API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 8th, 2013
22
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 42.95 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 08.04.2013 20:22:02 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jacek\Desktop
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16521)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd.MM.yyyy
  6.  
  7. 5,94 Gb Total Physical Memory | 4,06 Gb Available Physical Memory | 68,34% Memory free
  8. 11,87 Gb Paging File | 9,58 Gb Available in Paging File | 80,70% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 99,90 Gb Total Space | 63,74 Gb Free Space | 63,80% Space Free | Partition Type: NTFS
  13. Drive D: | 831,52 Gb Total Space | 558,61 Gb Free Space | 67,18% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: _-PC | User Name: Jacek | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2013.04.08 20:15:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jacek\Desktop\OTL.exe
  22. PRC - [2013.04.05 18:43:30 | 000,610,120 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
  23. PRC - [2013.04.05 07:17:20 | 000,175,104 | ---- | M] () -- D:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
  24. PRC - [2013.03.22 00:50:35 | 001,312,720 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  25. PRC - [2013.03.19 21:22:28 | 001,305,568 | ---- | M] (techPowerUp (www.techpowerup.com)) -- D:\Program Files (x86)\GPU-Z\GPU-Z.exe
  26. PRC - [2013.02.08 11:39:20 | 000,988,885 | ---- | M] () -- D:\Program Files (x86)\Ad Muncher\AdMuncherUpdater.exe
  27. PRC - [2013.02.04 01:13:13 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
  28. PRC - [2013.01.06 13:49:24 | 000,595,144 | ---- | M] (Murray Hurps Software Pty Ltd) -- D:\Program Files (x86)\Ad Muncher\AdMunch.exe
  29. PRC - [2012.08.25 22:27:58 | 000,085,776 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\32\SbieSvc.exe
  30. PRC - [2011.10.17 15:12:52 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  31. PRC - [2011.07.13 08:33:08 | 004,615,064 | ---- | M] (Almico Software (www.almico.com)) -- C:\Program Files (x86)\SpeedFan\speedfan.exe
  32. PRC - [2010.08.03 11:59:46 | 000,543,344 | ---- | M] (VIA TECH) -- C:\Program Files (x86)\VIA\VIAudioi\EnvyADeck\EnMixCPL.exe
  33. PRC - [2009.08.29 08:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Jacek\Local Settings\Apps\F.lux\flux.exe
  34.  
  35.  
  36. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  37.  
  38. MOD - [2013.04.08 19:43:43 | 000,192,512 | ---- | M] () -- C:\Users\Jacek\AppData\Local\Temp\sfamcc00001.dll
  39. MOD - [2013.04.08 19:43:43 | 000,172,032 | ---- | M] () -- C:\Users\Jacek\AppData\Local\Temp\sfareca00001.dll
  40. MOD - [2013.04.05 18:43:30 | 000,610,120 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
  41. MOD - [2013.04.05 07:17:20 | 000,175,104 | ---- | M] () -- D:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe
  42. MOD - [2013.04.05 07:17:14 | 000,071,680 | ---- | M] () -- D:\Program Files (x86)\RivaTuner Statistics Server\RTMUI.dll
  43. MOD - [2013.04.05 07:17:08 | 000,127,488 | ---- | M] () -- D:\Program Files (x86)\RivaTuner Statistics Server\RTUI.dll
  44. MOD - [2013.04.05 07:16:56 | 000,120,832 | ---- | M] () -- D:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks.dll
  45. MOD - [2013.04.05 07:16:40 | 000,056,832 | ---- | M] () -- D:\Program Files (x86)\RivaTuner Statistics Server\RTFC.dll
  46. MOD - [2013.03.27 17:42:56 | 000,368,128 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\RTHAL.dll
  47. MOD - [2013.03.27 17:42:44 | 000,216,064 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\RTCore.dll
  48. MOD - [2013.03.27 17:42:42 | 000,127,488 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\RTUI.dll
  49. MOD - [2013.03.27 17:42:40 | 000,071,680 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\RTMUI.dll
  50. MOD - [2013.03.27 17:42:34 | 000,056,832 | ---- | M] () -- D:\Program Files (x86)\EVGA Precision X\RTFC.dll
  51. MOD - [2013.03.22 00:50:33 | 000,390,096 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
  52. MOD - [2013.03.22 00:50:32 | 012,662,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll
  53. MOD - [2013.03.22 00:50:31 | 004,050,896 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\pdf.dll
  54. MOD - [2013.03.22 00:49:41 | 000,598,480 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\libglesv2.dll
  55. MOD - [2013.03.22 00:49:40 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\libegl.dll
  56. MOD - [2013.03.22 00:49:38 | 001,606,096 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\ffmpegsumo.dll
  57. MOD - [2013.02.08 11:39:20 | 000,988,885 | ---- | M] () -- D:\Program Files (x86)\Ad Muncher\AdMuncherUpdater.exe
  58. MOD - [2012.08.17 22:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
  59. MOD - [2010.08.03 12:00:04 | 000,076,400 | ---- | M] () -- C:\Program Files (x86)\VIA\VIAudioi\EnvyADeck\QsApoApi.dll
  60. MOD - [2010.08.03 12:00:00 | 000,174,704 | ---- | M] () -- C:\Program Files (x86)\VIA\VIAudioi\EnvyADeck\Envy24Api.dll
  61. MOD - [2009.08.29 08:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Jacek\Local Settings\Apps\F.lux\flux.exe
  62.  
  63.  
  64. [color=#E56717]========== Services (SafeList) ==========[/color]
  65.  
  66. SRV:[b]64bit:[/b] - [2012.08.25 22:28:16 | 000,123,664 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
  67. SRV:[b]64bit:[/b] - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  68. SRV:[b]64bit:[/b] - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  69. SRV - [2013.03.29 21:53:56 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  70. SRV - [2013.02.05 16:41:25 | 000,066,872 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  71. SRV - [2013.02.04 01:13:13 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe -- (AVP)
  72. SRV - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  73. SRV - [2012.09.20 14:33:22 | 050,899,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
  74. SRV - [2012.06.01 02:54:24 | 001,516,496 | ---- | M] (TrueCrypt Foundation) [Auto | Stopped] -- C:\Windows\SysWOW64\TrueCrypt.exe -- (TrueCryptSystemFavorites)
  75. SRV - [2011.10.17 15:12:52 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  76. SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  77. SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  78.  
  79.  
  80. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  81.  
  82. DRV:[b]64bit:[/b] - [2013.12.14 14:06:23 | 000,194,048 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
  83. DRV:[b]64bit:[/b] - [2013.02.07 20:37:48 | 000,023,968 | ---- | M] (Resplendence Software Projects Sp.) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rspLLL64.sys -- (rspLLL)
  84. DRV:[b]64bit:[/b] - [2013.02.04 01:24:23 | 000,613,720 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
  85. DRV:[b]64bit:[/b] - [2013.02.04 01:24:23 | 000,054,104 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
  86. DRV:[b]64bit:[/b] - [2012.10.25 16:45:38 | 000,029,528 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
  87. DRV:[b]64bit:[/b] - [2012.10.25 16:45:38 | 000,029,016 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
  88. DRV:[b]64bit:[/b] - [2012.08.13 17:49:40 | 000,178,008 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
  89. DRV:[b]64bit:[/b] - [2012.08.02 16:09:34 | 000,028,504 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
  90. DRV:[b]64bit:[/b] - [2012.06.19 18:28:12 | 000,458,584 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
  91. DRV:[b]64bit:[/b] - [2012.06.01 02:54:24 | 000,231,376 | ---- | M] (TrueCrypt Foundation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)
  92. DRV:[b]64bit:[/b] - [2012.03.07 02:56:18 | 000,301,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\e1e6232e.sys -- (e1express)
  93. DRV:[b]64bit:[/b] - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  94. DRV:[b]64bit:[/b] - [2012.01.09 17:28:20 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  95. DRV:[b]64bit:[/b] - [2012.01.09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
  96. DRV:[b]64bit:[/b] - [2012.01.09 17:28:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
  97. DRV:[b]64bit:[/b] - [2012.01.09 17:28:18 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  98. DRV:[b]64bit:[/b] - [2011.10.17 14:55:32 | 000,559,384 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  99. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  100. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  101. DRV:[b]64bit:[/b] - [2010.11.21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  102. DRV:[b]64bit:[/b] - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  103. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  104. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  105. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  106. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  107. DRV:[b]64bit:[/b] - [2010.11.21 05:23:48 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  108. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  109. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  110. DRV:[b]64bit:[/b] - [2010.07.05 19:21:36 | 000,228,080 | ---- | M] (VIA - IC Ensemble, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Envy24HF.sys -- (Envy24HFS)
  111. DRV:[b]64bit:[/b] - [2009.10.10 14:24:16 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
  112. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  113. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  114. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  115. DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  116. DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  117. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  118. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  119. DRV:[b]64bit:[/b] - [2007.05.11 13:01:10 | 000,070,424 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
  120. DRV - [2013.04.05 18:43:30 | 000,015,176 | ---- | M] () [Kernel | On_Demand | Running] -- D:\Program Files (x86)\EVGA Precision X\RTCore64.sys -- (RTCore64)
  121. DRV - [2011.01.18 19:49:06 | 000,068,440 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- d:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys -- (VSPerfDrv100)
  122. DRV - [2010.01.29 12:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Stopped] -- D:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
  123. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  124.  
  125.  
  126. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  127.  
  128.  
  129. [color=#E56717]========== Internet Explorer ==========[/color]
  130.  
  131. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope =
  132. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  133. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  134. IE - HKLM\..\SearchScopes,DefaultScope =
  135. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  136.  
  137.  
  138. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  139. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  140.  
  141. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  142. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  143.  
  144. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  145.  
  146. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  147.  
  148. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
  149. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/
  150. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 85 6F 8A BB 7B 34 CE 01 [binary data]
  151. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\..\SearchScopes,DefaultScope =
  152. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  153. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\..\SearchScopes\{A3F6485F-3CCD-4F86-A9D4-4039B72D3672}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}
  154. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  155. IE - HKU\S-1-5-21-3951386603-459547399-870663884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:9050
  156.  
  157.  
  158.  
  159. [color=#E56717]========== FireFox ==========[/color]
  160.  
  161. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  162. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  163. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  164. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  165. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  166. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  167. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  168. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
  169. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
  170. FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files (x86)\Adobe Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  171.  
  172. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013.02.04 01:24:25 | 000,000,000 | ---D | M]
  173. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013.02.04 01:24:25 | 000,000,000 | ---D | M]
  174. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013.02.04 01:24:25 | 000,000,000 | ---D | M]
  175. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013.02.04 01:24:25 | 000,000,000 | ---D | M]
  176. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013.02.04 01:24:25 | 000,000,000 | ---D | M]
  177.  
  178.  
  179. [color=#E56717]========== Chrome ==========[/color]
  180.  
  181. CHR - default_search_provider: Google (Enabled)
  182. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
  183. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
  184. CHR - homepage: https://www.google.pl/
  185. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\PepperFlash\pepflashplayer.dll
  186. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  187. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\ppGoogleNaClPluginChrome.dll
  188. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.43\pdf.dll
  189. CHR - plugin: Adobe Acrobat (Enabled) = D:\Program Files (x86)\Adobe Reader 11.0\Reader\Browser\nppdf32.dll
  190. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
  191. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL
  192. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL
  193. CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll
  194. CHR - Extension: Magic Actions for YouTube\u2122 = C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif\5.8.3.1_0\
  195. CHR - Extension: Explode = C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\hniojmjkfmakikcfighiifjflnecmnjn\0.8.3_0\
  196. CHR - Extension: Disconnect = C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo\4.4.0_0\
  197. CHR - Extension: Stop Autoplay for YouTube. = C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgdfnbpkmkkdhgidgcpdkgpdlfjcgnnh\0.11.5.24_0\
  198. CHR - Extension: Ghostery = C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\4.1.0_0\
  199. CHR - Extension: ScriptSafe = C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.13_0\
  200.  
  201. O1 HOSTS File: ([2012.10.10 16:24:23 | 000,000,826 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  202. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  203. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  204. O4 - HKLM..\Run: [Ad Muncher] D:\Program Files (x86)\Ad Muncher\AdMunch.exe (Murray Hurps Software Pty Ltd)
  205. O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Kaspersky Lab ZAO)
  206. O4 - HKLM..\Run: [EnvyHFCPL] C:\Program Files (x86)\VIA\VIAudioi\EnvyADeck\EnMixCPL.exe (VIA TECH)
  207. O4 - HKLM..\Run: [KeePass 2 PreLoad] D:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
  208. O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
  209. O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
  210. O4 - HKU\S-1-5-21-3951386603-459547399-870663884-1000..\Run: [AdMuncherUpdater] D:\Program Files (x86)\Ad Muncher\AdMuncherUpdater.exe ()
  211. O4 - HKU\S-1-5-21-3951386603-459547399-870663884-1000..\Run: [F.lux] C:\Users\Jacek\Local Settings\Apps\F.lux\flux.exe ()
  212. O4 - HKU\S-1-5-21-3951386603-459547399-870663884-1000..\Run: [KeePass Password Safe 2] D:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
  213. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  214. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  215. O4 - Startup: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Core Temp.lnk = D:\Program Files\Core Temp\Core Temp.exe ()
  216. O4 - Startup: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GPU-Z.lnk = D:\Program Files (x86)\GPU-Z\GPU-Z.exe (techPowerUp (www.techpowerup.com))
  217. O4 - Startup: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Konkurs.txt ()
  218. O4 - Startup: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk = C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (www.almico.com))
  219. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  220. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  221. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  222. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  223. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  224. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  225. O7 - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
  226. O7 - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 1
  227. O7 - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 1
  228. O7 - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  229. O7 - HKU\S-1-5-21-3951386603-459547399-870663884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
  230. O8:[b]64bit:[/b] - Extra context menu item: Dodaj do listy blokowanych banerów - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
  231. O8 - Extra context menu item: Dodaj do listy blokowanych banerów - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
  232. O13[b]64bit:[/b] - gopher Prefix: missing
  233. O13 - gopher Prefix: missing
  234. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
  235. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{18D4BF02-37FD-403E-A4D2-DA5D4809C9EE}: DhcpNameServer = 192.168.1.254
  236. O18 - Protocol\Handler\ms-help - No CLSID value found
  237. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  238. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  239. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  240. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  241. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  242. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  243. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
  244. O32 - HKLM CDRom: AutoRun - 0
  245. O34 - HKLM BootExecute: (autocheck autochk *)
  246. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  247. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  248. O35 - HKLM\..comfile [open] -- "%1" %*
  249. O35 - HKLM\..exefile [open] -- "%1" %*
  250. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  251. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  252. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  253. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  254. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  255. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  256. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  257.  
  258. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  259.  
  260. [2013.04.08 20:15:10 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jacek\Desktop\OTL.exe
  261. [2013.04.08 16:40:22 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
  262. [2013.04.08 16:40:22 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Extensions
  263. [2013.04.08 12:50:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EVGA Precision X
  264. [2013.04.06 16:38:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
  265. [2013.03.26 18:27:07 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\GTA San Andreas User Files
  266. [2013.03.25 18:46:47 | 000,000,000 | ---D | C] -- C:\Users\Jacek\AppData\Roaming\NVIDIA
  267. [2013.03.25 18:46:14 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
  268. [2013.03.25 18:44:45 | 006,398,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
  269. [2013.03.25 18:44:45 | 003,477,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
  270. [2013.03.25 18:44:45 | 002,555,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
  271. [2013.03.25 18:44:45 | 000,237,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
  272. [2013.03.25 18:44:45 | 000,063,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
  273. [2013.03.25 18:44:35 | 000,061,216 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
  274. [2013.03.25 18:44:32 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
  275. [2013.03.25 18:44:09 | 026,956,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  276. [2013.03.25 18:44:09 | 025,256,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  277. [2013.03.25 18:44:09 | 020,542,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  278. [2013.03.25 18:44:09 | 017,990,800 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  279. [2013.03.25 18:44:09 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  280. [2013.03.25 18:44:09 | 015,508,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
  281. [2013.03.25 18:44:09 | 015,042,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  282. [2013.03.25 18:44:09 | 013,088,000 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  283. [2013.03.25 18:44:09 | 009,414,456 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  284. [2013.03.25 18:44:09 | 007,959,000 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  285. [2013.03.25 18:44:09 | 007,573,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  286. [2013.03.25 18:44:09 | 006,271,872 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  287. [2013.03.25 18:44:09 | 002,913,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  288. [2013.03.25 18:44:09 | 002,864,144 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
  289. [2013.03.25 18:44:09 | 002,728,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  290. [2013.03.25 18:44:09 | 002,539,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
  291. [2013.03.25 18:44:09 | 002,355,488 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
  292. [2013.03.25 18:44:09 | 001,995,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
  293. [2013.03.25 18:44:09 | 001,807,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6431422.dll
  294. [2013.03.25 18:44:09 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6431422.dll
  295. [2013.03.25 18:43:41 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
  296. [2013.03.22 21:45:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools 2013 Release Candidate 1
  297. [2013.03.15 18:13:09 | 000,000,000 | ---D | C] -- C:\Users\Jacek\Documents\Rockstar Games
  298. [2013.03.14 14:38:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
  299. [2013.03.12 21:05:02 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
  300. [2013.03.12 21:04:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  301. [2013.03.12 21:02:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
  302. [2013.03.12 21:02:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
  303. [2013.03.12 21:01:36 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
  304. [6 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  305. [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  306. [1 C:\Users\Jacek\AppData\Local\*.tmp files -> C:\Users\Jacek\AppData\Local\*.tmp -> ]
  307.  
  308. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  309.  
  310. [2013.12.14 14:06:17 | 000,000,543 | ---- | M] () -- C:\Windows\NGO.cer
  311. [2013.04.08 20:17:59 | 000,890,815 | ---- | M] () -- C:\Users\Jacek\Desktop\SecurityCheck.exe
  312. [2013.04.08 20:15:25 | 000,377,856 | ---- | M] () -- C:\Users\Jacek\Desktop\299vbv0i.exe
  313. [2013.04.08 20:15:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jacek\Desktop\OTL.exe
  314. [2013.04.08 19:50:24 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  315. [2013.04.08 19:50:24 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  316. [2013.04.08 19:47:24 | 001,637,038 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  317. [2013.04.08 19:47:24 | 000,730,706 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  318. [2013.04.08 19:47:24 | 000,639,662 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  319. [2013.04.08 19:47:24 | 000,152,082 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  320. [2013.04.08 19:47:24 | 000,117,842 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  321. [2013.04.08 19:43:23 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  322. [2013.04.08 19:43:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  323. [2013.04.08 19:42:59 | 485,654,527 | -HS- | M] () -- C:\hiberfil.sys
  324. [2013.04.08 18:42:00 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  325. [2013.03.26 21:30:57 | 000,004,635 | ---- | M] () -- C:\Users\Jacek\AppData\Local\recently-used.xbel
  326. [2013.03.21 00:46:52 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
  327. [2013.03.17 11:29:06 | 000,000,022 | -HS- | M] () -- C:\Users\Jacek\AppData\Roaming\Win3944_ConfigDB.dlx
  328. [2013.03.17 11:29:06 | 000,000,022 | -HS- | M] () -- C:\Users\Jacek\AppData\Roaming\System8638Conf Collection
  329. [2013.03.17 10:19:18 | 000,005,490 | ---- | M] () -- C:\Windows\Sandboxie.ini
  330. [2013.03.15 07:53:06 | 026,956,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  331. [2013.03.15 07:53:06 | 025,256,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  332. [2013.03.15 07:53:06 | 020,542,752 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  333. [2013.03.15 07:53:06 | 017,990,800 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  334. [2013.03.15 07:53:06 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  335. [2013.03.15 07:53:06 | 015,508,512 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
  336. [2013.03.15 07:53:06 | 015,042,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  337. [2013.03.15 07:53:06 | 013,088,000 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  338. [2013.03.15 07:53:06 | 009,414,456 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  339. [2013.03.15 07:53:06 | 007,959,000 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  340. [2013.03.15 07:53:06 | 007,573,816 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  341. [2013.03.15 07:53:06 | 006,271,872 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  342. [2013.03.15 07:53:06 | 002,913,056 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  343. [2013.03.15 07:53:06 | 002,864,144 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
  344. [2013.03.15 07:53:06 | 002,728,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  345. [2013.03.15 07:53:06 | 002,539,128 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
  346. [2013.03.15 07:53:06 | 002,355,488 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
  347. [2013.03.15 07:53:06 | 001,995,552 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
  348. [2013.03.15 07:53:06 | 001,807,136 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6431422.dll
  349. [2013.03.15 07:53:06 | 001,510,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6431422.dll
  350. [2013.03.15 07:53:06 | 000,061,216 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
  351. [2013.03.15 07:53:06 | 000,017,738 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
  352. [2013.03.15 06:16:18 | 003,477,280 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
  353. [2013.03.15 06:16:17 | 006,398,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
  354. [2013.03.15 06:16:10 | 002,555,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
  355. [2013.03.15 06:16:10 | 000,237,856 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
  356. [2013.03.15 06:16:10 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
  357. [6 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  358. [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  359. [1 C:\Users\Jacek\AppData\Local\*.tmp files -> C:\Users\Jacek\AppData\Local\*.tmp -> ]
  360.  
  361. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  362.  
  363. [2013.12.14 14:06:17 | 000,000,543 | ---- | C] () -- C:\Windows\NGO.cer
  364. [2013.04.08 20:17:37 | 000,890,815 | ---- | C] () -- C:\Users\Jacek\Desktop\SecurityCheck.exe
  365. [2013.04.08 20:15:24 | 000,377,856 | ---- | C] () -- C:\Users\Jacek\Desktop\299vbv0i.exe
  366. [2013.03.26 21:30:57 | 000,004,635 | ---- | C] () -- C:\Users\Jacek\AppData\Local\recently-used.xbel
  367. [2013.03.25 18:44:09 | 000,017,738 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
  368. [2013.03.17 11:29:06 | 000,000,022 | -HS- | C] () -- C:\Users\Jacek\AppData\Roaming\Win3944_ConfigDB.dlx
  369. [2013.03.17 11:29:06 | 000,000,022 | -HS- | C] () -- C:\Users\Jacek\AppData\Roaming\System8638Conf Collection
  370. [2013.03.14 14:37:58 | 000,001,046 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  371. [2013.03.14 14:37:58 | 000,001,042 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  372. [2013.02.14 18:01:54 | 000,009,287 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
  373. [2013.01.17 02:16:35 | 000,000,022 | -HS- | C] () -- C:\Users\Jacek\AppData\Roaming\App5997SettingsDB.sys
  374. [2013.01.17 02:16:35 | 000,000,022 | -HS- | C] () -- C:\Users\Jacek\AppData\Roaming\1155159F17C24437
  375. [2012.12.22 22:52:59 | 000,000,600 | ---- | C] () -- C:\Users\Jacek\AppData\Local\PUTTY.RND
  376. [2012.12.10 17:34:02 | 001,611,560 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  377. [2012.10.27 22:06:28 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
  378. [2012.10.10 16:41:32 | 000,000,008 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  379. [2012.09.28 21:45:06 | 000,247,296 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll
  380. [2012.09.06 18:02:21 | 000,000,034 | ---- | C] () -- C:\Windows\cdplayer.ini
  381. [2012.06.03 13:59:15 | 000,103,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  382. [2012.06.03 13:59:03 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
  383. [2012.06.03 13:59:03 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  384. [2012.06.01 17:02:54 | 000,055,296 | ---- | C] () -- C:\Windows\SysWow64\sfextra.dll
  385. [2012.06.01 03:12:29 | 000,005,490 | ---- | C] () -- C:\Windows\Sandboxie.ini
  386. [2011.09.28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
  387.  
  388. [color=#E56717]========== ZeroAccess Check ==========[/color]
  389.  
  390. [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  391.  
  392. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  393.  
  394. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  395.  
  396. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  397.  
  398. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  399.  
  400. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  401. "" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
  402. "ThreadingModel" = Apartment
  403.  
  404. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  405. "" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
  406. "ThreadingModel" = Apartment
  407.  
  408. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  409. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  410. "ThreadingModel" = Free
  411.  
  412. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  413. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  414. "ThreadingModel" = Free
  415.  
  416. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  417. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  418. "ThreadingModel" = Both
  419.  
  420. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  421.  
  422. [color=#E56717]========== LOP Check ==========[/color]
  423.  
  424. [2013.02.22 12:48:02 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\.wtw
  425. [2013.04.08 18:09:07 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\AIMP3
  426. [2013.01.16 11:41:13 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\Color Profile Keeper
  427. [2012.12.10 17:47:45 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\EAC
  428. [2012.12.10 17:47:45 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\GHISLER
  429. [2013.02.14 02:47:36 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\ImgBurn
  430. [2013.04.08 19:13:14 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\KeePass
  431. [2012.12.30 12:23:35 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\NapiProjekt
  432. [2012.12.10 17:47:46 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\The Longest Journey
  433. [2012.12.10 20:55:12 | 000,000,000 | ---D | M] -- C:\Users\Jacek\AppData\Roaming\TrueCrypt
  434.  
  435. [color=#E56717]========== Purity Check ==========[/color]
  436.  
  437.  
  438.  
  439. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!