API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Oct 18th, 2015
37
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 58.04 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 18.10.2015 19:25:51 - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sanda\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.18059)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 3,86 Gb Total Physical Memory | 2,24 Gb Available Physical Memory | 57,92% Memory free
  8. 7,72 Gb Paging File | 5,79 Gb Available in Paging File | 75,05% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 288,34 Gb Total Space | 201,99 Gb Free Space | 70,05% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: TOSHIBA | User Name: Sanda | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  16. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2015.10.18 19:22:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  21. PRC - [2015.10.17 23:32:21 | 000,377,000 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  22. PRC - [2015.10.12 08:13:08 | 000,889,632 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  23. PRC - [2015.09.24 15:09:55 | 006,134,544 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  24. PRC - [2015.09.24 15:09:40 | 000,146,600 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  25. PRC - [2015.09.24 15:01:48 | 000,651,360 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\Setup\instup.exe
  26. PRC - [2015.09.14 21:45:24 | 000,245,576 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
  27. PRC - [2015.09.14 09:25:38 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  28. PRC - [2015.08.07 20:20:00 | 000,136,048 | ---- | M] (Dropbox, Inc.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  29. PRC - [2009.10.02 14:26:10 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  30. PRC - [2009.09.30 20:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  31. PRC - [2009.09.30 20:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  32. PRC - [2009.03.10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
  33. PRC - [2007.01.04 20:48:50 | 000,112,152 | ---- | M] (InterVideo) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
  34.  
  35.  
  36. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  37.  
  38. MOD - [2015.10.12 08:14:16 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
  39. MOD - [2015.09.24 15:10:09 | 040,539,648 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  40. MOD - [2015.09.24 15:09:46 | 000,103,376 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\log.dll
  41. MOD - [2015.09.24 15:09:41 | 000,123,976 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
  42. MOD - [2015.09.13 21:22:17 | 012,438,016 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\09e9b52418dba5729ace249cf0487675\System.Windows.Forms.ni.dll
  43. MOD - [2015.09.13 21:22:05 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\82ecf48db57ddf66f74fca17b0f99453\System.Drawing.ni.dll
  44. MOD - [2015.05.16 15:11:39 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll
  45. MOD - [2015.04.19 16:01:46 | 000,774,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll
  46. MOD - [2014.12.15 11:28:29 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
  47. MOD - [2014.12.15 11:27:49 | 007,991,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
  48. MOD - [2014.09.16 15:45:47 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
  49. MOD - [2013.07.09 08:38:55 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
  50. MOD - [2010.11.13 02:08:41 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
  51.  
  52.  
  53. [color=#E56717]========== Services (SafeList) ==========[/color]
  54.  
  55. SRV:[b]64bit:[/b] - [2015.09.24 15:09:40 | 000,146,600 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  56. SRV:[b]64bit:[/b] - [2015.09.24 15:08:15 | 004,048,280 | ---- | M] (Avast Software) [On_Demand | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe -- (AvastVBoxSvc)
  57. SRV:[b]64bit:[/b] - [2015.09.16 06:08:40 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  58. SRV:[b]64bit:[/b] - [2015.07.23 02:02:54 | 001,390,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  59. SRV:[b]64bit:[/b] - [2013.08.12 14:11:04 | 000,366,600 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  60. SRV:[b]64bit:[/b] - [2013.08.12 14:11:04 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  61. SRV:[b]64bit:[/b] - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  62. SRV:[b]64bit:[/b] - [2009.11.10 14:54:54 | 000,824,688 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TPHM\TPCHSrv.exe -- (TPCHSrv)
  63. SRV:[b]64bit:[/b] - [2009.11.05 23:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
  64. SRV:[b]64bit:[/b] - [2009.11.05 10:19:12 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
  65. SRV:[b]64bit:[/b] - [2009.10.21 10:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
  66. SRV:[b]64bit:[/b] - [2009.09.28 15:46:02 | 000,251,760 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
  67. SRV:[b]64bit:[/b] - [2009.07.28 15:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
  68. SRV - [2015.10.17 23:32:19 | 000,147,624 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  69. SRV - [2015.10.05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  70. SRV - [2015.10.04 22:30:56 | 000,269,000 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  71. SRV - [2015.09.14 09:25:38 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  72. SRV - [2015.08.07 20:20:00 | 000,136,048 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  73. SRV - [2015.08.07 20:20:00 | 000,136,048 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  74. SRV - [2015.07.09 13:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  75. SRV - [2014.03.21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  76. SRV - [2013.09.11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  77. SRV - [2013.02.04 18:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [Disabled | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
  78. SRV - [2011.02.11 14:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
  79. SRV - [2010.10.12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  80. SRV - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  81. SRV - [2009.10.27 21:12:14 | 000,252,784 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
  82. SRV - [2009.10.21 11:40:44 | 000,193,904 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
  83. SRV - [2009.10.15 17:49:56 | 000,116,104 | ---- | M] (Toshiba Europe GmbH) [Auto | Stopped] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
  84. SRV - [2009.10.02 14:26:12 | 000,013,336 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  85. SRV - [2009.09.30 20:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  86. SRV - [2009.09.30 20:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  87. SRV - [2009.03.10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
  88. SRV - [2007.01.04 20:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
  89.  
  90.  
  91. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  92.  
  93. DRV:[b]64bit:[/b] - [2015.10.05 09:50:18 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
  94. DRV:[b]64bit:[/b] - [2015.10.05 09:50:06 | 000,025,816 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  95. DRV:[b]64bit:[/b] - [2015.09.24 15:10:19 | 000,274,808 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  96. DRV:[b]64bit:[/b] - [2015.09.24 15:10:19 | 000,153,744 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
  97. DRV:[b]64bit:[/b] - [2015.09.24 15:10:18 | 000,448,968 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  98. DRV:[b]64bit:[/b] - [2015.09.24 15:10:18 | 000,090,968 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  99. DRV:[b]64bit:[/b] - [2015.09.24 15:10:18 | 000,065,224 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  100. DRV:[b]64bit:[/b] - [2015.09.24 15:10:18 | 000,028,656 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  101. DRV:[b]64bit:[/b] - [2015.09.24 15:10:16 | 000,093,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  102. DRV:[b]64bit:[/b] - [2015.09.24 15:09:21 | 001,049,880 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  103. DRV:[b]64bit:[/b] - [2015.09.24 15:09:19 | 000,132,656 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\ngvss.sys -- (ngvss)
  104. DRV:[b]64bit:[/b] - [2015.09.24 15:08:16 | 000,274,336 | ---- | M] (Avast Software) [Kernel | Auto | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys -- (VBoxAswDrv)
  105. DRV:[b]64bit:[/b] - [2015.09.13 20:50:24 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  106. DRV:[b]64bit:[/b] - [2015.09.13 20:49:58 | 001,226,344 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se)
  107. DRV:[b]64bit:[/b] - [2015.09.13 20:45:49 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  108. DRV:[b]64bit:[/b] - [2015.09.13 20:45:36 | 000,053,624 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
  109. DRV:[b]64bit:[/b] - [2015.09.13 20:41:58 | 000,986,368 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  110. DRV:[b]64bit:[/b] - [2015.04.29 14:04:07 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
  111. DRV:[b]64bit:[/b] - [2014.06.03 03:05:44 | 000,017,600 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver)
  112. DRV:[b]64bit:[/b] - [2013.01.18 21:27:11 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
  113. DRV:[b]64bit:[/b] - [2013.01.18 21:27:11 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
  114. DRV:[b]64bit:[/b] - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  115. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  116. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  117. DRV:[b]64bit:[/b] - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  118. DRV:[b]64bit:[/b] - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  119. DRV:[b]64bit:[/b] - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  120. DRV:[b]64bit:[/b] - [2009.10.15 21:11:26 | 000,307,760 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  121. DRV:[b]64bit:[/b] - [2009.10.02 13:58:58 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  122. DRV:[b]64bit:[/b] - [2009.09.24 18:55:00 | 000,212,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
  123. DRV:[b]64bit:[/b] - [2009.09.17 13:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
  124. DRV:[b]64bit:[/b] - [2009.09.14 15:30:26 | 000,058,744 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
  125. DRV:[b]64bit:[/b] - [2009.08.05 13:56:04 | 000,063,856 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
  126. DRV:[b]64bit:[/b] - [2009.07.30 20:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
  127. DRV:[b]64bit:[/b] - [2009.07.28 21:02:10 | 000,081,768 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
  128. DRV:[b]64bit:[/b] - [2009.07.28 19:24:12 | 000,081,408 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdpe64.sys -- (risdpcie)
  129. DRV:[b]64bit:[/b] - [2009.07.24 16:57:08 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
  130. DRV:[b]64bit:[/b] - [2009.07.24 12:33:14 | 000,026,472 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
  131. DRV:[b]64bit:[/b] - [2009.07.14 14:25:14 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ.SYS -- (TVALZ)
  132. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  133. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  134. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  135. DRV:[b]64bit:[/b] - [2009.07.14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
  136. DRV:[b]64bit:[/b] - [2009.07.04 20:27:02 | 000,055,808 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpe64.sys -- (rixdpcie)
  137. DRV:[b]64bit:[/b] - [2009.07.02 09:54:52 | 000,060,416 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspe64.sys -- (rimspci)
  138. DRV:[b]64bit:[/b] - [2009.06.29 17:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
  139. DRV:[b]64bit:[/b] - [2009.06.29 11:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
  140. DRV:[b]64bit:[/b] - [2009.06.22 18:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
  141. DRV:[b]64bit:[/b] - [2009.06.20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  142. DRV:[b]64bit:[/b] - [2009.06.19 20:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
  143. DRV:[b]64bit:[/b] - [2009.06.19 11:00:26 | 000,094,336 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
  144. DRV:[b]64bit:[/b] - [2009.06.19 10:59:32 | 000,050,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
  145. DRV:[b]64bit:[/b] - [2009.06.17 13:01:04 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
  146. DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  147. DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  148. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  149. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  150. DRV:[b]64bit:[/b] - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  151. DRV:[b]64bit:[/b] - [2007.04.16 21:51:50 | 000,014,112 | R--- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
  152. DRV - [2015.09.13 20:19:15 | 000,026,528 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
  153. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  154.  
  155.  
  156. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  157.  
  158.  
  159. [color=#E56717]========== Internet Explorer ==========[/color]
  160.  
  161. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  162. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  163. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  164. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  165. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  166. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  167. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  168.  
  169. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  170. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com
  171. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  172. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  173. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  174. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  175. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  176. IE - HKCU\..\SearchScopes\{1324C2C7-9262-4FB9-88A4-32E0A3C82477}: "URL" = http://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
  177. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TSEH_deDE379
  178. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  179.  
  180. [color=#E56717]========== FireFox ==========[/color]
  181.  
  182. FF - prefs.js..browser.search.countryCode: "DE"
  183. FF - prefs.js..browser.search.region: "DE"
  184. FF - prefs.js..browser.startup.homepage: "https://www.google.de/?gws_rd=ssl"
  185. FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:10.2.0.187
  186. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:37.0
  187. FF - user.js - File not found
  188.  
  189. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll File not found
  190. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  191. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
  192. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  193. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  194. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll ()
  195. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw_1220162.dll (Adobe Systems, Inc.)
  196. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  197. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  198. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
  199. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  200. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll ( Microsoft Corporation)
  201. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  202. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  203. FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
  204. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
  205. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
  206. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  207. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  208. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  209. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  210. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  211. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  212.  
  213. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
  214. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015.09.24 15:09:26 | 000,000,000 | ---D | M]
  215. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 41.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  216. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 41.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2015.10.16 21:02:03 | 000,000,000 | ---D | M]
  217. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  218.  
  219. [2014.12.15 18:28:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Extensions
  220. [2015.07.29 14:48:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\c95at9to.default-1436631492133\extensions
  221. [2015.10.12 14:28:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\y2wlyl5j.default-1444651764293\extensions
  222. [2015.07.29 14:47:59 | 000,963,213 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\c95at9to.default-1436631492133\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  223. [2015.10.12 14:21:32 | 000,962,762 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\y2wlyl5j.default-1444651764293\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  224. [2015.09.24 15:15:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  225. [2015.10.17 23:32:23 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  226.  
  227. [color=#E56717]========== Chrome ==========[/color]
  228.  
  229. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.40.1_0\
  230. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\
  231. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  232.  
  233. O1 HOSTS File: ([2012.05.26 13:39:58 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  234. O1 - Hosts: 127.0.0.1 localhost
  235. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  236. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  237. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
  238. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  239. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
  240. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  241. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  242. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  243. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  244. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  245. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  246. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files (x86)\CCleaner\CCleaner64.exe (Piriform Ltd)
  247. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  248. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  249. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  250. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  251. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  252. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
  253. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found
  254. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  255. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\SysWow64\GPhotos.scr (Google Inc.)
  256. O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  257. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  258. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  259. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
  260. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
  261. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
  262. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
  263. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000015 - C:\windows\SysNative\LavasoftTcpService64.dll (Lavasoft Limited)
  264. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
  265. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
  266. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
  267. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
  268. O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\windows\SysWow64\LavasoftTcpService.dll (Lavasoft Limited)
  269. O15 - HKCU\..Trusted Domains: localhost ([]* in Trusted sites)
  270. O15 - HKCU\..Trusted Domains: webcompanion.com ([]http in Trusted sites)
  271. O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (Reg Error: Key error.)
  272. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  273. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  274. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85777D5C-4977-47C0-8469-B7633442FEA4}: DhcpNameServer = 192.168.0.1
  275. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  276. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  277. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  278. O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
  279. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  280. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  281. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream - No CLSID value found
  282. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus - No CLSID value found
  283. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload - No CLSID value found
  284. O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
  285. O18 - Protocol\Filter\application/octet-stream - No CLSID value found
  286. O18 - Protocol\Filter\application/x-complus - No CLSID value found
  287. O18 - Protocol\Filter\application/x-msdownload - No CLSID value found
  288. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
  289. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  290. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
  291. O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  292. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  293. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  294. O32 - HKLM CDRom: AutoRun - 1
  295. O34 - HKLM BootExecute: (autocheck autochk *)
  296. O34 - HKLM BootExecute: (BootDefrag.exe)
  297. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  298. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  299. O35 - HKLM\..comfile [open] -- "%1" %*
  300. O35 - HKLM\..exefile [open] -- "%1" %*
  301. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  302. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  303. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  304. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  305. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  306. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  307. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  308.  
  309.  
  310. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  311. Drivers32: msacm.dvacm - C:\Program Files (x86)\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
  312. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  313. Drivers32: msacm.mpegacm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
  314. Drivers32: msacm.ulmp3acm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
  315. Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
  316.  
  317. CREATERESTOREPOINT
  318. Restore point Set: OTL Restore Point
  319.  
  320. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  321.  
  322. [2015.10.18 19:22:56 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  323. [2015.10.18 16:47:29 | 000,192,216 | ---- | C] (Malwarebytes) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
  324. [2015.10.18 16:46:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  325. [2015.10.18 16:46:42 | 000,109,272 | ---- | C] (Malwarebytes) -- C:\windows\SysNative\drivers\mbamchameleon.sys
  326. [2015.10.18 16:46:42 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mwac.sys
  327. [2015.10.18 16:46:42 | 000,025,816 | ---- | C] (Malwarebytes) -- C:\windows\SysNative\drivers\mbam.sys
  328. [2015.10.18 16:46:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
  329. [2015.10.18 16:46:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  330. [2015.10.18 00:39:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
  331. [2015.10.18 00:39:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Seagate
  332. [2015.10.18 00:33:21 | 000,000,000 | ---D | C] -- C:\Users\Sanda\AppData\Roaming\Abelssoft
  333. [2015.10.18 00:33:19 | 000,000,000 | ---D | C] -- C:\ProgramData\XDMessagingv4
  334. [2015.10.18 00:33:16 | 000,000,000 | ---D | C] -- C:\Users\Sanda\AppData\Local\Abelssoft
  335. [2015.10.18 00:33:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CheckDrive 2016
  336. [2015.10.18 00:33:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CheckDrive
  337. [2015.10.17 21:52:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  338. [2015.10.17 21:48:04 | 000,000,000 | ---D | C] -- C:\Users\Sanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
  339. [2015.10.17 21:48:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group
  340. [2015.10.04 22:37:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
  341. [2015.10.04 22:16:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
  342. [2015.10.04 22:15:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit
  343. [2015.10.04 22:15:30 | 000,000,000 | ---D | C] -- C:\windows\tasks\ImCleanDisabled
  344. [2015.09.26 14:39:28 | 000,000,000 | ---D | C] -- C:\Users\Sanda\Desktop\Slike_Tablet
  345. [2015.09.26 14:37:39 | 000,000,000 | ---D | C] -- C:\Users\Sanda\Desktop\Camera
  346. [2015.09.24 15:10:21 | 000,378,880 | ---- | C] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
  347. [2015.09.24 15:09:47 | 000,043,112 | ---- | C] (AVAST Software) -- C:\windows\avastSS.scr
  348.  
  349. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  350.  
  351. [2015.10.18 19:26:15 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  352. [2015.10.18 19:26:15 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  353. [2015.10.18 19:22:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  354. [2015.10.18 19:21:11 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA1cf117321a204f7.job
  355. [2015.10.18 19:21:11 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
  356. [2015.10.18 19:21:11 | 000,000,884 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
  357. [2015.10.18 19:20:55 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
  358. [2015.10.18 17:58:27 | 000,009,182 | ---- | M] () -- C:\Users\Sanda\Desktop\Zahtjev.pdf
  359. [2015.10.18 17:46:42 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore1cf1173209a7c2b.job
  360. [2015.10.18 17:46:26 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
  361. [2015.10.18 17:45:04 | 000,365,528 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
  362. [2015.10.18 17:44:23 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  363. [2015.10.18 16:47:59 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
  364. [2015.10.18 16:46:51 | 000,001,077 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  365. [2015.10.18 00:40:37 | 000,001,376 | ---- | M] () -- C:\Users\Public\Desktop\SeaTools for Windows.lnk
  366. [2015.10.18 00:33:04 | 000,001,006 | ---- | M] () -- C:\Users\Public\Desktop\CheckDrive.lnk
  367. [2015.10.18 00:17:34 | 000,461,374 | ---- | M] () -- C:\Users\Sanda\Documents\cc_20151018_001530.reg
  368. [2015.10.17 21:48:06 | 000,001,239 | ---- | M] () -- C:\Users\Sanda\Desktop\Revo Uninstaller.lnk
  369. [2015.10.16 21:59:33 | 000,002,146 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  370. [2015.10.14 15:37:41 | 001,706,428 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
  371. [2015.10.14 15:37:41 | 000,739,050 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
  372. [2015.10.14 15:37:41 | 000,671,796 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
  373. [2015.10.14 15:37:41 | 000,164,442 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
  374. [2015.10.14 15:37:41 | 000,134,888 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
  375. [2015.10.13 21:28:13 | 000,001,055 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
  376. [2015.10.05 09:50:18 | 000,063,704 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mwac.sys
  377. [2015.10.05 09:50:10 | 000,109,272 | ---- | M] (Malwarebytes) -- C:\windows\SysNative\drivers\mbamchameleon.sys
  378. [2015.10.05 09:50:06 | 000,025,816 | ---- | M] (Malwarebytes) -- C:\windows\SysNative\drivers\mbam.sys
  379. [2015.10.04 22:38:39 | 000,002,125 | ---- | M] () -- C:\Users\Public\Desktop\Driver Booster 3.lnk
  380. [2015.09.24 15:46:06 | 000,000,992 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  381. [2015.09.24 15:15:08 | 000,001,122 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  382. [2015.09.24 15:11:22 | 000,001,893 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  383. [2015.09.24 15:10:19 | 000,274,808 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswVmm.sys
  384. [2015.09.24 15:10:19 | 000,153,744 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswStm.sys
  385. [2015.09.24 15:10:18 | 000,448,968 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswSP.sys
  386. [2015.09.24 15:10:18 | 000,378,880 | ---- | M] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
  387. [2015.09.24 15:10:18 | 000,090,968 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswMonFlt.sys
  388. [2015.09.24 15:10:18 | 000,065,224 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswRvrt.sys
  389. [2015.09.24 15:10:18 | 000,028,656 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswHwid.sys
  390. [2015.09.24 15:10:16 | 000,093,528 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswRdr2.sys
  391. [2015.09.24 15:09:47 | 000,043,112 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
  392. [2015.09.24 15:09:21 | 001,049,880 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswSnx.sys
  393. [2015.09.24 15:09:19 | 000,132,656 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\ngvss.sys
  394.  
  395. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  396.  
  397. [2015.10.18 17:59:20 | 000,009,182 | ---- | C] () -- C:\Users\Sanda\Desktop\Zahtjev.pdf
  398. [2015.10.18 16:46:51 | 000,001,077 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  399. [2015.10.18 00:40:37 | 000,001,376 | ---- | C] () -- C:\Users\Public\Desktop\SeaTools for Windows.lnk
  400. [2015.10.18 00:33:04 | 000,001,006 | ---- | C] () -- C:\Users\Public\Desktop\CheckDrive.lnk
  401. [2015.10.18 00:15:44 | 000,461,374 | ---- | C] () -- C:\Users\Sanda\Documents\cc_20151018_001530.reg
  402. [2015.10.17 21:48:06 | 000,001,239 | ---- | C] () -- C:\Users\Sanda\Desktop\Revo Uninstaller.lnk
  403. [2015.10.04 22:16:03 | 000,002,125 | ---- | C] () -- C:\Users\Public\Desktop\Driver Booster 3.lnk
  404. [2015.09.13 20:33:50 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
  405. [2015.08.17 00:12:32 | 000,000,000 | ---- | C] () -- C:\Users\Sanda\AppData\Local\{064FF86C-FD55-4CD4-9C89-62C2ADFBED66}
  406. [2015.07.10 17:57:23 | 000,002,856 | ---- | C] () -- C:\windows\SysWow64\LavasoftTcpServiceOff.ini
  407. [2014.03.07 18:30:24 | 001,680,708 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
  408. [2010.11.14 19:36:57 | 000,000,033 | ---- | C] () -- C:\ProgramData\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
  409. [2010.11.13 14:13:02 | 000,001,302 | ---- | C] () -- C:\ProgramData\ss.ini
  410. [2010.10.10 13:52:46 | 000,009,728 | ---- | C] () -- C:\Users\Sanda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  411. [2010.09.07 10:10:51 | 000,023,024 | ---- | C] () -- C:\Users\Sanda\AppData\Roaming\UserTile.png
  412. [2010.05.15 21:19:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  413.  
  414. [color=#E56717]========== ZeroAccess Check ==========[/color]
  415.  
  416. [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
  417.  
  418. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  419.  
  420. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  421.  
  422. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  423.  
  424. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  425.  
  426. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  427. "" = C:\Windows\SysNative\shell32.dll -- [2015.08.06 20:04:07 | 014,176,768 | ---- | M] (Microsoft Corporation)
  428. "ThreadingModel" = Apartment
  429.  
  430. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  431. "" = %SystemRoot%\system32\shell32.dll -- [2015.08.06 19:44:51 | 012,875,776 | ---- | M] (Microsoft Corporation)
  432. "ThreadingModel" = Apartment
  433.  
  434. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  435. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  436. "ThreadingModel" = Free
  437.  
  438. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  439. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  440. "ThreadingModel" = Free
  441.  
  442. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  443. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  444. "ThreadingModel" = Both
  445.  
  446. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  447.  
  448. [color=#E56717]========== LOP Check ==========[/color]
  449.  
  450. [2015.10.18 00:33:21 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Abelssoft
  451. [2015.10.17 22:21:02 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AnvSoft
  452. [2013.01.17 20:34:38 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\APP_NAME_NON_STRING
  453. [2010.10.24 19:29:32 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ashampoo
  454. [2014.01.13 18:18:34 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AVAST Software
  455. [2014.12.18 23:52:06 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer
  456. [2010.05.20 19:17:01 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer Pro
  457. [2015.10.17 21:54:57 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Dropbox
  458. [2014.09.16 21:28:51 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\DVDVideoSoft
  459. [2010.05.28 18:56:46 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
  460. [2014.06.01 19:11:27 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\GlarySoft
  461. [2010.09.30 14:21:14 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\InterVideo
  462. [2015.09.13 20:19:14 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\IObit
  463. [2010.11.14 19:41:26 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Jumping Bytes
  464. [2010.09.29 19:32:36 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Nokia
  465. [2014.09.16 21:28:34 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Opera Software
  466. [2010.09.29 19:25:02 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\PC Suite
  467. [2013.01.17 20:35:33 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\PDF Software
  468. [2012.04.29 14:49:42 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Sony
  469. [2010.09.16 20:44:43 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Template
  470. [2013.01.19 21:14:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Toshiba
  471. [2010.06.15 17:31:31 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ulead Systems
  472. [2012.05.08 22:04:57 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Unity
  473. [2012.10.18 18:33:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\WildTangent
  474. [2012.02.16 23:21:28 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\WinBatch
  475.  
  476. [color=#E56717]========== Purity Check ==========[/color]
  477.  
  478.  
  479.  
  480. [color=#E56717]========== Custom Scans ==========[/color]
  481.  
  482. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  483. [2011.03.13 17:16:05 | 000,005,530 | ---- | M] () -- C:\aaw7boot.log
  484. [2010.09.16 09:49:39 | 000,000,234 | ---- | M] () -- C:\BackupLoader.ini
  485. [2009.07.14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
  486. [2009.12.05 10:36:43 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  487. [2015.07.19 20:21:29 | 000,006,576 | ---- | M] () -- C:\bootsqm.dat
  488. [2014.01.13 22:21:57 | 000,000,075 | ---- | M] () -- C:\DiskDefrag.log
  489. [2014.01.13 17:56:34 | 000,022,258 | ---- | M] () -- C:\FixitRegBackup.reg
  490. [2015.10.18 17:44:23 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  491. [2015.10.18 17:44:24 | 4144,418,816 | -HS- | M] () -- C:\pagefile.sys
  492.  
  493. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  494. [2009.07.14 07:32:31 | 000,026,040 | ---- | M] () -- C:\windows\Fonts\GlobalMonospace.CompositeFont
  495. [2009.07.14 07:32:31 | 000,026,489 | ---- | M] () -- C:\windows\Fonts\GlobalSansSerif.CompositeFont
  496. [2009.07.14 07:32:31 | 000,029,779 | ---- | M] () -- C:\windows\Fonts\GlobalSerif.CompositeFont
  497. [2009.07.14 07:32:31 | 000,043,318 | ---- | M] () -- C:\windows\Fonts\GlobalUserInterface.CompositeFont
  498.  
  499. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  500.  
  501. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  502. [2009.06.10 22:49:50 | 000,000,065 | ---- | M] () -- C:\windows\Fonts\desktop.ini
  503.  
  504. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  505.  
  506. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  507.  
  508. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  509.  
  510. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  511.  
  512. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  513.  
  514. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  515.  
  516. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  517.  
  518. [color=#A23BEC]< %systemroot%\*.png >[/color]
  519.  
  520. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  521. [2015.09.24 15:09:47 | 000,043,112 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
  522. [2009.07.10 14:10:44 | 000,307,568 | ---- | M] (Microsoft Corporation) -- C:\windows\WLXPGSS.SCR
  523.  
  524. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  525.  
  526. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  527.  
  528. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  529.  
  530. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  531.  
  532. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  533. [2009.07.14 06:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  534.  
  535. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  536.  
  537. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  538.  
  539. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  540.  
  541. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  542.  
  543. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  544.  
  545. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  546.  
  547. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  548.  
  549. [color=#A23BEC]< %systemroot%\*.config >[/color]
  550.  
  551. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  552.  
  553. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  554. [2011.05.10 16:38:57 | 000,000,314 | -HS- | M] () -- C:\Users\Sanda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  555.  
  556. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  557. [2015.10.18 19:22:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  558.  
  559. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  560.  
  561. [color=#A23BEC]< %systemroot%\*.src >[/color]
  562.  
  563. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  564.  
  565. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  566.  
  567. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  568.  
  569. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  570.  
  571. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  572.  
  573. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  574.  
  575. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  576.  
  577. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  578.  
  579. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  580.  
  581. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  582.  
  583. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  584.  
  585. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  586.  
  587. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  588.  
  589. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  590.  
  591. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  592.  
  593. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  594. [2009.06.10 23:20:04 | 000,000,802 | ---- | M] () -- C:\windows\ADDINS\FXSEXT.ecf
  595.  
  596. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  597.  
  598. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  599.  
  600. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  601.  
  602. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  603. [2015.09.13 20:33:40 | 000,008,192 | ---- | M] () -- C:\windows\SECURITY\Database\edb.chk
  604. [2015.09.13 20:33:40 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edb.log
  605. [2011.06.27 12:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edbres00001.jrs
  606. [2011.06.27 12:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edbres00002.jrs
  607. [2015.09.13 20:33:41 | 001,056,768 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SECURITY\Database\tmp.edb
  608.  
  609. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  610.  
  611. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  612.  
  613. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  614.  
  615. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  616.  
  617. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  618.  
  619. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  620.  
  621. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  622. [2015.10.16 22:19:40 | 000,000,402 | -HS- | M] () -- C:\Users\Sanda\Favorites\desktop.ini
  623.  
  624. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  625. [2009.07.14 03:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\mofcomp.exe
  626. [2009.07.14 03:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WinMgmt.exe
  627. [2009.07.14 03:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WMIADAP.exe
  628. [2009.07.14 03:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WMIC.exe
  629. [2010.11.20 14:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WmiPrvSE.exe
  630.  
  631. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  632.  
  633. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  634.  
  635. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!