API tools faq
paste
Advertisement
Guest User

OTL

a guest
Mar 14th, 2014
46
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 57.94 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-03-14 13:04:32 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\sebastian03\Downloads
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16736)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,82 Gb Total Physical Memory | 2,46 Gb Available Physical Memory | 64,39% Memory free
  8. 7,69 Gb Paging File | 6,25 Gb Available in Paging File | 81,27% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 227,74 Gb Total Space | 168,23 Gb Free Space | 73,87% Space Free | Partition Type: NTFS
  13. Drive D: | 2,82 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
  14. Drive G: | 219,95 Gb Total Space | 75,69 Gb Free Space | 34,41% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: SEBASTIAN-PC | User Name: sebastian03 | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2014-03-14 13:03:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\sebastian03\Downloads\OTL.exe
  23. PRC - [2014-03-11 19:45:28 | 001,863,560 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
  24. PRC - [2014-02-14 10:36:16 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  25. PRC - [2013-12-13 17:54:05 | 000,227,936 | ---- | M] (WildTangent) -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
  26. PRC - [2013-11-30 14:11:00 | 003,568,312 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  27. PRC - [2013-11-30 14:11:00 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  28. PRC - [2013-11-13 21:58:00 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  29. PRC - [2012-12-12 21:02:19 | 000,111,216 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\RadioController\RfBtnHelper.exe
  30. PRC - [2012-10-12 10:41:20 | 001,258,856 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  31. PRC - [2012-09-21 06:17:48 | 000,474,224 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe
  32. PRC - [2012-09-21 06:17:47 | 000,348,784 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
  33. PRC - [2012-09-21 06:17:46 | 001,184,368 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
  34. PRC - [2012-08-24 06:24:38 | 002,435,728 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
  35. PRC - [2012-08-23 07:24:38 | 000,259,136 | ---- | M] (NTI Corporation) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
  36. PRC - [2012-07-18 01:10:34 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  37. PRC - [2012-07-18 01:10:32 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  38. PRC - [2012-07-18 01:10:18 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  39. PRC - [2012-07-04 18:57:44 | 000,990,320 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
  40. PRC - [2012-02-02 16:16:56 | 002,671,936 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\Daemon Tools Pro\DTShellHlp.exe
  41.  
  42.  
  43. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  44.  
  45. MOD - [2014-03-11 19:45:28 | 016,276,872 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll
  46. MOD - [2014-02-14 10:36:16 | 003,578,992 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  47. MOD - [2013-11-30 14:11:03 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  48.  
  49.  
  50. [color=#E56717]========== Services (SafeList) ==========[/color]
  51.  
  52. SRV:[b]64bit:[/b] - [2013-11-30 14:11:00 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  53. SRV:[b]64bit:[/b] - [2013-08-16 06:39:26 | 002,371,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  54. SRV:[b]64bit:[/b] - [2013-07-02 01:44:21 | 000,016,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  55. SRV:[b]64bit:[/b] - [2013-06-24 23:54:45 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  56. SRV:[b]64bit:[/b] - [2013-06-01 10:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  57. SRV:[b]64bit:[/b] - [2013-05-04 07:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  58. SRV:[b]64bit:[/b] - [2013-05-04 07:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  59. SRV:[b]64bit:[/b] - [2013-04-09 05:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  60. SRV:[b]64bit:[/b] - [2013-03-02 03:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  61. SRV:[b]64bit:[/b] - [2013-03-02 03:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  62. SRV:[b]64bit:[/b] - [2013-01-10 00:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  63. SRV:[b]64bit:[/b] - [2013-01-10 00:22:35 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  64. SRV:[b]64bit:[/b] - [2012-10-19 10:54:52 | 000,100,752 | ---- | M] (ELAN Microelectronics Corp.) [Auto | Running] -- C:\Program Files\Elantech\ETDService.exe -- (ETDService)
  65. SRV:[b]64bit:[/b] - [2012-09-20 09:18:03 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  66. SRV:[b]64bit:[/b] - [2012-09-20 07:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  67. SRV:[b]64bit:[/b] - [2012-08-23 05:36:28 | 000,468,624 | ---- | M] (Acer Incorporated) [On_Demand | Stopped] -- C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe -- (DeviceFastLaneService)
  68. SRV:[b]64bit:[/b] - [2012-08-23 05:02:36 | 000,658,576 | ---- | M] (Acer Incorporated) [On_Demand | Running] -- C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe -- (ePowerSvc)
  69. SRV:[b]64bit:[/b] - [2012-08-21 01:36:22 | 000,176,640 | ---- | M] (Broadcom Corp.) [Auto | Running] -- C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe -- (BrcmCardReader)
  70. SRV:[b]64bit:[/b] - [2012-07-26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  71. SRV:[b]64bit:[/b] - [2012-07-26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  72. SRV:[b]64bit:[/b] - [2012-07-26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  73. SRV:[b]64bit:[/b] - [2012-07-26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  74. SRV:[b]64bit:[/b] - [2012-07-26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  75. SRV:[b]64bit:[/b] - [2012-07-26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  76. SRV:[b]64bit:[/b] - [2012-07-26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  77. SRV:[b]64bit:[/b] - [2012-07-26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  78. SRV:[b]64bit:[/b] - [2012-07-26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  79. SRV:[b]64bit:[/b] - [2012-07-26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
  80. SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  81. SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  82. SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  83. SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  84. SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  85. SRV:[b]64bit:[/b] - [2012-07-26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  86. SRV:[b]64bit:[/b] - [2012-04-20 23:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  87. SRV - [2014-03-11 19:45:28 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  88. SRV - [2014-02-25 22:57:46 | 000,568,512 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  89. SRV - [2014-02-14 10:36:16 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  90. SRV - [2013-12-13 17:54:05 | 000,227,936 | ---- | M] (WildTangent) [Auto | Running] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe -- (GamesAppIntegrationService)
  91. SRV - [2013-11-13 21:58:00 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  92. SRV - [2013-09-05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  93. SRV - [2013-01-28 13:47:24 | 000,227,456 | ---- | M] (Qualcomm Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
  94. SRV - [2012-12-12 21:17:52 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  95. SRV - [2012-12-12 21:02:19 | 000,096,880 | ---- | M] (Dritek System INC.) [Auto | Running] -- C:\Windows\RfBtnSvc64.exe -- (RfButtonDriverService)
  96. SRV - [2012-10-23 19:37:58 | 000,277,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  97. SRV - [2012-10-12 10:41:20 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  98. SRV - [2012-09-21 06:17:47 | 000,348,784 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
  99. SRV - [2012-09-20 09:18:03 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
  100. SRV - [2012-08-24 06:24:38 | 002,435,728 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe -- (CCDMonitorService)
  101. SRV - [2012-08-23 07:24:38 | 000,259,136 | ---- | M] (NTI Corporation) [Auto | Running] -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
  102. SRV - [2012-07-26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
  103. SRV - [2012-07-18 01:10:34 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  104. SRV - [2012-07-18 01:10:32 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  105. SRV - [2012-07-18 01:10:18 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  106. SRV - [2012-07-12 04:10:24 | 000,174,160 | ---- | M] (Egis Technology Inc. ) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe -- (EgisTec Ticket Service)
  107. SRV - [2010-10-12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  108.  
  109.  
  110. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  111.  
  112. DRV:[b]64bit:[/b] - [2013-11-30 14:11:10 | 001,032,416 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\aswSnx.sys -- (aswSnx)
  113. DRV:[b]64bit:[/b] - [2013-11-30 14:11:10 | 000,409,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\aswSP.sys -- (aswSP)
  114. DRV:[b]64bit:[/b] - [2013-11-30 14:11:10 | 000,205,320 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  115. DRV:[b]64bit:[/b] - [2013-11-30 14:11:10 | 000,084,328 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\aswMonFlt.sys -- (aswMonFlt)
  116. DRV:[b]64bit:[/b] - [2013-11-30 14:11:10 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  117. DRV:[b]64bit:[/b] - [2013-11-30 14:11:10 | 000,038,984 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\aswFsBlk.sys -- (aswFsBlk)
  118. DRV:[b]64bit:[/b] - [2013-11-30 14:11:09 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\aswRdr2.sys -- (aswRdr)
  119. DRV:[b]64bit:[/b] - [2013-10-10 12:53:35 | 000,096,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
  120. DRV:[b]64bit:[/b] - [2013-09-29 09:16:43 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\dtsoftbus01.sys -- (dtsoftbus01)
  121. DRV:[b]64bit:[/b] - [2013-09-29 08:53:00 | 000,560,184 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
  122. DRV:[b]64bit:[/b] - [2013-08-16 06:41:13 | 000,058,200 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
  123. DRV:[b]64bit:[/b] - [2013-08-10 07:30:22 | 000,151,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
  124. DRV:[b]64bit:[/b] - [2013-07-09 09:04:07 | 000,120,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
  125. DRV:[b]64bit:[/b] - [2013-07-02 02:41:47 | 000,447,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
  126. DRV:[b]64bit:[/b] - [2013-07-02 02:41:47 | 000,337,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
  127. DRV:[b]64bit:[/b] - [2013-07-02 02:41:47 | 000,213,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
  128. DRV:[b]64bit:[/b] - [2013-07-02 01:44:14 | 000,036,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
  129. DRV:[b]64bit:[/b] - [2013-07-01 23:08:49 | 000,247,216 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
  130. DRV:[b]64bit:[/b] - [2013-06-29 07:15:54 | 000,195,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
  131. DRV:[b]64bit:[/b] - [2013-06-01 04:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  132. DRV:[b]64bit:[/b] - [2013-05-04 08:34:15 | 000,284,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
  133. DRV:[b]64bit:[/b] - [2013-03-02 11:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
  134. DRV:[b]64bit:[/b] - [2013-03-02 11:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
  135. DRV:[b]64bit:[/b] - [2013-01-28 13:23:28 | 000,581,200 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btfilter.sys -- (BtFilter)
  136. DRV:[b]64bit:[/b] - [2013-01-28 13:23:24 | 000,136,424 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_rcp.sys -- (BTATH_RCP)
  137. DRV:[b]64bit:[/b] - [2013-01-28 13:23:24 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_lwflt.sys -- (BTATH_LWFLT)
  138. DRV:[b]64bit:[/b] - [2013-01-28 13:23:22 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_hcrp.sys -- (BTATH_HCRP)
  139. DRV:[b]64bit:[/b] - [2013-01-28 13:23:20 | 000,089,168 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_flt.sys -- (AthBTPort)
  140. DRV:[b]64bit:[/b] - [2013-01-28 13:23:20 | 000,034,384 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_bus.sys -- (BTATH_BUS)
  141. DRV:[b]64bit:[/b] - [2013-01-28 13:23:18 | 000,346,192 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_a2dp.sys -- (BTATH_A2DP)
  142. DRV:[b]64bit:[/b] - [2013-01-28 13:23:18 | 000,115,280 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\btath_avdt.sys -- (btath_avdt)
  143. DRV:[b]64bit:[/b] - [2013-01-21 01:56:12 | 003,747,840 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\athw8x.sys -- (athr)
  144. DRV:[b]64bit:[/b] - [2013-01-10 02:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
  145. DRV:[b]64bit:[/b] - [2012-12-12 21:02:19 | 000,026,736 | ---- | M] (Dritek System Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\aPs2Kb2Hid.sys -- (Ps2Kb2Hid)
  146. DRV:[b]64bit:[/b] - [2012-11-27 04:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
  147. DRV:[b]64bit:[/b] - [2012-11-20 05:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
  148. DRV:[b]64bit:[/b] - [2012-11-06 04:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
  149. DRV:[b]64bit:[/b] - [2012-10-25 05:32:32 | 000,062,776 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
  150. DRV:[b]64bit:[/b] - [2012-10-25 05:32:32 | 000,022,648 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\Drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
  151. DRV:[b]64bit:[/b] - [2012-10-25 05:32:32 | 000,020,520 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
  152. DRV:[b]64bit:[/b] - [2012-10-23 19:37:42 | 005,343,584 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)
  153. DRV:[b]64bit:[/b] - [2012-10-19 10:54:54 | 000,330,640 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\ETD.sys -- (ETD)
  154. DRV:[b]64bit:[/b] - [2012-10-12 10:41:20 | 000,030,056 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\nvpciflt.sys -- (nvpciflt)
  155. DRV:[b]64bit:[/b] - [2012-10-12 09:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  156. DRV:[b]64bit:[/b] - [2012-10-11 08:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
  157. DRV:[b]64bit:[/b] - [2012-09-20 08:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
  158. DRV:[b]64bit:[/b] - [2012-09-20 08:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
  159. DRV:[b]64bit:[/b] - [2012-08-16 22:33:42 | 000,645,952 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA)
  160. DRV:[b]64bit:[/b] - [2012-08-14 20:15:36 | 000,070,744 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\bScsiSDa.sys -- (bScsiSDa)
  161. DRV:[b]64bit:[/b] - [2012-08-13 19:59:42 | 000,072,280 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\b57xdbd.sys -- (b57xdbd)
  162. DRV:[b]64bit:[/b] - [2012-08-13 19:59:42 | 000,021,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\b57xdmp.sys -- (b57xdmp)
  163. DRV:[b]64bit:[/b] - [2012-07-26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  164. DRV:[b]64bit:[/b] - [2012-07-26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
  165. DRV:[b]64bit:[/b] - [2012-07-26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
  166. DRV:[b]64bit:[/b] - [2012-07-26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
  167. DRV:[b]64bit:[/b] - [2012-07-26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
  168. DRV:[b]64bit:[/b] - [2012-07-26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
  169. DRV:[b]64bit:[/b] - [2012-07-26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
  170. DRV:[b]64bit:[/b] - [2012-07-26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
  171. DRV:[b]64bit:[/b] - [2012-07-26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
  172. DRV:[b]64bit:[/b] - [2012-07-26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
  173. DRV:[b]64bit:[/b] - [2012-07-26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
  174. DRV:[b]64bit:[/b] - [2012-07-26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  175. DRV:[b]64bit:[/b] - [2012-07-26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
  176. DRV:[b]64bit:[/b] - [2012-07-26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
  177. DRV:[b]64bit:[/b] - [2012-07-26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
  178. DRV:[b]64bit:[/b] - [2012-07-26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
  179. DRV:[b]64bit:[/b] - [2012-07-26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
  180. DRV:[b]64bit:[/b] - [2012-07-26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
  181. DRV:[b]64bit:[/b] - [2012-07-26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
  182. DRV:[b]64bit:[/b] - [2012-07-26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
  183. DRV:[b]64bit:[/b] - [2012-07-26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
  184. DRV:[b]64bit:[/b] - [2012-07-26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
  185. DRV:[b]64bit:[/b] - [2012-07-26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
  186. DRV:[b]64bit:[/b] - [2012-07-26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
  187. DRV:[b]64bit:[/b] - [2012-07-26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
  188. DRV:[b]64bit:[/b] - [2012-07-26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
  189. DRV:[b]64bit:[/b] - [2012-07-26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
  190. DRV:[b]64bit:[/b] - [2012-07-26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
  191. DRV:[b]64bit:[/b] - [2012-07-26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
  192. DRV:[b]64bit:[/b] - [2012-07-26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
  193. DRV:[b]64bit:[/b] - [2012-07-26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
  194. DRV:[b]64bit:[/b] - [2012-07-26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
  195. DRV:[b]64bit:[/b] - [2012-07-26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
  196. DRV:[b]64bit:[/b] - [2012-07-26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
  197. DRV:[b]64bit:[/b] - [2012-07-26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
  198. DRV:[b]64bit:[/b] - [2012-07-26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
  199. DRV:[b]64bit:[/b] - [2012-07-26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
  200. DRV:[b]64bit:[/b] - [2012-07-26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
  201. DRV:[b]64bit:[/b] - [2012-07-26 03:25:02 | 000,202,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\BthLEEnum.sys -- (BthLEEnum)
  202. DRV:[b]64bit:[/b] - [2012-07-26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
  203. DRV:[b]64bit:[/b] - [2012-07-26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
  204. DRV:[b]64bit:[/b] - [2012-07-26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
  205. DRV:[b]64bit:[/b] - [2012-07-02 23:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
  206. DRV:[b]64bit:[/b] - [2012-06-19 15:40:51 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IntcDAud.sys -- (IntcDAud)
  207. DRV:[b]64bit:[/b] - [2012-06-19 01:20:52 | 000,055,384 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\bScsiMSa.sys -- (bScsiMSa)
  208. DRV:[b]64bit:[/b] - [2012-06-02 15:31:37 | 000,425,472 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\k57nd60a.sys -- (k57nd60a)
  209. DRV:[b]64bit:[/b] - [2010-07-09 04:51:38 | 000,017,408 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UBHelper.sys -- (UBHelper)
  210. DRV:[b]64bit:[/b] - [2010-04-20 03:35:14 | 000,018,432 | ---- | M] (NTI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\NTIDrvr.sys -- (NTIDrvr)
  211. DRV - [2010-11-01 06:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
  212.  
  213.  
  214. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  215.  
  216.  
  217. [color=#E56717]========== Internet Explorer ==========[/color]
  218.  
  219. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  220. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  221. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  222. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  223. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  224. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{F534ADC1-C685-4840-B27F-A61BB0CD6691}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
  225. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  226. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  227. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  228. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  229. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  230. IE - HKLM\..\SearchScopes,DefaultScope =
  231. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  232. IE - HKLM\..\SearchScopes\{F534ADC1-C685-4840-B27F-A61BB0CD6691}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
  233.  
  234.  
  235. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  236. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  237.  
  238. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  239. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  240.  
  241. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  242.  
  243. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  244.  
  245. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com
  246. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://acer13.msn.com
  247. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1001\..\SearchScopes,DefaultScope =
  248. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  249.  
  250. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  251. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  252. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1002\..\SearchScopes,DefaultScope =
  253. IE - HKU\S-1-5-21-1913748589-342031245-3440455416-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  254.  
  255. [color=#E56717]========== FireFox ==========[/color]
  256.  
  257. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
  258. FF - user.js - File not found
  259.  
  260. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll File not found
  261. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
  262. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
  263. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  264. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  265. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
  266. FF - HKLM\Software\MozillaPlugins\@nullsoft.com/winampDetector;version=1: G:\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
  267. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  268. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  269. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  270. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()
  271. FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  272.  
  273. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-11-30 14:11:13 | 000,000,000 | ---D | M]
  274. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  275. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  276. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  277. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  278.  
  279. [2013-09-26 19:02:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sebastian03\AppData\Roaming\mozilla\Extensions
  280. [2014-02-26 19:43:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\sebastian03\AppData\Roaming\mozilla\Firefox\Profiles\wj6iuneb.default-1391691663516\extensions
  281. [2014-02-26 19:43:38 | 000,957,290 | ---- | M] () (No name found) -- C:\Users\sebastian03\AppData\Roaming\mozilla\firefox\profiles\wj6iuneb.default-1391691663516\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  282. [2014-02-14 10:36:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  283. [2014-02-14 10:36:16 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  284.  
  285. [color=#E56717]========== Chrome ==========[/color]
  286.  
  287. CHR - default_search_provider: sweet-page (Enabled)
  288. CHR - default_search_provider: search_url = http://www.sweet-page.com/web/?type=ds&ts=1391690207&from=cor&uid=WDCXWD5000LPVT-22G33T0_WD-WX61AA2F0445F0445&q={searchTerms}
  289. CHR - default_search_provider: suggest_url = ,
  290. CHR - homepage: http://www.google.com
  291. CHR - plugin: Error reading preferences file
  292. CHR - Extension: Dokumenty Google = C:\Users\sebastian03\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  293. CHR - Extension: Dysk Google = C:\Users\sebastian03\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  294. CHR - Extension: YouTube = C:\Users\sebastian03\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  295. CHR - Extension: Szukaj w Google = C:\Users\sebastian03\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  296. CHR - Extension: Google Wallet = C:\Users\sebastian03\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  297. CHR - Extension: Gmail = C:\Users\sebastian03\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
  298.  
  299. O1 HOSTS File: ([2012-07-26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
  300. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  301. O2:[b]64bit:[/b] - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
  302. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  303. O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)
  304. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  305. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  306. O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  307. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  308. O4:[b]64bit:[/b] - HKLM..\Run: [BtPreLoad] "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe" File not found
  309. O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
  310. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  311. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  312. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  313. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  314. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
  315. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  316. O4 - HKLM..\Run: [LManager] File not found
  317. O4 - HKLM..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey File not found
  318. O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe File not found
  319. O4 - HKLM..\Run: [RadioController] C:\Program Files (x86)\RadioController\RfBtnHelper.exe (Dritek System Inc.)
  320. O4 - HKU\S-1-5-21-1913748589-342031245-3440455416-1002..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe (ALLPlayer Group Ltd.)
  321. O4 - HKU\S-1-5-21-1913748589-342031245-3440455416-1002..\Run: [DAEMON Tools Pro Agent] C:\Program Files (x86)\Daemon Tools Pro\DTAgent.exe (DT Soft Ltd)
  322. O4 - HKU\S-1-5-21-1913748589-342031245-3440455416-1002..\Run: [uTorrent] C:\Users\sebastian03\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
  323. O4 - Startup: C:\Users\sebastian03\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
  324. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
  325. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  326. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  327. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe" (Atheros Communications)
  328. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  329. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  330. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  331. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
  332. O7 - HKU\S-1-5-21-1913748589-342031245-3440455416-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  333. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
  334. O13[b]64bit:[/b] - gopher Prefix: missing
  335. O13 - gopher Prefix: missing
  336. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 194.204.152.34
  337. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{29C31968-A530-4459-8EDD-9CBDB888D2B7}: DhcpNameServer = 194.204.159.1 194.204.152.34
  338. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  339. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  340. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  341. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  342. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  343. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  344. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  345. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  346. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  347. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  348. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  349. O30 - LSA: Security Packages - (livessp) - File not found
  350. O32 - HKLM CDRom: AutoRun - 1
  351. O32 - AutoRun File - [2014-02-06 13:58:17 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  352. O32 - AutoRun File - [2008-04-01 13:46:19 | 000,843,776 | R--- | M] () - D:\Autorun.exe -- [ CDFS ]
  353. O32 - AutoRun File - [2007-10-11 10:16:44 | 000,000,047 | RH-- | M] () - D:\Autorun.inf -- [ CDFS ]
  354. O33 - MountPoints2\{6fce954b-28de-11e3-be77-a4173179e33c}\Shell - "" = AutoRun
  355. O33 - MountPoints2\{6fce954b-28de-11e3-be77-a4173179e33c}\Shell\AutoRun\command - "" = "E:\setup_the_witcher_2_ee_3.0.1.17.exe"
  356. O33 - MountPoints2\{d27cc3e9-2b53-11e3-be80-a4173179e33c}\Shell - "" = AutoRun
  357. O33 - MountPoints2\{d27cc3e9-2b53-11e3-be80-a4173179e33c}\Shell\AutoRun\command - "" = "F:\AutoRun.exe"
  358. O34 - HKLM BootExecute: (autocheck autochk *)
  359. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  360. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  361. O35 - HKLM\..comfile [open] -- "%1" %*
  362. O35 - HKLM\..exefile [open] -- "%1" %*
  363. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  364. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  365. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  366. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  367. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  368. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  369.  
  370. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  371.  
  372. [2014-03-08 13:28:12 | 000,000,000 | ---D | C] -- C:\Users\sebastian03\Documents\AlienShooter2 Conscription Saves
  373. [2014-03-05 19:59:59 | 000,000,000 | ---D | C] -- C:\Users\sebastian03\Desktop\pdf
  374. [2014-03-05 19:59:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
  375. [2014-03-05 19:59:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
  376. [2014-03-05 19:58:45 | 000,000,000 | ---D | C] -- C:\adobe reader
  377. [2014-03-05 19:49:29 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  378. [2014-03-02 15:57:11 | 000,000,000 | ---D | C] -- C:\Users\sebastian03\Documents\AlienShooter2 Reloaded Saves
  379. [2014-02-14 10:36:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  380. [2014-02-13 22:27:53 | 000,000,000 | ---D | C] -- C:\Users\sebastian03\Desktop\save witcher 2
  381. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  382.  
  383. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  384.  
  385. [2014-03-14 13:01:48 | 000,001,080 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  386. [2014-03-14 12:58:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  387. [2014-03-14 12:56:36 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  388. [2014-03-14 12:56:34 | 3281,010,688 | -HS- | M] () -- C:\hiberfil.sys
  389. [2014-03-13 21:52:00 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  390. [2014-03-13 21:45:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  391. [2014-03-12 16:35:09 | 000,000,940 | ---- | M] () -- C:\Users\sebastian03\Desktop\left4dead2 — skrót.lnk
  392. [2014-03-12 13:42:33 | 007,089,686 | ---- | M] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014 4.odp
  393. [2014-03-12 13:42:00 | 007,089,686 | ---- | M] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014 3.odp
  394. [2014-03-12 13:15:20 | 540,628,607 | ---- | M] () -- C:\Windows\MEMORY.DMP
  395. [2014-03-12 12:33:07 | 007,004,190 | ---- | M] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014 2.odp
  396. [2014-03-11 22:07:14 | 007,004,220 | ---- | M] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014.odp
  397. [2014-03-11 19:21:01 | 000,055,578 | ---- | M] () -- C:\Users\sebastian03\Desktop\slowinski zdj.jpg
  398. [2014-03-10 19:21:01 | 001,793,398 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  399. [2014-03-10 19:21:01 | 000,794,946 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  400. [2014-03-10 19:21:01 | 000,710,244 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  401. [2014-03-10 19:21:01 | 000,159,530 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  402. [2014-03-10 19:21:01 | 000,132,614 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  403. [2014-03-10 14:24:31 | 000,031,345 | ---- | M] () -- C:\Users\sebastian03\Desktop\chema 4.jpg
  404. [2014-03-09 18:45:58 | 000,001,128 | ---- | M] () -- C:\Users\sebastian03\Desktop\Heroes3 — skrót.lnk
  405. [2014-03-09 18:25:07 | 000,124,038 | ---- | M] () -- C:\Users\sebastian03\Desktop\chema2.jpg
  406. [2014-03-09 13:46:48 | 000,114,741 | ---- | M] () -- C:\Users\sebastian03\Desktop\chema1.jpg
  407. [2014-03-09 13:37:12 | 000,039,403 | ---- | M] () -- C:\Users\sebastian03\Desktop\chema3.jpg
  408. [2014-03-08 09:16:13 | 000,000,206 | ---- | M] () -- C:\Users\sebastian03\Desktop\Alien Shooter 2 Conscription.url
  409. [2014-03-05 19:59:23 | 000,002,023 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
  410. [2014-03-02 21:20:37 | 000,000,205 | ---- | M] () -- C:\Users\sebastian03\Desktop\Alien Shooter.url
  411. [2014-03-02 17:23:03 | 000,000,206 | ---- | M] () -- C:\Users\sebastian03\Desktop\Interstellar Marines.url
  412. [2014-03-02 15:18:00 | 000,000,205 | ---- | M] () -- C:\Users\sebastian03\Desktop\Alien Shooter 2 Reloaded.url
  413. [2014-03-02 15:01:11 | 000,000,206 | ---- | M] () -- C:\Users\sebastian03\Desktop\PixelJunk Shooter.url
  414. [2014-03-02 14:50:58 | 000,000,905 | ---- | M] () -- C:\Users\sebastian03\Desktop\Steam — skrót.lnk
  415. [2014-02-22 13:09:33 | 000,017,873 | ---- | M] () -- C:\Users\sebastian03\Desktop\FIIIIIIIIIIIIIIZYYYYYYYYYYYKAAAAAAAAAAAAAAAA.odt
  416. [2014-02-18 11:48:56 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
  417. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  418.  
  419. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  420.  
  421. [2014-03-12 16:35:09 | 000,000,940 | ---- | C] () -- C:\Users\sebastian03\Desktop\left4dead2 — skrót.lnk
  422. [2014-03-12 13:42:29 | 007,089,686 | ---- | C] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014 4.odp
  423. [2014-03-12 13:41:56 | 007,089,686 | ---- | C] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014 3.odp
  424. [2014-03-12 12:33:02 | 007,004,190 | ---- | C] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014 2.odp
  425. [2014-03-11 19:21:00 | 000,055,578 | ---- | C] () -- C:\Users\sebastian03\Desktop\slowinski zdj.jpg
  426. [2014-03-11 18:56:53 | 007,004,220 | ---- | C] () -- C:\Users\sebastian03\Desktop\2_Sebastian Dudek_2014.odp
  427. [2014-03-11 18:13:06 | 540,628,607 | ---- | C] () -- C:\Windows\MEMORY.DMP
  428. [2014-03-10 14:24:31 | 000,031,345 | ---- | C] () -- C:\Users\sebastian03\Desktop\chema 4.jpg
  429. [2014-03-09 18:45:58 | 000,001,128 | ---- | C] () -- C:\Users\sebastian03\Desktop\Heroes3 — skrót.lnk
  430. [2014-03-09 13:37:12 | 000,039,403 | ---- | C] () -- C:\Users\sebastian03\Desktop\chema3.jpg
  431. [2014-03-09 13:36:27 | 000,114,741 | ---- | C] () -- C:\Users\sebastian03\Desktop\chema1.jpg
  432. [2014-03-09 13:36:15 | 000,124,038 | ---- | C] () -- C:\Users\sebastian03\Desktop\chema2.jpg
  433. [2014-03-08 09:16:13 | 000,000,206 | ---- | C] () -- C:\Users\sebastian03\Desktop\Alien Shooter 2 Conscription.url
  434. [2014-03-05 20:38:55 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  435. [2014-03-05 19:59:23 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
  436. [2014-03-05 19:59:23 | 000,002,023 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
  437. [2014-03-02 21:20:37 | 000,000,205 | ---- | C] () -- C:\Users\sebastian03\Desktop\Alien Shooter.url
  438. [2014-03-02 17:23:03 | 000,000,206 | ---- | C] () -- C:\Users\sebastian03\Desktop\Interstellar Marines.url
  439. [2014-03-02 15:18:00 | 000,000,205 | ---- | C] () -- C:\Users\sebastian03\Desktop\Alien Shooter 2 Reloaded.url
  440. [2014-03-02 15:01:11 | 000,000,206 | ---- | C] () -- C:\Users\sebastian03\Desktop\PixelJunk Shooter.url
  441. [2014-03-02 14:50:58 | 000,000,905 | ---- | C] () -- C:\Users\sebastian03\Desktop\Steam — skrót.lnk
  442. [2014-02-18 11:48:56 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
  443. [2013-11-13 21:01:05 | 000,103,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  444. [2013-11-13 21:01:03 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  445. [2013-11-13 21:01:00 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini
  446. [2013-10-12 15:49:44 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
  447. [2013-10-04 20:07:42 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  448. [2013-10-04 20:07:42 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll
  449. [2013-09-27 23:36:24 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
  450. [2012-10-29 06:33:16 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  451. [2012-10-29 06:33:01 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
  452. [2012-10-29 06:33:01 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
  453. [2012-07-26 09:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
  454. [2012-07-26 09:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
  455. [2012-07-26 08:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
  456. [2012-07-26 02:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
  457. [2012-07-25 21:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
  458. [2012-07-25 21:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
  459. [2012-07-25 21:22:56 | 000,267,284 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin
  460. [2012-07-25 21:22:54 | 000,963,376 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin
  461. [2012-06-02 15:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
  462. [2012-04-20 22:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
  463.  
  464. [color=#E56717]========== ZeroAccess Check ==========[/color]
  465.  
  466. [2012-12-12 21:21:58 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  467.  
  468. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  469.  
  470. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  471.  
  472. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  473.  
  474. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  475.  
  476. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  477. "" = C:\Windows\SysNative\shell32.dll -- [2013-08-02 07:28:20 | 019,758,080 | ---- | M] (Microsoft Corporation)
  478. "ThreadingModel" = Apartment
  479.  
  480. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  481. "" = %SystemRoot%\system32\shell32.dll -- [2013-08-02 06:08:10 | 017,561,088 | ---- | M] (Microsoft Corporation)
  482. "ThreadingModel" = Apartment
  483.  
  484. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  485. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
  486. "ThreadingModel" = Free
  487.  
  488. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  489. "" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
  490. "ThreadingModel" = Free
  491.  
  492. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  493. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
  494. "ThreadingModel" = Both
  495.  
  496. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  497.  
  498. [color=#E56717]========== LOP Check ==========[/color]
  499.  
  500. [2013-11-30 14:32:53 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\AVAST Software
  501. [2014-01-20 01:21:09 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Battle.net
  502. [2013-12-29 12:39:37 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Bonanza
  503. [2013-09-29 09:18:30 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\DAEMON Tools Pro
  504. [2013-09-27 23:16:36 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Fatshark
  505. [2013-09-26 19:47:35 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Islands
  506. [2013-09-26 18:48:23 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\lm
  507. [2013-11-05 22:54:27 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\LolClient
  508. [2014-02-26 20:14:29 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\NapiProjekt
  509. [2013-11-20 22:25:23 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\OpenOffice.org
  510. [2013-12-08 12:53:23 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Origin
  511. [2013-10-10 23:17:51 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Program Files
  512. [2013-09-27 09:57:59 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Riot Games
  513. [2013-12-30 11:47:05 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Tibia
  514. [2014-02-10 13:06:02 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\Trine2
  515. [2014-03-12 20:53:35 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\uTorrent
  516. [2013-09-26 19:48:43 | 000,000,000 | ---D | M] -- C:\Users\sebastian03\AppData\Roaming\WildTangent
  517.  
  518. [color=#E56717]========== Purity Check ==========[/color]
  519.  
  520.  
  521.  
  522. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!