API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 11th, 2013
75
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 50.43 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2013-04-11 22:41:09 - Run 5
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Admin\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 7,96 Gb Total Physical Memory | 5,52 Gb Available Physical Memory | 69,35% Memory free
  8. 15,92 Gb Paging File | 13,21 Gb Available in Paging File | 82,95% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 292,87 Gb Total Space | 235,37 Gb Free Space | 80,37% Space Free | Partition Type: NTFS
  13. Drive D: | 638,54 Gb Total Space | 537,26 Gb Free Space | 84,14% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: ADMIN-KOMPUTER | User Name: Admin | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2013-04-09 22:37:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Admin\Downloads\OTL.exe
  22. PRC - [2013-04-08 12:11:43 | 002,569,168 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
  23. PRC - [2013-04-07 20:07:20 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  24. PRC - [2013-03-29 21:53:56 | 001,631,144 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
  25. PRC - [2013-03-29 21:53:56 | 000,543,656 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  26. PRC - [2013-03-21 11:47:59 | 000,154,176 | ---- | M] (GG Network S.A.) -- C:\Users\Admin\AppData\Local\GG\Application\ggapp.exe
  27. PRC - [2013-03-13 20:33:02 | 001,822,424 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
  28. PRC - [2013-02-27 16:30:51 | 003,381,824 | ---- | M] (GG Network S.A.) -- C:\Users\Admin\AppData\Local\GG\Application\gghub.exe
  29. PRC - [2013-02-27 16:30:51 | 003,234,368 | ---- | M] (GG Network S.A.) -- C:\Users\Admin\AppData\Local\GG\Application\ggdrive\ggdrive.exe
  30. PRC - [2013-02-18 16:53:07 | 001,151,152 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
  31. PRC - [2013-02-18 16:53:07 | 000,968,880 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
  32. PRC - [2013-02-05 17:48:44 | 000,272,248 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
  33. PRC - [2013-01-26 18:12:09 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  34. PRC - [2012-12-18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  35. PRC - [2012-12-11 04:52:44 | 003,147,384 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe
  36. PRC - [2012-11-16 00:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
  37. PRC - [2012-10-22 14:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
  38. PRC - [2012-10-04 17:34:36 | 000,115,032 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
  39. PRC - [2012-03-27 10:14:27 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  40. PRC - [2011-12-16 13:30:40 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  41. PRC - [2011-12-16 13:30:38 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  42. PRC - [2011-12-16 12:02:56 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  43.  
  44.  
  45. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  46.  
  47. MOD - [2013-04-08 12:11:43 | 002,569,168 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
  48. MOD - [2013-04-08 12:08:35 | 002,232,272 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
  49. MOD - [2013-04-07 20:07:20 | 003,143,576 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  50. MOD - [2013-04-03 17:51:15 | 000,574,416 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\components\BrowserProtect-20.0.dll
  51. MOD - [2013-03-29 21:53:56 | 001,114,024 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL
  52. MOD - [2013-03-27 02:16:40 | 020,341,672 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
  53. MOD - [2013-03-26 00:23:34 | 000,651,776 | ---- | M] () -- C:\Program Files (x86)\Steam\SDL2.dll
  54. MOD - [2013-03-21 11:47:59 | 001,945,600 | ---- | M] () -- C:\Users\Admin\AppData\Local\GG\Application\xulrunner\mozjs.dll
  55. MOD - [2013-03-13 20:33:02 | 014,717,144 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll
  56. MOD - [2013-02-18 16:53:07 | 001,151,152 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
  57. MOD - [2013-02-18 16:53:07 | 000,156,848 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\SiteSafety.dll
  58. MOD - [2013-01-29 15:20:14 | 009,816,192 | ---- | M] () -- C:\Users\Admin\AppData\Local\GG\Application\FMSBWChecker\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
  59. MOD - [2013-01-29 15:20:14 | 000,135,168 | ---- | M] () -- C:\Users\Admin\AppData\Local\GG\Application\ggdrive\zlib1.dll
  60. MOD - [2012-12-11 19:51:10 | 001,100,800 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll
  61. MOD - [2012-12-11 19:51:10 | 000,192,000 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll
  62. MOD - [2012-12-11 19:51:10 | 000,124,416 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll
  63.  
  64.  
  65. [color=#E56717]========== Services (SafeList) ==========[/color]
  66.  
  67. SRV:[b]64bit:[/b] - [2012-05-04 13:33:20 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService)
  68. SRV:[b]64bit:[/b] - [2012-04-06 04:16:02 | 000,236,544 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  69. SRV:[b]64bit:[/b] - [2011-12-08 17:38:24 | 000,607,456 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  70. SRV:[b]64bit:[/b] - [2010-04-06 17:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
  71. SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  72. SRV - [2013-04-08 12:11:43 | 002,569,168 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
  73. SRV - [2013-04-07 20:07:20 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  74. SRV - [2013-03-29 21:53:56 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  75. SRV - [2013-03-13 20:33:03 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  76. SRV - [2013-02-18 16:53:07 | 000,968,880 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe -- (vToolbarUpdater14.2.0)
  77. SRV - [2013-02-05 17:48:00 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe -- (McComponentHostService)
  78. SRV - [2013-01-26 18:12:09 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  79. SRV - [2012-12-18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  80. SRV - [2012-11-16 00:34:30 | 005,814,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe -- (AVGIDSAgent)
  81. SRV - [2012-10-22 14:05:08 | 000,196,664 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe -- (avgwd)
  82. SRV - [2011-12-16 13:30:40 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  83. SRV - [2011-12-16 13:30:38 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  84. SRV - [2011-12-16 12:02:56 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  85. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  86.  
  87.  
  88. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  89.  
  90. DRV:[b]64bit:[/b] - [2013-02-18 16:53:07 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
  91. DRV:[b]64bit:[/b] - [2012-11-16 00:33:24 | 000,111,968 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
  92. DRV:[b]64bit:[/b] - [2012-10-22 14:02:44 | 000,154,464 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
  93. DRV:[b]64bit:[/b] - [2012-10-15 04:48:50 | 000,063,328 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
  94. DRV:[b]64bit:[/b] - [2012-10-02 04:30:38 | 000,185,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
  95. DRV:[b]64bit:[/b] - [2012-09-21 04:46:04 | 000,200,032 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
  96. DRV:[b]64bit:[/b] - [2012-09-21 04:46:00 | 000,225,120 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
  97. DRV:[b]64bit:[/b] - [2012-09-14 04:05:18 | 000,040,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
  98. DRV:[b]64bit:[/b] - [2012-05-04 13:33:12 | 002,196,592 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
  99. DRV:[b]64bit:[/b] - [2012-04-06 07:22:40 | 011,174,400 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  100. DRV:[b]64bit:[/b] - [2012-04-06 03:10:44 | 000,343,040 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  101. DRV:[b]64bit:[/b] - [2012-03-27 10:13:18 | 000,789,272 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  102. DRV:[b]64bit:[/b] - [2012-03-27 10:13:18 | 000,356,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  103. DRV:[b]64bit:[/b] - [2012-03-27 10:13:17 | 000,019,224 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  104. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  105. DRV:[b]64bit:[/b] - [2012-02-23 14:32:04 | 000,095,760 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  106. DRV:[b]64bit:[/b] - [2011-11-10 02:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  107. DRV:[b]64bit:[/b] - [2011-11-02 11:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
  108. DRV:[b]64bit:[/b] - [2011-08-12 00:54:16 | 000,104,560 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  109. DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  110. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  111. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  112. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  113. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  114. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  115. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  116. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  117. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  118. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  119. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  120. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  121. DRV:[b]64bit:[/b] - [2006-12-22 21:05:52 | 000,559,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrxusb.sys -- (athrusb)
  122. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  123.  
  124.  
  125. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  126.  
  127.  
  128. [color=#E56717]========== Internet Explorer ==========[/color]
  129.  
  130. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  131. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  132. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  133. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/"acala3gp"/{B2004D1B-AF62-4DCA-834C-DF3E200F3194}
  134. IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
  135. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  136. IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.good-results.info/?l=1&q={searchTerms}&pid=703&r=2013/02/18&hid=3208912777&lg=EN&cc=PL
  137. IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={B97FA903-4ED5-11E2-BCC5-902B3494A546}
  138.  
  139.  
  140. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  141.  
  142. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  143.  
  144.  
  145.  
  146. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?affID=119370&babsrc=HP_ss&mntrId=0C4D0060B34F4715
  147. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  148. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
  149. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
  150. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?affID=119370&babsrc=HP_ss&mntrId=0C4D0060B34F4715
  151. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  152. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  153. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  154. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
  155. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  156. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=0C4D0060B34F4715
  157. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{5852A8C7-FEA4-464E-9B9C-EDC3E6B8E043}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
  158. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{650B6A85-CB86-4579-BB43-03C158487AC8}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=24193E86-D8E9-4DD6-A4F6-D173970A8B37&apn_sauid=BF7FBA97-4F13-4CD3-BA83-53C8FBF0430D
  159. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
  160. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={840EEB12-33C2-46A0-A7DA-859CCCB354B1}&mid=db192b22400247d0ab26416272704cb5-2aff2e3828c976488bb01ce5c6738f25b85659f3&lang=pl&ds=AVG&pr=fr&d=2012-12-24 20:28:59&v=14.0.2.14&pid=avg&sg=&sap=dsp&q={searchTerms}
  161. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://www.bigseekpro.com/search/browser/"acala3gp"/{B2004D1B-AF62-4DCA-834C-DF3E200F3194}?q={searchTerms}
  162. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.good-results.info/?l=1&q={searchTerms}&pid=703&r=2013/02/18&hid=3208912777&lg=EN&cc=PL
  163. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={B97FA903-4ED5-11E2-BCC5-902B3494A546}
  164. IE - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  165.  
  166. [color=#E56717]========== FireFox ==========[/color]
  167.  
  168. FF - prefs.js..browser.search.order.1: "Delta Search"
  169. FF - prefs.js..browser.search.selectedEngine: "Delta Search"
  170. FF - prefs.js..browser.startup.homepage: "https://www.google.pl/"
  171. FF - prefs.js..extensions.enabledAddons: ffxtlbr%40delta.com:1.5.0
  172. FF - prefs.js..extensions.enabledAddons: %7B0F827075-B026-42F3-885D-98981EE7B1AE%7D:2.6.1125.80
  173. FF - prefs.js..extensions.enabledAddons: avg%40toolbar:14.2.0.1
  174. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0
  175.  
  176.  
  177. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
  178. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  179. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  180. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
  181. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
  182. FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.2.0\\npsitesafety.dll ()
  183. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  184. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  185. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  186. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  187. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  188. FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
  189. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  190. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  191. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  192. FF - HKCU\Software\MozillaPlugins\pokki.com/PokkiDownloadHelper: C:\Users\Admin\AppData\Local\Pokki\Download Helper\npPokkiDownloadHelper.1.2.0.78.dll (Pokki)
  193. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
  194.  
  195. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\14.2.0.1 [2013-02-18 16:53:17 | 000,000,000 | ---D | M]
  196. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-12-24 22:44:12 | 000,000,000 | ---D | M]
  197. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-04-07 20:07:20 | 000,000,000 | ---D | M]
  198. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  199. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-12-24 22:44:12 | 000,000,000 | ---D | M]
  200. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{0F827075-B026-42F3-885D-98981EE7B1AE}: C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension [2013-04-11 16:44:00 | 000,000,000 | ---D | M]
  201. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-04-07 20:07:20 | 000,000,000 | ---D | M]
  202. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  203.  
  204. [2012-12-24 21:21:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Admin\AppData\Roaming\mozilla\Extensions
  205. [2013-04-11 19:22:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\qz3csdpr.default-1365690979679\extensions
  206. [2013-04-11 16:43:40 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\qz3csdpr.default-1365690979679\extensions\ffxtlbr@delta.com
  207. [2013-04-11 16:39:05 | 000,038,353 | ---- | M] () (No name found) -- C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\qz3csdpr.default-1365690979679\extensions\about-addons-memory@tn123.org.xpi
  208. [2013-04-11 19:05:55 | 000,006,470 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\qz3csdpr.default-1365690979679\searchplugins\BrowserProtect.xml
  209. [2013-04-11 19:07:12 | 000,001,294 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\qz3csdpr.default-1365690979679\searchplugins\delta.xml
  210. [2013-04-07 20:07:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
  211. [2013-02-18 16:53:17 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\PROGRAMDATA\AVG SECURE SEARCH\FIREFOXEXT\14.2.0.1
  212. [2013-04-11 16:44:00 | 000,000,000 | ---D | M] (BrowserProtect) -- C:\PROGRAMDATA\BROWSERPROTECT\2.6.1125.80\{C16C1CCB-7046-4E5C-A2F3-533AD2FEC8E8}\FIREFOXEXTENSION
  213. [2013-04-07 20:07:20 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  214. [2013-02-19 17:38:32 | 000,002,980 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
  215. [2013-02-18 16:53:18 | 000,003,714 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
  216. [2013-04-11 19:05:55 | 000,006,470 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
  217. [2013-02-19 17:38:32 | 000,001,619 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
  218. [2013-02-19 17:38:32 | 000,001,130 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
  219. [2013-02-19 17:38:32 | 000,001,071 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
  220. [2013-02-19 17:38:32 | 000,001,396 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
  221. [2013-02-19 17:38:32 | 000,001,896 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
  222.  
  223. [color=#E56717]========== Chrome ==========[/color]
  224.  
  225. CHR - homepage: http://websearch.good-results.info/?pid=703&r=2013/02/18&hid=3208912777&lg=EN&cc=PL
  226. CHR - Extension: No name found = C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgjbhnopicifekfncpakjfnkppldjpde\1\
  227. CHR - Extension: No name found = C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mimpadopfgeagmdkefhmjablnfbfdbhd\1\
  228. CHR - Extension: No name found = C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0\
  229.  
  230. O1 HOSTS File: ([2013-04-07 15:51:30 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
  231. O1 - Hosts: 127.0.0.1 localhost
  232. O1 - Hosts: ::1 localhost
  233. O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
  234. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  235. O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
  236. O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com)
  237. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  238. O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
  239. O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com)
  240. O3 - HKLM\..\Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
  241. O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
  242. O3 - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
  243. O3 - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
  244. O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
  245. O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
  246. O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
  247. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  248. O4 - HKLM..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
  249. O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
  250. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  251. O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
  252. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  253. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  254. O4 - HKU\S-1-5-21-929212034-3805227821-1322915038-1000..\Run: [GG] C:\Users\Admin\AppData\Local\GG\Application\gghub.exe (GG Network S.A.)
  255. O4 - HKU\S-1-5-21-929212034-3805227821-1322915038-1000..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
  256. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  257. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  258. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  259. O7 - HKU\S-1-5-21-929212034-3805227821-1322915038-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
  260. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
  261. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
  262. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
  263. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
  264. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
  265. O13[b]64bit:[/b] - gopher Prefix: missing
  266. O13 - gopher Prefix: missing
  267. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  268. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
  269. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0F500F30-C5E9-4F48-A204-B1ED698158A0}: DhcpNameServer = 192.168.1.1 0.0.0.0
  270. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1557667D-4BC3-41D6-B810-0273512C9EBE}: DhcpNameServer = 192.168.1.1 0.0.0.0
  271. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  272. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  273. O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found
  274. O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.2.0\ViProtocol.dll ()
  275. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  276. O20 - AppInit_DLLs: (c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
  277. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  278. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  279. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  280. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  281. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  282. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  283. O32 - HKLM CDRom: AutoRun - 1
  284. O34 - HKLM BootExecute: (autocheck autochk *)
  285. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  286. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  287. O35 - HKLM\..comfile [open] -- "%1" %*
  288. O35 - HKLM\..exefile [open] -- "%1" %*
  289. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  290. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  291. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  292. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  293. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  294. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  295. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  296.  
  297. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  298.  
  299. [2013-04-11 19:05:57 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\SumatraPDF
  300. [2013-04-11 19:05:53 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\PDF Reader Packages
  301. [2013-04-11 19:05:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFReader
  302. [2013-04-11 16:51:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec
  303. [2013-04-11 16:51:02 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
  304. [2013-04-11 16:51:02 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64
  305. [2013-04-11 16:51:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security Scan
  306. [2013-04-11 16:51:02 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64\0307020.00A
  307. [2013-04-11 16:51:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
  308. [2013-04-11 16:51:00 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
  309. [2013-04-11 16:51:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller
  310. [2013-04-11 16:46:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Adobe
  311. [2013-04-11 16:44:02 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
  312. [2013-04-11 16:43:53 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserProtect
  313. [2013-04-11 16:43:43 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\BabSolution
  314. [2013-04-11 16:43:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Delta
  315. [2013-04-11 16:43:35 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Delta
  316. [2013-04-11 16:43:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Creator
  317. [2013-04-11 16:43:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GPLGS
  318. [2013-04-11 16:43:29 | 000,000,000 | ---D | C] -- C:\Program Files\PDFCreator
  319. [2013-04-11 16:43:29 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\PDF Creator Packages
  320. [2013-04-11 16:43:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator
  321. [2013-04-11 16:43:20 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\DSite
  322. [2013-04-11 16:36:21 | 000,000,000 | ---D | C] -- C:\Users\Admin\Desktop\Stare dane programu Firefox
  323. [2013-04-10 16:31:41 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  324. [2013-04-10 16:31:41 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  325. [2013-04-10 16:31:41 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  326. [2013-04-10 16:31:40 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  327. [2013-04-10 16:31:40 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  328. [2013-04-10 16:31:40 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  329. [2013-04-10 16:31:40 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  330. [2013-04-10 16:31:40 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  331. [2013-04-10 16:31:40 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  332. [2013-04-10 16:31:40 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  333. [2013-04-10 16:31:40 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  334. [2013-04-10 16:31:40 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  335. [2013-04-10 16:31:39 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  336. [2013-04-10 16:31:39 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  337. [2013-04-10 16:31:39 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  338. [2013-04-10 14:53:22 | 003,717,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
  339. [2013-04-10 14:53:22 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
  340. [2013-04-10 14:53:21 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
  341. [2013-04-10 14:53:21 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
  342. [2013-04-10 14:53:21 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
  343. [2013-04-10 14:53:21 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
  344. [2013-04-10 14:53:05 | 005,550,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  345. [2013-04-10 14:53:05 | 003,968,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  346. [2013-04-10 14:53:05 | 003,913,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  347. [2013-04-10 14:53:05 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
  348. [2013-04-10 14:53:05 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
  349. [2013-04-10 14:53:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
  350. [2013-04-08 20:40:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  351. [2013-04-08 20:39:49 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
  352. [2013-04-08 20:39:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
  353. [2013-04-07 20:07:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  354. [2013-04-07 16:25:20 | 000,000,000 | ---D | C] -- C:\Users\Admin\Doctor Web
  355. [2013-04-07 16:00:40 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
  356. [2013-04-07 15:56:02 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Malwarebytes
  357. [2013-04-07 15:55:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  358. [2013-04-07 15:50:33 | 000,000,000 | ---D | C] -- C:\_OTL
  359. [2013-04-07 15:46:49 | 000,000,000 | ---D | C] -- C:\Users\Admin\Qtrax
  360. [2013-04-07 15:46:49 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTRAX
  361. [2013-04-07 15:46:48 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Downloaded Installations
  362. [2013-03-24 12:49:51 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  363. [2013-03-24 12:24:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
  364. [2013-03-24 12:24:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
  365. [2013-03-23 17:30:39 | 000,000,000 | ---D | C] -- C:\AcalaSoft
  366. [2013-03-20 22:23:47 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
  367. [2013-03-15 14:38:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Rockstar Games
  368. [2013-03-14 21:59:38 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\FlvtoYoutubeDownloader
  369. [2013-03-14 21:59:06 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\FlvtoConverter
  370. [2013-03-14 21:58:47 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto Youtube Downloader
  371. [2013-03-14 21:58:20 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Local\Flvto Youtube Downloader
  372.  
  373. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  374.  
  375. [2013-04-11 22:40:24 | 000,022,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  376. [2013-04-11 22:40:24 | 000,022,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  377. [2013-04-11 22:33:10 | 000,000,416 | -H-- | M] () -- C:\Windows\tasks\schedule!3036567561.job
  378. [2013-04-11 22:33:07 | 000,000,308 | ---- | M] () -- C:\Windows\tasks\Ayxnre.job
  379. [2013-04-11 22:33:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  380. [2013-04-11 22:33:02 | 2117,840,895 | -HS- | M] () -- C:\hiberfil.sys
  381. [2013-04-11 22:24:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  382. [2013-04-11 19:05:04 | 000,001,156 | ---- | M] () -- C:\Users\Admin\Desktop\Continue Mipony Download Manager Installation.lnk
  383. [2013-04-11 18:58:51 | 000,000,452 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Admin.job
  384. [2013-04-10 17:51:19 | 000,415,648 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  385. [2013-04-08 22:49:31 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  386. [2013-04-08 22:49:31 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  387. [2013-04-08 22:49:31 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  388. [2013-04-08 22:49:31 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  389. [2013-04-08 22:49:31 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  390. [2013-04-07 16:00:41 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  391. [2013-04-07 15:51:30 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
  392. [2013-03-24 12:49:51 | 000,000,219 | ---- | M] () -- C:\Users\Admin\Desktop\Team Fortress 2.url
  393. [2013-03-24 12:24:31 | 000,000,917 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
  394. [2013-03-19 08:04:06 | 005,550,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  395. [2013-03-19 07:46:56 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
  396. [2013-03-19 07:04:13 | 003,968,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  397. [2013-03-19 07:04:10 | 003,913,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  398. [2013-03-19 06:47:50 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
  399. [2013-03-19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
  400. [2013-03-14 21:58:47 | 000,002,178 | ---- | M] () -- C:\Users\Admin\Desktop\Flvto Youtube Downloader.lnk
  401.  
  402. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  403.  
  404. [2013-04-11 19:05:04 | 000,001,156 | ---- | C] () -- C:\Users\Admin\Desktop\Continue Mipony Download Manager Installation.lnk
  405. [2013-04-11 16:51:07 | 000,000,452 | -H-- | C] () -- C:\Windows\tasks\Norton Security Scan for Admin.job
  406. [2013-04-11 16:51:02 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NSSx64\0307020.00A\isolate.ini
  407. [2013-04-11 16:43:31 | 000,087,552 | ---- | C] () -- C:\Windows\SysNative\custmon64i.dll
  408. [2013-04-07 16:00:41 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
  409. [2013-03-24 12:49:51 | 000,000,219 | ---- | C] () -- C:\Users\Admin\Desktop\Team Fortress 2.url
  410. [2013-03-24 12:24:31 | 000,000,917 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
  411. [2013-03-14 21:58:47 | 000,002,178 | ---- | C] () -- C:\Users\Admin\Desktop\Flvto Youtube Downloader.lnk
  412. [2013-01-26 18:12:10 | 000,280,976 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  413. [2013-01-26 18:12:09 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  414. [2012-12-24 22:40:49 | 000,174,797 | ---- | C] () -- C:\Windows\hpoins45.dat
  415. [2012-12-06 18:35:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  416. [2012-12-06 18:32:40 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  417. [2012-12-06 18:32:40 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  418. [2012-12-06 18:32:40 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  419. [2012-12-06 18:20:04 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
  420. [2012-03-09 15:06:14 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  421. [2011-12-08 17:14:58 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
  422.  
  423. [color=#E56717]========== ZeroAccess Check ==========[/color]
  424.  
  425. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  426.  
  427. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  428.  
  429. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  430.  
  431. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  432.  
  433. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  434.  
  435. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  436. "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
  437. "ThreadingModel" = Apartment
  438.  
  439. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  440. "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  441. "ThreadingModel" = Apartment
  442.  
  443. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  444. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  445. "ThreadingModel" = Free
  446.  
  447. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  448. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  449. "ThreadingModel" = Free
  450.  
  451. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  452. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  453. "ThreadingModel" = Both
  454.  
  455. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  456.  
  457. [color=#E56717]========== LOP Check ==========[/color]
  458.  
  459. [2013-04-11 15:21:58 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\.minecraft
  460. [2013-02-08 23:02:53 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\AVG
  461. [2012-12-24 21:30:19 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\AVG2013
  462. [2013-04-11 16:43:44 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\BabSolution
  463. [2012-12-26 22:05:49 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Babylon
  464. [2013-04-11 16:43:35 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Delta
  465. [2013-04-11 16:43:20 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\DSite
  466. [2013-03-14 22:54:01 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\FlvtoConverter
  467. [2013-04-11 22:27:49 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\GG
  468. [2013-04-11 16:43:29 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\PDF Creator Packages
  469. [2013-04-11 19:05:53 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\PDF Reader Packages
  470. [2013-01-26 18:12:07 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\PunkBuster
  471. [2013-03-04 00:06:40 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\Rovio
  472. [2013-04-11 19:06:38 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\SumatraPDF
  473. [2013-02-16 19:41:33 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\systweak
  474. [2012-12-24 21:29:08 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\TuneUp Software
  475. [2013-01-11 16:47:33 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
  476. [2013-01-11 16:47:33 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
  477.  
  478. [color=#E56717]========== Purity Check ==========[/color]
  479.  
  480.  
  481.  
  482. [color=#E56717]========== Alternate Data Streams ==========[/color]
  483.  
  484. @Alternate Data Stream - 169 bytes -> C:\ProgramData\TEMP:0B4227B4
  485. @Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:373E1720
  486.  
  487. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!