API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 26th, 2015
268
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 58.41 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 26/07/2015 07:26:32 - Run 3
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Pawel\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17914)
  5. Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
  6.  
  7. 3.86 Gb Total Physical Memory | 2.08 Gb Available Physical Memory | 53.94% Memory free
  8. 7.71 Gb Paging File | 5.97 Gb Available in Paging File | 77.40% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 318.54 Gb Total Space | 264.57 Gb Free Space | 83.06% Space Free | Partition Type: NTFS
  13. Drive D: | 380.00 Gb Total Space | 360.83 Gb Free Space | 94.96% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: PAWEL-PC | User Name: Pawel | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2015/07/25 18:28:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pawel\Downloads\OTL.exe
  22. PRC - [2015/07/07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  23. PRC - [2015/06/29 21:15:22 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avp.exe
  24. PRC - [2015/06/29 21:15:22 | 000,192,768 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avpui.exe
  25. PRC - [2015/05/01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  26. PRC - [2015/05/01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  27. PRC - [2014/09/22 14:03:36 | 002,387,440 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\EPSON\MyEpson Portal\mep.exe
  28. PRC - [2014/09/22 11:37:34 | 000,703,984 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe
  29. PRC - [2014/05/02 15:47:14 | 001,065,024 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
  30. PRC - [2011/02/18 09:20:54 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  31. PRC - [2011/02/18 09:20:50 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  32. PRC - [2010/12/23 05:25:02 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  33. PRC - [2010/12/23 05:24:58 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  34. PRC - [2007/06/27 21:04:00 | 001,213,736 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
  35. PRC - [2007/06/27 21:03:40 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
  36.  
  37.  
  38. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  39.  
  40. MOD - [2015/05/14 12:52:24 | 000,475,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\f101554dcbcc6db44e43ffa4237e9ef6\IAStorUtil.ni.dll
  41. MOD - [2015/05/14 12:43:56 | 012,438,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll
  42. MOD - [2015/05/14 12:43:43 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll
  43. MOD - [2015/05/14 12:43:38 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll
  44. MOD - [2015/05/14 12:43:17 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1c3513960037508558358652f2d202a1\WindowsBase.ni.dll
  45. MOD - [2015/04/16 13:04:05 | 000,774,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll
  46. MOD - [2014/10/17 11:04:56 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
  47. MOD - [2014/10/17 11:04:28 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
  48. MOD - [2014/09/11 11:06:53 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\9afbc0732818d697f59563155e6a7d88\IAStorCommon.ni.dll
  49. MOD - [2014/09/10 23:40:11 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
  50. MOD - [2013/07/08 14:46:09 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll
  51. MOD - [2013/07/08 14:46:03 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
  52.  
  53.  
  54. [color=#E56717]========== Services (SafeList) ==========[/color]
  55.  
  56. SRV:[b]64bit:[/b] - [2015/06/20 21:34:46 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  57. SRV:[b]64bit:[/b] - [2015/05/25 20:19:13 | 001,255,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  58. SRV:[b]64bit:[/b] - [2012/05/17 00:00:00 | 000,144,560 | ---- | M] (Seiko Epson Corporation) [Auto | Running] -- C:\Windows\SysNative\escsvc64.exe -- (EpsonScanSvc)
  59. SRV - [2015/07/15 18:40:17 | 000,268,976 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  60. SRV - [2015/07/07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  61. SRV - [2015/06/29 21:15:22 | 000,194,000 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\avp.exe -- (AVP15.0.2)
  62. SRV - [2015/06/03 16:42:38 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  63. SRV - [2015/05/01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  64. SRV - [2015/05/01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  65. SRV - [2014/09/22 11:37:34 | 000,703,984 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe -- (MyEpson Portal Service)
  66. SRV - [2014/03/21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  67. SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  68. SRV - [2011/02/18 09:20:54 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  69. SRV - [2010/12/23 05:25:02 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  70. SRV - [2010/12/23 05:24:58 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  71.  
  72.  
  73. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  74.  
  75. DRV:[b]64bit:[/b] - [2015/06/29 21:15:22 | 000,190,648 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
  76. DRV:[b]64bit:[/b] - [2015/06/29 21:15:22 | 000,085,360 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klwtp.sys -- (Klwtp)
  77. DRV:[b]64bit:[/b] - [2015/06/29 21:15:22 | 000,065,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
  78. DRV:[b]64bit:[/b] - [2015/06/29 21:15:22 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
  79. DRV:[b]64bit:[/b] - [2015/06/29 21:15:22 | 000,024,944 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klpd.sys -- (klpd)
  80. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,850,608 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
  81. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,478,392 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
  82. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,247,016 | ---- | M] (Kaspersky Lab UK Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cm_km_w.sys -- (cm_km_w)
  83. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,225,976 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klhk.sys -- (klhk)
  84. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,159,960 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klflt.sys -- (klflt)
  85. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,064,368 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\kldisk.sys -- (kldisk)
  86. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,040,304 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
  87. DRV:[b]64bit:[/b] - [2015/06/29 21:15:20 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
  88. DRV:[b]64bit:[/b] - [2014/05/28 17:11:37 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  89. DRV:[b]64bit:[/b] - [2014/03/19 16:23:14 | 000,076,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
  90. DRV:[b]64bit:[/b] - [2014/03/19 16:23:14 | 000,050,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
  91. DRV:[b]64bit:[/b] - [2013/10/30 13:55:10 | 000,458,960 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
  92. DRV:[b]64bit:[/b] - [2012/07/03 16:10:00 | 000,084,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bpenum.sys -- (bpenum)
  93. DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  94. DRV:[b]64bit:[/b] - [2011/08/03 21:57:04 | 002,768,384 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  95. DRV:[b]64bit:[/b] - [2011/03/26 10:17:50 | 012,262,336 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  96. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  97. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  98. DRV:[b]64bit:[/b] - [2011/02/18 09:11:54 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  99. DRV:[b]64bit:[/b] - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  100. DRV:[b]64bit:[/b] - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  101. DRV:[b]64bit:[/b] - [2010/11/20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  102. DRV:[b]64bit:[/b] - [2010/10/20 00:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  103. DRV:[b]64bit:[/b] - [2010/10/15 17:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  104. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  105. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  106. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  107. DRV:[b]64bit:[/b] - [2009/07/14 02:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
  108. DRV:[b]64bit:[/b] - [2009/07/14 02:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
  109. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  110. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  111. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  112. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  113. DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  114.  
  115.  
  116. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  117.  
  118.  
  119. [color=#E56717]========== Internet Explorer ==========[/color]
  120.  
  121. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  122. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  123. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  124. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  125. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  126. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  127. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  128. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  129.  
  130.  
  131. IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  132. IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  133. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  134. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  135.  
  136. IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  137. IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  138. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  139. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  140.  
  141. IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  142. IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  143. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  144.  
  145. IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  146. IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  147. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  148.  
  149. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  150. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  151. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
  152. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-GB
  153. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C7 9F C8 D5 7A 7A CF 01 [binary data]
  154. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  155. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  156. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\..\SearchScopes\{666758F3-E285-4834-866E-42DFF86C8603}: "URL" = https://www.google.com/search?q={searchTerms}
  157. IE - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  158.  
  159.  
  160. [color=#E56717]========== FireFox ==========[/color]
  161.  
  162. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll File not found
  163. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  164. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll ()
  165. FF - HKLM\Software\MozillaPlugins\@kaspersky.com/content_blocker_663BE84DBCC949E88C7600F63CA7F098: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\[email protected] [2015/07/25 18:30:30 | 000,000,000 | ---D | M]
  166. FF - HKLM\Software\MozillaPlugins\@kaspersky.com/online_banking_08806E753BE44495B44E90AA2513BDC5: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\[email protected] [2015/07/25 18:30:31 | 000,000,000 | ---D | M]
  167. FF - HKLM\Software\MozillaPlugins\@kaspersky.com/virtual_keyboard_07402848C2F6470194F131B0F3DE025E: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\[email protected] [2015/07/25 18:30:36 | 000,000,000 | ---D | M]
  168. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  169. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
  170. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll (Google Inc.)
  171. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  172. FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Program Files (x86)\Roblox\Versions\version-9d174e484c8b493e\\NPRobloxProxy.dll ()
  173. FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher64: C:\Program Files (x86)\Roblox\Versions\version-9d174e484c8b493e\\NPRobloxProxy64.dll ()
  174.  
  175. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2015/05/09 17:07:35 | 000,000,000 | ---D | M]
  176. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\[email protected] [2015/07/25 18:30:30 | 000,000,000 | ---D | M]
  177. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\[email protected] [2015/07/25 18:30:36 | 000,000,000 | ---D | M]
  178. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\FFExt\[email protected] [2015/07/25 18:30:31 | 000,000,000 | ---D | M]
  179.  
  180.  
  181. [color=#E56717]========== Chrome ==========[/color]
  182.  
  183. CHR - Extension: No name found = C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\
  184. CHR - Extension: No name found = C:\Users\Pawel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\
  185.  
  186. O1 HOSTS File: ([2015/07/26 06:47:30 | 000,000,826 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  187. O2:[b]64bit:[/b] - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  188. O2:[b]64bit:[/b] - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  189. O2:[b]64bit:[/b] - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  190. O2 - BHO: (Virtual Keyboard Plugin) - {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  191. O2 - BHO: (Content Blocker Plugin) - {93BC2EA7-2F17-4729-948A-D2E03FFB2412} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  192. O2 - BHO: (Safe Money Plugin) - {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  193. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  194. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  195. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  196. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  197. O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
  198. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  199. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  200. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  201. O4 - HKU\S-1-5-21-1930753672-1556456421-724760631-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
  202. O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
  203. O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
  204. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  205. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  206. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  207. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  208. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
  209. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  210. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  211. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  212. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  213. O7 - HKU\S-1-5-21-1930753672-1556456421-724760631-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  214. O9:[b]64bit:[/b] - Extra Button: Klawiatura wirtualna - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  215. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
  216. O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  217. O9 - Extra Button: Klawiatura wirtualna - {5547CE1F-74E9-41E5-9CBF-5211ECC37341} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.2\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  218. O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  219. O13[b]64bit:[/b] - gopher Prefix: missing
  220. O13 - gopher Prefix: missing
  221. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.168.4.100 194.168.8.100
  222. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AE520701-DD22-44B4-AC9E-89742E5FC8EE}: DhcpNameServer = 194.168.4.100 194.168.8.100
  223. O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  224. O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  225. O20 - AppInit_DLLs: (C:\PROGRA~3\{C2242~1\1172~1.1\lone.dll) - File not found
  226. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  227. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  228. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  229. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  230. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  231. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  232. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  233. O32 - HKLM CDRom: AutoRun - 0
  234. O32 - AutoRun File - [2015/04/06 17:02:48 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  235. O33 - MountPoints2\{35b64c88-e675-11e3-bc79-dc0ea1119f9f}\Shell\DOCInstall\command - "" = write \FREEDOS\DOCS\INSTALL3.TXT
  236. O34 - HKLM BootExecute: (autocheck autochk *)
  237. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  238. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  239. O35 - HKLM\..comfile [open] -- "%1" %*
  240. O35 - HKLM\..exefile [open] -- "%1" %*
  241. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  242. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  243. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  244. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  245. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  246. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  247. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  248.  
  249. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  250.  
  251. [2015/07/26 06:50:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  252. [2015/07/26 06:10:06 | 000,000,000 | ---D | C] -- C:\Windows\pss
  253. [2015/07/25 18:31:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
  254. [2015/07/25 18:31:06 | 000,110,176 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\klfphc.dll
  255. [2015/07/25 18:30:30 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP
  256. [2015/07/25 18:30:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
  257. [2015/07/25 18:30:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab
  258. [2015/07/25 18:29:59 | 000,850,608 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klif.sys
  259. [2015/07/25 18:29:59 | 000,225,976 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klhk.sys
  260. [2015/07/25 18:29:59 | 000,159,960 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klflt.sys
  261. [2015/07/25 10:41:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uBlock Origin
  262. [2015/07/24 13:03:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Radioplayer
  263. [2015/07/21 18:18:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CouchPotato
  264. [2015/07/21 14:06:00 | 000,372,224 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
  265. [2015/07/21 14:06:00 | 000,299,008 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
  266. [2015/07/21 14:06:00 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
  267. [2015/07/21 14:06:00 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
  268. [2015/07/21 14:06:00 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
  269. [2015/07/21 14:06:00 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
  270. [2015/07/21 14:06:00 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
  271. [2015/07/21 14:06:00 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
  272. [2015/07/20 13:38:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Narrow Sentence
  273. [2015/07/19 23:42:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Go away MDA Bypass MDA blocked sites
  274. [2015/07/15 11:48:30 | 001,480,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  275. [2015/07/15 11:48:30 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
  276. [2015/07/15 11:48:30 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  277. [2015/07/15 11:48:26 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
  278. [2015/07/15 11:48:26 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
  279. [2015/07/15 11:48:26 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  280. [2015/07/15 11:48:26 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
  281. [2015/07/15 11:48:26 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  282. [2015/07/15 11:48:26 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
  283. [2015/07/15 11:48:26 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
  284. [2015/07/15 11:48:25 | 003,154,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  285. [2015/07/15 11:48:25 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  286. [2015/07/15 11:48:25 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  287. [2015/07/15 11:48:25 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  288. [2015/07/15 11:48:25 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
  289. [2015/07/15 11:48:25 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  290. [2015/07/15 11:48:25 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  291. [2015/07/15 11:48:25 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
  292. [2015/07/15 11:47:46 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  293. [2015/07/15 11:47:41 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  294. [2015/07/15 11:47:29 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  295. [2015/07/15 11:47:29 | 001,216,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
  296. [2015/07/15 11:47:28 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
  297. [2015/07/15 11:47:28 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
  298. [2015/07/15 11:47:28 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  299. [2015/07/15 11:47:28 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
  300. [2015/07/15 11:47:28 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
  301. [2015/07/15 11:47:28 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  302. [2015/07/15 11:47:28 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
  303. [2015/07/15 11:47:28 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
  304. [2015/07/15 11:47:28 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
  305. [2015/07/15 11:47:28 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
  306. [2015/07/15 11:47:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
  307. [2015/07/15 11:47:28 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  308. [2015/07/15 11:47:28 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  309. [2015/07/15 11:47:19 | 003,242,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
  310. [2015/07/15 11:47:19 | 001,941,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
  311. [2015/07/15 11:47:18 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
  312. [2015/07/15 11:47:18 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msihnd.dll
  313. [2015/07/15 11:47:18 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
  314. [2015/07/15 11:47:18 | 000,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
  315. [2015/07/15 11:47:18 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msimsg.dll
  316. [2015/07/15 11:47:18 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msimsg.dll
  317. [2015/07/15 11:47:13 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cewmdm.dll
  318. [2015/07/15 11:47:13 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cewmdm.dll
  319. [2015/07/15 11:46:45 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
  320. [2015/07/15 11:46:44 | 005,923,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  321. [2015/07/15 11:46:44 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  322. [2015/07/15 11:46:42 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  323. [2015/07/15 11:40:54 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  324. [2015/07/15 11:40:54 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  325. [2015/07/15 11:40:54 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  326. [2015/07/15 11:40:54 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  327. [2015/07/15 11:40:54 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  328. [2015/07/15 11:40:54 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  329. [2015/07/15 11:40:53 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  330. [2015/07/15 11:40:53 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  331. [2015/07/15 11:40:51 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  332. [2015/07/15 11:40:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  333. [2015/07/15 11:40:46 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  334. [2015/07/15 11:40:46 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  335. [2015/07/15 11:40:46 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  336. [2015/07/15 11:40:45 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  337. [2015/07/15 11:40:45 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  338. [2015/07/15 11:40:44 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  339. [2015/07/15 11:40:44 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  340. [2015/07/15 11:40:43 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  341. [2015/07/15 11:40:43 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  342. [2015/07/15 11:40:41 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  343. [2015/07/15 11:40:41 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  344. [2015/07/15 11:40:40 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  345. [2015/07/15 11:40:38 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  346. [2015/07/15 11:40:38 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  347. [2015/07/15 11:40:36 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  348. [2015/07/15 11:40:36 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  349. [2015/07/15 11:40:36 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  350. [2015/07/15 11:40:35 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  351. [2015/07/15 11:40:32 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  352. [2015/07/15 11:40:31 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  353. [2015/07/15 11:40:31 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  354. [2015/07/15 11:40:28 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  355. [2015/07/15 11:40:27 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  356. [2015/07/15 11:40:27 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  357. [2015/07/15 11:39:50 | 002,087,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
  358. [2015/07/15 11:31:22 | 001,145,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  359. [2015/07/15 11:31:22 | 001,085,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
  360. [2015/07/15 11:31:22 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  361. [2015/07/15 11:31:21 | 000,765,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
  362. [2015/07/15 11:31:21 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
  363. [2015/07/15 11:31:21 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  364. [2015/07/15 11:31:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
  365. [2015/07/15 11:31:21 | 000,017,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
  366. [2015/07/13 18:31:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\4chan Plus
  367. [2015/07/08 22:09:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Link Checker
  368. [2015/07/06 14:48:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ Invite All
  369. [2015/07/05 22:41:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Black Menu for
  370. [2015/06/29 21:15:22 | 000,190,648 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kneps.sys
  371. [2015/06/29 21:15:22 | 000,085,360 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klwtp.sys
  372. [2015/06/29 21:15:22 | 000,065,208 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kltdi.sys
  373. [2015/06/29 21:15:22 | 000,039,280 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klmouflt.sys
  374. [2015/06/29 21:15:22 | 000,024,944 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klpd.sys
  375. [2015/06/29 21:15:20 | 000,478,392 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kl1.sys
  376. [2015/06/29 21:15:20 | 000,247,016 | ---- | C] (Kaspersky Lab UK Ltd) -- C:\Windows\SysNative\drivers\cm_km_w.sys
  377. [2015/06/29 21:15:20 | 000,064,368 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kldisk.sys
  378. [2015/06/29 21:15:20 | 000,040,304 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klkbdflt.sys
  379. [2015/06/29 21:15:20 | 000,039,280 | ---- | C] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klim6.sys
  380. [2015/06/26 19:07:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mahjong
  381.  
  382. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  383.  
  384. [2015/07/26 07:30:38 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  385. [2015/07/26 07:30:38 | 000,026,192 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  386. [2015/07/26 07:21:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  387. [2015/07/26 07:21:44 | 3104,722,944 | -HS- | M] () -- C:\hiberfil.sys
  388. [2015/07/26 06:54:24 | 000,000,911 | ---- | M] () -- C:\Windows\tasks\EPSON XP-412 413 415 Series Update {F06DB3EF-581A-4ABE-B7CD-8CEBCDA209DE}.job
  389. [2015/07/26 06:54:24 | 000,000,725 | ---- | M] () -- C:\Windows\tasks\EPSON XP-412 413 415 Series Invitation {F06DB3EF-581A-4ABE-B7CD-8CEBCDA209DE}.job
  390. [2015/07/26 06:40:03 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  391. [2015/07/26 06:14:07 | 000,000,024 | ---- | M] () -- C:\Users\Pawel\AppData\Roaming\appdataFr25.bin
  392. [2015/07/26 06:09:47 | 000,042,892 | ---- | M] () -- C:\Users\Pawel\Documents\cc_20150726_060944.reg
  393. [2015/07/26 06:09:37 | 000,149,420 | ---- | M] () -- C:\Users\Pawel\Documents\cc_20150726_060933.reg
  394. [2015/07/26 05:57:53 | 000,000,266 | RHS- | M] () -- C:\Users\Pawel\ntuser.pol
  395. [2015/07/26 05:54:07 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\YogaGuide.job
  396. [2015/07/26 05:54:05 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\WordJumble.job
  397. [2015/07/26 05:54:05 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\PageKeeper.job
  398. [2015/07/26 05:54:05 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\OrangeDozage.job
  399. [2015/07/26 05:54:05 | 000,000,322 | ---- | M] () -- C:\Windows\tasks\StashCache.job
  400. [2015/07/26 05:54:04 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\FilmCricket.job
  401. [2015/07/26 05:54:02 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\FactorTractor.job
  402. [2015/07/26 05:54:02 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\DashKeep.job
  403. [2015/07/26 05:54:02 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\CommutePlanner.job
  404. [2015/07/26 05:54:02 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\EmojiForYou.job
  405. [2015/07/26 05:52:24 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\CommandDoc.job
  406. [2015/07/26 05:52:24 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\AppLib.job
  407. [2015/07/26 05:52:23 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\GymBro.job
  408. [2015/07/26 05:52:23 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\FastCode.job
  409. [2015/07/26 05:52:19 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\DataParser.job
  410. [2015/07/26 05:52:19 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\MedTracker.job
  411. [2015/07/26 05:52:16 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\ArtAcess.job
  412. [2015/07/25 20:46:09 | 000,000,354 | ---- | M] () -- C:\Windows\tasks\SniperHit.job
  413. [2015/07/25 18:34:40 | 000,570,079 | ---- | M] () -- C:\Users\Pawel\Desktop\paweł11.jpeg
  414. [2015/07/25 18:31:27 | 000,002,053 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Total Security.lnk
  415. [2015/07/21 22:45:19 | 000,315,944 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  416. [2015/07/21 09:42:21 | 001,669,190 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  417. [2015/07/21 09:42:21 | 000,744,810 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  418. [2015/07/21 09:42:21 | 000,666,788 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  419. [2015/07/21 09:42:21 | 000,160,160 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  420. [2015/07/21 09:42:21 | 000,126,432 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  421. [2015/07/20 22:01:58 | 000,000,020 | ---- | M] () -- C:\Users\Pawel\AppData\Roaming\appdataFr2.bin
  422. [2015/07/15 18:40:16 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  423. [2015/07/15 18:40:16 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  424. [2015/07/15 18:40:05 | 018,524,336 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  425. [2015/07/15 05:19:54 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
  426. [2015/07/15 05:19:50 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
  427. [2015/07/15 05:19:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
  428. [2015/07/15 05:19:45 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
  429. [2015/07/15 04:55:37 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
  430. [2015/07/15 04:55:32 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
  431. [2015/07/15 03:59:42 | 000,372,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
  432. [2015/07/15 03:52:35 | 000,299,008 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
  433. [2015/07/12 11:59:16 | 000,000,266 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  434. [2015/07/09 19:59:59 | 000,017,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
  435. [2015/07/09 19:58:56 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  436. [2015/07/09 19:58:56 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  437. [2015/07/09 19:58:56 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  438. [2015/07/09 19:58:55 | 003,154,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  439. [2015/07/09 19:58:55 | 000,696,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  440. [2015/07/09 19:58:55 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  441. [2015/07/09 19:58:41 | 000,726,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  442. [2015/07/09 19:58:34 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
  443. [2015/07/09 19:58:31 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
  444. [2015/07/09 19:58:26 | 000,433,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
  445. [2015/07/09 19:58:25 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
  446. [2015/07/09 19:58:24 | 001,085,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
  447. [2015/07/09 19:58:23 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  448. [2015/07/09 19:58:23 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
  449. [2015/07/09 19:58:20 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  450. [2015/07/09 19:58:20 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  451. [2015/07/09 19:50:11 | 001,145,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  452. [2015/07/09 19:43:25 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
  453. [2015/07/09 19:43:25 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
  454. [2015/07/09 19:43:25 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
  455. [2015/07/09 19:43:24 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
  456. [2015/07/09 19:42:47 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
  457. [2015/07/06 09:59:04 | 000,000,383 | ---- | M] () -- C:\ftconfig.ini
  458. [2015/07/04 20:07:11 | 002,087,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
  459. [2015/07/02 22:46:34 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  460. [2015/07/02 22:12:26 | 000,615,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  461. [2015/07/01 22:49:45 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  462. [2015/07/01 22:49:45 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  463. [2015/07/01 22:49:42 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  464. [2015/07/01 22:49:41 | 001,216,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
  465. [2015/07/01 22:49:23 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  466. [2015/07/01 22:49:11 | 001,461,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  467. [2015/07/01 22:48:34 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
  468. [2015/07/01 22:47:18 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
  469. [2015/07/01 22:43:51 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
  470. [2015/07/01 22:43:37 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
  471. [2015/07/01 22:39:24 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
  472. [2015/07/01 22:29:46 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
  473. [2015/07/01 22:27:04 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
  474. [2015/07/01 22:26:52 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
  475. [2015/07/01 22:24:59 | 000,686,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
  476. [2015/06/29 21:15:22 | 000,190,648 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kneps.sys
  477. [2015/06/29 21:15:22 | 000,085,360 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klwtp.sys
  478. [2015/06/29 21:15:22 | 000,065,208 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kltdi.sys
  479. [2015/06/29 21:15:22 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klmouflt.sys
  480. [2015/06/29 21:15:22 | 000,024,944 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klpd.sys
  481. [2015/06/29 21:15:20 | 000,850,608 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klif.sys
  482. [2015/06/29 21:15:20 | 000,478,392 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kl1.sys
  483. [2015/06/29 21:15:20 | 000,247,016 | ---- | M] (Kaspersky Lab UK Ltd) -- C:\Windows\SysNative\drivers\cm_km_w.sys
  484. [2015/06/29 21:15:20 | 000,225,976 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klhk.sys
  485. [2015/06/29 21:15:20 | 000,159,960 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klflt.sys
  486. [2015/06/29 21:15:20 | 000,064,368 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\kldisk.sys
  487. [2015/06/29 21:15:20 | 000,040,304 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klkbdflt.sys
  488. [2015/06/29 21:15:20 | 000,039,280 | ---- | M] (Kaspersky Lab ZAO) -- C:\Windows\SysNative\drivers\klim6.sys
  489. [2015/06/27 14:31:49 | 000,001,315 | ---- | M] () -- C:\Users\Pawel\Desktop\ROBLOX Player.lnk
  490. [2015/06/27 14:31:49 | 000,001,134 | ---- | M] () -- C:\Users\Pawel\Desktop\ROBLOX Studio.lnk
  491. [2015/06/27 04:47:11 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  492. [2015/06/27 04:43:26 | 005,923,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  493. [2015/06/27 03:58:17 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  494.  
  495. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  496.  
  497. [2015/07/26 06:09:46 | 000,042,892 | ---- | C] () -- C:\Users\Pawel\Documents\cc_20150726_060944.reg
  498. [2015/07/26 06:09:35 | 000,149,420 | ---- | C] () -- C:\Users\Pawel\Documents\cc_20150726_060933.reg
  499. [2015/07/25 18:36:33 | 000,000,024 | ---- | C] () -- C:\Users\Pawel\AppData\Roaming\appdataFr25.bin
  500. [2015/07/25 18:31:49 | 000,002,053 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Total Security.lnk
  501. [2015/07/25 16:08:06 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\CommandDoc.job
  502. [2015/07/23 22:15:22 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\MedTracker.job
  503. [2015/07/17 10:59:25 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\FilmCricket.job
  504. [2015/07/12 22:53:09 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\OrangeDozage.job
  505. [2015/07/12 22:53:09 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\ArtAcess.job
  506. [2015/07/11 16:08:05 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\YogaGuide.job
  507. [2015/07/09 10:33:48 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\GymBro.job
  508. [2015/07/09 10:33:48 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\EmojiForYou.job
  509. [2015/07/07 22:08:04 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\FactorTractor.job
  510. [2015/07/06 18:30:03 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\WordJumble.job
  511. [2015/07/06 09:59:04 | 000,000,383 | ---- | C] () -- C:\ftconfig.ini
  512. [2015/07/05 22:40:30 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\PageKeeper.job
  513. [2015/07/05 22:40:06 | 000,000,354 | ---- | C] () -- C:\Windows\tasks\DataParser.job
  514. [2015/06/22 12:55:33 | 000,000,020 | ---- | C] () -- C:\Users\Pawel\AppData\Roaming\appdataFr2.bin
  515. [2015/05/11 22:48:05 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI
  516. [2015/04/10 18:56:19 | 000,000,266 | RHS- | C] () -- C:\Users\Pawel\ntuser.pol
  517. [2014/05/30 23:29:40 | 001,633,460 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  518. [2014/05/28 16:59:30 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  519.  
  520. [color=#E56717]========== ZeroAccess Check ==========[/color]
  521.  
  522. [2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  523.  
  524. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  525.  
  526. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  527.  
  528. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  529.  
  530. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  531.  
  532. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  533. "" = C:\Windows\SysNative\shell32.dll -- [2015/02/13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
  534. "ThreadingModel" = Apartment
  535.  
  536. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  537. "" = %SystemRoot%\system32\shell32.dll -- [2015/02/13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
  538. "ThreadingModel" = Apartment
  539.  
  540. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  541. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  542. "ThreadingModel" = Free
  543.  
  544. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  545. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  546. "ThreadingModel" = Free
  547.  
  548. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  549. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  550. "ThreadingModel" = Both
  551.  
  552. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  553.  
  554. [color=#E56717]========== LOP Check ==========[/color]
  555.  
  556. [2014/05/28 18:18:08 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
  557. [2014/05/28 18:18:08 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
  558. [2014/05/28 18:37:32 | 000,000,000 | ---D | M] -- C:\Users\Pawel\AppData\Roaming\DAEMON Tools Lite
  559. [2015/05/11 13:10:59 | 000,000,000 | ---D | M] -- C:\Users\Pawel\AppData\Roaming\Epson
  560. [2014/05/28 18:51:25 | 000,000,000 | ---D | M] -- C:\Users\Pawel\AppData\Roaming\LibreOffice
  561. [2015/07/26 05:53:43 | 000,000,000 | ---D | M] -- C:\Users\Pawel\AppData\Roaming\Sad Bunch
  562. [2014/05/28 18:14:09 | 000,000,000 | ---D | M] -- C:\Users\Pawel\AppData\Roaming\TuneUp Software
  563. [2015/07/25 18:59:46 | 000,000,000 | ---D | M] -- C:\Users\Pawel\AppData\Roaming\uTorrent
  564.  
  565. [color=#E56717]========== Purity Check ==========[/color]
  566.  
  567.  
  568.  
  569. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!