API tools faq
paste
Guest User

OTL

a guest
Jun 6th, 2014
87
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 68.35 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-06-06 20:10:09 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mapex1\Downloads
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17041)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,99 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 48,99% Memory free
  8. 7,98 Gb Paging File | 5,53 Gb Available in Paging File | 69,27% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 98,41 Gb Total Space | 6,32 Gb Free Space | 6,42% Space Free | Partition Type: NTFS
  13. Drive D: | 416,99 Gb Total Space | 178,12 Gb Free Space | 42,71% Space Free | Partition Type: NTFS
  14. Drive E: | 416,02 Gb Total Space | 51,24 Gb Free Space | 12,32% Space Free | Partition Type: NTFS
  15. Unable to calculate disk information.
  16. Drive X: | 465,76 Gb Total Space | 133,40 Gb Free Space | 28,64% Space Free | Partition Type: NTFS
  17.  
  18. Computer Name: MAPEX1-KOMPUTER | User Name: Mapex1 | Logged in as Administrator.
  19. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  20. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  21.  
  22. [color=#E56717]========== Processes (SafeList) ==========[/color]
  23.  
  24. PRC - [2014-06-06 20:07:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mapex1\Downloads\OTL.exe
  25. PRC - [2014-05-20 02:45:22 | 033,322,312 | ---- | M] (Dropbox, Inc.) -- C:\Users\Mapex1\AppData\Roaming\Dropbox\bin\Dropbox.exe
  26. PRC - [2014-05-13 14:23:04 | 003,644,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
  27. PRC - [2014-05-13 14:18:32 | 005,181,456 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe
  28. PRC - [2014-05-13 14:15:28 | 000,292,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
  29. PRC - [2014-05-01 13:00:30 | 000,774,928 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
  30. PRC - [2014-05-01 12:59:34 | 000,832,272 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe
  31. PRC - [2014-05-01 12:58:24 | 000,385,808 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
  32. PRC - [2014-05-01 12:57:52 | 000,402,192 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-Service.exe
  33. PRC - [2014-05-01 12:57:48 | 000,367,888 | ---- | M] (BlueStack Systems) -- C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
  34. PRC - [2014-05-01 12:57:40 | 000,261,904 | ---- | M] (BlueStack Systems) -- C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
  35. PRC - [2014-05-01 12:57:38 | 000,379,152 | ---- | M] (BlueStack Systems) -- C:\Program Files (x86)\BlueStacks\HD-Network.exe
  36. PRC - [2014-05-01 12:39:48 | 000,410,911 | ---- | M] () -- C:\Program Files (x86)\BlueStacks\HD-Adb.exe
  37. PRC - [2014-04-30 20:30:53 | 002,199,840 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  38. PRC - [2014-04-30 20:30:40 | 001,618,888 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  39. PRC - [2014-02-27 05:04:46 | 000,783,648 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 4\Integrator.exe
  40. PRC - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  41. PRC - [2013-10-23 03:02:32 | 000,414,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  42. PRC - [2013-10-15 13:27:38 | 003,921,880 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
  43. PRC - [2013-09-20 11:57:26 | 001,042,272 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
  44. PRC - [2013-09-13 11:38:30 | 000,171,416 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
  45. PRC - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
  46. PRC - [2012-09-06 10:50:24 | 000,248,248 | R--- | M] (Western Digital) -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
  47. PRC - [2012-06-14 11:04:26 | 001,177,536 | R--- | M] (Western Digital ) -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
  48. PRC - [2010-01-19 04:31:26 | 000,072,304 | R--- | M] () -- C:\Windows\SysWOW64\XSrvSetup.exe
  49.  
  50.  
  51. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  52.  
  53. MOD - [2014-06-06 18:55:02 | 000,043,008 | ---- | M] () -- c:\users\mapex1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpu09gw3.dll
  54. MOD - [2014-05-18 18:18:54 | 001,412,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\HD-Agent\ffeb373470558b046683d3eef69a52ea\HD-Agent.ni.exe
  55. MOD - [2014-05-16 14:31:22 | 011,922,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\70dbdd46969daf2bea2443c75b7629d4\System.Web.ni.dll
  56. MOD - [2014-05-10 19:53:33 | 000,155,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\JSON\ccebb215133fdf1ee3cfec9e2d12d36f\JSON.ni.dll
  57. MOD - [2014-05-01 12:39:48 | 000,410,911 | ---- | M] () -- C:\Program Files (x86)\BlueStacks\HD-Adb.exe
  58. MOD - [2014-02-26 07:39:22 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 4\zlib1.dll
  59. MOD - [2014-02-13 15:03:12 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\8bc548587e91ecf0552a40e47bbf99cc\System.Windows.Forms.ni.dll
  60. MOD - [2014-02-13 15:03:05 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5c24d3b0041ebf4f48a93615b9fa3de9\System.Drawing.ni.dll
  61. MOD - [2014-02-13 15:02:31 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\217ece46920546d718414291d463bb1c\System.Xml.ni.dll
  62. MOD - [2014-02-13 15:02:27 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5b6ddf934128d538cd5cd77bf4209b93\System.Configuration.ni.dll
  63. MOD - [2014-02-13 15:02:26 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\b3a78269847005365001c33870cd121f\System.ni.dll
  64. MOD - [2014-02-13 15:01:46 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll
  65. MOD - [2014-01-03 03:09:26 | 003,610,624 | ---- | M] () -- C:\Users\Mapex1\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
  66. MOD - [2013-08-23 21:01:44 | 025,100,288 | ---- | M] () -- C:\Users\Mapex1\AppData\Roaming\Dropbox\bin\libcef.dll
  67. MOD - [2010-11-13 04:37:37 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
  68. MOD - [2010-11-05 03:54:51 | 000,208,896 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll
  69.  
  70.  
  71. [color=#E56717]========== Services (SafeList) ==========[/color]
  72.  
  73. SRV:[b]64bit:[/b] - [2014-04-30 20:30:30 | 021,009,352 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
  74. SRV:[b]64bit:[/b] - [2014-03-06 10:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  75. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  76. SRV:[b]64bit:[/b] - [2010-12-13 14:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
  77. SRV:[b]64bit:[/b] - [2010-04-06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
  78. SRV:[b]64bit:[/b] - [2009-12-08 20:25:45 | 005,009,920 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
  79. SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  80. SRV - [2014-05-14 18:45:28 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  81. SRV - [2014-05-13 14:23:04 | 003,644,432 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)
  82. SRV - [2014-05-13 14:15:28 | 000,292,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)
  83. SRV - [2014-05-01 13:00:30 | 000,774,928 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe -- (BstHdUpdaterSvc)
  84. SRV - [2014-05-01 12:58:24 | 000,385,808 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
  85. SRV - [2014-05-01 12:57:52 | 000,402,192 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc)
  86. SRV - [2014-04-30 20:30:40 | 001,618,888 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  87. SRV - [2014-02-17 15:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
  88. SRV - [2014-01-23 14:33:48 | 002,221,904 | ---- | M] (LogMeIn Inc.) [On_Demand | Stopped] -- D:\programy\hamachi\hamachi-2.exe -- (Hamachi2Svc)
  89. SRV - [2014-01-03 02:32:12 | 001,363,616 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  90. SRV - [2014-01-03 02:32:04 | 001,748,640 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  91. SRV - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  92. SRV - [2013-11-27 10:25:08 | 017,184,160 | ---- | M] (PACE Anti-Piracy, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe -- (PaceLicenseDServices)
  93. SRV - [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- D:\programy\Skype\Updater\Updater.exe -- (SkypeUpdate)
  94. SRV - [2013-10-23 03:02:32 | 000,414,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
  95. SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  96. SRV - [2013-08-28 23:47:18 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  97. SRV - [2013-04-04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  98. SRV - [2013-04-04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  99. SRV - [2013-02-19 15:46:10 | 000,968,880 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe -- (vToolbarUpdater14.2.0)
  100. SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
  101. SRV - [2012-09-06 10:50:24 | 000,248,248 | R--- | M] (Western Digital) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe -- (WDDriveService)
  102. SRV - [2012-06-14 11:04:26 | 001,177,536 | R--- | M] (Western Digital ) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe -- (WDRulesService)
  103. SRV - [2012-06-14 11:04:24 | 001,151,424 | R--- | M] (Western Digital ) [On_Demand | Stopped] -- C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe -- (WDBackup)
  104. SRV - [2010-06-25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
  105. SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  106. SRV - [2010-01-25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
  107. SRV - [2010-01-19 04:31:26 | 000,072,304 | R--- | M] () [Auto | Running] -- C:\Windows\SysWOW64\XSrvSetup.exe -- (JMB36X)
  108. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  109.  
  110.  
  111. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  112.  
  113. DRV:[b]64bit:[/b] - [2014-05-13 14:20:26 | 000,235,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
  114. DRV:[b]64bit:[/b] - [2014-05-13 14:20:06 | 000,273,176 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
  115. DRV:[b]64bit:[/b] - [2014-05-13 14:06:06 | 000,323,352 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
  116. DRV:[b]64bit:[/b] - [2014-05-13 14:05:40 | 000,191,768 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
  117. DRV:[b]64bit:[/b] - [2014-05-13 14:05:08 | 000,152,344 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
  118. DRV:[b]64bit:[/b] - [2014-05-13 14:05:06 | 000,130,328 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
  119. DRV:[b]64bit:[/b] - [2014-05-13 14:04:56 | 000,236,312 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
  120. DRV:[b]64bit:[/b] - [2014-05-13 14:04:30 | 000,031,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
  121. DRV:[b]64bit:[/b] - [2014-04-30 20:30:30 | 000,019,744 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
  122. DRV:[b]64bit:[/b] - [2014-03-31 18:42:44 | 000,040,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
  123. DRV:[b]64bit:[/b] - [2014-02-26 07:17:38 | 000,017,088 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver)
  124. DRV:[b]64bit:[/b] - [2013-08-06 16:13:30 | 000,023,040 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
  125. DRV:[b]64bit:[/b] - [2013-06-16 14:38:15 | 000,196,384 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  126. DRV:[b]64bit:[/b] - [2013-04-11 15:08:40 | 000,106,704 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Tpkd.sys -- (Tpkd)
  127. DRV:[b]64bit:[/b] - [2013-04-04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  128. DRV:[b]64bit:[/b] - [2013-03-18 17:51:08 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  129. DRV:[b]64bit:[/b] - [2013-02-19 15:46:10 | 000,039,768 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
  130. DRV:[b]64bit:[/b] - [2012-12-18 08:43:32 | 000,359,784 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a4djavs.sys -- (a4djavs)
  131. DRV:[b]64bit:[/b] - [2012-12-18 08:43:32 | 000,099,688 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a4djusb.sys -- (a4djusb_svc)
  132. DRV:[b]64bit:[/b] - [2012-08-29 12:50:38 | 000,057,408 | ---- | M] (MusicLab, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mlkumidi.sys -- (mlkumidi)
  133. DRV:[b]64bit:[/b] - [2012-08-21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  134. DRV:[b]64bit:[/b] - [2012-06-13 16:51:42 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wdcsam64.sys -- (WDC_SAM)
  135. DRV:[b]64bit:[/b] - [2012-06-09 20:56:58 | 000,143,872 | ---- | M] (D&M Holdings Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ddjctraud.sys -- (DDJCTRAUDIO)
  136. DRV:[b]64bit:[/b] - [2012-06-02 14:47:13 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
  137. DRV:[b]64bit:[/b] - [2012-06-02 14:47:13 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
  138. DRV:[b]64bit:[/b] - [2012-04-19 05:57:38 | 000,126,912 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
  139. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  140. DRV:[b]64bit:[/b] - [2011-09-29 11:30:34 | 000,646,248 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  141. DRV:[b]64bit:[/b] - [2011-09-21 10:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
  142. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  143. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  144. DRV:[b]64bit:[/b] - [2010-12-13 14:37:18 | 000,036,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo)
  145. DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  146. DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  147. DRV:[b]64bit:[/b] - [2010-11-20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  148. DRV:[b]64bit:[/b] - [2010-11-11 02:11:50 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
  149. DRV:[b]64bit:[/b] - [2010-10-13 01:10:52 | 000,034,376 | ---- | M] (Bome Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bomebus.sys -- (bomebus)
  150. DRV:[b]64bit:[/b] - [2010-10-13 01:10:52 | 000,030,792 | ---- | M] (Bome Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bomemidi.sys -- (bomemidi)
  151. DRV:[b]64bit:[/b] - [2010-06-25 19:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
  152. DRV:[b]64bit:[/b] - [2010-06-14 09:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
  153. DRV:[b]64bit:[/b] - [2010-04-27 11:56:38 | 000,021,544 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
  154. DRV:[b]64bit:[/b] - [2010-01-27 10:58:38 | 000,115,312 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)
  155. DRV:[b]64bit:[/b] - [2009-10-08 14:01:59 | 000,044,624 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a4djavs_x64.sys -- (a4djavs_x64)
  156. DRV:[b]64bit:[/b] - [2009-10-08 14:01:56 | 000,300,112 | ---- | M] (Native Instruments GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a4djusb_x64.sys -- (a4djusb_x64)
  157. DRV:[b]64bit:[/b] - [2009-09-18 02:34:00 | 000,158,592 | ---- | M] (Roland Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rdwm1005.sys -- (RDID1005)
  158. DRV:[b]64bit:[/b] - [2009-09-18 00:52:22 | 000,765,448 | ---- | M] (Eugene Gavrilov) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kx.sys -- (kxwdmdrv)
  159. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  160. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  161. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  162. DRV:[b]64bit:[/b] - [2009-07-14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
  163. DRV:[b]64bit:[/b] - [2009-07-14 02:06:43 | 000,060,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\61883.sys -- (61883)
  164. DRV:[b]64bit:[/b] - [2009-07-14 02:06:43 | 000,048,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avc.sys -- (Avc)
  165. DRV:[b]64bit:[/b] - [2009-06-10 22:35:53 | 000,051,712 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rtnic64.sys -- (RTL8023x64)
  166. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  167. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  168. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  169. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  170. DRV:[b]64bit:[/b] - [2009-04-29 17:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
  171. DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  172. DRV:[b]64bit:[/b] - [2008-10-21 10:22:44 | 000,145,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017unic.sys -- (s0017unic)
  173. DRV:[b]64bit:[/b] - [2008-10-21 10:22:44 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017obex.sys -- (s0017obex)
  174. DRV:[b]64bit:[/b] - [2008-10-21 10:22:44 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017nd5.sys -- (s0017nd5)
  175. DRV:[b]64bit:[/b] - [2008-10-21 10:22:42 | 000,152,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mdm.sys -- (s0017mdm)
  176. DRV:[b]64bit:[/b] - [2008-10-21 10:22:42 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mgmt.sys -- (s0017mgmt)
  177. DRV:[b]64bit:[/b] - [2008-10-21 10:22:42 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mdfl.sys -- (s0017mdfl)
  178. DRV:[b]64bit:[/b] - [2008-10-21 10:22:40 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017bus.sys -- (s0017bus)
  179. DRV:[b]64bit:[/b] - [2007-11-02 12:47:32 | 000,130,088 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s916mgmt.sys -- (s916mgmt)
  180. DRV:[b]64bit:[/b] - [2007-11-02 12:47:32 | 000,124,968 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s916obex.sys -- (s916obex)
  181. DRV:[b]64bit:[/b] - [2007-11-02 10:47:32 | 000,145,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s916mdm.sys -- (s916mdm)
  182. DRV:[b]64bit:[/b] - [2007-11-02 10:47:32 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s916bus.sys -- (s916bus)
  183. DRV:[b]64bit:[/b] - [2007-11-02 10:47:32 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s916mdfl.sys -- (s916mdfl)
  184. DRV:[b]64bit:[/b] - [2007-06-06 12:10:42 | 000,068,920 | ---- | M] (BridgeCo AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fs2_avs_x64.sys -- (fs2_avs)
  185. DRV:[b]64bit:[/b] - [2007-06-06 12:10:40 | 000,183,608 | ---- | M] (BridgeCo AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fs2_1394_x64.sys -- (fs2_1394)
  186. DRV - [2014-05-01 12:58:10 | 000,123,152 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv)
  187. DRV - [2010-06-14 09:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
  188. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  189.  
  190.  
  191. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  192.  
  193.  
  194. [color=#E56717]========== Internet Explorer ==========[/color]
  195.  
  196. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820
  197. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388401572&from=cor&uid=3219913727_132693_4C1EDC67&q={searchTerms}
  198. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388401572&from=cor&uid=3219913727_132693_4C1EDC67&q={searchTerms}
  199. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820
  200. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  201. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  202. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.aartemis.com/web/?type=ds&ts=1388401572&from=cor&uid=3219913727_132693_4C1EDC67&q={searchTerms}
  203. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820
  204. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1388401572&from=cor&uid=3219913727_132693_4C1EDC67&q={searchTerms}
  205. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  206. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1388401572&from=cor&uid=3219913727_132693_4C1EDC67&q={searchTerms}
  207. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820
  208. IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  209. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  210. IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.aartemis.com/web/?type=ds&ts=1388401572&from=cor&uid=3219913727_132693_4C1EDC67&q={searchTerms}
  211.  
  212. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820
  213. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820&type=default&q={searchTerms}
  214. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820&type=default&q={searchTerms}
  215. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  216. IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  217. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
  218. IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820&type=default&q={searchTerms}
  219. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  220. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  221.  
  222. [color=#E56717]========== FireFox ==========[/color]
  223.  
  224. FF - prefs.js..browser.startup.homepage: "http://google.pl/"
  225. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
  226. FF - user.js - File not found
  227.  
  228. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found
  229. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll File not found
  230. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  231. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  232. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  233. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  234. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
  235. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
  236. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  237. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\programy\iTunes\Mozilla Plugins\npitunes.dll ()
  238. FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: D:\programy\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
  239. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\programy\Picasa3\npPicasa3.dll (Google, Inc.)
  240. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  241. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  242. FF - HKLM\Software\MozillaPlugins\@kuaiyong.yrtd.com,version=1.0.1.1: File not found
  243. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  244. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  245. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\programy\office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  246. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\programy\office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  247. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
  248. FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
  249. FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: File not found
  250. FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: D:\programy\SonyMedia Go\npmediago.dll (Sony Network Entertainment International LLC)
  251. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  252. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  253. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  254.  
  255. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\Mapex1\AppData\Roaming\Mozilla\Firefox\Profiles\923i30qx.default-1383665049945\extensions\[email protected]
  256. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: D:\programy\przeglądarki\firefox\components
  257. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: D:\programy\thunderbird\components [2014-04-30 12:25:29 | 000,000,000 | ---D | M]
  258. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\TubeSaver\133.xpi [2013-09-12 09:20:32 | 000,005,139 | ---- | M] ()
  259. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: D:\programy\przeglądarki\firefox\components
  260. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: D:\programy\przeglądarki\firefox\plugins
  261. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Components: D:\programy\thunderbird\components [2014-04-30 12:25:29 | 000,000,000 | ---D | M]
  262. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.5.0\extensions\\Plugins: D:\programy\thunderbird\plugins
  263.  
  264. [2014-02-28 12:05:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mapex1\AppData\Roaming\mozilla\Extensions
  265. [2014-03-21 12:12:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mapex1\AppData\Roaming\mozilla\Firefox\Profiles\923i30qx.default-1383665049945\extensions
  266.  
  267. [color=#E56717]========== Chrome ==========[/color]
  268.  
  269. CHR - default_search_provider: delta-homes (Enabled)
  270. CHR - default_search_provider: search_url = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820&type=default&q={searchTerms}
  271. CHR - default_search_provider: suggest_url =
  272. CHR - homepage: http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=3219913727_132693_4C1EDC67&ts=1393425820
  273. CHR - Extension: Docs = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
  274. CHR - Extension: Docs = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  275. CHR - Extension: Dysk Google = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
  276. CHR - Extension: Dysk Google = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  277. CHR - Extension: YouTube = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
  278. CHR - Extension: YouTube = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  279. CHR - Extension: Szukaj w Google = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
  280. CHR - Extension: Szukaj w Google = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  281. CHR - Extension: Lightning Newtab = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.8.4_0\
  282. CHR - Extension: Skype Click to Call = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.0.14735.1561_0\
  283. CHR - Extension: Google Wallet = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  284. CHR - Extension: Google Wallet = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
  285. CHR - Extension: Extended Protection = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\
  286. CHR - Extension: TubeSaver = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcdnngpmbenohhjlickdajclhbcaada\1.133_0\
  287. CHR - Extension: Gmail = C:\Users\Mapex1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  288.  
  289. O1 HOSTS File: ([2013-11-05 16:50:29 | 000,449,827 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  290. O1 - Hosts: 127.0.0.1 genuine.microsoft.com
  291. O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
  292. O1 - Hosts: 127.0.0.1 sls.microsoft.com
  293. O1 - Hosts: 46.4.148.152 sek.karachan.org
  294. O1 - Hosts: 64.191.102.135 karachan.org
  295. O1 - Hosts: 64.191.102.135 www.karachan.org
  296. O1 - Hosts: 127.0.0.1 www.007guard.com
  297. O1 - Hosts: 127.0.0.1 007guard.com
  298. O1 - Hosts: 127.0.0.1 008i.com
  299. O1 - Hosts: 127.0.0.1 www.008k.com
  300. O1 - Hosts: 127.0.0.1 008k.com
  301. O1 - Hosts: 127.0.0.1 www.00hq.com
  302. O1 - Hosts: 127.0.0.1 00hq.com
  303. O1 - Hosts: 127.0.0.1 010402.com
  304. O1 - Hosts: 127.0.0.1 www.032439.com
  305. O1 - Hosts: 127.0.0.1 032439.com
  306. O1 - Hosts: 127.0.0.1 www.0scan.com
  307. O1 - Hosts: 127.0.0.1 0scan.com
  308. O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
  309. O1 - Hosts: 127.0.0.1 1000gratisproben.com
  310. O1 - Hosts: 127.0.0.1 1001namen.com
  311. O1 - Hosts: 127.0.0.1 www.1001namen.com
  312. O1 - Hosts: 127.0.0.1 100888290cs.com
  313. O1 - Hosts: 127.0.0.1 www.100888290cs.com
  314. O1 - Hosts: 127.0.0.1 www.100sexlinks.com
  315. O1 - Hosts: 15441 more lines...
  316. O2:[b]64bit:[/b] - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll File not found
  317. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  318. O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  319. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  320. O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
  321. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  322. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  323. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\programy\office\Office14\URLREDIR.DLL (Microsoft Corporation)
  324. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  325. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  326. O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
  327. O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 4\StartupManager.exe (Glarysoft Ltd)
  328. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  329. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  330. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  331. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  332. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = [binary data]
  333. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
  334. O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\programy\office\Office14\EXCEL.EXE (Microsoft Corporation)
  335. O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - D:\programy\office\Office14\ONBttnIE.dll (Microsoft Corporation)
  336. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
  337. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\programy\office\Office14\EXCEL.EXE (Microsoft Corporation)
  338. O8 - Extra context menu item: Wyślij &do programu OneNote - D:\programy\office\Office14\ONBttnIE.dll (Microsoft Corporation)
  339. O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  340. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\programy\office\Office14\ONBttnIE.dll (Microsoft Corporation)
  341. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\programy\office\Office14\ONBttnIE.dll (Microsoft Corporation)
  342. O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\programy\office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  343. O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\programy\office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  344. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  345. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  346. O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  347. O13[b]64bit:[/b] - gopher Prefix: missing
  348. O13 - gopher Prefix: missing
  349. O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  350. O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  351. O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
  352. O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
  353. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  354. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{14F77552-E415-40B1-9508-CD0BD7D065E7}: DhcpNameServer = 192.168.0.1
  355. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{21C9F0C5-384B-44FF-8C10-A916A6551D90}: DhcpNameServer = 194.204.152.34 194.204.159.1
  356. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7D90E608-B004-44B5-B073-E343EA6E63B0}: DhcpNameServer = 172.20.10.1
  357. O18:[b]64bit:[/b] - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll File not found
  358. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  359. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  360. O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  361. O18 - Protocol\Handler\linkscanner - No CLSID value found
  362. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  363. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  364. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  365. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  366. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  367. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  368. O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
  369. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  370. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  371. O32 - HKLM CDRom: AutoRun - 1
  372. O32 - AutoRun File - [2014-03-01 14:11:28 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  373. O32 - AutoRun File - [2014-04-10 23:35:20 | 000,021,527 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
  374. O34 - HKLM BootExecute: (autocheck autochk *)
  375. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  376. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  377. O35 - HKLM\..comfile [open] -- "%1" %*
  378. O35 - HKLM\..exefile [open] -- "%1" %*
  379. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  380. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  381. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  382. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  383. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  384. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  385. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  386.  
  387. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  388.  
  389. [2050-05-07 19:10:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\OFX
  390. [2050-05-07 19:10:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\OFX
  391. [2050-05-07 19:10:30 | 000,000,000 | ---D | C] -- C:\ProgramData\eSellerate
  392. [2050-05-07 19:10:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\eSellerate
  393. [2050-05-07 19:10:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue
  394. [2050-05-07 19:10:16 | 000,000,000 | ---D | C] -- C:\Program Files\NewBlue
  395. [2050-05-07 19:09:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NewBlue
  396. [2014-06-04 15:00:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
  397. [2014-06-02 19:26:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  398. [2014-06-02 19:26:12 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
  399. [2014-06-02 19:26:11 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
  400. [2014-06-02 19:26:11 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
  401. [2014-06-02 17:20:07 | 000,017,088 | ---- | C] (Glarysoft Ltd) -- C:\Windows\SysNative\drivers\BootDefragDriver.sys
  402. [2014-05-23 23:16:51 | 000,000,000 | ---D | C] -- C:\Users\Mapex1\Documents\Xilisoft Corporation
  403. [2014-05-23 23:16:51 | 000,000,000 | ---D | C] -- C:\Users\Mapex1\Application Data
  404. [2014-05-19 23:22:20 | 000,000,000 | ---D | C] -- C:\Users\Mapex1\AppData\Roaming\inkscape
  405. [2014-05-19 23:19:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Inkscape
  406. [2014-05-16 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\Mapex1\AppData\Local\EmieUserList
  407. [2014-05-16 19:56:17 | 000,000,000 | -HSD | C] -- C:\Users\Mapex1\AppData\Local\EmieSiteList
  408. [2014-05-15 20:18:50 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  409. [2014-05-15 20:18:50 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  410. [2014-05-15 20:18:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  411. [2014-05-15 17:12:35 | 000,477,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  412. [2014-05-15 17:12:34 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  413. [2014-05-15 17:07:18 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  414. [2014-05-15 17:07:18 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  415. [2014-05-15 17:07:18 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  416. [2014-05-15 17:07:17 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  417. [2014-05-15 17:07:17 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll
  418. [2014-05-15 17:07:17 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll
  419. [2014-05-15 17:07:17 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
  420. [2014-05-15 17:07:17 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  421. [2014-05-15 17:07:16 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  422. [2014-05-15 17:07:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll
  423. [2014-05-15 17:07:16 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll
  424. [2014-05-15 17:07:16 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll
  425. [2014-05-15 17:07:16 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll
  426. [2014-05-15 17:07:16 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll
  427. [2014-05-15 17:07:16 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll
  428. [2014-05-15 17:07:16 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll
  429. [2014-05-15 17:07:16 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll
  430. [2014-05-15 17:07:16 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll
  431. [2014-05-15 17:07:16 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll
  432. [2014-05-15 17:07:16 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll
  433. [2014-05-15 17:07:16 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll
  434. [2014-05-15 17:07:16 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  435. [2014-05-15 17:07:15 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  436. [2014-05-13 14:20:26 | 000,235,800 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys
  437. [2014-05-13 14:20:06 | 000,273,176 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys
  438. [2014-05-13 14:06:06 | 000,323,352 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgloga.sys
  439. [2014-05-13 14:05:40 | 000,191,768 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsha.sys
  440. [2014-05-13 14:05:08 | 000,152,344 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgdiska.sys
  441. [2014-05-13 14:05:06 | 000,130,328 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
  442. [2014-05-13 14:04:56 | 000,236,312 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys
  443. [2014-05-13 14:04:30 | 000,031,512 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgrkx64.sys
  444. [2014-05-11 14:41:08 | 000,000,000 | ---D | C] -- C:\Users\Mapex1\AppData\Local\NVIDIA Corporation
  445. [2014-05-11 14:40:43 | 000,040,392 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys
  446. [2014-05-11 14:40:43 | 000,034,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll
  447. [2014-05-11 14:40:09 | 000,000,000 | ---D | C] -- C:\Users\Mapex1\AppData\Local\NVIDIA
  448. [2014-05-11 14:25:12 | 001,225,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspcap64.dll
  449. [2014-05-11 14:25:12 | 001,081,112 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspcap.dll
  450. [2014-05-11 14:23:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
  451. [2014-05-11 14:16:11 | 000,037,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll
  452. [2014-05-11 14:16:09 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco64.dll
  453. [2014-05-11 14:16:09 | 000,196,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
  454. [2014-05-11 14:16:09 | 000,031,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
  455. [2014-05-11 14:16:02 | 001,884,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433165.dll
  456. [2014-05-11 14:16:02 | 001,511,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433165.dll
  457. [2014-05-11 14:15:59 | 030,344,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
  458. [2014-05-11 14:15:59 | 022,933,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
  459. [2014-05-11 14:15:59 | 011,374,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
  460. [2014-05-11 14:15:59 | 009,480,328 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
  461. [2014-05-11 14:15:59 | 001,241,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
  462. [2014-05-11 14:15:59 | 000,655,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
  463. [2014-05-11 14:15:59 | 000,317,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
  464. [2014-05-11 14:15:59 | 000,266,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
  465. [2014-05-11 14:15:59 | 000,168,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
  466. [2014-05-11 14:15:59 | 000,141,336 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
  467. [2014-05-11 14:15:58 | 025,257,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
  468. [2014-05-11 14:15:58 | 018,199,872 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
  469. [2014-05-11 14:15:58 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
  470. [2014-05-11 14:15:58 | 015,212,336 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
  471. [2014-05-11 14:15:58 | 011,426,568 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
  472. [2014-05-11 14:15:58 | 009,524,088 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
  473. [2014-05-11 14:15:58 | 003,131,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
  474. [2014-05-11 14:15:58 | 003,124,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
  475. [2014-05-11 14:15:58 | 002,946,848 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
  476. [2014-05-11 14:15:58 | 002,747,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
  477. [2014-05-11 14:15:58 | 000,696,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
  478. [2014-05-11 14:15:58 | 000,599,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
  479. [2014-05-11 14:15:58 | 000,560,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
  480. [2014-05-11 14:09:01 | 000,000,000 | ---D | C] -- C:\NVIDIA
  481. [2014-05-10 19:45:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
  482. [2014-05-10 19:45:18 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacks
  483. [2014-05-10 19:45:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlueStacks
  484. [2014-05-10 19:43:35 | 000,000,000 | ---D | C] -- C:\Users\Mapex1\AppData\Local\Bluestacks
  485. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  486. [1 C:\Users\Mapex1\*.tmp files -> C:\Users\Mapex1\*.tmp -> ]
  487.  
  488. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  489.  
  490. [2014-06-06 19:57:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  491. [2014-06-06 19:45:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  492. [2014-06-06 19:02:18 | 000,021,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  493. [2014-06-06 19:02:18 | 000,021,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  494. [2014-06-06 18:55:58 | 000,000,302 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
  495. [2014-06-06 18:50:27 | 000,000,332 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize 4.job
  496. [2014-06-06 18:50:06 | 000,000,374 | ---- | M] () -- C:\Windows\tasks\TubeSaver Update.job
  497. [2014-06-06 18:50:04 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  498. [2014-06-06 18:49:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  499. [2014-06-06 18:49:57 | 3214,528,512 | -HS- | M] () -- C:\hiberfil.sys
  500. [2014-06-05 22:16:18 | 001,670,590 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  501. [2014-06-05 22:16:18 | 000,740,438 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  502. [2014-06-05 22:16:18 | 000,654,270 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  503. [2014-06-05 22:16:18 | 000,156,012 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  504. [2014-06-05 22:16:18 | 000,122,142 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  505. [2014-06-02 19:27:00 | 000,001,578 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
  506. [2014-05-29 21:07:46 | 000,000,218 | ---- | M] () -- C:\Users\Mapex1\AppData\Local\recently-used.xbel
  507. [2014-05-29 15:15:09 | 000,430,756 | ---- | M] () -- C:\Users\Mapex1\Desktop\alfabet-palcowy2.JPG
  508. [2014-05-20 09:09:04 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk
  509. [2014-05-19 23:21:08 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\Inkscape.lnk
  510. [2014-05-19 17:35:08 | 000,000,859 | ---- | M] () -- C:\Users\Mapex1\Desktop\µTorrent.lnk
  511. [2014-05-16 20:03:07 | 000,000,810 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
  512. [2014-05-14 19:04:13 | 000,584,062 | ---- | M] () -- C:\Users\Mapex1\Desktop\img023.jpg
  513. [2014-05-14 19:04:13 | 000,378,330 | ---- | M] () -- C:\Users\Mapex1\Desktop\img024.jpg
  514. [2014-05-14 18:45:25 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  515. [2014-05-14 18:45:25 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  516. [2014-05-14 17:09:22 | 000,039,615 | ---- | M] () -- C:\Users\Mapex1\Documents\123.adr
  517. [2014-05-13 14:20:26 | 000,235,800 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys
  518. [2014-05-13 14:20:06 | 000,273,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys
  519. [2014-05-13 14:06:06 | 000,323,352 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgloga.sys
  520. [2014-05-13 14:05:40 | 000,191,768 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsha.sys
  521. [2014-05-13 14:05:08 | 000,152,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgdiska.sys
  522. [2014-05-13 14:05:06 | 000,130,328 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
  523. [2014-05-13 14:04:56 | 000,236,312 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys
  524. [2014-05-13 14:04:30 | 000,031,512 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgrkx64.sys
  525. [2014-05-11 14:25:19 | 000,001,351 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
  526. [2014-05-10 19:47:42 | 000,001,825 | ---- | M] () -- C:\Users\Public\Desktop\Apps.lnk
  527. [2014-05-10 19:47:38 | 000,001,807 | ---- | M] () -- C:\Users\Public\Desktop\Start BlueStacks.lnk
  528. [2014-05-09 21:49:09 | 000,069,341 | ---- | M] () -- C:\Users\Mapex1\Desktop\Pompa + wąż.pdf
  529. [2014-05-09 08:14:03 | 000,477,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  530. [2014-05-09 08:11:23 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  531. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  532. [1 C:\Users\Mapex1\*.tmp files -> C:\Users\Mapex1\*.tmp -> ]
  533.  
  534. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  535.  
  536. [2014-06-02 19:27:00 | 000,001,578 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
  537. [2014-05-29 21:07:46 | 000,000,218 | ---- | C] () -- C:\Users\Mapex1\AppData\Local\recently-used.xbel
  538. [2014-05-29 15:15:08 | 000,430,756 | ---- | C] () -- C:\Users\Mapex1\Desktop\alfabet-palcowy2.JPG
  539. [2014-05-19 23:21:23 | 000,001,055 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape.lnk
  540. [2014-05-19 23:21:08 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\Inkscape.lnk
  541. [2014-05-19 17:35:08 | 000,000,859 | ---- | C] () -- C:\Users\Mapex1\Desktop\µTorrent.lnk
  542. [2014-05-16 20:03:07 | 000,000,810 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
  543. [2014-05-16 20:03:07 | 000,000,810 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
  544. [2014-05-14 19:04:13 | 000,584,062 | ---- | C] () -- C:\Users\Mapex1\Desktop\img023.jpg
  545. [2014-05-14 19:04:13 | 000,378,330 | ---- | C] () -- C:\Users\Mapex1\Desktop\img024.jpg
  546. [2014-05-14 17:09:22 | 000,039,615 | ---- | C] () -- C:\Users\Mapex1\Documents\123.adr
  547. [2014-05-11 14:25:19 | 000,001,351 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
  548. [2014-05-10 19:47:42 | 000,001,825 | ---- | C] () -- C:\Users\Public\Desktop\Apps.lnk
  549. [2014-05-10 19:47:38 | 000,001,807 | ---- | C] () -- C:\Users\Public\Desktop\Start BlueStacks.lnk
  550. [2014-05-09 21:49:08 | 000,069,341 | ---- | C] () -- C:\Users\Mapex1\Desktop\Pompa + wąż.pdf
  551. [2014-04-20 17:02:04 | 000,001,534 | ---- | C] () -- C:\ProgramData\ss.ini
  552. [2014-02-27 22:19:57 | 002,275,328 | ---- | C] () -- C:\Windows\SysWow64\libsndfile-1.dll
  553. [2014-02-25 22:42:07 | 001,642,260 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  554. [2014-02-19 21:59:51 | 000,003,878 | ---- | C] () -- C:\Users\Mapex1\AppData\Roaming\LTspiceIV.ini
  555. [2014-02-07 23:58:08 | 000,120,200 | ---- | C] () -- C:\Windows\SysWow64\DLLDEV32i.dll
  556. [2013-08-25 15:31:28 | 000,000,016 | ---- | C] () -- C:\Windows\SysWow64\msvcsv60.dll
  557. [2013-08-25 15:31:28 | 000,000,016 | ---- | C] () -- C:\Windows\msocreg32.dat
  558. [2013-08-04 13:12:46 | 000,053,524 | ---- | C] () -- C:\Users\Mapex1\3.jpg
  559. [2013-08-04 13:12:43 | 000,052,782 | ---- | C] () -- C:\Users\Mapex1\2.jpg
  560. [2013-08-04 13:12:37 | 000,126,615 | ---- | C] () -- C:\Users\Mapex1\1.jpg
  561. [2013-07-11 12:08:56 | 000,002,892 | ---- | C] () -- C:\Windows\SysWow64\audcon.sys
  562. [2013-07-11 12:06:55 | 000,000,051 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe.cfg
  563. [2013-07-11 12:06:54 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe
  564. [2013-03-12 17:05:35 | 000,869,376 | ---- | C] () -- C:\Windows\is-9DIPS.exe
  565. [2013-01-25 13:52:42 | 000,000,017 | ---- | C] () -- C:\Users\Mapex1\AppData\Local\resmon.resmoncfg
  566. [2012-08-28 14:14:58 | 000,002,992 | ---- | C] () -- C:\Users\Mapex1\RegisterTraktor FS2.html
  567. [2012-07-24 10:20:05 | 000,778,752 | ---- | C] () -- C:\Windows\SysWow64\RGSS102E.dll
  568. [2012-07-24 10:20:05 | 000,761,856 | ---- | C] () -- C:\Windows\SysWow64\RGSS104J.dll
  569. [2012-07-24 10:20:05 | 000,758,272 | ---- | C] () -- C:\Windows\SysWow64\RGSS104E.dll
  570. [2012-07-24 10:20:05 | 000,685,056 | ---- | C] () -- C:\Windows\SysWow64\RGSS103J.dll
  571. [2012-07-24 10:20:04 | 000,781,312 | ---- | C] () -- C:\Windows\SysWow64\RGSS102J.dll
  572. [2012-07-24 10:20:04 | 000,771,584 | ---- | C] () -- C:\Windows\SysWow64\RGSS100J.dll
  573. [2012-07-23 09:31:38 | 004,428,800 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll
  574. [2012-07-02 22:11:02 | 000,016,384 | ---- | C] () -- C:\Windows\SysWow64\theowl.dll
  575. [2012-07-02 20:28:06 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  576. [2012-06-23 11:36:21 | 001,175,552 | ---- | C] () -- C:\Windows\wxbase28u_vc_custom.dll
  577. [2012-06-09 19:21:56 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  578. [2012-05-03 14:38:09 | 000,009,216 | ---- | C] () -- C:\Users\Mapex1\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  579.  
  580. [color=#E56717]========== ZeroAccess Check ==========[/color]
  581.  
  582. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  583.  
  584. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  585.  
  586. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  587.  
  588. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  589.  
  590. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  591.  
  592. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  593. "" = C:\Windows\SysNative\shell32.dll -- [2014-03-25 04:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
  594. "ThreadingModel" = Apartment
  595.  
  596. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  597. "" = %SystemRoot%\system32\shell32.dll -- [2014-03-25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
  598. "ThreadingModel" = Apartment
  599.  
  600. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  601. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  602. "ThreadingModel" = Free
  603.  
  604. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  605. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  606. "ThreadingModel" = Free
  607.  
  608. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  609. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  610. "ThreadingModel" = Both
  611.  
  612. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  613.  
  614. [color=#E56717]========== Alternate Data Streams ==========[/color]
  615.  
  616. @Alternate Data Stream - 1324 bytes -> C:\Users\Mapex1\AppData\Local\PzNFufi5q:Md1rGP8bSYnaFgPVzkY0CCru4w
  617. @Alternate Data Stream - 1311 bytes -> C:\Users\Mapex1\AppData\Local\kS7rbk4mq:xTE1n2aeqMLjrGdaAQb6jIxAl
  618. @Alternate Data Stream - 1120 bytes -> C:\Users\Mapex1\AppData\Local\LEAG8ANStI8LH:zMTN6bMUlKxlE9Zy3pQ2cY
  619.  
  620. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!