | 000,818,491 | ---- | M] () (No name found) -- C:\Users\PRIVATE\AppData\Roaming\mozilla\firefox\profiles\ymi3muqz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  193. [2013.05.15 16:06:04 | 000,006,505 | ---- | M] () -- C:\Users\PRIVATE\AppData\Roaming\mozilla\firefox\profiles\ymi3muqz.default\searchplugins\babylon.xml
  194. [2013.05.15 16:06:07 | 000,001,294 | ---- | M] () -- C:\Users\PRIVATE\AppData\Roaming\mozilla\firefox\profiles\ymi3muqz.default\searchplugins\delta.xml
  195. [2013.07.03 17:15:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
  196. [2013.07.03 17:15:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
  197. [2013.07.03 17:15:14 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  198.  
  199. [color=#E56717]========== Chrome ==========[/color]
  200.  
  201. CHR - default_search_provider: Funmoods ()
  202. CHR - default_search_provider: search_url = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=ironpub12&cd=2XzuyEtN2Y1L1QzutDtDtByCtCzz0EyE0ByBzz0FyDtD0EzytN0D0Tzu0CyDyEtAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1F1G1E2Y1StCtB&cr=2028083688&ir=
  203. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
  204. CHR - homepage: http://searchfunmoods.com/?f=1&a=ironpub12&cd=2XzuyEtN2Y1L1QzutDtDtByCtCzz0EyE0ByBzz0FyDtD0EzytN0D0Tzu0CyDyEtAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1L1C1F1G1E2Y1StCtB&cr=2028083688&ir=
  205. CHR - Extension: No name found = C:\Users\PRIVATE\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\2.3.1_0\
  206. CHR - Extension: No name found = C:\Users\PRIVATE\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\9.3.4_0\
  207. CHR - Extension: No name found = C:\Users\PRIVATE\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0\
  208. CHR - Extension: No name found = C:\Users\PRIVATE\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli\2.0_0\
  209. CHR - Extension: No name found = C:\Users\PRIVATE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.3.0.11_0\
  210. CHR - Extension: No name found = C:\Users\PRIVATE\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0\
  211.  
  212. O1 HOSTS File: ([2013.06.25 18:43:57 | 000,001,487 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  213. O1 - Hosts: 127.0.0.1 csc3-2010-crl.verisign.com
  214. O1 - Hosts: 127.0.0.1 ocsp.verisign.com
  215. O1 - Hosts: 127.0.0.1 crl.verisign.com
  216. O1 - Hosts: 127.0.0.1 download.dm.origin.com
  217. O1 - Hosts: 127.0.0.1 secure.download.dm.origin.com
  218. O1 - Hosts: 127.0.0.1 loginregistration.dm.origin.com
  219. O1 - Hosts: 127.0.0.1 achievements.gameservices.ea.com
  220. O1 - Hosts: 127.0.0.1 friends.dm.origin.com
  221. O1 - Hosts: 127.0.0.1 avatar.dm.origin.com
  222. O1 - Hosts: 127.0.0.1 ecommerce.dm.origin.com
  223. O1 - Hosts: 127.0.0.1 static.cdn.ea.com
  224. O1 - Hosts: 127.0.0.1 tealium.hs.llnwd.net
  225. O1 - Hosts: 127.0.0.1 heartbeat.dm.origin.com
  226. O1 - Hosts: 127.0.0.1 web.dm.origin.com
  227. O1 - Hosts: 127.0.0.1 store.origin.com
  228. O1 - Hosts: 127.0.0.1 ec2-54-243-231-82.compute-1.amazonaws.com
  229. O1 - Hosts: 127.0.0.1 eaassets-a.akamaihd.net
  230. O1 - Hosts: 127.0.0.1 ssl.resources.ea.com
  231. O1 - Hosts: 127.0.0.1 akamai.cdn.ea.com
  232. O1 - Hosts: 127.0.0.1 novafusion.ea.com
  233. O1 - Hosts: 127.0.0.1 proxy.novafusion.ea.com
  234. O1 - Hosts: 127.0.0.1 ec2-23-23-167-200.compute-1.amazonaws.com
  235. O1 - Hosts: 127.0.0.1 dirtybits.dm.origin.com
  236. O1 - Hosts: 127.0.0.1 chat.dm.origin.com
  237. O1 - Hosts: 127.0.0.1 easo.ea.com
  238. O1 - Hosts: 16 more lines...
  239. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  240. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  241. O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
  242. O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  243. O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com)
  244. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  245. O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  246. O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  247. O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com)
  248. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  249. O3 - HKLM\..\Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
  250. O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  251. O4 - HKLM..\Run: [] File not found
  252. O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
  253. O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
  254. O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  255. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  256. O4 - HKLM..\Run: [PWRISOVM.EXE] D:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
  257. O4 - HKLM..\Run: [vProt] C:\Program Files\AVG SafeGuard toolbar\vprot.exe ()
  258. O4 - HKCU..\Run: [DAEMON Tools Pro Agent] D:\Program Files\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
  259. O4 - HKCU..\Run: [FixMyRegistry] C:\Program Files\SmartTweak Software\FixMyRegistry\FixMyRegistry.exe /ot /as File not found
  260. O4 - HKCU..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.)
  261. O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
  262. O4 - HKCU..\Run: [Sony PC Companion] C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe (Sony)
  263. O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent Inc.)
  264. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  265. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  266. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  267. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  268. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
  269. O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  270. O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  271. O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  272. O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  273. O8 - Extra context menu item: I&zvezi u Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
  274. O9 - Extra Button: Pošalji u OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
  275. O9 - Extra 'Tools' menuitem : Po&šalji u OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
  276. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
  277. O13 - gopher Prefix: missing
  278. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.139.104.2 83.139.105.2
  279. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E629498E-0B7A-4825-A91D-ED88658605CB}: DhcpNameServer = 83.139.104.2 83.139.105.2
  280. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  281. O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll (AVG Secure Search)
  282. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  283. O20 - AppInit_DLLs: (xC:\PROGRA~2\BROWSE~1\261339~1.144\{C16C1~1\BROWSE~1.DLL) - C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
  284. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  285. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  286. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  287. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  288. O32 - HKLM CDRom: AutoRun - 1
  289. O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  290. O33 - MountPoints2\{4e261f33-c81d-11e2-b0af-002618e4b78f}\Shell - "" = AutoRun
  291. O33 - MountPoints2\{4e261f33-c81d-11e2-b0af-002618e4b78f}\Shell\AutoRun\command - "" = R:\SETUP.EXE
  292. O33 - MountPoints2\{649bd15a-bff8-11e2-b70e-002618e4b78f}\Shell - "" = AutoRun
  293. O33 - MountPoints2\{649bd15a-bff8-11e2-b70e-002618e4b78f}\Shell\AutoRun\command - "" = O:\setup\rsrc\Autorun.exe
  294. O33 - MountPoints2\{649bd15a-bff8-11e2-b70e-002618e4b78f}\Shell\dinstall\command - "" = O:\Directx\dxsetup.exe
  295. O33 - MountPoints2\{7c6bdb2f-bebc-11e2-b2fc-002618e4b78f}\Shell - "" = AutoRun
  296. O33 - MountPoints2\{7c6bdb2f-bebc-11e2-b2fc-002618e4b78f}\Shell\AutoRun\command - "" = N:\Setup.exe
  297. O33 - MountPoints2\{802721fa-bd41-11e2-b34d-002618e4b78f}\Shell - "" = AutoRun
  298. O33 - MountPoints2\{802721fa-bd41-11e2-b34d-002618e4b78f}\Shell\AutoRun\command - "" = G:\setup.exe
  299. O33 - MountPoints2\{80272228-bd41-11e2-b34d-002618e4b78f}\Shell - "" = AutoRun
  300. O33 - MountPoints2\{80272228-bd41-11e2-b34d-002618e4b78f}\Shell\AutoRun\command - "" = H:\Setup.exe
  301. O33 - MountPoints2\{80272257-bd41-11e2-b34d-002618e4b78f}\Shell - "" = AutoRun
  302. O33 - MountPoints2\{80272257-bd41-11e2-b34d-002618e4b78f}\Shell\AutoRun\command - "" = I:\autorun.exe
  303. O33 - MountPoints2\{8027225d-bd41-11e2-b34d-002618e4b78f}\Shell - "" = AutoRun
  304. O33 - MountPoints2\{8027225d-bd41-11e2-b34d-002618e4b78f}\Shell\AutoRun\command - "" = J:\setup.exe
  305. O33 - MountPoints2\{80272264-bd41-11e2-b34d-002618e4b78f}\Shell - "" = AutoRun
  306. O33 - MountPoints2\{80272264-bd41-11e2-b34d-002618e4b78f}\Shell\AutoRun\command - "" = K:\setup.exe
  307. O33 - MountPoints2\{99b606ca-c9a2-11e2-b706-002618e4b78f}\Shell - "" = AutoRun
  308. O33 - MountPoints2\{99b606ca-c9a2-11e2-b706-002618e4b78f}\Shell\AutoRun\command - "" = T:\autorun.exe
  309. O33 - MountPoints2\{cc32d807-c057-11e2-b62a-002618e4b78f}\Shell - "" = AutoRun
  310. O33 - MountPoints2\{cc32d807-c057-11e2-b62a-002618e4b78f}\Shell\AutoRun\command - "" = P:\Autorun.exe
  311. O33 - MountPoints2\{dbfd295a-c945-11e2-b2ea-002618e4b78f}\Shell - "" = AutoRun
  312. O33 - MountPoints2\{dbfd295a-c945-11e2-b2ea-002618e4b78f}\Shell\AutoRun\command - "" = S:\launch2.exe
  313. O33 - MountPoints2\H\Shell - "" = AutoRun
  314. O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\Setup.exe
  315. O33 - MountPoints2\I\Shell - "" = AutoRun
  316. O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\autorun.exe
  317. O33 - MountPoints2\J\Shell - "" = AutoRun
  318. O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\setup.exe
  319. O33 - MountPoints2\K\Shell - "" = AutoRun
  320. O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\setup.exe
  321. O33 - MountPoints2\L\Shell - "" = AutoRun
  322. O33 - MountPoints2\L\Shell\AutoRun\command - "" = L:\Autorun.exe
  323. O33 - MountPoints2\N\Shell - "" = AutoRun
  324. O33 - MountPoints2\N\Shell\AutoRun\command - "" = N:\Autorun.exe
  325. O33 - MountPoints2\O\Shell - "" = AutoRun
  326. O33 - MountPoints2\O\Shell\AutoRun\command - "" = O:\steambackup.exe
  327. O33 - MountPoints2\P\Shell - "" = AutoRun
  328. O33 - MountPoints2\P\Shell\AutoRun\command - "" = P:\install.exe
  329. O33 - MountPoints2\R\Shell - "" = AutoRun
  330. O33 - MountPoints2\R\Shell\AutoRun\command - "" = R:\SETUP.EXE
  331. O34 - HKLM BootExecute: (autocheck autochk *)
  332. O35 - HKLM\..comfile [open] -- "%1" %*
  333. O35 - HKLM\..exefile [open] -- "%1" %*
  334. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  335. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  336. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  337. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  338. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  339.  
  340. NetSvcs: FastUserSwitchingCompatibility - File not found
  341. NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
  342. NetSvcs: Nla - File not found
  343. NetSvcs: Ntmssvc - File not found
  344. NetSvcs: NWCWorkstation - File not found
  345. NetSvcs: Nwsapagent - File not found
  346. NetSvcs: SRService - File not found
  347. NetSvcs: WmdmPmSp - File not found
  348. NetSvcs: LogonHours - File not found
  349. NetSvcs: PCAudit - File not found
  350. NetSvcs: helpsvc - File not found
  351. NetSvcs: uploadmgr - File not found
  352.  
  353. Drivers32: msacm.bdmpeg - C:\Windows\System32\bdmpega.acm ()
  354. Drivers32: msacm.dvacm - C:\PROGRA~1\COMMON~1\ULEADS~1\vio\dvacm.acm File not found
  355. Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  356. Drivers32: msacm.mpegacm - mpegacm.acm File not found
  357. Drivers32: msacm.ulmp3acm - ulmp3acm.acm File not found
  358. Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
  359. Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
  360. Drivers32: vidc.mjpg - C:\Windows\System32\bdmjpeg.dll ()
  361. Drivers32: vidc.mpeg - C:\Windows\System32\bdmpegv.dll ()
  362. Drivers32: VIDC.XFR1 - C:\Windows\System32\xfcodec.dll ()
  363. Drivers32: vidc.XVID - C:\Windows\System32\xvidvfw.dll ()
  364.  
  365. CREATERESTOREPOINT
  366. Restore point Set: OTL Restore Point
  367.  
  368. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  369.  
  370. [2013.07.23 18:51:17 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\PRIVATE\Desktop\OTL.exe
  371. [2013.07.22 23:31:02 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Documents\Vindictus EU
  372. [2013.07.22 14:11:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Nexon
  373. [2013.07.22 14:03:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
  374. [2013.07.22 13:54:05 | 000,000,000 | ---D | C] -- C:\ProgramData\NexonEU
  375. [2013.07.22 13:24:45 | 000,000,000 | ---D | C] -- C:\Nexon
  376. [2013.07.22 13:24:44 | 000,446,464 | ---- | C] (NEXON Inc.) -- C:\Windows\NEXON_EU_DownloaderUpdater.exe
  377. [2013.07.21 22:16:10 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
  378. [2013.07.21 17:59:14 | 000,000,000 | ---D | C] -- C:\Program Files\Speccy
  379. [2013.07.20 15:46:15 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\BANDISOFT
  380. [2013.07.20 15:46:13 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Documents\Bandicam
  381. [2013.07.20 15:45:45 | 000,000,000 | ---D | C] -- C:\Program Files\BandiMPEG1
  382. [2013.07.20 15:41:28 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Documents\RadeonPro Benchmarks
  383. [2013.07.20 15:41:27 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Documents\RadeonPro Logs
  384. [2013.07.20 15:41:26 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\RadeonPro
  385. [2013.07.20 15:40:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RadeonPro
  386. [2013.07.20 10:38:58 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Local\TeknoGods
  387. [2013.07.13 14:11:55 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\WB Games
  388. [2013.07.13 14:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
  389. [2013.07.13 14:05:02 | 000,242,240 | ---- | C] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
  390. [2013.07.13 14:05:01 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\DAEMON Tools Pro
  391. [2013.07.13 14:04:35 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Pro
  392. [2013.07.13 14:00:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
  393. [2013.07.12 19:50:44 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\MKKE
  394. [2013.07.12 19:33:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mortal Kombat Komplete Edition
  395. [2013.07.12 18:15:55 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Local\Chromium
  396. [2013.07.12 17:59:19 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Sports Interactive
  397. [2013.07.12 17:59:19 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Documents\Sports Interactive
  398. [2013.07.12 17:59:19 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\Sports Interactive
  399. [2013.07.12 17:59:19 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Local\Sports Interactive
  400. [2013.07.12 17:45:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEGA
  401. [2013.07.12 17:06:21 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\dwhelper
  402. [2013.07.09 23:18:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  403. [2013.07.09 23:18:06 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
  404. [2013.07.09 23:18:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
  405. [2013.07.07 19:41:14 | 000,000,000 | ---D | C] -- C:\ProgramData\PopCap Games
  406. [2013.07.07 17:15:36 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Desktop\Zuma
  407. [2013.07.07 17:14:57 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zuma's Revenge!
  408. [2013.07.07 17:14:44 | 000,000,000 | ---D | C] -- C:\Windows\Zuma's Revenge!
  409. [2013.07.03 17:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  410. [2013.07.01 14:05:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Darkest of Days
  411. [2013.06.28 17:11:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Empire Interactive
  412. [2013.06.27 18:24:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
  413. [2013.06.27 18:24:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony
  414. [2013.06.27 18:24:23 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
  415. [2013.06.26 15:23:23 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\0S1H1T1C2Z0T2W1P1T1J1V0F0M0R
  416. [2013.06.26 15:23:09 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\Funmoods
  417. [2013.06.26 15:23:08 | 000,000,000 | -H-D | C] -- C:\ProgramData\{B784FFD5-14A9-4F7B-91F1-6E1A5DF942BD}
  418. [2013.06.26 15:23:08 | 000,000,000 | ---D | C] -- C:\ProgramData\RegClean
  419. [2013.06.26 15:23:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
  420. [2013.06.26 15:22:58 | 000,000,000 | ---D | C] -- C:\Program Files\Funmoods
  421. [2013.06.26 12:39:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xfire2
  422. [2013.06.26 11:34:22 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\Origin
  423. [2013.06.26 11:33:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
  424. [2013.06.24 22:58:00 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Missoula Software
  425. [2013.06.24 22:57:47 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Local\Deployment
  426. [2013.06.24 22:57:47 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\AppData\Local\Apps
  427. [2013.06.24 22:57:43 | 000,000,000 | ---D | C] -- C:\Users\PRIVATE\Desktop\Application Files
  428. [5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  429. [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  430.  
  431. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  432.  
  433. [2013.07.23 18:51:53 | 000,026,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  434. [2013.07.23 18:51:53 | 000,026,352 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  435. [2013.07.23 18:49:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PRIVATE\Desktop\OTL.exe
  436. [2013.07.23 18:45:19 | 000,717,018 | ---- | M] () -- C:\Windows\System32\perfh019.dat
  437. [2013.07.23 18:45:19 | 000,689,234 | ---- | M] () -- C:\Windows\System32\perfh007.dat
  438. [2013.07.23 18:45:19 | 000,654,842 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  439. [2013.07.23 18:45:19 | 000,385,278 | ---- | M] () -- C:\Windows\System32\perfh00D.dat
  440. [2013.07.23 18:45:19 | 000,150,000 | ---- | M] () -- C:\Windows\System32\perfc019.dat
  441. [2013.07.23 18:45:19 | 000,148,302 | ---- | M] () -- C:\Windows\System32\perfc007.dat
  442. [2013.07.23 18:45:19 | 000,121,714 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  443. [2013.07.23 18:45:19 | 000,084,420 | ---- | M] () -- C:\Windows\System32\perfc00D.dat
  444. [2013.07.23 18:43:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  445. [2013.07.23 18:39:54 | 000,000,934 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  446. [2013.07.23 18:38:48 | 000,028,160 | ---- | M] (secr9tos) -- C:\Windows\System32\drivers\oem-drv86.sys
  447. [2013.07.23 17:59:00 | 000,000,938 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  448. [2013.07.23 17:21:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  449. [2013.07.22 23:29:54 | 000,000,187 | ---- | M] () -- C:\Users\Public\Desktop\Vindictus EU.url
  450. [2013.07.22 22:46:06 | 000,446,464 | ---- | M] (NEXON Inc.) -- C:\Windows\NEXON_EU_DownloaderUpdater.exe
  451. [2013.07.22 22:46:06 | 000,000,235 | ---- | M] () -- C:\Windows\System32\nxEuUninstall.bat
  452. [2013.07.22 14:23:07 | 000,102,355 | ---- | M] () -- C:\Users\PRIVATE\Desktop\1000373_535458919836116_906660702_n.jpg
  453. [2013.07.22 14:03:14 | 000,000,800 | ---- | M] () -- C:\Users\Public\Desktop\Combat Arms EU.lnk
  454. [2013.07.22 13:16:58 | 000,140,360 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
  455. [2013.07.22 13:16:45 | 000,283,032 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
  456. [2013.07.21 23:59:50 | 000,283,032 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
  457. [2013.07.21 22:03:07 | 000,138,056 | ---- | M] () -- C:\Users\PRIVATE\AppData\Roaming\PnkBstrK.sys
  458. [2013.07.21 17:59:15 | 000,000,946 | ---- | M] () -- C:\Users\Public\Desktop\Speccy.lnk
  459. [2013.07.20 01:04:51 | 000,025,370 | ---- | M] () -- C:\Users\PRIVATE\Desktop\trbusni.jpg
  460. [2013.07.16 20:16:54 | 000,047,902 | ---- | M] () -- C:\Users\PRIVATE\Desktop\1069311_10200158604193531_550268803_n.jpg
  461. [2013.07.13 14:05:02 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
  462. [2013.07.13 12:02:49 | 000,002,138 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  463. [2013.07.12 17:44:00 | 000,106,227 | ---- | M] () -- C:\Users\PRIVATE\Desktop\944736_370660113056707_1900284016_n.jpg
  464. [2013.07.11 06:38:40 | 000,433,584 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
  465. [2013.07.07 17:14:57 | 000,000,831 | ---- | M] () -- C:\Users\PRIVATE\Desktop\Zuma's Revenge!.lnk
  466. [2013.06.30 13:26:45 | 000,012,311 | ---- | M] () -- C:\Users\PRIVATE\Desktop\1002971_482133015199495_615267704_n.jpg
  467. [2013.06.27 23:27:38 | 000,770,344 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
  468. [2013.06.27 23:27:38 | 000,369,584 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
  469. [2013.06.27 23:27:38 | 000,175,176 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
  470. [2013.06.27 23:27:38 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
  471. [2013.06.27 23:27:38 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswSP.sys.sum
  472. [2013.06.27 23:27:38 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
  473. [2013.06.26 15:23:00 | 000,430,107 | ---- | M] () -- C:\Users\PRIVATE\AppData\Local\funmoods_speedial_v9.0.10.crx
  474. [2013.06.26 15:23:00 | 000,077,717 | ---- | M] () -- C:\Users\PRIVATE\AppData\Local\funmoods_2.3.1.crx
  475. [2013.06.25 18:43:57 | 000,001,487 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
  476. [5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  477. [2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
  478.  
  479. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  480.  
  481. [2013.07.22 23:29:54 | 000,000,187 | ---- | C] () -- C:\Users\Public\Desktop\Vindictus EU.url
  482. [2013.07.22 14:23:07 | 000,102,355 | ---- | C] () -- C:\Users\PRIVATE\Desktop\1000373_535458919836116_906660702_n.jpg
  483. [2013.07.22 14:03:14 | 000,000,800 | ---- | C] () -- C:\Users\Public\Desktop\Combat Arms EU.lnk
  484. [2013.07.22 13:24:44 | 000,000,235 | ---- | C] () -- C:\Windows\System32\nxEuUninstall.bat
  485. [2013.07.21 22:02:39 | 003,130,440 | ---- | C] () -- C:\Windows\System32\pbsvc_blr.exe
  486. [2013.07.21 17:59:15 | 000,000,946 | ---- | C] () -- C:\Users\Public\Desktop\Speccy.lnk
  487. [2013.07.20 01:04:51 | 000,025,370 | ---- | C] () -- C:\Users\PRIVATE\Desktop\trbusni.jpg
  488. [2013.07.16 20:16:54 | 000,047,902 | ---- | C] () -- C:\Users\PRIVATE\Desktop\1069311_10200158604193531_550268803_n.jpg
  489. [2013.07.12 17:44:00 | 000,106,227 | ---- | C] () -- C:\Users\PRIVATE\Desktop\944736_370660113056707_1900284016_n.jpg
  490. [2013.07.07 17:14:57 | 000,000,831 | ---- | C] () -- C:\Users\PRIVATE\Desktop\Zuma's Revenge!.lnk
  491. [2013.06.30 13:26:45 | 000,012,311 | ---- | C] () -- C:\Users\PRIVATE\Desktop\1002971_482133015199495_615267704_n.jpg
  492. [2013.06.27 23:27:38 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
  493. [2013.06.26 19:10:18 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSP.sys.sum
  494. [2013.06.26 19:10:18 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
  495. [2013.06.26 15:23:07 | 000,430,107 | ---- | C] () -- C:\Users\PRIVATE\AppData\Local\funmoods_speedial_v9.0.10.crx
  496. [2013.06.26 15:23:05 | 000,077,717 | ---- | C] () -- C:\Users\PRIVATE\AppData\Local\funmoods_2.3.1.crx
  497. [2013.06.24 22:57:43 | 000,483,760 | ---- | C] () -- C:\Users\PRIVATE\Desktop\setup.exe
  498. [2013.06.24 22:57:43 | 000,005,365 | ---- | C] () -- C:\Users\PRIVATE\Desktop\JsScreenShotProgram.application
  499. [2013.05.27 12:21:49 | 000,053,248 | ---- | C] () -- C:\Windows\System32\CommonDL.dll
  500. [2013.05.27 12:21:49 | 000,002,413 | ---- | C] () -- C:\Windows\System32\lgAxconfig.ini
  501. [2013.05.26 16:45:11 | 000,003,725 | ---- | C] () -- C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
  502. [2013.05.19 19:36:41 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
  503. [2013.05.16 14:34:02 | 000,138,056 | ---- | C] () -- C:\Users\PRIVATE\AppData\Roaming\PnkBstrK.sys
  504. [2013.05.16 01:55:41 | 000,140,360 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
  505. [2013.05.16 01:53:11 | 000,283,032 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
  506. [2013.05.16 01:53:08 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
  507. [2013.05.02 21:51:31 | 000,000,001 | ---- | C] () -- C:\Users\PRIVATE\AppData\Local\llftool.4.25.agreement
  508. [2013.04.21 20:53:00 | 000,007,420 | ---- | C] () -- C:\Windows\UA000106.DLL
  509. [2013.04.18 19:33:46 | 000,175,176 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
  510. [2013.04.18 19:33:44 | 000,049,376 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
  511. [2013.02.23 14:15:15 | 000,819,200 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
  512. [2013.02.23 14:15:15 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
  513. [2013.02.23 13:57:29 | 000,396,597 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
  514. [2012.12.28 23:04:22 | 000,036,352 | ---- | C] () -- C:\Windows\System32\xfcodec.dll
  515. [2012.11.19 09:33:32 | 000,065,656 | ---- | C] () -- C:\Windows\System32\bdmpegv.dll
  516. [2012.11.19 09:33:30 | 000,022,640 | ---- | C] () -- C:\Windows\System32\bdmjpeg.dll
  517. [2012.02.27 16:41:52 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
  518. [2012.02.26 21:58:36 | 000,717,018 | ---- | C] () -- C:\Windows\System32\perfh019.dat
  519. [2012.02.26 21:58:36 | 000,336,704 | ---- | C] () -- C:\Windows\System32\perfi019.dat
  520. [2012.02.26 21:58:36 | 000,150,000 | ---- | C] () -- C:\Windows\System32\perfc019.dat
  521. [2012.02.26 21:58:36 | 000,039,446 | ---- | C] () -- C:\Windows\System32\perfd019.dat
  522. [2012.02.26 21:51:45 | 000,385,278 | ---- | C] () -- C:\Windows\System32\perfh00D.dat
  523. [2012.02.26 21:51:45 | 000,229,316 | ---- | C] () -- C:\Windows\System32\perfi00D.dat
  524. [2012.02.26 21:51:45 | 000,084,420 | ---- | C] () -- C:\Windows\System32\perfc00D.dat
  525. [2012.02.26 21:51:45 | 000,032,166 | ---- | C] () -- C:\Windows\System32\perfd00D.dat
  526. [2012.02.26 21:45:21 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
  527. [2012.02.26 21:45:20 | 000,689,234 | ---- | C] () -- C:\Windows\System32\perfh007.dat
  528. [2012.02.26 21:45:20 | 000,148,302 | ---- | C] () -- C:\Windows\System32\perfc007.dat
  529. [2012.02.26 21:45:20 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
  530.  
  531. [color=#E56717]========== ZeroAccess Check ==========[/color]
  532.  
  533. [2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  534.  
  535. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  536.  
  537. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  538.  
  539. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  540. "" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:27:31 | 012,875,776 | ---- | M] (Microsoft Corporation)
  541. "ThreadingModel" = Apartment
  542.  
  543. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  544. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 23:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
  545. "ThreadingModel" = Free
  546.  
  547. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  548. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  549. "ThreadingModel" = Both
  550.  
  551. [color=#E56717]========== LOP Check ==========[/color]
  552.  
  553. [2013.06.26 15:23:23 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\0S1H1T1C2Z0T2W1P1T1J1V0F0M0R
  554. [2013.03.16 22:44:44 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\2K Sports
  555. [2013.02.23 14:29:47 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Ashampoo
  556. [2013.04.22 21:34:55 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Aura4You
  557. [2013.05.04 18:53:31 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Auslogics
  558. [2013.05.15 16:06:15 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\BabSolution
  559. [2013.04.28 19:41:23 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Babylon
  560. [2013.07.20 15:46:15 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\BANDISOFT
  561. [2013.05.08 18:35:42 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\BSplayer
  562. [2013.05.04 18:49:44 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\BSplayer PRO
  563. [2013.07.13 14:06:24 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\DAEMON Tools Pro
  564. [2013.06.29 15:52:53 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\DAEMON Tools Ultra
  565. [2013.05.15 16:06:05 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Delta
  566. [2013.02.23 14:54:08 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\ESET
  567. [2013.06.17 20:13:24 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\File Scout
  568. [2013.06.26 15:23:09 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Funmoods
  569. [2013.05.15 13:20:09 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\LolClient
  570. [2013.07.12 19:51:03 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\MKKE
  571. [2013.05.20 09:24:53 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\MPEG Streamclip
  572. [2013.04.11 16:00:28 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Nico Mak Computing
  573. [2013.06.26 11:49:35 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Origin
  574. [2013.06.04 23:30:17 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\PhotoScape
  575. [2013.06.19 13:27:54 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\PowerISO
  576. [2013.07.20 15:45:06 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\RadeonPro
  577. [2013.07.12 17:59:19 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Sports Interactive
  578. [2013.04.11 15:57:36 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Systweak
  579. [2013.04.22 21:05:23 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Ulead Systems
  580. [2013.07.23 18:40:40 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\uTorrent
  581. [2013.07.13 14:11:55 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\WB Games
  582. [2013.07.18 16:51:40 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Wildfire
  583. [2013.05.19 17:59:42 | 000,000,000 | ---D | M] -- C:\Users\PRIVATE\AppData\Roaming\Z-Software
  584.  
  585. [color=#E56717]========== Purity Check ==========[/color]
  586.  
  587.  
  588.  
  589. [color=#E56717]========== Custom Scans ==========[/color]
  590.  
  591. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  592. [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
  593. [2009.06.10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
  594. [2013.05.31 14:41:54 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
  595. [2013.05.31 14:41:54 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
  596. [2013.07.23 18:38:52 | 3220,295,680 | -HS- | M] () -- C:\pagefile.sys
  597. [2013.06.16 12:54:25 | 000,541,544 | ---- | M] () -- C:\shared.log
  598.  
  599. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  600. [2009.07.14 06:52:25 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
  601. [2009.07.14 06:52:25 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
  602. [2009.07.14 06:52:25 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
  603. [2009.07.14 06:52:25 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
  604.  
  605. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  606.  
  607. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  608. [2009.06.10 23:31:19 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
  609.  
  610. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  611.  
  612. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  613.  
  614. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  615. [2009.07.14 03:15:35 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
  616. [2006.10.26 20:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll
  617. [2010.11.20 23:29:21 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\spool\prtprocs\w32x86\winprint.dll
  618.  
  619. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  620.  
  621. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  622.  
  623. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  624.  
  625. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  626.  
  627. [color=#A23BEC]< %systemroot%\*.png >[/color]
  628.  
  629. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  630. [2013.05.09 10:58:37 | 000,041,664 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  631. [5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  632.  
  633. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  634.  
  635. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  636.  
  637. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  638.  
  639. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  640.  
  641. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  642. [2009.07.14 06:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
  643. [2013.05.26 16:45:27 | 000,003,725 | ---- | M] () -- C:\Program Files\Mozilla Firefoxsafeguard-secure-search.xml
  644.  
  645. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  646.  
  647. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  648.  
  649. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  650.  
  651. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  652.  
  653. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  654.  
  655. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  656.  
  657. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  658.  
  659. [color=#A23BEC]< %systemroot%\*.config >[/color]
  660.  
  661. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  662.  
  663. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  664. [2013.02.23 12:49:45 | 000,000,221 | -HS- | M] () -- C:\Users\PRIVATE\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  665.  
  666. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  667. [2013.07.23 18:49:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PRIVATE\Desktop\OTL.exe
  668. [2010.11.10 22:25:02 | 000,483,760 | ---- | M] () -- C:\Users\PRIVATE\Desktop\setup.exe
  669.  
  670. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  671.  
  672. [color=#A23BEC]< %systemroot%\*.src >[/color]
  673.  
  674. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  675.  
  676. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  677.  
  678. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  679.  
  680. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  681.  
  682. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  683.  
  684. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  685.  
  686. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  687.  
  688. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  689.  
  690. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  691.  
  692. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  693.  
  694. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  695.  
  696. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  697.  
  698. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  699.  
  700. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  701.  
  702. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  703.  
  704. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  705. [2009.06.10 23:20:04 | 000,000,802 | ---- | M] () -- C:\Windows\ADDINS\FXSEXT.ecf
  706.  
  707. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  708.  
  709. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  710.  
  711. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  712.  
  713. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  714.  
  715. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  716.  
  717. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  718.  
  719. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  720.  
  721. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  722.  
  723. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  724.  
  725. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  726.  
  727. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  728. [2013.05.16 09:52:10 | 000,000,402 | -HS- | M] () -- C:\Users\PRIVATE\Favorites\desktop.ini
  729.  
  730. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  731. [2009.07.14 03:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\mofcomp.exe
  732. [2009.07.14 03:14:35 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\scrcons.exe
  733. [2009.07.14 03:14:43 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\unsecapp.exe
  734. [2009.07.14 03:14:44 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\wbemtest.exe
  735. [2009.07.14 03:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WinMgmt.exe
  736. [2009.07.14 03:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIADAP.exe
  737. [2009.07.14 03:14:46 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiApSrv.exe
  738. [2009.07.14 03:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIC.exe
  739. [2010.11.20 23:29:20 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiPrvSE.exe
  740.  
  741. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  742.  
  743. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  744. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2013-07-23 15:36:46
  745.  
  746. [color=#E56717]========== Alternate Data Streams ==========[/color]
  747.  
  748. @Alternate Data Stream - 152 bytes -> C:\ProgramData\TEMP:07BF512B
  749. @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:96D0C06F
  750.  
  751. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!