API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 20th, 2015
26
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 53.95 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 19-02-2015 13:28:36 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kosti\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17041)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: dd-MM-yyyy
  6.  
  7. 5,90 Gb Total Physical Memory | 4,01 Gb Available Physical Memory | 67,94% Memory free
  8. 11,81 Gb Paging File | 9,84 Gb Available in Paging File | 83,32% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 200,00 Gb Total Space | 79,51 Gb Free Space | 39,75% Space Free | Partition Type: NTFS
  13. Drive D: | 600,19 Gb Total Space | 554,15 Gb Free Space | 92,33% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: LAPTOP | User Name: Kosti | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - File not found --
  22. PRC - [2015-02-19 13:26:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kosti\Desktop\OTL.exe
  23. PRC - [2015-01-27 13:47:40 | 000,338,032 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
  24. PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
  25.  
  26.  
  27. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  28.  
  29. MOD - [2015-02-05 22:01:44 | 000,011,920 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
  30. MOD - [2015-01-27 13:47:39 | 003,925,104 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
  31.  
  32.  
  33. [color=#E56717]========== Services (SafeList) ==========[/color]
  34.  
  35. SRV:[b]64bit:[/b] - [2015-01-08 11:31:34 | 000,319,080 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
  36. SRV:[b]64bit:[/b] - [2014-04-27 13:36:13 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  37. SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  38. SRV:[b]64bit:[/b] - [2011-12-22 16:05:34 | 001,086,752 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins)
  39. SRV:[b]64bit:[/b] - [2011-12-08 09:44:04 | 000,594,704 | ---- | M] (IntelÂŽ Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
  40. SRV:[b]64bit:[/b] - [2011-12-08 09:43:56 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
  41. SRV:[b]64bit:[/b] - [2011-12-08 09:43:48 | 000,618,256 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
  42. SRV:[b]64bit:[/b] - [2011-12-08 09:43:44 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
  43. SRV:[b]64bit:[/b] - [2011-12-05 08:30:50 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
  44. SRV:[b]64bit:[/b] - [2011-12-05 07:55:36 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
  45. SRV:[b]64bit:[/b] - [2010-12-28 09:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
  46. SRV:[b]64bit:[/b] - [2010-03-18 21:25:55 | 000,126,976 | ---- | M] (CrypKey (Canada) Ltd.) [Auto | Running] -- C:\Windows\SysNative\Crypserv.exe -- (CrypKey License)
  47. SRV - [2015-01-27 13:47:39 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  48. SRV - [2015-01-08 11:31:30 | 000,280,680 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  49. SRV - [2014-12-11 10:30:48 | 000,315,496 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  50. SRV - [2014-02-19 23:36:38 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  51. SRV - [2013-09-11 20:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  52. SRV - [2013-04-18 11:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  53. SRV - [2012-04-24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  54. SRV - [2012-01-05 16:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv)
  55. SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  56. SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
  57. SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  58.  
  59.  
  60. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  61.  
  62. DRV:[b]64bit:[/b] - [2015-02-05 22:01:44 | 000,031,376 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  63. DRV:[b]64bit:[/b] - [2014-12-14 20:39:14 | 003,775,928 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  64. DRV:[b]64bit:[/b] - [2014-10-11 13:27:46 | 000,142,528 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  65. DRV:[b]64bit:[/b] - [2014-09-10 14:19:12 | 000,098,160 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftdibus.sys -- (FTDIBUS)
  66. DRV:[b]64bit:[/b] - [2014-09-10 14:19:12 | 000,079,872 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ftser2k.sys -- (FTSER2K)
  67. DRV:[b]64bit:[/b] - [2014-09-09 04:13:28 | 000,454,416 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  68. DRV:[b]64bit:[/b] - [2013-12-06 14:37:50 | 000,035,232 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
  69. DRV:[b]64bit:[/b] - [2013-11-27 02:54:02 | 000,042,016 | ---- | M] (Visicom Media Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mcvidrv.sys -- (ManyCam)
  70. DRV:[b]64bit:[/b] - [2013-11-11 18:24:27 | 000,381,440 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
  71. DRV:[b]64bit:[/b] - [2013-10-08 18:23:28 | 000,024,032 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus)
  72. DRV:[b]64bit:[/b] - [2013-09-11 21:00:11 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr)
  73. DRV:[b]64bit:[/b] - [2013-09-11 21:00:11 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
  74. DRV:[b]64bit:[/b] - [2013-08-29 02:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  75. DRV:[b]64bit:[/b] - [2013-08-22 13:40:24 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
  76. DRV:[b]64bit:[/b] - [2013-02-12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
  77. DRV:[b]64bit:[/b] - [2013-01-23 10:31:52 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  78. DRV:[b]64bit:[/b] - [2013-01-23 10:31:52 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  79. DRV:[b]64bit:[/b] - [2012-12-24 16:45:48 | 000,027,256 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtAudioBusSrv)
  80. DRV:[b]64bit:[/b] - [2012-12-24 16:42:26 | 000,031,480 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (IvtPanBusSrv)
  81. DRV:[b]64bit:[/b] - [2012-10-17 14:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  82. DRV:[b]64bit:[/b] - [2012-08-23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  83. DRV:[b]64bit:[/b] - [2012-08-23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  84. DRV:[b]64bit:[/b] - [2012-07-17 17:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  85. DRV:[b]64bit:[/b] - [2012-04-15 22:32:14 | 001,071,032 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\wcmvcam64.sys -- (WCMVCAM)
  86. DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  87. DRV:[b]64bit:[/b] - [2011-12-23 08:44:40 | 000,621,096 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)
  88. DRV:[b]64bit:[/b] - [2011-12-23 08:44:40 | 000,134,696 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcbtums.sys -- (bcbtums)
  89. DRV:[b]64bit:[/b] - [2011-12-23 08:44:40 | 000,089,640 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwdpan.sys -- (BTWDPAN)
  90. DRV:[b]64bit:[/b] - [2011-12-23 08:44:36 | 000,039,976 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
  91. DRV:[b]64bit:[/b] - [2011-12-23 08:44:36 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
  92. DRV:[b]64bit:[/b] - [2011-12-23 08:44:34 | 000,178,728 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
  93. DRV:[b]64bit:[/b] - [2011-12-23 08:44:34 | 000,167,976 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
  94. DRV:[b]64bit:[/b] - [2011-12-05 08:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
  95. DRV:[b]64bit:[/b] - [2011-12-05 08:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
  96. DRV:[b]64bit:[/b] - [2011-12-05 01:13:24 | 000,785,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  97. DRV:[b]64bit:[/b] - [2011-12-05 01:13:24 | 000,355,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  98. DRV:[b]64bit:[/b] - [2011-12-05 01:13:24 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  99. DRV:[b]64bit:[/b] - [2011-12-01 21:51:00 | 011,417,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
  100. DRV:[b]64bit:[/b] - [2011-11-24 23:25:52 | 000,015,360 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pneteth.sys -- (pneteth)
  101. DRV:[b]64bit:[/b] - [2011-11-15 10:12:10 | 000,111,216 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  102. DRV:[b]64bit:[/b] - [2011-09-28 21:10:52 | 002,782,848 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kinonivd.sys -- (kinonivd)
  103. DRV:[b]64bit:[/b] - [2011-09-28 21:10:46 | 000,023,040 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kinonivad.sys -- (KINONI_Wave)
  104. DRV:[b]64bit:[/b] - [2011-08-25 09:21:00 | 000,173,656 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
  105. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  106. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  107. DRV:[b]64bit:[/b] - [2010-11-20 04:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  108. DRV:[b]64bit:[/b] - [2010-11-20 00:37:44 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  109. DRV:[b]64bit:[/b] - [2010-07-01 18:11:24 | 000,012,352 | ---- | M] () [Kernel | "Start" not found. | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
  110. DRV:[b]64bit:[/b] - [2010-03-19 00:11:09 | 000,030,272 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\Ckldrv.sys -- (NetworkX)
  111. DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  112. DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  113. DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  114. DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  115. DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  116. DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  117. DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  118. DRV - [2014-10-11 13:27:46 | 000,142,528 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  119. DRV - [2014-10-11 13:27:44 | 000,157,448 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\VBoxNetFlt.sys -- (VBoxNetFlt)
  120. DRV - [2014-10-11 13:27:44 | 000,116,296 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\VBoxUSB.sys -- (VBoxUSB)
  121. DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  122.  
  123.  
  124. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  125.  
  126.  
  127. [color=#E56717]========== Internet Explorer ==========[/color]
  128.  
  129. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  130. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  131. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  132. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  133. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  134. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  135. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  136. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  137. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  138. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  139. IE - HKLM\..\URLSearchHook: - No CLSID value found
  140. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  141. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  142.  
  143.  
  144. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  145. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  146.  
  147. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  148. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  149.  
  150. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  151.  
  152. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  153.  
  154. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  155. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  156. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  157. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  158. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  159. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  160. IE - HKU\S-1-5-21-814376977-623348600-771121857-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:8118
  161.  
  162. [color=#E56717]========== FireFox ==========[/color]
  163.  
  164. FF - prefs.js..browser.search.highlightCount: 0
  165. FF - prefs.js..browser.search.isUS: false
  166. FF - prefs.js..browser.search.useDBForOrder: true
  167. FF - prefs.js..extensions.enabledAddons: %7B02450914-cdd9-410f-b1da-db004e18c671%7D:0.97.24c
  168. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0.1
  169. FF - user.js - File not found
  170.  
  171. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll File not found
  172. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\system32\npDeployJava1.dll File not found
  173. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  174. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  175. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  176. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
  177. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  178. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  179. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  180. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  181. FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
  182. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
  183. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
  184.  
  185. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
  186. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  187.  
  188. [2013-09-11 23:08:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\Extensions
  189. [2015-02-01 23:38:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\Firefox\Profiles\7zae2jrp.default\extensions
  190. [2014-03-14 13:33:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\Firefox\Profiles7zae2jrp.default\extensions
  191. [2014-03-14 13:33:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\Firefox\Profiles7zae2jrp.default\extensions\staged
  192. [2015-02-01 23:38:31 | 002,551,632 | ---- | M] () (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\firefox\profiles\7zae2jrp.default\extensions\[email protected]
  193. [2014-04-09 18:22:00 | 000,103,260 | ---- | M] () (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\firefox\profiles\7zae2jrp.default\extensions\{02450914-cdd9-410f-b1da-db004e18c671}.xpi
  194. [2015-01-03 09:28:28 | 000,006,770 | ---- | M] () (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\firefox\profiles\7zae2jrp.default\extensions\{122141c3-e1a4-4af5-b3d7-650743f49ec0}.xpi
  195. [2014-04-26 13:27:40 | 000,065,560 | ---- | M] () (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\firefox\profiles\7zae2jrp.default\extensions\{6BFD307A-C040-11DA-9749-FB1C850B47DF}.xpi
  196. [2014-02-27 00:03:14 | 000,957,290 | ---- | M] () (No name found) -- C:\Users\Kosti\AppData\Roaming\mozilla\firefox\profiles\7zae2jrp.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  197.  
  198. [color=#E56717]========== Chrome ==========[/color]
  199.  
  200. CHR - default_search_provider: ()
  201. CHR - default_search_provider: search_url =
  202. CHR - default_search_provider: suggest_url =
  203. CHR - plugin: Error reading preferences file
  204. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\
  205. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
  206. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  207. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  208. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  209. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
  210. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfolibbobnddfcjbjnfiikjgdefiejpl\1.0.7_0\
  211. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  212. CHR - Extension: No name found = C:\Users\Kosti\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
  213.  
  214. O1 HOSTS File: ([2014-04-05 13:52:51 | 000,000,928 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  215. O1 - Hosts: 127.0.0.1 activate.adobe.com
  216. O1 - Hosts: 127.0.0.1 65.52.240.48
  217. O1 - Hosts: 127.0.0.1 activation.cloud.techsmith.com
  218. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  219. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  220. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  221. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  222. O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
  223. O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited)
  224. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
  225. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  226. O4 - HKU\S-1-5-21-814376977-623348600-771121857-1000..\Run: [] File not found
  227. O4 - HKU\S-1-5-21-814376977-623348600-771121857-1000..\Run: [NVIDIA nTune] "C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe" clear File not found
  228. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  229. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  230. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  231. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  232. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  233. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  234. O7 - HKU\S-1-5-21-814376977-623348600-771121857-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  235. O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
  236. O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
  237. O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
  238. O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
  239. O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
  240. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
  241. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
  242. O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
  243. O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
  244. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  245. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  246. O13[b]64bit:[/b] - gopher Prefix: missing
  247. O13 - gopher Prefix: missing
  248. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  249. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{17B77D12-360A-452F-AABA-E202AED5D7F4}: DhcpNameServer = 107.191.118.17 8.8.8.8
  250. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7aa142ed-0875-4702-84e8-ae6d0f8aeb22}: DhcpNameServer = 192.168.1.1 192.168.1.1
  251. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  252. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  253. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  254. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  255. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  256. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  257. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  258. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  259. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  260. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  261. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found
  262. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  263. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  264. O32 - HKLM CDRom: AutoRun - 1
  265. O34 - HKLM BootExecute: (autocheck autochk *)
  266. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  267. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  268. O35 - HKLM\..comfile [open] -- "%1" %*
  269. O35 - HKLM\..exefile [open] -- "%1" %*
  270. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  271. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  272. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  273. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  274. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  275. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  276. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  277.  
  278. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  279.  
  280. [2015-02-19 13:26:14 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Kosti\Desktop\OTL.exe
  281. [2015-02-19 13:17:15 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Roaming\NVIDIA
  282. [2015-02-19 13:16:48 | 001,710,888 | ---- | C] (techPowerUp (www.techpowerup.com)) -- C:\Users\Kosti\Desktop\GPU-Z.0.8.1.exe
  283. [2015-02-19 13:10:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
  284. [2015-02-19 13:10:30 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
  285. [2015-02-18 16:51:58 | 000,000,000 | ---D | C] -- C:\Users\Kosti\Desktop\ali2
  286. [2015-02-17 15:13:35 | 000,000,000 | ---D | C] -- C:\Users\Kosti\Desktop\ABS
  287. [2015-02-15 17:45:05 | 000,372,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NVUNINST.EXE
  288. [2015-02-15 17:45:00 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Local\NVIDIA Corporation
  289. [2015-02-15 17:43:22 | 000,000,000 | ---D | C] -- C:\Program Files\TAP-Windows
  290. [2015-02-15 17:42:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA nTune Performance Application
  291. [2015-02-15 01:04:25 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NV
  292. [2015-02-15 01:04:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NV
  293. [2015-02-15 01:04:22 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
  294. [2015-02-15 01:02:33 | 006,861,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
  295. [2015-02-15 01:02:33 | 003,517,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
  296. [2015-02-15 01:02:33 | 002,558,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
  297. [2015-02-15 01:02:33 | 001,098,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
  298. [2015-02-15 01:02:33 | 000,628,880 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\oemdspif.dll
  299. [2015-02-15 01:02:33 | 000,385,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
  300. [2015-02-15 01:02:33 | 000,074,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
  301. [2015-02-15 01:02:33 | 000,062,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
  302. [2015-02-15 00:54:35 | 018,575,880 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
  303. [2015-02-15 00:54:35 | 016,017,040 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  304. [2015-02-15 00:54:35 | 000,995,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
  305. [2015-02-15 00:54:35 | 000,877,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
  306. [2015-02-15 00:54:35 | 000,031,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
  307. [2015-02-15 00:54:34 | 032,106,640 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  308. [2015-02-15 00:54:34 | 024,768,144 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  309. [2015-02-15 00:54:34 | 013,294,528 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  310. [2015-02-15 00:54:34 | 010,773,704 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  311. [2015-02-15 00:54:34 | 000,969,872 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
  312. [2015-02-15 00:54:34 | 000,943,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
  313. [2015-02-15 00:54:34 | 000,929,936 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
  314. [2015-02-15 00:54:34 | 000,908,104 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
  315. [2015-02-15 00:54:34 | 000,496,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvEncodeAPI64.dll
  316. [2015-02-15 00:54:34 | 000,390,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFROpenGL.dll
  317. [2015-02-15 00:54:34 | 000,353,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
  318. [2015-02-15 00:54:34 | 000,345,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFROpenGL.dll
  319. [2015-02-15 00:54:34 | 000,305,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
  320. [2015-02-15 00:54:34 | 000,177,624 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
  321. [2015-02-15 00:54:34 | 000,164,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
  322. [2015-02-15 00:54:33 | 017,253,848 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  323. [2015-02-15 00:54:33 | 001,895,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434752.dll
  324. [2015-02-15 00:54:33 | 001,557,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434752.dll
  325. [2015-02-15 00:54:33 | 000,399,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvEncodeAPI.dll
  326. [2015-02-15 00:54:32 | 014,119,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  327. [2015-02-15 00:54:32 | 013,208,200 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  328. [2015-02-15 00:54:32 | 010,713,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  329. [2015-02-15 00:54:32 | 003,610,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  330. [2015-02-15 00:54:32 | 003,247,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  331. [2015-02-15 00:54:30 | 025,460,880 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  332. [2015-02-15 00:54:30 | 020,466,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  333. [2015-02-15 00:54:30 | 003,299,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
  334. [2015-02-15 00:54:30 | 002,902,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
  335. [2015-02-15 00:37:40 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Local\NVIDIA
  336. [2015-02-15 00:33:03 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
  337. [2015-02-15 00:28:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
  338. [2015-02-15 00:19:29 | 000,000,000 | ---D | C] -- C:\NVIDIA
  339. [2015-02-15 00:05:43 | 000,000,000 | -HSD | C] -- C:\Users\Kosti\IntelGraphicsProfiles
  340. [2015-01-27 15:23:08 | 000,205,352 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\VBoxNetFltNobj.dll
  341. [2015-01-27 15:23:08 | 000,157,448 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\drivers\VBoxNetFlt.sys
  342. [2015-01-27 15:22:53 | 000,142,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\drivers\VBoxNetAdp.sys
  343. [2015-01-27 15:22:49 | 000,116,296 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\drivers\VBoxUSB.sys
  344. [2015-01-27 15:00:00 | 000,000,000 | ---D | C] -- C:\Users\Kosti\VirtualBox VMs
  345. [2015-01-27 14:50:32 | 000,142,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys
  346. [2015-01-27 14:50:29 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  347. [2015-01-27 13:47:34 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  348. [2015-01-22 21:23:32 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
  349. [2015-01-22 21:23:32 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Roaming\Adobe Mini Bridge CS5
  350. [2015-01-20 14:15:17 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Local\Finch_Innovation
  351. [2015-01-20 13:53:47 | 000,000,000 | ---D | C] -- C:\Users\Kosti\AppData\Roaming\Faceless LLC
  352. [10 C:\*.tmp files -> C:\*.tmp -> ]
  353. [1 C:\Users\Kosti\*.tmp files -> C:\Users\Kosti\*.tmp -> ]
  354.  
  355. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  356.  
  357. [2015-02-19 13:26:55 | 000,112,113 | ---- | M] () -- C:\Users\Kosti\Desktop\cpu i gpu.JPG
  358. [2015-02-19 13:26:15 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kosti\Desktop\OTL.exe
  359. [2015-02-19 13:20:32 | 001,577,512 | ---- | M] ( ) -- C:\Users\Kosti\Desktop\cpu-z_1.71-setup-en.exe
  360. [2015-02-19 13:16:57 | 001,710,888 | ---- | M] (techPowerUp (www.techpowerup.com)) -- C:\Users\Kosti\Desktop\GPU-Z.0.8.1.exe
  361. [2015-02-19 13:07:30 | 001,679,426 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  362. [2015-02-19 13:07:30 | 000,744,058 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  363. [2015-02-19 13:07:30 | 000,657,406 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  364. [2015-02-19 13:07:30 | 000,157,508 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  365. [2015-02-19 13:07:30 | 000,123,218 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  366. [2015-02-19 13:01:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  367. [2015-02-19 13:01:09 | 460,079,103 | -HS- | M] () -- C:\hiberfil.sys
  368. [2015-02-18 19:27:43 | 000,279,632 | ---- | M] () -- C:\5863_ko.jpg
  369. [2015-02-18 19:27:06 | 000,216,453 | ---- | M] () -- C:\c4a9_ko.jpg
  370. [2015-02-16 15:12:33 | 619,304,322 | ---- | M] () -- C:\Windows\MEMORY.DMP
  371. [2015-02-16 00:04:01 | 000,022,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  372. [2015-02-16 00:04:01 | 000,022,976 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  373. [2015-02-15 23:32:16 | 001,189,511 | ---- | M] () -- C:\Screenshot_2015-02-15-13-23-01.png
  374. [2015-02-15 23:32:03 | 000,981,393 | ---- | M] () -- C:\Screenshot_2015-02-15-20-19-23.png
  375. [2015-02-15 17:43:04 | 000,372,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NVUNINST.EXE
  376. [2015-02-15 00:10:56 | 000,007,599 | ---- | M] () -- C:\Users\Kosti\AppData\Local\resmon.resmoncfg
  377. [2015-02-06 19:31:27 | 000,430,952 | ---- | M] () -- C:\Users\Kosti\Desktop\bookmarks.html
  378. [2015-02-06 14:41:35 | 000,002,223 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  379. [2015-02-05 22:01:44 | 032,106,640 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  380. [2015-02-05 22:01:44 | 025,460,880 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  381. [2015-02-05 22:01:44 | 024,768,144 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  382. [2015-02-05 22:01:44 | 020,466,496 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  383. [2015-02-05 22:01:44 | 018,575,880 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
  384. [2015-02-05 22:01:44 | 017,253,848 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  385. [2015-02-05 22:01:44 | 016,017,040 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
  386. [2015-02-05 22:01:44 | 014,119,744 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  387. [2015-02-05 22:01:44 | 013,294,528 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  388. [2015-02-05 22:01:44 | 013,208,200 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  389. [2015-02-05 22:01:44 | 010,773,704 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  390. [2015-02-05 22:01:44 | 010,713,256 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  391. [2015-02-05 22:01:44 | 003,610,768 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  392. [2015-02-05 22:01:44 | 003,299,512 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
  393. [2015-02-05 22:01:44 | 003,247,248 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  394. [2015-02-05 22:01:44 | 002,902,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
  395. [2015-02-05 22:01:44 | 001,895,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434752.dll
  396. [2015-02-05 22:01:44 | 001,557,648 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434752.dll
  397. [2015-02-05 22:01:44 | 000,995,248 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
  398. [2015-02-05 22:01:44 | 000,969,872 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
  399. [2015-02-05 22:01:44 | 000,943,760 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
  400. [2015-02-05 22:01:44 | 000,929,936 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
  401. [2015-02-05 22:01:44 | 000,908,104 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
  402. [2015-02-05 22:01:44 | 000,877,816 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
  403. [2015-02-05 22:01:44 | 000,496,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvEncodeAPI64.dll
  404. [2015-02-05 22:01:44 | 000,399,504 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvEncodeAPI.dll
  405. [2015-02-05 22:01:44 | 000,390,472 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFROpenGL.dll
  406. [2015-02-05 22:01:44 | 000,353,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
  407. [2015-02-05 22:01:44 | 000,345,744 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFROpenGL.dll
  408. [2015-02-05 22:01:44 | 000,305,136 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
  409. [2015-02-05 22:01:44 | 000,177,624 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
  410. [2015-02-05 22:01:44 | 000,164,752 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
  411. [2015-02-05 22:01:44 | 000,031,376 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
  412. [2015-02-05 22:01:44 | 000,027,441 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
  413. [2015-02-05 20:07:04 | 006,861,128 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
  414. [2015-02-05 20:07:03 | 003,517,584 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
  415. [2015-02-05 20:07:00 | 002,558,792 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
  416. [2015-02-05 20:07:00 | 000,628,880 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\oemdspif.dll
  417. [2015-02-05 20:07:00 | 000,062,792 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
  418. [2015-02-05 20:06:59 | 001,098,384 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
  419. [2015-02-05 20:06:59 | 000,385,168 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
  420. [2015-02-05 20:06:59 | 000,074,896 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
  421. [2015-02-05 15:00:09 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  422. [2015-02-05 15:00:09 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  423. [2015-02-05 13:50:11 | 004,236,870 | ---- | M] () -- C:\Windows\SysNative\nvcoproc.bin
  424. [10 C:\*.tmp files -> C:\*.tmp -> ]
  425. [1 C:\Users\Kosti\*.tmp files -> C:\Users\Kosti\*.tmp -> ]
  426.  
  427. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  428.  
  429. [2015-02-19 13:26:55 | 000,112,113 | ---- | C] () -- C:\Users\Kosti\Desktop\cpu i gpu.JPG
  430. [2015-02-19 13:20:26 | 001,577,512 | ---- | C] ( ) -- C:\Users\Kosti\Desktop\cpu-z_1.71-setup-en.exe
  431. [2015-02-15 01:02:33 | 004,236,870 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
  432. [2015-02-15 00:54:34 | 000,027,441 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
  433. [2015-02-06 19:31:26 | 000,430,952 | ---- | C] () -- C:\Users\Kosti\Desktop\bookmarks.html
  434. [2015-01-07 17:23:21 | 000,722,718 | ---- | C] () -- C:\Windows\unins000.exe
  435. [2015-01-07 17:23:21 | 000,064,003 | ---- | C] () -- C:\Windows\unins000.dat
  436. [2014-12-14 20:35:16 | 000,184,832 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  437. [2014-12-14 20:35:16 | 000,143,872 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
  438. [2014-11-06 16:47:19 | 000,001,465 | ---- | C] () -- C:\Users\Kosti\pcmscan.cfg
  439. [2014-10-31 15:04:22 | 000,000,147 | ---- | C] () -- C:\Windows\SysWow64\REMOTEDEVICE.INI
  440. [2014-10-14 23:56:42 | 000,034,308 | ---- | C] () -- C:\Windows\SysWow64\BASSMOD.dll
  441. [2014-07-23 16:02:06 | 000,070,904 | ---- | C] () -- C:\Windows\SysWow64\VMProtectSDK32.dll
  442. [2014-07-23 16:02:00 | 000,311,032 | ---- | C] () -- C:\Windows\SysWow64\IVTCredentialProvider.dll
  443. [2014-07-23 16:01:42 | 000,273,144 | ---- | C] () -- C:\Windows\SysWow64\Adpush.dll
  444. [2014-06-17 23:43:34 | 000,001,025 | ---- | C] () -- C:\Windows\SysWow64\sysprs7.dll
  445. [2014-06-17 23:43:34 | 000,000,205 | ---- | C] () -- C:\Windows\SysWow64\lsprst7.dll
  446. [2014-05-19 13:33:07 | 000,000,016 | ---- | C] () -- C:\Users\Kosti\persistent_state
  447. [2014-04-26 21:25:01 | 000,033,059 | ---- | C] () -- C:\Users\Kosti\AppData\Roaming\Wartości oddzielone przecinkami (Windows).ADR
  448. [2014-04-16 09:33:04 | 000,000,004 | ---- | C] () -- C:\Windows\vx86036.dat
  449. [2014-04-16 09:27:16 | 000,000,128 | ---- | C] () -- C:\Windows\Crypkey.ini
  450. [2014-04-16 09:27:14 | 000,011,776 | ---- | C] () -- C:\Windows\Ckrfresh.exe
  451. [2014-03-14 14:26:29 | 000,810,496 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  452. [2014-03-14 14:26:29 | 000,183,808 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  453. [2014-03-14 14:26:29 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  454. [2014-01-24 15:45:50 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\Lagarith.dll
  455. [2013-12-28 16:29:37 | 000,007,168 | ---- | C] () -- C:\Users\Kosti\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  456. [2013-11-04 16:19:34 | 000,000,132 | ---- | C] () -- C:\Users\Kosti\AppData\Roaming\Adobe PNG Format CS5 Prefs
  457. [2013-11-04 16:08:05 | 000,001,456 | ---- | C] () -- C:\Users\Kosti\AppData\Local\Adobe Save for Web 12.0 Prefs
  458. [2013-10-28 20:35:48 | 000,216,064 | ---- | C] () -- C:\Windows\SysWow64\gcapi_dll.dll
  459. [2013-09-12 11:36:28 | 000,007,599 | ---- | C] () -- C:\Users\Kosti\AppData\Local\resmon.resmoncfg
  460. [2013-09-11 21:54:14 | 001,651,968 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  461. [2013-09-11 20:54:32 | 000,734,772 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin
  462. [2013-09-11 20:54:31 | 000,479,528 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin
  463.  
  464. [color=#E56717]========== ZeroAccess Check ==========[/color]
  465.  
  466. [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  467.  
  468. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  469.  
  470. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  471.  
  472. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  473.  
  474. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  475.  
  476. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  477. "" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
  478. "ThreadingModel" = Apartment
  479.  
  480. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  481. "" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  482. "ThreadingModel" = Apartment
  483.  
  484. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  485. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  486. "ThreadingModel" = Free
  487.  
  488. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  489. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 03:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
  490. "ThreadingModel" = Free
  491.  
  492. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  493. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  494. "ThreadingModel" = Both
  495.  
  496. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  497.  
  498. [color=#E56717]========== LOP Check ==========[/color]
  499.  
  500. [2015-01-27 15:56:26 | 000,000,000 | ---D | M] -- C:\Users\ciapek\AppData\Roaming\Foxit Software
  501. [2013-11-03 13:15:29 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Artisteer
  502. [2015-01-03 19:09:12 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\asoftech
  503. [2014-10-20 20:09:03 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Audacity
  504. [2014-09-19 17:37:42 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Battle.net
  505. [2015-02-14 15:39:04 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\BitComet
  506. [2015-02-15 00:38:30 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Dev-Cpp
  507. [2015-01-06 19:06:57 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Downloaded Installations
  508. [2015-01-20 13:53:47 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Faceless LLC
  509. [2014-06-24 12:54:34 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\FileZilla
  510. [2015-01-23 00:04:59 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Foxit Software
  511. [2015-02-04 22:15:44 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\GG
  512. [2013-09-20 17:29:41 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\GHISLER
  513. [2014-03-22 12:56:22 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\MAGIX
  514. [2015-01-17 23:05:14 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\MultiBit
  515. [2013-11-14 21:09:40 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\NapiProjekt
  516. [2014-06-07 19:59:54 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Nitro
  517. [2014-03-17 15:05:48 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Nokia
  518. [2014-03-05 01:08:51 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\PC Suite
  519. [2013-12-13 14:03:09 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\poclbm
  520. [2013-09-13 13:13:20 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Publish Providers
  521. [2014-11-06 15:37:37 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\ScanMaster-ELM
  522. [2014-08-18 15:37:42 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Shuame
  523. [2014-01-24 14:49:32 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Sony
  524. [2015-01-22 21:23:32 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
  525. [2014-04-05 13:56:00 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\TechSmith
  526. [2014-10-14 23:34:13 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\UBot Studio
  527. [2014-04-04 23:46:42 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\WebcamMax
  528. [2014-04-26 15:00:06 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Windows Live Writer
  529. [2015-01-03 00:34:06 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\Wondershare
  530. [2014-09-04 15:30:02 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\X-Chat 2
  531. [2014-04-17 16:12:11 | 000,000,000 | ---D | M] -- C:\Users\Kosti\AppData\Roaming\ZJMedia
  532.  
  533. [color=#E56717]========== Purity Check ==========[/color]
  534.  
  535.  
  536.  
  537. [color=#E56717]========== Alternate Data Streams ==========[/color]
  538.  
  539. @Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences
  540.  
  541. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!