API tools faq
paste
Advertisement
Guest User

OTL.txt

a guest
Jun 9th, 2014
33
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 63.68 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-06-09 17:19:10 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Luke\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17041)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 2,92 Gb Total Physical Memory | 0,58 Gb Available Physical Memory | 19,81% Memory free
  8. 5,84 Gb Paging File | 2,04 Gb Available in Paging File | 34,94% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 122,40 Gb Total Space | 72,01 Gb Free Space | 58,83% Space Free | Partition Type: NTFS
  13. Drive D: | 148,06 Gb Total Space | 46,99 Gb Free Space | 31,74% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: LAPTOP | User Name: Luke | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - File not found --
  22. PRC - [2014-06-09 17:16:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Luke\Desktop\OTL.exe
  23. PRC - [2014-05-29 21:45:58 | 009,571,888 | ---- | M] (Blizzard Entertainment) -- D:\Gry\Battle.net\Battle.net.4656\Battle.net.exe
  24. PRC - [2014-05-06 21:30:08 | 009,177,648 | ---- | M] (Blizzard Entertainment) -- C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
  25. PRC - [2014-04-25 06:54:50 | 003,588,952 | ---- | M] (Electronic Arts) -- D:\Programy\Origin\Origin.exe
  26. PRC - [2014-02-02 01:42:39 | 000,866,632 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  27. PRC - [2013-12-27 06:57:08 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
  28. PRC - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  29. PRC - [2013-12-19 23:17:14 | 001,677,080 | ---- | M] (ClanServers Hosting LLC) -- D:\Programy\GameTracker\GSInGameService.exe
  30. PRC - [2013-06-26 20:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
  31. PRC - [2013-06-26 20:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
  32. PRC - [2010-08-18 00:55:42 | 005,732,992 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
  33. PRC - [2010-07-02 23:36:26 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  34. PRC - [2010-06-09 10:55:54 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
  35. PRC - [2010-05-04 00:45:50 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  36. PRC - [2010-05-04 00:41:46 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
  37. PRC - [2009-12-15 20:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
  38. PRC - [2009-11-03 00:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
  39. PRC - [2009-10-01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  40. PRC - [2009-10-01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  41. PRC - [2009-07-31 11:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
  42. PRC - [2009-06-24 22:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
  43. PRC - [2009-06-19 20:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
  44. PRC - [2009-06-19 20:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
  45. PRC - [2009-06-16 03:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
  46. PRC - [2008-12-23 03:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
  47. PRC - [2008-08-14 07:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
  48. PRC - [2008-03-31 12:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
  49.  
  50.  
  51. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  52.  
  53. MOD - [2014-05-29 21:45:56 | 026,065,408 | ---- | M] () -- D:\Gry\Battle.net\Battle.net.4656\libcef.dll
  54. MOD - [2014-05-29 21:45:56 | 000,739,840 | ---- | M] () -- D:\Gry\Battle.net\Battle.net.4656\libGLESv2.dll
  55. MOD - [2014-05-29 21:45:56 | 000,130,048 | ---- | M] () -- D:\Gry\Battle.net\Battle.net.4656\libEGL.dll
  56. MOD - [2014-04-25 06:54:37 | 000,962,560 | ---- | M] () -- D:\Programy\Origin\platforms\qwindows.dll
  57. MOD - [2014-04-25 06:54:36 | 000,302,592 | ---- | M] () -- D:\Programy\Origin\imageformats\qtiff.dll
  58. MOD - [2014-04-25 06:54:36 | 000,261,632 | ---- | M] () -- D:\Programy\Origin\imageformats\qmng.dll
  59. MOD - [2014-04-25 06:54:36 | 000,217,088 | ---- | M] () -- D:\Programy\Origin\imageformats\qjpeg.dll
  60. MOD - [2014-04-25 06:54:36 | 000,025,088 | ---- | M] () -- D:\Programy\Origin\imageformats\qico.dll
  61. MOD - [2014-04-25 06:54:36 | 000,024,064 | ---- | M] () -- D:\Programy\Origin\imageformats\qgif.dll
  62. MOD - [2014-04-25 06:54:36 | 000,019,968 | ---- | M] () -- D:\Programy\Origin\imageformats\qtga.dll
  63. MOD - [2014-04-25 06:54:36 | 000,018,944 | ---- | M] () -- D:\Programy\Origin\imageformats\qwbmp.dll
  64. MOD - [2014-02-14 04:42:36 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\4412bbbb473c356b5ea3e1ea13b25f52\System.Management.ni.dll
  65. MOD - [2014-02-14 04:36:17 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\72284863df9bea3f081ae98996400619\PresentationFramework.Aero.ni.dll
  66. MOD - [2014-02-14 04:35:50 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f703846404bb66a4ae03ef8133755007\PresentationFramework.ni.dll
  67. MOD - [2014-02-14 04:35:37 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll
  68. MOD - [2014-02-14 04:35:30 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll
  69. MOD - [2014-02-14 04:35:28 | 012,238,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\660ac5d6da77df8e86fb26f05c6a9816\PresentationCore.ni.dll
  70. MOD - [2014-02-14 04:35:18 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1d696b2d3de530f7ee971070263667ff\WindowsBase.ni.dll
  71. MOD - [2014-02-14 04:35:12 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll
  72. MOD - [2014-02-14 04:35:09 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll
  73. MOD - [2014-02-14 04:35:08 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll
  74. MOD - [2014-02-14 04:35:01 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll
  75. MOD - [2014-02-12 18:27:57 | 002,933,072 | -HS- | M] () -- \\?\C:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3917931414-1153766874-418409976-1000\MSPRindiv01.key
  76. MOD - [2014-02-02 01:42:37 | 013,616,456 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll
  77. MOD - [2014-02-02 01:42:37 | 000,399,688 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
  78. MOD - [2014-02-02 01:42:35 | 004,055,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
  79. MOD - [2014-02-02 01:41:45 | 000,715,592 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
  80. MOD - [2014-02-02 01:41:45 | 000,100,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
  81. MOD - [2014-02-02 01:41:43 | 001,634,632 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
  82. MOD - [2010-11-05 03:54:55 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_pl_31bf3856ad364e35\PresentationCore.resources.dll
  83. MOD - [2010-07-02 23:36:26 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
  84. MOD - [2010-02-23 16:14:22 | 000,071,680 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
  85. MOD - [2010-02-23 16:14:18 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
  86. MOD - [2010-02-23 16:14:10 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
  87. MOD - [2010-02-23 16:12:22 | 000,186,880 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
  88. MOD - [2010-02-23 16:11:46 | 000,076,288 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
  89. MOD - [2009-11-03 00:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
  90. MOD - [2009-11-03 00:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
  91. MOD - [2007-06-15 20:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
  92. MOD - [2007-06-02 03:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
  93.  
  94.  
  95. [color=#E56717]========== Services (SafeList) ==========[/color]
  96.  
  97. SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
  98. SRV:[b]64bit:[/b] - [2014-03-06 10:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  99. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  100. SRV:[b]64bit:[/b] - [2010-11-30 23:19:52 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
  101. SRV:[b]64bit:[/b] - [2010-09-23 04:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  102. SRV:[b]64bit:[/b] - [2010-09-17 10:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
  103. SRV:[b]64bit:[/b] - [2010-08-11 15:44:46 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  104. SRV:[b]64bit:[/b] - [2009-07-14 03:39:31 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\rundll32.exe -- (699fd52f)
  105. SRV - [2014-05-29 19:36:52 | 000,543,424 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  106. SRV - [2014-05-25 15:15:41 | 000,093,048 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Windows\SysWOW64\EasyAntiCheat.exe -- (EasyAntiCheat)
  107. SRV - [2014-05-14 19:11:25 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  108. SRV - [2014-02-28 22:23:52 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- D:\Gry\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
  109. SRV - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  110. SRV - [2013-12-19 23:17:14 | 001,677,080 | ---- | M] (ClanServers Hosting LLC) [Auto | Running] -- D:\Programy\GameTracker\GSInGameService.exe -- (GS In-Game Service)
  111. SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  112. SRV - [2013-06-26 20:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
  113. SRV - [2013-06-26 20:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
  114. SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  115. SRV - [2009-12-15 20:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
  116. SRV - [2009-10-01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  117. SRV - [2009-10-01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  118. SRV - [2009-06-16 03:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
  119. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  120. SRV - [2008-03-31 12:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
  121. SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
  122. SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
  123.  
  124.  
  125. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  126.  
  127. DRV:[b]64bit:[/b] - [2014-01-22 09:52:12 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudserd.sys -- (ssudserd)
  128. DRV:[b]64bit:[/b] - [2014-01-22 09:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
  129. DRV:[b]64bit:[/b] - [2014-01-22 09:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  130. DRV:[b]64bit:[/b] - [2013-12-27 06:56:59 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
  131. DRV:[b]64bit:[/b] - [2013-12-26 22:34:47 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  132. DRV:[b]64bit:[/b] - [2013-06-28 12:45:00 | 000,036,352 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem)
  133. DRV:[b]64bit:[/b] - [2013-06-26 20:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
  134. DRV:[b]64bit:[/b] - [2013-06-26 20:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
  135. DRV:[b]64bit:[/b] - [2013-06-26 20:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
  136. DRV:[b]64bit:[/b] - [2013-06-26 20:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
  137. DRV:[b]64bit:[/b] - [2013-04-18 17:14:12 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag)
  138. DRV:[b]64bit:[/b] - [2012-12-19 09:42:10 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\t_mouse.sys -- (t_mouse.sys)
  139. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  140. DRV:[b]64bit:[/b] - [2011-06-27 02:37:00 | 002,753,536 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  141. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  142. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  143. DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  144. DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  145. DRV:[b]64bit:[/b] - [2010-11-20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  146. DRV:[b]64bit:[/b] - [2010-09-23 10:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
  147. DRV:[b]64bit:[/b] - [2010-09-17 10:52:28 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
  148. DRV:[b]64bit:[/b] - [2010-09-17 10:52:28 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
  149. DRV:[b]64bit:[/b] - [2010-09-17 10:52:28 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
  150. DRV:[b]64bit:[/b] - [2010-09-17 10:52:28 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
  151. DRV:[b]64bit:[/b] - [2010-09-13 12:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  152. DRV:[b]64bit:[/b] - [2010-08-11 16:15:50 | 007,765,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  153. DRV:[b]64bit:[/b] - [2010-08-11 15:11:08 | 000,279,040 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  154. DRV:[b]64bit:[/b] - [2010-07-15 02:47:42 | 000,116,240 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  155. DRV:[b]64bit:[/b] - [2010-07-14 08:17:28 | 000,735,360 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
  156. DRV:[b]64bit:[/b] - [2010-04-13 12:15:04 | 000,135,560 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
  157. DRV:[b]64bit:[/b] - [2010-02-25 05:26:58 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\JME.sys -- (JME)
  158. DRV:[b]64bit:[/b] - [2010-01-05 04:23:20 | 001,847,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
  159. DRV:[b]64bit:[/b] - [2009-10-08 09:10:06 | 000,013,472 | ---- | M] (Headsoft) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vjoy.sys -- (vhidmini)
  160. DRV:[b]64bit:[/b] - [2009-09-17 22:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
  161. DRV:[b]64bit:[/b] - [2009-08-20 04:41:38 | 001,800,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
  162. DRV:[b]64bit:[/b] - [2009-08-18 10:23:32 | 000,143,472 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
  163. DRV:[b]64bit:[/b] - [2009-07-20 11:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
  164. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  165. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  166. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  167. DRV:[b]64bit:[/b] - [2009-06-10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
  168. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  169. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  170. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  171. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  172. DRV:[b]64bit:[/b] - [2009-05-13 19:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
  173. DRV:[b]64bit:[/b] - [2008-08-08 16:31:26 | 000,062,960 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\h648103.sys -- (h648103)
  174. DRV:[b]64bit:[/b] - [2008-08-08 16:31:22 | 000,065,776 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\h648101.sys -- (h648101)
  175. DRV:[b]64bit:[/b] - [2008-08-08 16:31:20 | 000,063,856 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\h647906.sys -- (h647906)
  176. DRV:[b]64bit:[/b] - [2008-05-24 03:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
  177. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  178. DRV - [2009-07-03 03:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
  179. DRV - [2008-08-08 16:31:18 | 000,043,192 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\hid8101.sys -- (hid8101)
  180. DRV - [2008-08-08 16:31:18 | 000,040,856 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\hid8103.sys -- (hid8103)
  181. DRV - [2008-08-08 16:31:16 | 000,041,272 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\hid7906.sys -- (hid7906)
  182.  
  183.  
  184. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  185.  
  186.  
  187. [color=#E56717]========== Internet Explorer ==========[/color]
  188.  
  189. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  190. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  191. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  192. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  193. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  194. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
  195. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  196. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  197. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  198. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  199. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  200. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  201. IE - HKLM\..\SearchScopes,DefaultScope =
  202. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  203. IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
  204. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  205.  
  206.  
  207. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  208. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  209.  
  210. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  211. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  212.  
  213. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  214.  
  215. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  216.  
  217. IE - HKU\S-1-5-21-3917931414-1153766874-418409976-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  218. IE - HKU\S-1-5-21-3917931414-1153766874-418409976-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  219. IE - HKU\S-1-5-21-3917931414-1153766874-418409976-1000\..\SearchScopes,DefaultScope =
  220. IE - HKU\S-1-5-21-3917931414-1153766874-418409976-1000\..\SearchScopes\{7FEA6ED6-F6F7-457E-A078-C8E9D83C8A4C}: "URL" = http://www.idg.pl?q={searchTerms}
  221. IE - HKU\S-1-5-21-3917931414-1153766874-418409976-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  222.  
  223. [color=#E56717]========== FireFox ==========[/color]
  224.  
  225. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
  226. FF - user.js - File not found
  227.  
  228. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found
  229. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  230. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  231. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
  232. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  233. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
  234. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
  235. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  236. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  237. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
  238. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  239. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  240. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  241. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  242. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  243. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  244. FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
  245. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Luke\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  246. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Luke\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  247.  
  248. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011-01-12 16:46:08 | 000,000,000 | ---D | M]
  249. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: D:\Programy\Mozilla Firefox\components [2014-05-15 15:52:31 | 000,000,000 | ---D | M]
  250. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: D:\Programy\Mozilla Firefox\plugins
  251.  
  252. [2013-12-26 22:23:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Luke\AppData\Roaming\mozilla\Extensions
  253. [2014-06-08 15:36:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Luke\AppData\Roaming\mozilla\Firefox\Profiles\8leww9fp.default\extensions
  254. [2014-03-27 23:22:25 | 000,000,000 | ---D | M] (YTNeoAdss) -- C:\Users\Luke\AppData\Roaming\mozilla\Firefox\Profiles\8leww9fp.default\extensions\[email protected]
  255. [2014-05-22 21:34:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Luke\AppData\Roaming\mozilla\Firefox\Profiles\8leww9fp.default\extensions\staged
  256.  
  257. [color=#E56717]========== Chrome ==========[/color]
  258.  
  259. CHR - default_search_provider: Google (Enabled)
  260. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  261. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  262. CHR - homepage: http://search.babylon.com/?affID=113543&tt=010812_hplgoff_3112_5&babsrc=HP_ss&mntrId=32287002000000000000e6b9a51b45d3
  263. CHR - Extension: Przelewy24 = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiicmmpkicnndkhlnnloilpgncbpkbjj\7.1_0\
  264. CHR - Extension: BetterTTV = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped\6.6_0\
  265. CHR - Extension: Dokumenty Google = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.6_0\
  266. CHR - Extension: Dysk Google = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
  267. CHR - Extension: YouTube Center = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcegdpionpopahcglnfiiioapcclamdj\2.1.0_0\
  268. CHR - Extension: YouTube = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
  269. CHR - Extension: Adblock Plus = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.3_0\
  270. CHR - Extension: Szukaj w Google = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
  271. CHR - Extension: Speed Dial = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgpdioedihjhncjafcpgbbjdpbbkikmi\2.5.6_0\
  272. CHR - Extension: Tampermonkey = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.7.48_0\
  273. CHR - Extension: AdBlock Premium = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj\2.6.4.3_0\
  274. CHR - Extension: Transferuj.pl = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gamjcgdmfcciglelnlngnknalhbhmkif\1.0.9_0\
  275. CHR - Extension: AdBlock = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.37_0\
  276. CHR - Extension: tviggr = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmolgbmkhjnoekekdogckilbbedhdnoh\1.0.200_0\
  277. CHR - Extension: Windows Media Player Extension for HTML5 = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\
  278. CHR - Extension: Speed Dial 2 = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik\1.7.9_0\
  279. CHR - Extension: Image Viewer = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcljlcpbfbkapegpifkodjdmdllgdlmk\217\
  280. CHR - Extension: League of Legends Events = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfnfkjennojjkajjmghdgkibohcnefdk\0.53_0\
  281. CHR - Extension: Webcam Toy = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade\1.5_0\
  282. CHR - Extension: Google Wallet = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  283. CHR - Extension: Hover Zoom = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl\5.2_0\
  284. CHR - Extension: Gmail = C:\Users\Luke\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
  285.  
  286. O1 HOSTS File: ([2014-01-02 00:23:15 | 000,000,873 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  287. O2:[b]64bit:[/b] - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
  288. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  289. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  290. O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
  291. O2:[b]64bit:[/b] - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
  292. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  293. O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
  294. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  295. O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
  296. O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
  297. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  298. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  299. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  300. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  301. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  302. O4:[b]64bit:[/b] - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
  303. O4:[b]64bit:[/b] - HKLM..\Run: [MouseDriver] C:\Windows\SysNative\TiltWheelMouse.exe (Pixart Imaging Inc)
  304. O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation)
  305. O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
  306. O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
  307. O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
  308. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  309. O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
  310. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  311. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  312. O4 - HKU\S-1-5-21-3917931414-1153766874-418409976-1000..\Run: [AdobeBridge] File not found
  313. O4 - HKU\S-1-5-21-3917931414-1153766874-418409976-1000..\Run: [Facebook Update] C:\Users\Luke\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  314. O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
  315. O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
  316. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  317. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  318. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  319. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  320. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  321. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  322. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  323. O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  324. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  325. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
  326. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
  327. O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
  328. O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
  329. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
  330. O13[b]64bit:[/b] - gopher Prefix: missing
  331. O13 - gopher Prefix: missing
  332. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
  333. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{59C51C64-ED07-4A16-BDA3-9712952A7A5F}: DhcpNameServer = 192.168.2.1
  334. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{59C51C64-ED07-4A16-BDA3-9712952A7A5F}: NameServer = 8.8.8.8,8.8.4.4
  335. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D3DEEE78-C250-4907-BF1C-1F0666658D23}: DhcpNameServer = 212.33.64.2 212.33.64.18
  336. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  337. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  338. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  339. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  340. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  341. O18:[b]64bit:[/b] - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
  342. O18:[b]64bit:[/b] - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
  343. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  344. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  345. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  346. O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
  347. O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
  348. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  349. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  350. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  351. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  352. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  353. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  354. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  355. O32 - HKLM CDRom: AutoRun - 1
  356. O33 - MountPoints2\{34438c2f-8443-11e3-8e62-f46d048449bf}\Shell - "" = AutoRun
  357. O33 - MountPoints2\{34438c2f-8443-11e3-8e62-f46d048449bf}\Shell\AutoRun\command - "" = G:\LGAutoRun.exe
  358. O34 - HKLM BootExecute: (autocheck autochk *)
  359. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  360. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  361. O35 - HKLM\..comfile [open] -- "%1" %*
  362. O35 - HKLM\..exefile [open] -- "%1" %*
  363. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  364. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  365. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  366. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  367. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  368. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  369. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  370.  
  371. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  372.  
  373. [2014-06-09 17:16:11 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Luke\Desktop\OTL.exe
  374. [2014-06-09 13:21:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
  375. [2014-06-08 17:44:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Anvisoft
  376. [2014-06-08 17:44:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
  377. [2014-06-08 17:43:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Anvisoft
  378. [2014-06-08 16:37:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  379. [2014-06-08 15:18:44 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll
  380. [2014-06-08 15:17:23 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  381. [2014-06-05 13:19:08 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
  382. [2014-06-05 13:19:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Drakensang Online
  383. [2014-06-04 11:22:10 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\Unity
  384. [2014-06-04 11:21:09 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Local\Unity
  385. [2014-06-01 15:57:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WYSIWYG Web Builder 9
  386. [2014-06-01 08:16:17 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\Wargaming.net
  387. [2014-05-30 19:36:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
  388. [2014-05-25 15:40:15 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\WizardWars
  389. [2014-05-25 15:39:58 | 000,093,048 | ---- | C] (EasyAntiCheat Ltd) -- C:\Windows\SysWow64\EasyAntiCheat.exe
  390. [2014-05-25 15:39:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
  391. [2014-05-25 15:39:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
  392. [2014-05-24 11:22:40 | 000,000,000 | ---D | C] -- C:\Users\Luke\Desktop\Tede-Kurt-Rolson-ReeDzior
  393. [2014-05-22 19:40:24 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\GameTracker
  394. [2014-05-22 19:40:04 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameTracker Lite
  395. [2014-05-19 16:12:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited
  396. [2014-05-17 17:45:05 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\StunlockStudios
  397. [2014-05-15 14:17:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BuitSaver
  398. [2014-05-15 10:17:28 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  399. [2014-05-15 10:17:28 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  400. [2014-05-15 10:16:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  401. [2014-05-14 19:11:18 | 017,938,608 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  402. [2014-05-14 18:17:12 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  403. [2014-05-14 18:17:12 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  404. [2014-05-14 18:15:45 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  405. [2014-05-14 18:15:44 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  406. [2014-05-14 18:15:44 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  407. [2014-05-14 18:15:44 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
  408. [2014-05-14 18:15:43 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  409. [2014-05-14 18:15:43 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll
  410. [2014-05-14 18:15:43 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll
  411. [2014-05-14 18:15:42 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  412. [2014-05-14 18:15:42 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  413. [2014-05-14 18:15:42 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll
  414. [2014-05-14 18:15:42 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll
  415. [2014-05-14 18:15:42 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll
  416. [2014-05-14 18:15:42 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll
  417. [2014-05-14 18:15:42 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll
  418. [2014-05-14 18:15:42 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll
  419. [2014-05-14 18:15:42 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll
  420. [2014-05-14 18:15:42 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll
  421. [2014-05-14 18:15:42 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll
  422. [2014-05-14 18:15:42 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll
  423. [2014-05-14 18:15:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll
  424. [2014-05-14 18:15:42 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll
  425. [2014-05-14 18:15:42 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  426. [2014-05-14 18:15:42 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  427. [2014-05-13 16:53:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony
  428. [2014-05-13 16:44:32 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Roaming\Sony
  429. [2014-05-13 16:44:32 | 000,000,000 | ---D | C] -- C:\Users\Luke\AppData\Local\Sony
  430. [2014-05-11 14:29:27 | 000,000,000 | ---D | C] -- C:\ProgramData\PopCap Games
  431. [2014-05-11 14:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
  432. [2014-05-11 14:29:17 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
  433.  
  434. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  435.  
  436. [2014-06-09 17:26:04 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  437. [2014-06-09 17:24:34 | 000,511,678 | ---- | M] () -- C:\Users\Luke\Desktop\3.PNG
  438. [2014-06-09 17:24:11 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3917931414-1153766874-418409976-1000UA.job
  439. [2014-06-09 17:24:05 | 000,571,606 | ---- | M] () -- C:\Users\Luke\Desktop\2.PNG
  440. [2014-06-09 17:22:43 | 000,219,434 | ---- | M] () -- C:\Users\Luke\Desktop\1.PNG
  441. [2014-06-09 17:16:16 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Luke\Desktop\OTL.exe
  442. [2014-06-09 17:09:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  443. [2014-06-09 13:33:55 | 000,001,036 | ---- | M] () -- C:\Users\Luke\Desktop\Steam.lnk
  444. [2014-06-09 13:32:49 | 000,000,208 | ---- | M] () -- C:\Users\Luke\Desktop\Counter-Strike Global Offensive.url
  445. [2014-06-09 13:32:24 | 000,000,211 | ---- | M] () -- C:\Users\Luke\Desktop\The Binding of Isaac.url
  446. [2014-06-09 13:04:42 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  447. [2014-06-09 13:04:42 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  448. [2014-06-09 13:02:21 | 001,701,654 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  449. [2014-06-09 13:02:21 | 000,752,202 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  450. [2014-06-09 13:02:21 | 000,665,994 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  451. [2014-06-09 13:02:21 | 000,159,826 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  452. [2014-06-09 13:02:21 | 000,125,948 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  453. [2014-06-09 12:57:07 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  454. [2014-06-09 12:56:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  455. [2014-06-09 12:56:46 | 2350,284,800 | -HS- | M] () -- C:\hiberfil.sys
  456. [2014-06-09 10:55:48 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3917931414-1153766874-418409976-1000Core.job
  457. [2014-06-08 17:05:21 | 000,001,288 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
  458. [2014-06-08 15:45:49 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
  459. [2014-06-08 15:45:31 | 005,040,344 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  460. [2014-06-08 15:16:40 | 001,333,465 | ---- | M] () -- C:\Users\Luke\Desktop\AdwCleaner.exe
  461. [2014-06-07 23:23:21 | 000,860,141 | ---- | M] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.23.20.png
  462. [2014-06-07 23:22:59 | 000,882,563 | ---- | M] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.22.59.png
  463. [2014-06-07 23:22:40 | 000,885,013 | ---- | M] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.22.40.png
  464. [2014-06-07 23:22:16 | 000,887,675 | ---- | M] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.22.15.png
  465. [2014-06-06 10:11:28 | 000,001,233 | ---- | M] () -- C:\Users\Luke\Desktop\vjoy.ini
  466. [2014-06-05 13:19:08 | 000,001,970 | ---- | M] () -- C:\Users\Luke\Desktop\Drakensang Online.lnk
  467. [2014-06-01 15:57:36 | 000,000,830 | ---- | M] () -- C:\Users\Luke\Desktop\WYSIWYG Web Builder 9.lnk
  468. [2014-06-01 15:56:57 | 000,737,280 | ---- | M] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
  469. [2014-05-30 19:36:33 | 000,000,669 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks.lnk
  470. [2014-05-25 15:15:41 | 000,093,048 | ---- | M] (EasyAntiCheat Ltd) -- C:\Windows\SysWow64\EasyAntiCheat.exe
  471. [2014-05-22 19:40:04 | 000,000,668 | ---- | M] () -- C:\Users\Luke\Desktop\GameTracker Lite.lnk
  472. [2014-05-15 19:57:13 | 000,001,090 | ---- | M] () -- C:\Users\Luke\Desktop\Mozilla Firefox.lnk
  473. [2014-05-14 19:11:24 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  474. [2014-05-14 19:11:24 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  475. [2014-05-14 19:11:18 | 017,938,608 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  476. [2014-05-13 16:52:45 | 000,002,460 | ---- | M] () -- C:\Users\Luke\Documents\Register Vegas Pro.htm
  477.  
  478. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  479.  
  480. [2014-06-09 17:24:04 | 000,571,606 | ---- | C] () -- C:\Users\Luke\Desktop\2.PNG
  481. [2014-06-09 17:22:43 | 000,219,434 | ---- | C] () -- C:\Users\Luke\Desktop\1.PNG
  482. [2014-06-08 15:16:09 | 001,333,465 | ---- | C] () -- C:\Users\Luke\Desktop\AdwCleaner.exe
  483. [2014-06-07 23:23:21 | 000,860,141 | ---- | C] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.23.20.png
  484. [2014-06-07 23:22:59 | 000,882,563 | ---- | C] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.22.59.png
  485. [2014-06-07 23:22:40 | 000,885,013 | ---- | C] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.22.40.png
  486. [2014-06-07 23:22:16 | 000,887,675 | ---- | C] () -- C:\Users\Luke\Desktop\Hearthstone_Screenshot_6.7.2014.23.22.15.png
  487. [2014-06-05 13:19:08 | 000,001,970 | ---- | C] () -- C:\Users\Luke\Desktop\Drakensang Online.lnk
  488. [2014-06-01 15:57:36 | 000,000,830 | ---- | C] () -- C:\Users\Luke\Desktop\WYSIWYG Web Builder 9.lnk
  489. [2014-05-30 19:36:33 | 000,000,669 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks.lnk
  490. [2014-05-22 19:40:04 | 000,000,668 | ---- | C] () -- C:\Users\Luke\Desktop\GameTracker Lite.lnk
  491. [2014-05-22 17:48:02 | 000,001,036 | ---- | C] () -- C:\Users\Luke\Desktop\Steam.lnk
  492. [2014-05-15 19:56:41 | 000,001,090 | ---- | C] () -- C:\Users\Luke\Desktop\Mozilla Firefox.lnk
  493. [2014-05-15 19:21:49 | 000,000,208 | ---- | C] () -- C:\Users\Luke\Desktop\Counter-Strike Global Offensive.url
  494. [2014-05-13 16:52:45 | 000,002,460 | ---- | C] () -- C:\Users\Luke\Documents\Register Vegas Pro.htm
  495. [2014-04-18 12:04:14 | 000,717,080 | ---- | C] () -- C:\Windows\unins000.exe
  496. [2014-04-18 12:04:13 | 000,128,140 | ---- | C] () -- C:\Windows\unins000.dat
  497. [2014-02-17 23:15:50 | 000,000,132 | ---- | C] () -- C:\Users\Luke\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
  498. [2014-02-11 01:28:54 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  499. [2014-02-03 19:47:29 | 000,000,132 | ---- | C] () -- C:\Users\Luke\AppData\Roaming\Preferencje formatu BMP CS6 firmy Adobe
  500. [2014-01-23 18:06:47 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\CommonDL.dll
  501. [2014-01-23 18:06:47 | 000,002,411 | ---- | C] () -- C:\Windows\SysWow64\lgAxconfig.ini
  502. [2014-01-17 02:17:35 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat
  503. [2014-01-13 18:25:40 | 000,003,584 | ---- | C] () -- C:\Users\Luke\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  504. [2014-01-06 18:41:20 | 001,673,532 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  505. [2013-12-27 06:54:56 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  506. [2013-12-27 06:50:39 | 000,002,857 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  507. [2013-12-26 23:07:50 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  508. [2013-12-26 22:27:28 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
  509. [2013-11-08 23:38:38 | 000,200,704 | ---- | C] () -- C:\Windows\SysWow64\clinfo.exe
  510. [2013-10-30 13:06:54 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
  511. [2013-10-30 13:06:54 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
  512. [2013-10-30 13:06:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
  513. [2013-10-30 13:06:54 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
  514. [2011-01-12 16:44:17 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe
  515.  
  516. [color=#E56717]========== ZeroAccess Check ==========[/color]
  517.  
  518. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  519.  
  520. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  521.  
  522. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  523.  
  524. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  525.  
  526. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  527.  
  528. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  529. "" = C:\Windows\SysNative\shell32.dll -- [2014-03-25 04:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
  530. "ThreadingModel" = Apartment
  531.  
  532. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  533. "" = %SystemRoot%\system32\shell32.dll -- [2014-03-25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
  534. "ThreadingModel" = Apartment
  535.  
  536. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  537. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  538. "ThreadingModel" = Free
  539.  
  540. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  541. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  542. "ThreadingModel" = Free
  543.  
  544. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  545. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  546. "ThreadingModel" = Both
  547.  
  548. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  549.  
  550. [color=#E56717]========== LOP Check ==========[/color]
  551.  
  552. [2014-06-04 19:19:20 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\.minecraft
  553. [2013-12-26 22:21:07 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Asus WebStorage
  554. [2014-02-03 00:13:18 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Audacity
  555. [2014-02-10 19:14:13 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Awesomium
  556. [2014-05-06 15:41:41 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Battle.net
  557. [2014-03-05 20:04:55 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\BoL
  558. [2013-12-26 23:12:21 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Canneverbe Limited
  559. [2013-12-26 22:36:12 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\DAEMON Tools Lite
  560. [2014-05-07 22:27:18 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Dev-Cpp
  561. [2014-05-23 12:30:23 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\GameTracker
  562. [2013-12-27 01:00:46 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\gd.sos.McPixel
  563. [2014-04-18 12:17:00 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\LG Electronics
  564. [2014-04-15 22:49:53 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\library_dir
  565. [2013-12-27 01:10:21 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\LolClient
  566. [2014-01-24 12:52:30 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\MPC-HC
  567. [2014-04-16 12:16:00 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\MultiBit
  568. [2014-05-13 13:26:24 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\NCSOFT
  569. [2013-12-29 00:58:19 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Nuance
  570. [2014-05-01 15:52:12 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Origin
  571. [2014-05-15 14:27:03 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\OTP
  572. [2014-04-15 22:08:23 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\poclbm
  573. [2014-01-16 19:57:19 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\PowerISO
  574. [2014-04-07 14:09:44 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\pxgclient
  575. [2014-01-23 19:30:19 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Samsung
  576. [2014-05-14 00:23:38 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\SoftGrid Client
  577. [2014-05-13 16:59:32 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Sony
  578. [2014-05-17 17:45:05 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\StunlockStudios
  579. [2014-01-06 18:42:21 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\TP
  580. [2013-12-26 22:43:30 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\ts3overlay
  581. [2014-02-10 21:41:23 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\ts3overlay_hook_win64
  582. [2014-06-04 11:22:10 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Unity
  583. [2014-06-08 18:10:17 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\uTorrent
  584. [2014-06-01 08:16:17 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Wargaming.net
  585. [2014-05-25 15:40:44 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\WizardWars
  586. [2013-12-29 00:58:15 | 000,000,000 | ---D | M] -- C:\Users\Luke\AppData\Roaming\Zeon
  587.  
  588. [color=#E56717]========== Purity Check ==========[/color]
  589.  
  590.  
  591.  
  592. [color=#E56717]========== Alternate Data Streams ==========[/color]
  593.  
  594. @Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:029E021F
  595.  
  596. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!