API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jan 26th, 2014
55
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 48.83 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-01-26 14:48:26 - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Fedycki\Downloads
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 2,00 Gb Total Physical Memory | 0,55 Gb Available Physical Memory | 27,44% Memory free
  8. 4,62 Gb Paging File | 2,25 Gb Available in Paging File | 48,85% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 146,48 Gb Total Space | 95,84 Gb Free Space | 65,42% Space Free | Partition Type: NTFS
  13. Drive D: | 146,48 Gb Total Space | 79,66 Gb Free Space | 54,38% Space Free | Partition Type: NTFS
  14. Drive E: | 172,79 Gb Total Space | 140,17 Gb Free Space | 81,12% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: FEDYCKI-KOMPUTE | User Name: Fedycki | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - File not found --
  23. PRC - [2014-01-26 13:31:27 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Fedycki\Downloads\OTL.exe
  24. PRC - [2013-12-27 12:08:12 | 001,856,976 | ---- | M] (Piotr Pawlowski) -- D:\foobar2000\foobar2000.exe
  25. PRC - [2013-12-08 12:58:52 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  26. PRC - [2013-12-04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  27. PRC - [2013-11-22 10:25:38 | 000,389,120 | ---- | M] (AMD) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
  28. PRC - [2013-09-04 11:16:46 | 000,844,656 | ---- | M] (Samsung) -- E:\Kies\External\FirmwareUpdate\KiesPDLR.exe
  29. PRC - [2013-09-04 11:16:42 | 000,311,152 | ---- | M] (Samsung Electronics Co., Ltd.) -- E:\Kies\KiesTrayAgent.exe
  30. PRC - [2013-09-04 11:16:40 | 001,564,528 | ---- | M] (Samsung) -- E:\Kies\Kies.exe
  31. PRC - [2013-09-03 14:02:02 | 001,763,840 | ---- | M] (Last.fm) -- D:\Last.fm\Last.fm Scrobbler.exe
  32. PRC - [2013-07-15 11:53:42 | 001,269,248 | ---- | M] (eRmail Company, s. r. o.) -- C:\Users\Fedycki\AppData\Roaming\eRclient\eRclient.exe
  33. PRC - [2013-04-04 04:29:44 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Java\jre7\bin\java.exe
  34. PRC - [2013-03-12 06:32:58 | 000,506,744 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
  35. PRC - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  36. PRC - [2006-01-30 10:00:00 | 000,098,304 | R--- | M] (Hewlett-Packard) -- C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe
  37.  
  38.  
  39. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  40.  
  41. MOD - [2013-12-27 12:08:16 | 000,156,112 | ---- | M] () -- D:\foobar2000\shared.dll
  42. MOD - [2013-12-27 12:08:14 | 001,390,056 | ---- | M] () -- D:\foobar2000\components\foo_input_std.dll
  43. MOD - [2013-12-27 12:08:14 | 000,335,824 | ---- | M] () -- D:\foobar2000\avutil-fb2k-52.dll
  44. MOD - [2013-12-27 12:08:12 | 000,945,128 | ---- | M] () -- D:\foobar2000\components\foo_ui_std.dll
  45. MOD - [2013-12-27 11:58:06 | 000,199,168 | ---- | M] () -- D:\foobar2000\components\foo_dsp_eq.dll
  46. MOD - [2013-12-27 11:57:46 | 000,199,680 | ---- | M] () -- D:\foobar2000\components\foo_dsp_std.dll
  47. MOD - [2013-12-27 11:57:38 | 000,350,720 | ---- | M] () -- D:\foobar2000\components\foo_albumlist.dll
  48. MOD - [2013-12-27 11:57:10 | 000,304,128 | ---- | M] () -- D:\foobar2000\components\foo_cdda.dll
  49. MOD - [2013-12-27 11:56:52 | 000,501,248 | ---- | M] () -- D:\foobar2000\components\foo_converter.dll
  50. MOD - [2013-12-27 11:55:34 | 000,287,744 | ---- | M] () -- D:\foobar2000\components\foo_rgscan.dll
  51. MOD - [2013-12-27 11:54:24 | 000,173,056 | ---- | M] () -- D:\foobar2000\components\foo_unpack.dll
  52. MOD - [2013-12-27 11:53:04 | 000,283,136 | ---- | M] () -- D:\foobar2000\components\foo_fileops.dll
  53. MOD - [2013-12-27 11:52:32 | 000,299,520 | ---- | M] () -- D:\foobar2000\components\foo_freedb2.dll
  54. MOD - [2013-12-04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
  55. MOD - [2013-12-04 03:48:03 | 013,586,896 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
  56. MOD - [2013-12-04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
  57. MOD - [2013-12-04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
  58. MOD - [2013-12-04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
  59. MOD - [2013-12-04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
  60. MOD - [2013-11-22 10:25:10 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraPlk.dll
  61. MOD - [2013-11-02 20:58:00 | 000,723,968 | ---- | M] () -- D:\foobar2000\avcodec-fb2k-55.dll
  62. MOD - [2013-09-03 14:01:36 | 000,126,976 | ---- | M] () -- D:\Last.fm\listener.dll
  63. MOD - [2013-09-03 14:01:32 | 000,736,768 | ---- | M] () -- D:\Last.fm\unicorn.dll
  64. MOD - [2013-09-03 14:01:14 | 000,032,768 | ---- | M] () -- D:\Last.fm\logger.dll
  65. MOD - [2013-09-03 10:54:56 | 000,351,232 | ---- | M] () -- D:\Last.fm\lastfm.dll
  66. MOD - [2013-07-02 18:35:55 | 018,524,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\97e6b67983d07a066b68b3ae8be2f53d\PresentationFramework.ni.dll
  67. MOD - [2013-07-02 18:35:31 | 000,220,160 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\ad2f6440da38a0dbae2df194782b35d1\System.ServiceProcess.ni.dll
  68. MOD - [2013-07-02 18:35:16 | 006,995,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b9f7adbc90a2bcbe8eb9e6e8d2bb975b\System.Core.ni.dll
  69. MOD - [2013-07-02 18:35:11 | 001,870,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cc4d9093563dadee370788bbc3ecf4fb\System.Xaml.ni.dll
  70. MOD - [2013-07-02 18:35:10 | 010,914,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b52bc540630c3aa5de542c382af35c20\PresentationCore.ni.dll
  71. MOD - [2013-07-02 18:35:07 | 007,559,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9ba07396ae369d010c5c3927a82ef426\System.Xml.ni.dll
  72. MOD - [2013-07-02 18:35:00 | 000,958,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\28586400bcaf94c13a9fd0dff4a1e090\System.Configuration.ni.dll
  73. MOD - [2013-07-02 18:34:59 | 003,905,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\cd235caf797fb017f140016be88f33b7\WindowsBase.ni.dll
  74. MOD - [2013-07-02 18:34:59 | 000,786,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\4cfa42c8b69a64e192f3255ec900457d\System.Runtime.Remoting.ni.dll
  75. MOD - [2013-07-02 18:34:55 | 009,925,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\e40da7a49f8c3f0108e7c835b342f382\System.ni.dll
  76. MOD - [2013-07-02 18:34:46 | 016,501,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll
  77. MOD - [2013-05-04 12:57:08 | 000,095,712 | ---- | M] () -- D:\foobar2000\zlib1.dll
  78. MOD - [2013-01-18 12:39:50 | 000,302,592 | ---- | M] () -- D:\Last.fm\phonon.dll
  79. MOD - [2010-03-24 21:17:36 | 008,794,464 | ---- | M] () -- C:\PROGRA~2\MICROS~2\Office14\1033\GrooveIntlResource.dll
  80. MOD - [2010-01-30 02:41:12 | 004,254,560 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
  81.  
  82.  
  83. [color=#E56717]========== Services (SafeList) ==========[/color]
  84.  
  85. SRV:[b]64bit:[/b] - [2013-11-22 16:26:12 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  86. SRV:[b]64bit:[/b] - [2011-04-27 16:21:18 | 000,288,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
  87. SRV:[b]64bit:[/b] - [2011-04-27 16:21:18 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
  88. SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  89. SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  90. SRV - [2013-12-11 20:40:36 | 000,569,768 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  91. SRV - [2013-12-08 12:58:52 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  92. SRV - [2013-09-05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  93. SRV - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  94. SRV - [2012-11-09 20:35:57 | 000,666,720 | ---- | M] (Wellbia.com Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\xsherlock.xem -- (xsherlock)
  95. SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  96. SRV - [2012-03-06 16:19:00 | 003,953,632 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
  97. SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  98. SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  99. SRV - [2008-11-11 08:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  100.  
  101.  
  102. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  103.  
  104. DRV:[b]64bit:[/b] - [2013-11-22 17:23:20 | 013,201,920 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  105. DRV:[b]64bit:[/b] - [2013-11-22 15:55:48 | 000,624,128 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  106. DRV:[b]64bit:[/b] - [2013-09-24 15:53:50 | 000,094,208 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  107. DRV:[b]64bit:[/b] - [2013-06-21 01:07:50 | 000,188,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
  108. DRV:[b]64bit:[/b] - [2013-06-21 01:07:50 | 000,169,288 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
  109. DRV:[b]64bit:[/b] - [2013-06-21 01:07:50 | 000,021,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
  110. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,188,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
  111. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,169,288 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
  112. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,158,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
  113. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,038,080 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
  114. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,021,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
  115. DRV:[b]64bit:[/b] - [2013-06-01 12:56:58 | 000,031,920 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apowersoft_AudioDevice.sys -- (Apowersoft_AudioDevice)
  116. DRV:[b]64bit:[/b] - [2012-12-19 08:42:10 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\t_mouse.sys -- (t_mouse.sys)
  117. DRV:[b]64bit:[/b] - [2012-05-16 16:45:34 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  118. DRV:[b]64bit:[/b] - [2011-08-17 09:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
  119. DRV:[b]64bit:[/b] - [2011-08-17 09:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
  120. DRV:[b]64bit:[/b] - [2011-08-17 09:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  121. DRV:[b]64bit:[/b] - [2011-08-17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  122. DRV:[b]64bit:[/b] - [2011-04-27 14:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  123. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  124. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  125. DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  126. DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  127. DRV:[b]64bit:[/b] - [2010-11-20 11:49:51 | 000,146,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rmcast.sys -- (RMCAST)
  128. DRV:[b]64bit:[/b] - [2010-06-14 08:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
  129. DRV:[b]64bit:[/b] - [2010-01-28 15:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
  130. DRV:[b]64bit:[/b] - [2010-01-21 02:03:10 | 000,027,648 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64diag.sys -- (UsbDiag)
  131. DRV:[b]64bit:[/b] - [2010-01-21 02:03:08 | 000,033,280 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64modem.sys -- (USBModem)
  132. DRV:[b]64bit:[/b] - [2010-01-21 02:03:06 | 000,017,920 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64bus.sys -- (usbbus)
  133. DRV:[b]64bit:[/b] - [2009-09-29 08:15:02 | 000,016,384 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lgbtpt64.sys -- (LgBttPort)
  134. DRV:[b]64bit:[/b] - [2009-09-29 08:15:00 | 000,017,408 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lgvmdm64.sys -- (LGVMODEM)
  135. DRV:[b]64bit:[/b] - [2009-09-29 08:15:00 | 000,014,848 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lgbtbs64.sys -- (lgbusenum)
  136. DRV:[b]64bit:[/b] - [2009-07-16 04:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
  137. DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  138. DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  139. DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  140. DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  141. DRV:[b]64bit:[/b] - [2009-07-14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (1394hub)
  142. DRV:[b]64bit:[/b] - [2009-07-14 01:09:49 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023.sys -- (USB_RNDIS)
  143. DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  144. DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  145. DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  146. DRV:[b]64bit:[/b] - [2009-06-10 21:34:18 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  147. DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  148. DRV:[b]64bit:[/b] - [2008-08-28 10:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  149. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,145,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdm.sys -- (s217mdm)
  150. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,138,792 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217unic.sys -- (s217unic)
  151. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,124,968 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217obex.sys -- (s217obex)
  152. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,033,832 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217nd5.sys -- (s217nd5)
  153. DRV:[b]64bit:[/b] - [2007-11-02 12:22:28 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217bus.sys -- (s217bus)
  154. DRV:[b]64bit:[/b] - [2007-11-02 12:22:28 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdfl.sys -- (s217mdfl)
  155. DRV:[b]64bit:[/b] - [2006-12-22 20:05:52 | 000,559,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrxusb.sys -- (athrusb)
  156. DRV - [2013-12-07 16:03:26 | 000,011,973 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (SecDrv)
  157. DRV - [2010-11-01 05:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- D:\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
  158. DRV - [2010-06-14 08:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
  159. DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  160.  
  161.  
  162. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  163.  
  164.  
  165. [color=#E56717]========== Internet Explorer ==========[/color]
  166.  
  167. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  168. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  169. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  170. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  171. IE - HKLM\..\SearchScopes,DefaultScope =
  172. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  173. IE - HKLM\..\SearchScopes\{FC1F8B48-3D71-4B13-8957-64337801A35F}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  174.  
  175. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  176. IE - HKCU\..\SearchScopes,DefaultScope =
  177. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=77e33cbf-705f-11e1-959c-0023481c491b&q={searchTerms}
  178. IE - HKCU\..\SearchScopes\{FC1F8B48-3D71-4B13-8957-64337801A35F}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  179. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  180.  
  181.  
  182. [color=#E56717]========== FireFox ==========[/color]
  183.  
  184. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll File not found
  185. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
  186. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
  187. FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
  188. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  189. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  190. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  191. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  192. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  193. FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll File not found
  194. FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll File not found
  195. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  196. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  197. FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
  198. FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
  199. FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
  200. FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
  201. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  202. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  203. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  204. FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\Users\Fedycki\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)
  205. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Fedycki\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  206. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
  207.  
  208. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-31 18:56:30 | 000,000,000 | ---D | M]
  209.  
  210. [2012-05-17 17:24:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fedycki\AppData\Roaming\mozilla\Firefox\extensions
  211. [2012-05-17 17:24:44 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Fedycki\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
  212. [2012-11-03 07:34:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fedycki\AppData\Roaming\mozilla\Firefox\Profiles\0\extensions
  213. [2012-11-03 07:34:32 | 000,213,316 | ---- | M] () (No name found) -- C:\Users\Fedycki\AppData\Roaming\mozilla\firefox\profiles\0\extensions\torntv@torntv.com.xpi
  214.  
  215. [color=#E56717]========== Chrome ==========[/color]
  216.  
  217. CHR - default_search_provider: Google (Enabled)
  218. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  219. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  220. CHR - homepage: http://www.google.com
  221. CHR - Extension: Adblock Plus = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\
  222. CHR - Extension: Search by Image (by Google) = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm\1.5.1_0\
  223. CHR - Extension: Tampermonkey = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.6.3737_0\
  224. CHR - Extension: Last.fm Scrobbler = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm\1.30_0\
  225. CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_1\
  226. CHR - Extension: Google Wallet = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
  227.  
  228. O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  229. O2:[b]64bit:[/b] - BHO: (AlluSaavere) - {A73ED61B-C47E-E79E-8EBE-F9D1ADC7C366} - C:\ProgramData\AlluSaavere\HlQV.x64.dll ()
  230. O2 - BHO: (AlluSaavere) - {A73ED61B-C47E-E79E-8EBE-F9D1ADC7C366} - C:\ProgramData\AlluSaavere\HlQV.dll ()
  231. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  232. O4:[b]64bit:[/b] - HKLM..\Run: [MouseDriver] C:\Windows\SysNative\TiltWheelMouse.exe (Pixart Imaging Inc)
  233. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  234. O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
  235. O4 - HKLM..\Run: [KiesTrayAgent] E:\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
  236. O4 - HKLM..\Run: [NPSStartup] File not found
  237. O4 - HKLM..\Run: [OrderReminder] C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
  238. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
  239. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  240. O4 - HKCU..\Run: [] E:\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
  241. O4 - HKCU..\Run: [AdobeBridge] File not found
  242. O4 - HKCU..\Run: [DAEMON Tools Lite] D:\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
  243. O4 - HKCU..\Run: [eRclient] C:\Users\Fedycki\AppData\Roaming\eRclient\eRclient.exe (eRmail Company, s. r. o.)
  244. O4 - HKCU..\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (AMD)
  245. O4 - HKCU..\Run: [KiesAirMessage] E:\Kies\KiesAirMessage.exe -startup File not found
  246. O4 - HKCU..\Run: [KiesPreload] E:\Kies\Kies.exe (Samsung)
  247. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  248. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  249. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
  250. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 0
  251. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: 25458 = c:\progra~3\msroxqa.exe ()
  252. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  253. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  254. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  255. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
  256. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 0
  257. O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
  258. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
  259. O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
  260. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
  261. O13[b]64bit:[/b] - gopher Prefix: missing
  262. O13 - gopher Prefix: missing
  263. O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  264. O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  265. O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
  266. O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
  267. O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
  268. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.21.2)
  269. O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.66.2.cab (Battlefield Play4Free Updater)
  270. O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
  271. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.21.2)
  272. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  273. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0203BED9-3C2F-47DB-A0D9-ACB35EAAFDFC}: DhcpNameServer = 192.168.1.1
  274. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{663E2E42-83D0-46FF-B5DC-CE4A4DFFC17C}: NameServer = 192.168.1.1
  275. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9A884531-51D6-4CBC-A778-A3A55695C103}: DhcpNameServer = 192.168.1.1
  276. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  277. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  278. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  279. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  280. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  281. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  282. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  283. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  284. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  285. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  286. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  287. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  288. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  289. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  290. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
  291. O32 - HKLM CDRom: AutoRun - 1
  292. O33 - MountPoints2\{4164822c-4398-11e2-a02f-0023481c491b}\Shell - "" = AutoRun
  293. O33 - MountPoints2\{4164822c-4398-11e2-a02f-0023481c491b}\Shell\AutoRun\command - "" = G:\NokiaPCIA_Autorun.exe
  294. O33 - MountPoints2\{b4239810-694a-11e2-a3c1-0023481c491b}\Shell - "" = AutoRun
  295. O33 - MountPoints2\{b4239810-694a-11e2-a3c1-0023481c491b}\Shell\AutoRun\command - "" = G:\LGAutoRun.exe
  296. O33 - MountPoints2\{b4239817-694a-11e2-a3c1-0023481c491b}\Shell - "" = AutoRun
  297. O33 - MountPoints2\{b4239817-694a-11e2-a3c1-0023481c491b}\Shell\AutoRun\command - "" = G:\LGAutoRun.exe
  298. O34 - HKLM BootExecute: (autocheck autochk *)
  299. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  300. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  301. O35 - HKLM\..comfile [open] -- "%1" %*
  302. O35 - HKLM\..exefile [open] -- "%1" %*
  303. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  304. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  305. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  306. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  307. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  308. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  309. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  310.  
  311. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  312.  
  313. [2014-01-26 13:55:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  314. [2014-01-24 19:52:45 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\WpfApplication1
  315. [2014-01-23 16:12:04 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\Blizzard Entertainment
  316. [2014-01-23 16:11:58 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\Battle.net
  317. [2014-01-23 16:11:58 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\Battle.net
  318. [2014-01-17 18:59:41 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\VOPackage
  319. [2014-01-17 18:59:13 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\.android
  320. [2014-01-17 18:59:10 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\cache
  321. [2014-01-16 17:38:27 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\TheBannerSaga
  322. [2014-01-15 18:41:47 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\Kalypso Media
  323. [2014-01-13 17:57:19 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\Documents\Almost Human
  324. [2014-01-13 17:20:30 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\cminstaller
  325. [2014-01-13 17:11:45 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\Desktop\Android
  326. [2014-01-11 20:31:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Last.fm
  327. [2014-01-11 20:29:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm
  328. [2014-01-11 20:29:32 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\Last.fm
  329. [2014-01-10 21:11:04 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\foobar2000
  330. [2013-12-30 12:17:19 | 000,000,000 | ---D | C] -- C:\ProgramData\gdfadblblfiidggkennmmkegojdcmgja
  331. [2013-12-30 12:17:19 | 000,000,000 | ---D | C] -- C:\ProgramData\AlluSaavere
  332. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  333.  
  334. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  335.  
  336. [2014-01-26 14:50:01 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  337. [2014-01-26 14:09:30 | 000,017,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  338. [2014-01-26 14:09:30 | 000,017,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  339. [2014-01-26 14:07:31 | 000,069,945 | ---- | M] () -- C:\Users\Fedycki\AppData\Roaming\0005CDC9.exe
  340. [2014-01-26 14:01:39 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  341. [2014-01-26 14:01:37 | 000,000,452 | -H-- | M] () -- C:\Windows\tasks\SK.Enhancer-S-161304646.job
  342. [2014-01-26 14:01:32 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
  343. [2014-01-26 14:01:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  344. [2014-01-26 14:01:19 | 1609,916,416 | -HS- | M] () -- C:\hiberfil.sys
  345. [2014-01-26 13:11:32 | 000,069,945 | ---- | M] () -- C:\Users\Fedycki\AppData\Roaming\0005666F.exe
  346. [2014-01-26 12:24:49 | 000,069,945 | ---- | M] () -- C:\Users\Fedycki\AppData\Roaming\0057A42C.exe
  347. [2014-01-26 11:24:47 | 000,069,945 | ---- | M] () -- C:\Users\Fedycki\AppData\Roaming\0020ACF1.exe
  348. [2014-01-24 17:35:54 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  349. [2014-01-24 17:35:54 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  350. [2014-01-11 20:29:37 | 000,000,550 | ---- | M] () -- C:\Users\Public\Desktop\Last.fm Scrobbler.lnk
  351. [2014-01-11 20:24:58 | 000,000,568 | ---- | M] () -- C:\Users\Public\Desktop\foobar2000.lnk
  352. [2014-01-06 13:43:24 | 000,000,868 | ---- | M] () -- C:\Users\Fedycki\Desktop\GaduGadu.lnk
  353. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  354.  
  355. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  356.  
  357. [2014-01-26 14:07:31 | 000,069,945 | ---- | C] () -- C:\Users\Fedycki\AppData\Roaming\0005CDC9.exe
  358. [2014-01-26 13:11:32 | 000,069,945 | ---- | C] () -- C:\Users\Fedycki\AppData\Roaming\0005666F.exe
  359. [2014-01-26 12:24:49 | 000,069,945 | ---- | C] () -- C:\Users\Fedycki\AppData\Roaming\0057A42C.exe
  360. [2014-01-26 11:24:46 | 000,069,945 | ---- | C] () -- C:\Users\Fedycki\AppData\Roaming\0020ACF1.exe
  361. [2014-01-26 10:49:30 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
  362. [2014-01-11 20:29:37 | 000,000,550 | ---- | C] () -- C:\Users\Public\Desktop\Last.fm Scrobbler.lnk
  363. [2014-01-10 21:11:02 | 000,000,638 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
  364. [2014-01-10 21:11:02 | 000,000,568 | ---- | C] () -- C:\Users\Public\Desktop\foobar2000.lnk
  365. [2014-01-06 13:43:31 | 000,000,868 | ---- | C] () -- C:\Users\Fedycki\Desktop\GaduGadu.lnk
  366. [2013-12-08 12:49:11 | 002,484,592 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_p4f.exe
  367. [2013-11-22 17:09:34 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
  368. [2013-11-22 17:09:34 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
  369. [2013-11-22 11:15:22 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  370. [2013-04-23 19:52:57 | 000,282,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  371. [2013-04-23 19:52:53 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  372. [2013-04-18 18:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
  373. [2013-04-18 18:06:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
  374. [2013-04-18 18:06:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
  375. [2013-04-18 18:06:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
  376. [2013-04-18 18:06:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
  377. [2013-04-10 14:35:43 | 000,000,853 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\recently-used.xbel
  378. [2013-02-25 19:22:17 | 000,003,584 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  379. [2012-08-04 13:10:32 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
  380. [2012-07-29 10:20:09 | 000,007,610 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\Resmon.ResmonCfg
  381. [2012-06-21 09:37:14 | 003,166,792 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
  382. [2012-06-17 08:28:51 | 000,000,095 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\fusioncache.dat
  383. [2012-06-09 13:41:39 | 000,087,719 | ---- | C] () -- C:\Windows\SysWow64\wbers.dat.dmp
  384. [2012-04-14 15:44:03 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  385. [2012-04-14 15:43:36 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  386. [2012-04-14 15:40:54 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  387. [2012-04-08 19:42:15 | 000,075,045 | ---- | C] () -- C:\Windows\SysWow64\8fbbb479.exe
  388. [2012-03-09 20:51:12 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe
  389. [2011-10-30 19:07:04 | 000,069,945 | -HS- | C] () -- C:\ProgramData\msroxqa.exe
  390. [2011-10-30 19:07:04 | 000,069,945 | -HS- | C] () -- C:\ProgramData\msankaydb.exe
  391.  
  392. [color=#E56717]========== ZeroAccess Check ==========[/color]
  393.  
  394. [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  395.  
  396. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  397.  
  398. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  399.  
  400. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  401.  
  402. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  403.  
  404. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  405. "" = C:\Windows\SysNative\shell32.dll -- [2010-11-20 14:27:25 | 014,174,208 | ---- | M] (Microsoft Corporation)
  406. "ThreadingModel" = Apartment
  407.  
  408. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  409. "" = %SystemRoot%\system32\shell32.dll -- [2010-11-20 13:21:19 | 012,872,192 | ---- | M] (Microsoft Corporation)
  410. "ThreadingModel" = Apartment
  411.  
  412. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  413. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  414. "ThreadingModel" = Free
  415.  
  416. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  417. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  418. "ThreadingModel" = Free
  419.  
  420. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  421. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  422. "ThreadingModel" = Both
  423.  
  424. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  425.  
  426. [color=#E56717]========== LOP Check ==========[/color]
  427.  
  428. [2013-08-19 11:46:09 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\3909
  429. [2013-07-06 19:12:31 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Apowersoft
  430. [2013-04-01 21:15:09 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Arrowhead
  431. [2014-01-23 16:22:28 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Battle.net
  432. [2012-10-15 20:05:59 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\BESTplayer
  433. [2013-03-31 15:10:47 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Bioshock
  434. [2013-04-28 12:31:20 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Bitsoft
  435. [2013-04-28 12:31:20 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\cidialog32
  436. [2013-07-27 17:20:12 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Citadels
  437. [2012-07-03 10:14:35 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\DAEMON Tools Lite
  438. [2013-10-31 18:19:36 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\DawngateData
  439. [2012-07-12 14:01:01 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Downloaded Installations
  440. [2012-10-20 11:03:46 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Dwarfs
  441. [2012-10-20 11:07:50 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\DwarfsF2P
  442. [2013-11-21 15:29:41 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\eRclient
  443. [2013-07-29 11:44:30 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Fatshark
  444. [2013-07-28 16:09:37 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\fofix
  445. [2014-01-26 13:07:20 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\foobar2000
  446. [2013-10-04 18:10:11 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Friends in War
  447. [2013-04-16 18:02:38 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Gadu-Gadu 10
  448. [2012-11-13 15:04:07 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\GanymedeNet
  449. [2013-05-27 19:06:36 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\ImgBurn
  450. [2014-01-15 18:41:49 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Kalypso Media
  451. [2011-05-20 17:17:45 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Leadertech
  452. [2013-11-24 13:53:06 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\library_dir
  453. [2011-05-14 17:52:21 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\LolClient
  454. [2012-05-24 15:50:46 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\LolClient2
  455. [2013-08-28 18:36:25 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Milestone
  456. [2012-09-16 17:59:46 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\NapiProjekt
  457. [2013-04-24 18:57:17 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Need for Speed World
  458. [2012-08-29 18:09:58 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\New Technology Studio
  459. [2011-05-14 15:50:56 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\OpenFM
  460. [2011-05-20 17:15:55 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Opera
  461. [2013-09-10 13:47:34 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Origin
  462. [2012-09-22 18:40:45 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\PC Suite
  463. [2013-04-06 15:42:18 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\PDF Architect
  464. [2013-12-22 19:23:25 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Quake3
  465. [2013-11-25 17:25:47 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Raptr
  466. [2012-11-08 18:46:32 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Rovio
  467. [2013-09-14 12:05:35 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Samsung
  468. [2013-07-06 18:53:14 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\SplitMediaLabs
  469. [2014-01-16 17:38:29 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\TheBannerSaga
  470. [2012-09-23 14:44:08 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Tunngle
  471. [2012-07-04 18:58:39 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Ubisoft
  472. [2012-02-05 16:26:08 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\Unity
  473. [2014-01-22 13:00:44 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\uTorrent
  474. [2014-01-17 19:09:51 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\VOPackage
  475. [2012-08-15 14:49:37 | 000,000,000 | ---D | M] -- C:\Users\Fedycki\AppData\Roaming\wargaming.net
  476. [2013-04-18 19:59:37 | 000,000,000 | -HSD | M] -- C:\Users\Fedycki\AppData\Roaming\wyUpdate AU
  477.  
  478. [color=#E56717]========== Purity Check ==========[/color]
  479.  
  480.  
  481.  
  482. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!