API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 22nd, 2015
307
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 51.87 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2015-02-22 19:24:12 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Krzysiek\Desktop
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17280)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,88 Gb Total Physical Memory | 2,47 Gb Available Physical Memory | 63,71% Memory free
  8. 7,77 Gb Paging File | 5,83 Gb Available in Paging File | 75,08% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 268,34 Gb Total Space | 226,94 Gb Free Space | 84,57% Space Free | Partition Type: NTFS
  13. Drive D: | 195,31 Gb Total Space | 177,54 Gb Free Space | 90,90% Space Free | Partition Type: NTFS
  14. Drive E: | 1,99 Gb Total Space | 1,98 Gb Free Space | 99,43% Space Free | Partition Type: FAT32
  15.  
  16. Computer Name: KRZYSIEK-NB | User Name: Krzysiek | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2015-02-22 19:23:37 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Krzysiek\Desktop\OTL.exe
  23. PRC - [2015-02-12 09:32:58 | 005,260,864 | ---- | M] (GG Network S.A.) -- C:\Users\Krzysiek\AppData\Local\GG\Application\ggdrive\ggdrive.exe
  24. PRC - [2015-02-12 09:32:58 | 004,023,872 | ---- | M] (GG Network S.A.) -- C:\Users\Krzysiek\AppData\Local\GG\Application\gghub.exe
  25. PRC - [2015-02-12 09:32:58 | 000,118,336 | ---- | M] (GG Network S.A.) -- C:\Users\Krzysiek\AppData\Local\GG\Application\ggapp.exe
  26. PRC - [2014-12-19 08:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  27. PRC - [2014-10-29 23:25:46 | 004,673,432 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Krzysiek\AppData\Local\Akamai\netsession_win.exe
  28. PRC - [2013-11-26 05:24:43 | 000,500,696 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe
  29. PRC - [2013-09-04 18:21:42 | 002,112,000 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
  30. PRC - [2013-07-31 15:25:40 | 000,681,760 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
  31. PRC - [2013-07-30 07:24:58 | 000,014,696 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  32. PRC - [2013-07-26 06:24:14 | 000,390,616 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  33. PRC - [2013-07-26 06:24:08 | 000,131,544 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
  34. PRC - [2013-07-26 06:24:04 | 000,169,432 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  35. PRC - [2013-07-15 12:20:37 | 000,294,664 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
  36. PRC - [2013-07-15 12:20:35 | 000,077,576 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
  37. PRC - [2013-06-28 04:43:16 | 000,323,584 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
  38. PRC - [2013-04-26 19:25:54 | 000,292,848 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  39. PRC - [2012-02-21 12:46:02 | 002,048,000 | ---- | M] (FirebirdSQL Project) -- C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
  40. PRC - [2012-02-21 12:46:02 | 000,081,920 | ---- | M] (FirebirdSQL Project) -- C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
  41. PRC - [2012-01-18 14:02:04 | 000,508,136 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  42. PRC - [2010-03-08 23:42:02 | 000,029,984 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
  43. PRC - [2010-03-08 23:40:36 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
  44. PRC - [2009-05-05 15:06:06 | 000,222,496 | ---- | M] (Acresso Corporation) -- C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
  45.  
  46.  
  47. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  48.  
  49. MOD - [2015-02-12 09:32:58 | 000,122,432 | ---- | M] () -- C:\Users\Krzysiek\AppData\Local\GG\Application\ggdrive\ZLIB1.dll
  50. MOD - [2015-02-12 09:32:57 | 003,715,648 | ---- | M] () -- C:\Users\Krzysiek\AppData\Local\GG\Application\xulrunner\mozjs.dll
  51. MOD - [2013-09-04 18:21:42 | 002,112,000 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
  52. MOD - [2011-06-08 08:32:26 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\screenSHU\mingwm10.dll
  53. MOD - [2011-06-08 08:32:24 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\screenSHU\libgcc_s_dw2-1.dll
  54.  
  55.  
  56. [color=#E56717]========== Services (SafeList) ==========[/color]
  57.  
  58. SRV:[b]64bit:[/b] - [2014-09-22 01:09:55 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  59. SRV:[b]64bit:[/b] - [2013-07-30 07:24:58 | 000,014,696 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  60. SRV:[b]64bit:[/b] - [2013-07-23 10:28:56 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
  61. SRV:[b]64bit:[/b] - [2013-07-04 22:36:32 | 000,337,920 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
  62. SRV:[b]64bit:[/b] - [2013-07-02 18:12:38 | 003,223,144 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysNative\vcsFPService.exe -- (vcsFPService)
  63. SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  64. SRV:[b]64bit:[/b] - [2013-05-11 16:45:54 | 000,822,232 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
  65. SRV:[b]64bit:[/b] - [2013-05-11 16:45:38 | 000,733,696 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  66. SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  67. SRV - [2015-02-05 10:37:10 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  68. SRV - [2015-01-26 23:43:27 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  69. SRV - [2014-12-19 08:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  70. SRV - [2014-03-20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  71. SRV - [2013-09-11 20:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  72. SRV - [2013-08-15 17:14:32 | 001,444,664 | ---- | M] (Hewlett-Packard Development Company, L.P.) [On_Demand | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe -- (hpCMSrv)
  73. SRV - [2013-08-12 08:08:10 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  74. SRV - [2013-08-08 17:31:38 | 000,092,160 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe -- (HP Support Assistant Service)
  75. SRV - [2013-07-31 15:25:40 | 000,681,760 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe -- (hpHotkeyMonitor)
  76. SRV - [2013-07-26 06:24:14 | 000,390,616 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  77. SRV - [2013-07-26 06:24:08 | 000,131,544 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
  78. SRV - [2013-07-26 06:24:04 | 000,169,432 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  79. SRV - [2013-07-15 12:20:37 | 000,294,664 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe -- (CyberLink PowerDVD 12 Media Server Service)
  80. SRV - [2013-07-15 12:20:35 | 000,077,576 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe -- (CyberLink PowerDVD 12 Media Server Monitor Service)
  81. SRV - [2013-07-02 18:07:00 | 002,742,888 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vcsFPService.exe -- (vcsFPService)
  82. SRV - [2013-06-28 05:07:54 | 000,312,448 | ---- | M] (Windows (R) Win 7 DDK provider) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
  83. SRV - [2013-06-28 04:43:16 | 000,323,584 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (ZAtheros Bt and Wlan Coex Agent)
  84. SRV - [2012-02-21 12:46:02 | 002,048,000 | ---- | M] (FirebirdSQL Project) [On_Demand | Running] -- C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
  85. SRV - [2012-02-21 12:46:02 | 000,081,920 | ---- | M] (FirebirdSQL Project) [Auto | Running] -- C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
  86. SRV - [2010-03-08 23:40:36 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe -- (PDFProFiltSrvPP)
  87. SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  88.  
  89.  
  90. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  91.  
  92. DRV:[b]64bit:[/b] - [2014-10-11 13:27:46 | 000,142,528 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  93. DRV:[b]64bit:[/b] - [2014-08-19 04:07:06 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (npf)
  94. DRV:[b]64bit:[/b] - [2014-02-07 12:17:24 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc)
  95. DRV:[b]64bit:[/b] - [2013-10-29 08:26:19 | 000,041,704 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd6.sys -- (clwvd6)
  96. DRV:[b]64bit:[/b] - [2013-08-19 23:17:36 | 000,524,016 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  97. DRV:[b]64bit:[/b] - [2013-08-08 18:53:57 | 000,452,088 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  98. DRV:[b]64bit:[/b] - [2013-08-08 18:44:52 | 004,448,800 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  99. DRV:[b]64bit:[/b] - [2013-08-08 13:04:20 | 001,512,952 | ---- | M] (Sunplus) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SPUVCBv_x64.sys -- (SPUVCbv)
  100. DRV:[b]64bit:[/b] - [2013-07-30 17:24:34 | 000,666,984 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
  101. DRV:[b]64bit:[/b] - [2013-07-30 17:24:34 | 000,028,008 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF)
  102. DRV:[b]64bit:[/b] - [2013-07-26 06:24:06 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
  103. DRV:[b]64bit:[/b] - [2013-07-23 10:28:56 | 000,043,320 | ---- | M] (Hewlett-Packard) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
  104. DRV:[b]64bit:[/b] - [2013-07-23 10:28:56 | 000,030,520 | ---- | M] (Hewlett-Packard) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
  105. DRV:[b]64bit:[/b] - [2013-07-04 22:36:32 | 000,550,912 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
  106. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,589,000 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
  107. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,347,336 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
  108. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
  109. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,137,928 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
  110. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,116,424 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
  111. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,089,800 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
  112. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
  113. DRV:[b]64bit:[/b] - [2013-06-28 04:44:12 | 000,034,384 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
  114. DRV:[b]64bit:[/b] - [2013-06-25 16:09:54 | 000,025,912 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
  115. DRV:[b]64bit:[/b] - [2013-06-24 21:56:16 | 003,979,776 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  116. DRV:[b]64bit:[/b] - [2013-06-18 12:22:36 | 000,872,152 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  117. DRV:[b]64bit:[/b] - [2013-06-17 12:37:28 | 000,418,520 | R--- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPer.sys -- (RTSPER)
  118. DRV:[b]64bit:[/b] - [2013-04-26 19:24:58 | 000,020,464 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  119. DRV:[b]64bit:[/b] - [2013-04-26 19:24:56 | 000,786,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  120. DRV:[b]64bit:[/b] - [2013-04-26 19:24:56 | 000,368,112 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  121. DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  122. DRV:[b]64bit:[/b] - [2012-02-01 23:16:40 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  123. DRV:[b]64bit:[/b] - [2012-01-04 06:24:18 | 000,220,288 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdxhc.sys -- (amdxhc)
  124. DRV:[b]64bit:[/b] - [2012-01-04 06:24:18 | 000,103,552 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdhub30.sys -- (amdhub30)
  125. DRV:[b]64bit:[/b] - [2011-12-13 19:44:16 | 000,056,448 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
  126. DRV:[b]64bit:[/b] - [2011-06-17 20:54:22 | 000,313,696 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\RsFx0151.sys -- (RsFx0151)
  127. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  128. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  129. DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  130. DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  131. DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  132. DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  133. DRV:[b]64bit:[/b] - [2010-07-27 15:45:46 | 000,180,224 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
  134. DRV:[b]64bit:[/b] - [2010-07-27 15:45:46 | 000,078,848 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
  135. DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  136. DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  137. DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  138. DRV:[b]64bit:[/b] - [2009-07-14 01:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
  139. DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  140. DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  141. DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  142. DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  143. DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  144.  
  145.  
  146. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  147.  
  148.  
  149. [color=#E56717]========== Internet Explorer ==========[/color]
  150.  
  151. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  152. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  153. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  154. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  155. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  156.  
  157.  
  158. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  159. IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
  160. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  161.  
  162. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  163. IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
  164. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  165.  
  166.  
  167.  
  168. IE - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  169. IE - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
  170. IE - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  171. IE - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  172.  
  173. [color=#E56717]========== FireFox ==========[/color]
  174.  
  175. FF - prefs.js..browser.search.highlightCount: 0
  176. FF - prefs.js..browser.search.isUS: false
  177. FF - prefs.js..browser.startup.homepage: "https://www.google.pl/?gws_rd=ssl"
  178. FF - prefs.js..extensions.enabledAddons: %7Bc2b1f3ae-5cd5-49b7-8a0c-2c3bcbbbb294%7D:1.1
  179. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0.1
  180. FF - user.js - File not found
  181.  
  182. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll File not found
  183. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  184. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
  185. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  186. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  187. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
  188. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
  189. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  190. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  191. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Krzysiek\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  192.  
  193. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  194. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  195. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
  196. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
  197.  
  198. [2014-09-18 16:38:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krzysiek\AppData\Roaming\mozilla\Extensions
  199. [2015-02-22 19:19:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Krzysiek\AppData\Roaming\mozilla\Firefox\Profiles\c3aggdhu.default\extensions
  200. [2015-02-06 20:19:29 | 002,558,942 | ---- | M] () (No name found) -- C:\Users\Krzysiek\AppData\Roaming\mozilla\firefox\profiles\c3aggdhu.default\extensions\firebug@software.joehewitt.com.xpi
  201. [2014-12-05 16:50:06 | 000,003,170 | ---- | M] () (No name found) -- C:\Users\Krzysiek\AppData\Roaming\mozilla\firefox\profiles\c3aggdhu.default\extensions\{c2b1f3ae-5cd5-49b7-8a0c-2c3bcbbbb294}.xpi
  202. [2015-01-15 20:19:26 | 000,985,112 | ---- | M] () (No name found) -- C:\Users\Krzysiek\AppData\Roaming\mozilla\firefox\profiles\c3aggdhu.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  203. [2015-02-01 20:19:26 | 000,049,376 | ---- | M] () (No name found) -- C:\Users\Krzysiek\AppData\Roaming\mozilla\firefox\profiles\c3aggdhu.default\extensions\{e1aaa9f8-4500-47f1-9a0a-b02bd60e4076}.xpi
  204. [2015-01-26 23:43:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
  205. [2015-01-26 23:43:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
  206. [2015-01-26 23:43:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  207. [2015-01-26 23:43:27 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  208.  
  209. O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  210. O2:[b]64bit:[/b] - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm®Atheros®)
  211. O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
  212. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
  213. O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
  214. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  215. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  216. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  217. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  218. O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
  219. O4 - HKLM..\Run: [] File not found
  220. O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
  221. O4 - HKLM..\Run: [IMSS] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation)
  222. O4 - HKLM..\Run: [IndexSearch] C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
  223. O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
  224. O4 - HKLM..\Run: [PPort12reminder] C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
  225. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  226. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  227. O4 - HKLM..\Run: [YouCam Service6] C:\Program Files (x86)\CyberLink\YouCam6\YouCamService6.exe (CyberLink Corp.)
  228. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  229. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  230. O4 - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000..\Run: [AdobeBridge] File not found
  231. O4 - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000..\Run: [Akamai NetSession Interface] C:\Users\Krzysiek\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
  232. O4 - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000..\Run: [GG] C:\Users\Krzysiek\AppData\Local\GG\Application\gghub.exe (GG Network S.A.)
  233. O4 - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)
  234. O4 - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000..\Run: [screenSHU] C:\Program Files (x86)\screenSHU\screenSHU.exe ()
  235. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  236. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  237. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  238. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  239. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" (Atheros Communications)
  240. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  241. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  242. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  243. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  244. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
  245. O7 - HKU\S-1-5-21-2802287487-1457337864-1011226942-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  246. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm®Atheros®)
  247. O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
  248. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
  249. O13[b]64bit:[/b] - gopher Prefix: missing
  250. O13 - gopher Prefix: missing
  251. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
  252. O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
  253. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
  254. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  255. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C020CC58-5F3A-44D6-B238-9244526ABEA3}: DhcpNameServer = 192.168.1.1
  256. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  257. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  258. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  259. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  260. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  261. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  262. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  263. O32 - HKLM CDRom: AutoRun - 1
  264. O34 - HKLM BootExecute: (autocheck autochk *)
  265. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  266. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  267. O35 - HKLM\..comfile [open] -- "%1" %*
  268. O35 - HKLM\..exefile [open] -- "%1" %*
  269. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  270. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  271. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  272. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  273. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  274. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  275. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  276.  
  277. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  278.  
  279. [2015-02-22 19:23:36 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Krzysiek\Desktop\OTL.exe
  280. [2015-02-22 19:04:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  281. [2015-02-22 19:03:28 | 020,447,072 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Krzysiek\Desktop\mbam-setup-2.0.4.1028.exe
  282. [2015-02-17 17:06:31 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Desktop\hobby bawelna pod
  283. [2015-02-15 17:59:46 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Desktop\Royal Collection
  284. [2015-02-15 16:49:51 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Desktop\Dynamic
  285. [2015-02-14 18:55:04 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Desktop\BASIC
  286. [2015-02-12 09:33:01 | 000,000,000 | ---D | C] -- C:\ProgramData\GG
  287. [2015-02-09 07:43:12 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\AppData\Roaming\KeePass
  288. [2015-02-09 07:39:30 | 002,536,151 | ---- | C] (Dominik Reichl ) -- C:\Users\Krzysiek\Desktop\KeePass-2.28-Setup.exe
  289. [2015-02-06 17:27:56 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Desktop\darymex_nowe_060215
  290. [2015-02-04 13:42:22 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Desktop\sprzedazowe_paragony
  291. [2015-02-04 13:42:09 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\Documents\Nowy folder
  292. [2015-02-02 17:02:16 | 000,000,000 | ---D | C] -- C:\ProgramData\PlotSoft
  293. [2015-02-02 17:02:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PlotSoft
  294. [2015-02-02 17:02:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFill
  295. [2015-02-01 23:25:20 | 000,000,000 | --SD | C] -- C:\Users\Krzysiek\GG dysk
  296. [2015-02-01 23:22:31 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\AppData\Roaming\GG
  297. [2015-02-01 23:22:29 | 000,000,000 | ---D | C] -- C:\Users\Krzysiek\AppData\Local\GG
  298. [2015-01-26 23:43:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  299. [2015-01-25 13:37:05 | 005,070,512 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  300.  
  301. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  302.  
  303. [2015-02-22 19:23:37 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Krzysiek\Desktop\OTL.exe
  304. [2015-02-22 19:03:54 | 020,447,072 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Krzysiek\Desktop\mbam-setup-2.0.4.1028.exe
  305. [2015-02-22 18:37:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  306. [2015-02-22 12:23:20 | 001,996,430 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  307. [2015-02-22 12:23:20 | 000,856,398 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  308. [2015-02-22 12:23:20 | 000,770,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  309. [2015-02-22 12:23:20 | 000,199,876 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  310. [2015-02-22 12:23:20 | 000,165,998 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  311. [2015-02-22 10:37:07 | 000,016,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  312. [2015-02-22 10:37:07 | 000,016,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  313. [2015-02-22 10:29:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  314. [2015-02-22 10:29:10 | 4170,301,440 | -HS- | M] () -- C:\hiberfil.sys
  315. [2015-02-19 22:31:17 | 000,082,835 | ---- | M] () -- C:\Users\Krzysiek\Desktop\IMG_20141206_223125.jpg
  316. [2015-02-19 11:12:14 | 000,030,042 | ---- | M] () -- C:\Users\Krzysiek\Desktop\1902forgan.csv
  317. [2015-02-18 12:21:24 | 000,030,038 | ---- | M] () -- C:\Users\Krzysiek\Desktop\stany18.csv
  318. [2015-02-18 10:44:41 | 000,012,256 | ---- | M] () -- C:\Users\Krzysiek\Desktop\potwierdzenie_puzle.pdf
  319. [2015-02-17 19:21:39 | 039,149,476 | ---- | M] () -- C:\Users\Krzysiek\Desktop\hobby bawelna pod.rar
  320. [2015-02-16 12:37:47 | 001,066,778 | ---- | M] () -- C:\Users\Krzysiek\Desktop\banner_dostawa_psd.psd
  321. [2015-02-16 12:37:39 | 000,207,183 | ---- | M] () -- C:\Users\Krzysiek\Desktop\banner_dostawa.png
  322. [2015-02-16 12:37:38 | 000,000,132 | ---- | M] () -- C:\Users\Krzysiek\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
  323. [2015-02-16 11:46:34 | 000,062,958 | ---- | M] () -- C:\Users\Krzysiek\Desktop\kurier.jpg
  324. [2015-02-16 11:19:11 | 000,035,788 | ---- | M] () -- C:\Users\Krzysiek\Desktop\darmowa.png
  325. [2015-02-16 11:07:27 | 000,043,329 | ---- | M] () -- C:\Users\Krzysiek\Desktop\greno.jpg
  326. [2015-02-16 10:28:25 | 000,030,005 | ---- | M] () -- C:\Users\Krzysiek\Desktop\stany13022015_frg.csv
  327. [2015-02-16 00:13:38 | 000,010,594 | ---- | M] () -- C:\Users\Krzysiek\Desktop\IMG00044 (2).jpg
  328. [2015-02-16 00:13:11 | 000,014,463 | ---- | M] () -- C:\Users\Krzysiek\Desktop\0-0-584-584-0.jpg
  329. [2015-02-15 20:05:14 | 000,027,543 | ---- | M] () -- C:\Users\Krzysiek\Desktop\DSC00688.JPG
  330. [2015-02-15 12:56:14 | 000,006,850 | ---- | M] () -- C:\Users\Krzysiek\Desktop\140_BASIC_ANDROPOL2.csv
  331. [2015-02-15 12:56:06 | 000,006,850 | ---- | M] () -- C:\Users\Krzysiek\Desktop\140_BASIC_ANDROPOL.csv
  332. [2015-02-14 23:47:43 | 000,202,264 | ---- | M] () -- C:\Users\Krzysiek\Desktop\produkty_forgan.csv
  333. [2015-02-11 16:51:01 | 000,022,686 | ---- | M] () -- C:\Users\Krzysiek\Desktop\mod-072_1.2.zip
  334. [2015-02-11 14:02:19 | 000,648,322 | -H-- | M] () -- C:\Users\Krzysiek\Documents\PP11Thumbs.ptn
  335. [2015-02-11 14:02:19 | 000,000,658 | -H-- | M] () -- C:\Users\Krzysiek\Documents\maxdesk.ini2
  336. [2015-02-11 14:02:19 | 000,000,308 | -H-- | M] () -- C:\Users\Krzysiek\Documents\PP11Thumbs.ptn2
  337. [2015-02-11 14:02:00 | 000,129,546 | ---- | M] () -- C:\Users\Krzysiek\Desktop\wniosek_staz_pn.pdf
  338. [2015-02-11 13:59:17 | 000,022,581 | ---- | M] () -- C:\Users\Krzysiek\Documents\Dokument (3).pdf
  339. [2015-02-11 13:58:27 | 000,039,613 | ---- | M] () -- C:\Users\Krzysiek\Documents\Dokument (2).pdf
  340. [2015-02-11 13:57:46 | 000,069,230 | ---- | M] () -- C:\Users\Krzysiek\Documents\Dokument (1).pdf
  341. [2015-02-09 09:53:03 | 000,026,479 | ---- | M] () -- C:\Users\Krzysiek\Desktop\pobranie22.png
  342. [2015-02-09 09:42:42 | 000,092,724 | ---- | M] () -- C:\Users\Krzysiek\Desktop\ING-Bank-Slaski-logo-1240px.png
  343. [2015-02-09 07:43:12 | 000,002,142 | ---- | M] () -- C:\Users\Krzysiek\Documents\NewDatabase.kdbx
  344. [2015-02-09 07:39:37 | 002,536,151 | ---- | M] (Dominik Reichl ) -- C:\Users\Krzysiek\Desktop\KeePass-2.28-Setup.exe
  345. [2015-02-06 14:02:26 | 000,041,814 | ---- | M] () -- C:\Users\Krzysiek\Desktop\zaplata.ods
  346. [2015-02-05 10:37:10 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  347. [2015-02-05 10:37:10 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  348. [2015-02-05 10:37:07 | 005,070,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  349. [2015-02-03 14:10:01 | 000,015,576 | ---- | M] () -- C:\Users\Krzysiek\Documents\eksporter.pdf
  350. [2015-02-03 00:48:07 | 001,777,776 | ---- | M] () -- C:\Users\Krzysiek\Desktop\00051.png
  351. [2015-02-03 00:30:50 | 000,073,461 | ---- | M] () -- C:\Users\Krzysiek\Documents\onet.pdf
  352. [2015-02-02 17:32:23 | 000,073,754 | ---- | M] () -- C:\Users\Krzysiek\Documents\apollo.pdf
  353. [2015-02-02 17:28:50 | 000,075,998 | ---- | M] () -- C:\Users\Krzysiek\Documents\electro_garden.pdf
  354. [2015-02-02 17:23:06 | 000,069,767 | ---- | M] () -- C:\Users\Krzysiek\Documents\stanpol.pdf
  355. [2015-02-02 17:17:50 | 000,079,265 | ---- | M] () -- C:\Users\Krzysiek\Documents\darymex_793.pdf
  356. [2015-02-02 17:13:50 | 000,064,240 | ---- | M] () -- C:\Users\Krzysiek\Documents\darymex_571.pdf
  357. [2015-02-01 23:33:31 | 000,075,903 | ---- | M] () -- C:\Users\Krzysiek\Desktop\0005.jpg
  358. [2015-01-27 19:10:54 | 000,034,763 | ---- | M] () -- C:\Users\Krzysiek\CV Maciej Wrzoszczyk2.odt
  359. [2015-01-27 18:55:12 | 000,033,931 | ---- | M] () -- C:\Users\Krzysiek\CV Maciej Wrzoszczyk1.odt
  360. [2015-01-27 18:47:34 | 000,034,287 | ---- | M] () -- C:\Users\Krzysiek\CV Maciej Wrzoszczyk.odt
  361. [2015-01-27 18:31:01 | 000,008,054 | ---- | M] () -- C:\Users\Krzysiek\Desktop\logo_fb_l.png
  362. [2015-01-25 14:28:54 | 000,010,716 | ---- | M] () -- C:\Users\Krzysiek\Desktop\qrier2.html
  363. [2015-01-25 14:28:47 | 000,168,334 | ---- | M] () -- C:\Users\Krzysiek\Desktop\qrier.html
  364. [2015-01-24 21:05:15 | 000,019,645 | ---- | M] () -- C:\Users\Krzysiek\Desktop\riczi_ricz.jpg
  365.  
  366. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  367.  
  368. [2015-02-19 22:31:16 | 000,082,835 | ---- | C] () -- C:\Users\Krzysiek\Desktop\IMG_20141206_223125.jpg
  369. [2015-02-19 11:12:10 | 000,030,042 | ---- | C] () -- C:\Users\Krzysiek\Desktop\1902forgan.csv
  370. [2015-02-18 12:21:17 | 000,030,038 | ---- | C] () -- C:\Users\Krzysiek\Desktop\stany18.csv
  371. [2015-02-18 10:44:40 | 000,012,256 | ---- | C] () -- C:\Users\Krzysiek\Desktop\potwierdzenie_puzle.pdf
  372. [2015-02-17 19:21:34 | 039,149,476 | ---- | C] () -- C:\Users\Krzysiek\Desktop\hobby bawelna pod.rar
  373. [2015-02-16 12:37:45 | 001,066,778 | ---- | C] () -- C:\Users\Krzysiek\Desktop\banner_dostawa_psd.psd
  374. [2015-02-16 12:37:37 | 000,207,183 | ---- | C] () -- C:\Users\Krzysiek\Desktop\banner_dostawa.png
  375. [2015-02-16 11:46:33 | 000,062,958 | ---- | C] () -- C:\Users\Krzysiek\Desktop\kurier.jpg
  376. [2015-02-16 11:19:10 | 000,035,788 | ---- | C] () -- C:\Users\Krzysiek\Desktop\darmowa.png
  377. [2015-02-16 11:07:26 | 000,043,329 | ---- | C] () -- C:\Users\Krzysiek\Desktop\greno.jpg
  378. [2015-02-16 10:28:20 | 000,030,005 | ---- | C] () -- C:\Users\Krzysiek\Desktop\stany13022015_frg.csv
  379. [2015-02-16 00:13:37 | 000,010,594 | ---- | C] () -- C:\Users\Krzysiek\Desktop\IMG00044 (2).jpg
  380. [2015-02-16 00:13:11 | 000,014,463 | ---- | C] () -- C:\Users\Krzysiek\Desktop\0-0-584-584-0.jpg
  381. [2015-02-15 20:05:13 | 000,027,543 | ---- | C] () -- C:\Users\Krzysiek\Desktop\DSC00688.JPG
  382. [2015-02-15 12:56:14 | 000,006,850 | ---- | C] () -- C:\Users\Krzysiek\Desktop\140_BASIC_ANDROPOL2.csv
  383. [2015-02-15 00:08:25 | 000,006,850 | ---- | C] () -- C:\Users\Krzysiek\Desktop\140_BASIC_ANDROPOL.csv
  384. [2015-02-14 23:47:42 | 000,202,264 | ---- | C] () -- C:\Users\Krzysiek\Desktop\produkty_forgan.csv
  385. [2015-02-11 16:51:01 | 000,022,686 | ---- | C] () -- C:\Users\Krzysiek\Desktop\mod-072_1.2.zip
  386. [2015-02-11 14:01:59 | 000,129,546 | ---- | C] () -- C:\Users\Krzysiek\Desktop\wniosek_staz_pn.pdf
  387. [2015-02-11 13:59:17 | 000,022,581 | ---- | C] () -- C:\Users\Krzysiek\Documents\Dokument (3).pdf
  388. [2015-02-11 13:58:27 | 000,039,613 | ---- | C] () -- C:\Users\Krzysiek\Documents\Dokument (2).pdf
  389. [2015-02-11 13:57:45 | 000,069,230 | ---- | C] () -- C:\Users\Krzysiek\Documents\Dokument (1).pdf
  390. [2015-02-09 09:53:02 | 000,026,479 | ---- | C] () -- C:\Users\Krzysiek\Desktop\pobranie22.png
  391. [2015-02-09 09:42:41 | 000,092,724 | ---- | C] () -- C:\Users\Krzysiek\Desktop\ING-Bank-Slaski-logo-1240px.png
  392. [2015-02-09 07:43:11 | 000,002,142 | ---- | C] () -- C:\Users\Krzysiek\Documents\NewDatabase.kdbx
  393. [2015-02-06 13:17:26 | 000,041,814 | ---- | C] () -- C:\Users\Krzysiek\Desktop\zaplata.ods
  394. [2015-02-03 14:07:15 | 000,015,576 | ---- | C] () -- C:\Users\Krzysiek\Documents\eksporter.pdf
  395. [2015-02-03 00:47:53 | 001,777,776 | ---- | C] () -- C:\Users\Krzysiek\Desktop\00051.png
  396. [2015-02-03 00:30:50 | 000,073,461 | ---- | C] () -- C:\Users\Krzysiek\Documents\onet.pdf
  397. [2015-02-02 17:32:22 | 000,073,754 | ---- | C] () -- C:\Users\Krzysiek\Documents\apollo.pdf
  398. [2015-02-02 17:28:50 | 000,075,998 | ---- | C] () -- C:\Users\Krzysiek\Documents\electro_garden.pdf
  399. [2015-02-02 17:23:05 | 000,069,767 | ---- | C] () -- C:\Users\Krzysiek\Documents\stanpol.pdf
  400. [2015-02-02 17:17:49 | 000,079,265 | ---- | C] () -- C:\Users\Krzysiek\Documents\darymex_793.pdf
  401. [2015-02-02 17:13:48 | 000,064,240 | ---- | C] () -- C:\Users\Krzysiek\Documents\darymex_571.pdf
  402. [2015-02-01 23:33:30 | 000,075,903 | ---- | C] () -- C:\Users\Krzysiek\Desktop\0005.jpg
  403. [2015-02-01 23:22:30 | 000,001,122 | ---- | C] () -- C:\Users\Krzysiek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
  404. [2015-01-27 20:05:04 | 000,034,763 | ---- | C] () -- C:\Users\Krzysiek\CV Maciej Wrzoszczyk2.odt
  405. [2015-01-27 20:05:04 | 000,034,287 | ---- | C] () -- C:\Users\Krzysiek\CV Maciej Wrzoszczyk.odt
  406. [2015-01-27 20:05:04 | 000,033,931 | ---- | C] () -- C:\Users\Krzysiek\CV Maciej Wrzoszczyk1.odt
  407. [2015-01-27 18:31:01 | 000,008,054 | ---- | C] () -- C:\Users\Krzysiek\Desktop\logo_fb_l.png
  408. [2015-01-25 14:28:54 | 000,010,716 | ---- | C] () -- C:\Users\Krzysiek\Desktop\qrier2.html
  409. [2015-01-25 14:28:47 | 000,168,334 | ---- | C] () -- C:\Users\Krzysiek\Desktop\qrier.html
  410. [2015-01-24 21:05:15 | 000,019,645 | ---- | C] () -- C:\Users\Krzysiek\Desktop\riczi_ricz.jpg
  411. [2015-01-14 20:12:47 | 000,000,053 | ---- | C] () -- C:\Windows\AutoScreenshotMaker.INI
  412. [2014-12-11 02:27:02 | 000,125,812 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
  413. [2014-10-27 16:28:36 | 000,000,132 | ---- | C] () -- C:\Users\Krzysiek\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
  414. [2014-10-19 18:58:52 | 000,000,600 | ---- | C] () -- C:\Users\Krzysiek\AppData\Local\PUTTY.RND
  415. [2014-10-17 20:37:50 | 000,007,600 | ---- | C] () -- C:\Users\Krzysiek\AppData\Local\Resmon.ResmonCfg
  416. [2014-10-08 18:05:43 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\BRTCPCON.DLL
  417. [2014-10-08 18:05:38 | 000,000,114 | ---- | C] () -- C:\Windows\SysWow64\BRLMW03A.INI
  418. [2014-08-19 04:07:12 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
  419. [2013-07-09 07:37:24 | 000,000,256 | ---- | C] () -- C:\Windows\SysWow64\vcsAPIShared.dll.hpsign
  420. [2013-05-11 16:17:52 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
  421.  
  422. [color=#E56717]========== ZeroAccess Check ==========[/color]
  423.  
  424. [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  425.  
  426. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  427.  
  428. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  429.  
  430. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  431.  
  432. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  433.  
  434. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  435. "" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
  436. "ThreadingModel" = Apartment
  437.  
  438. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  439. "" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
  440. "ThreadingModel" = Apartment
  441.  
  442. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  443. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  444. "ThreadingModel" = Free
  445.  
  446. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  447. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  448. "ThreadingModel" = Free
  449.  
  450. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  451. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  452. "ThreadingModel" = Both
  453.  
  454. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  455.  
  456. [color=#E56717]========== LOP Check ==========[/color]
  457.  
  458. [2015-01-14 20:25:45 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\16 Software
  459. [2014-12-13 18:28:38 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\AtomPark
  460. [2015-01-14 20:11:48 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\AutoScreenShotMaker
  461. [2014-11-07 20:46:41 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\calibre
  462. [2014-12-22 13:29:31 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\e-Deklaracje
  463. [2014-12-22 13:29:31 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
  464. [2014-10-05 22:17:14 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\ELISOFT
  465. [2015-02-22 10:29:32 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\GG
  466. [2014-10-13 17:27:19 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\GHISLER
  467. [2015-01-14 20:26:33 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\gtk-2.0
  468. [2014-09-20 17:28:39 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\IDT
  469. [2015-01-20 18:55:30 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\InsERT GT
  470. [2015-02-09 07:44:21 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\KeePass
  471. [2014-09-20 12:55:37 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\LibreOffice
  472. [2015-01-15 08:59:47 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Link Sphinx
  473. [2014-12-11 02:05:19 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\MarketSamurai
  474. [2014-12-11 02:05:19 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\MarketSamurai.6E37012E1CBD7F47B14488FCC715944F3EBDCEDC.1
  475. [2014-09-20 22:15:35 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\MetaQuotes
  476. [2014-10-14 20:46:58 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Nuance
  477. [2014-09-27 18:05:45 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Nvu
  478. [2014-11-22 17:35:38 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\PacificPoker
  479. [2014-12-30 22:01:10 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Screaming Bee
  480. [2014-09-21 23:08:22 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\SMRecorder
  481. [2014-11-14 17:56:01 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
  482. [2012-09-21 23:22:18 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Synaptics
  483. [2014-11-20 22:43:20 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\TeamViewer
  484. [2014-09-18 17:37:53 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Thunderbird
  485. [2014-09-18 19:55:53 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\TMSDirect
  486. [2014-09-24 23:42:00 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Unity
  487. [2015-01-11 16:39:07 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\uTorrent
  488. [2015-02-18 13:39:17 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\XnView
  489. [2014-10-14 20:47:00 | 000,000,000 | ---D | M] -- C:\Users\Krzysiek\AppData\Roaming\Zeon
  490.  
  491. [color=#E56717]========== Purity Check ==========[/color]
  492.  
  493.  
  494.  
  495. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!