API tools faq
paste
Advertisement
Guest User

dwa

a guest
May 12th, 2015
285
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 91.53 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2015-05-12 12:09:17 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Jerzy Lis\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17728)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 7,90 Gb Total Physical Memory | 4,64 Gb Available Physical Memory | 58,75% Memory free
  8. 15,80 Gb Paging File | 12,00 Gb Available in Paging File | 75,95% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 374,29 Gb Total Space | 276,99 Gb Free Space | 74,00% Space Free | Partition Type: NTFS
  13. Drive E: | 8,80 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
  14. Drive X: | 322,48 Gb Total Space | 189,80 Gb Free Space | 58,86% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: gary | User Name: Jerzy Lis | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2015-05-12 12:07:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jerzy Lis\Desktop\OTL.exe
  23. PRC - [2015-04-28 04:07:36 | 000,812,872 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. PRC - [2015-04-17 12:14:31 | 005,448,976 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  25. PRC - [2015-04-17 12:14:30 | 017,655,056 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  26. PRC - [2015-04-17 11:52:12 | 000,229,136 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\tv_w32.exe
  27. PRC - [2015-03-30 15:29:02 | 003,978,600 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
  28. PRC - [2014-12-19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  29. PRC - [2014-12-13 02:13:07 | 002,531,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  30. PRC - [2014-12-13 02:13:04 | 001,701,520 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  31. PRC - [2014-10-17 14:04:55 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  32. PRC - [2014-08-30 18:48:46 | 000,234,520 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
  33. PRC - [2014-08-30 18:47:54 | 000,193,128 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
  34. PRC - [2013-06-10 11:59:46 | 005,399,888 | ---- | M] (ManyCam LLC) -- C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe
  35. PRC - [2013-01-18 14:51:24 | 010,376,704 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
  36. PRC - [2013-01-18 14:51:24 | 010,368,512 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
  37. PRC - [2012-06-28 17:40:52 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
  38. PRC - [2012-03-15 06:48:22 | 000,362,840 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  39. PRC - [2012-03-15 06:48:20 | 000,276,824 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  40. PRC - [2012-03-15 06:48:14 | 000,127,320 | R--- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
  41. PRC - [2012-03-15 06:48:06 | 000,162,648 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
  42. PRC - [2012-02-26 21:01:56 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  43. PRC - [2012-02-01 16:29:58 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  44. PRC - [2012-02-01 16:29:56 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  45. PRC - [2011-08-04 17:08:56 | 000,593,032 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE
  46. PRC - [2011-08-04 17:06:12 | 001,612,920 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
  47. PRC - [2011-02-07 09:56:11 | 000,138,192 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
  48. PRC - [2011-01-15 16:48:44 | 000,452,016 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
  49.  
  50.  
  51. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  52.  
  53. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3E0A.tmp
  54. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3DBA.tmp
  55. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3D79.tmp
  56. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3D29.tmp
  57. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3C9B.tmp
  58. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3C4B.tmp
  59. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3C0B.tmp
  60. MOD - [2015-05-12 11:41:21 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3BDA.tmp
  61. MOD - [2015-05-12 11:41:21 | 000,086,016 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3F3C.tmp
  62. MOD - [2015-05-12 11:41:21 | 000,086,016 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3F1B.tmp
  63. MOD - [2015-05-12 11:41:21 | 000,086,016 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3F09.tmp
  64. MOD - [2015-05-12 11:41:21 | 000,086,016 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3EAA.tmp
  65. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3B99.tmp
  66. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3B59.tmp
  67. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3B19.tmp
  68. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3AE8.tmp
  69. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3AA7.tmp
  70. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3A48.tmp
  71. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM39F8.tmp
  72. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM39A8.tmp
  73. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM3939.tmp
  74. MOD - [2015-05-12 11:41:20 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM37EF.tmp
  75. MOD - [2015-05-12 11:41:19 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM379F.tmp
  76. MOD - [2015-05-12 11:41:19 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM373F.tmp
  77. MOD - [2015-05-12 11:41:19 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM36FF.tmp
  78. MOD - [2015-05-12 11:41:19 | 000,120,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM36AE.tmp
  79. MOD - [2015-05-12 11:41:19 | 000,072,704 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM34FB.tmp
  80. MOD - [2015-05-12 11:41:19 | 000,072,192 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM364A.tmp
  81. MOD - [2015-05-12 11:41:19 | 000,072,192 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM35BA.tmp
  82. MOD - [2015-05-12 11:41:19 | 000,072,192 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM343E.tmp
  83. MOD - [2015-05-12 11:41:19 | 000,057,344 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM33DE.tmp
  84. MOD - [2015-05-12 11:41:19 | 000,033,792 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\YTMP7MC8AA\TAA368D.tmp
  85. MOD - [2015-05-12 11:41:19 | 000,033,792 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\YTMP7MC8AA\TAA365C.tmp
  86. MOD - [2015-05-12 11:41:19 | 000,033,792 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\YTMP7MC8AA\TAA3639.tmp
  87. MOD - [2015-05-12 11:41:19 | 000,033,792 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\YTMP7MC8AA\TAA35A8.tmp
  88. MOD - [2015-05-12 11:41:18 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM32EC.tmp
  89. MOD - [2015-05-12 11:41:18 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM323E.tmp
  90. MOD - [2015-05-12 11:41:18 | 000,064,000 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM335D.tmp
  91. MOD - [2015-05-12 11:41:18 | 000,053,760 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM338E.tmp
  92. MOD - [2015-05-12 11:41:18 | 000,053,760 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM331D.tmp
  93. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E73.tmp
  94. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E62.tmp
  95. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E60.tmp
  96. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E4C.tmp
  97. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E4A.tmp
  98. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E38.tmp
  99. MOD - [2015-05-12 11:41:17 | 000,075,776 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2DD3.tmp
  100. MOD - [2015-05-12 11:41:17 | 000,068,608 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E36.tmp
  101. MOD - [2015-05-12 11:41:17 | 000,056,832 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E4E.tmp
  102. MOD - [2015-05-12 11:41:17 | 000,056,320 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2EB4.tmp
  103. MOD - [2015-05-12 11:41:17 | 000,056,320 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2DD5.tmp
  104. MOD - [2015-05-12 11:41:17 | 000,055,296 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Local\Temp\XTMP1MC3VE\DEM2E06.tmp
  105. MOD - [2015-04-28 04:07:35 | 014,980,424 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
  106. MOD - [2015-04-28 04:07:34 | 001,252,680 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll
  107. MOD - [2015-04-28 04:07:33 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll
  108. MOD - [2015-04-15 20:19:35 | 000,774,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll
  109. MOD - [2014-12-13 12:08:08 | 000,012,104 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
  110. MOD - [2014-11-13 15:41:33 | 000,489,472 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\510d3cca1455e91a81604f4781c4760c\IAStorUtil.ni.dll
  111. MOD - [2014-10-17 03:41:42 | 012,435,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e061f6a174e85fd3a61fc1093384ed5c\System.Windows.Forms.ni.dll
  112. MOD - [2014-10-17 03:41:38 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\836e10dfd0811b303553216f5cb092ef\System.Drawing.ni.dll
  113. MOD - [2014-10-17 03:41:35 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
  114. MOD - [2014-10-17 03:41:32 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\237d509a79aeef6e4635b09450d98f2a\System.Configuration.ni.dll
  115. MOD - [2014-10-17 03:41:21 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d97a5aa0eb7697aca7c6e90ae471af2b\WindowsBase.ni.dll
  116. MOD - [2014-10-17 03:41:16 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
  117. MOD - [2014-09-11 15:09:21 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\26b50aa1e86a984a5c0d53f2bbf95798\IAStorCommon.ni.dll
  118. MOD - [2014-09-11 14:23:46 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
  119. MOD - [2013-07-09 08:43:34 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll
  120. MOD - [2013-06-10 11:55:08 | 002,010,624 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
  121. MOD - [2013-06-10 11:55:08 | 001,241,088 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
  122. MOD - [2013-06-10 11:55:08 | 000,775,680 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_highgui220.dll
  123. MOD - [2013-06-10 11:55:08 | 000,241,152 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_objdetect220.dll
  124. MOD - [2013-06-10 11:55:08 | 000,201,216 | ---- | M] () -- C:\Program Files (x86)\ManyCam\Bin\opencv_video220.dll
  125. MOD - [2013-01-18 14:20:54 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
  126. MOD - [2010-11-13 04:03:49 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
  127.  
  128.  
  129. [color=#E56717]========== Services (SafeList) ==========[/color]
  130.  
  131. SRV:[b]64bit:[/b] - [2015-03-13 05:54:00 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  132. SRV:[b]64bit:[/b] - [2014-12-13 02:13:04 | 001,148,560 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
  133. SRV:[b]64bit:[/b] - [2014-12-13 02:13:03 | 019,823,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
  134. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  135. SRV:[b]64bit:[/b] - [2012-03-29 07:57:36 | 002,669,840 | ---- | M] (Intel® Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
  136. SRV:[b]64bit:[/b] - [2012-03-29 07:57:24 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
  137. SRV:[b]64bit:[/b] - [2012-03-29 07:57:14 | 000,626,960 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
  138. SRV:[b]64bit:[/b] - [2012-03-29 07:57:10 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
  139. SRV:[b]64bit:[/b] - [2012-03-07 21:58:42 | 000,492,032 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe -- (Qualcomm Atheros Killer Service)
  140. SRV:[b]64bit:[/b] - [2012-02-02 22:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  141. SRV:[b]64bit:[/b] - [2012-01-17 16:12:28 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
  142. SRV:[b]64bit:[/b] - [2012-01-09 12:39:44 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
  143. SRV - [2015-05-11 19:02:18 | 001,931,632 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- X:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service)
  144. SRV - [2015-04-25 09:22:41 | 000,148,080 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  145. SRV - [2015-04-17 12:14:31 | 005,448,976 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
  146. SRV - [2015-04-15 18:56:22 | 000,268,464 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  147. SRV - [2015-04-14 01:44:34 | 000,836,288 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  148. SRV - [2015-03-30 15:29:00 | 002,490,216 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
  149. SRV - [2015-03-30 15:25:28 | 000,417,552 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
  150. SRV - [2015-02-18 19:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  151. SRV - [2014-12-19 09:48:18 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  152. SRV - [2014-12-13 02:13:04 | 001,701,520 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  153. SRV - [2014-10-17 14:04:55 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  154. SRV - [2014-09-09 23:35:04 | 005,278,064 | ---- | M] (Binary Fortress Software) [Auto | Running] -- C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe -- (DisplayFusionService)
  155. SRV - [2014-08-30 18:48:46 | 000,234,520 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe -- (AVP15.0.1)
  156. SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  157. SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  158. SRV - [2012-03-30 09:43:34 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  159. SRV - [2012-03-15 06:48:22 | 000,362,840 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  160. SRV - [2012-03-15 06:48:20 | 000,276,824 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  161. SRV - [2012-03-15 06:48:14 | 000,127,320 | R--- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R)
  162. SRV - [2012-03-15 06:48:06 | 000,162,648 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
  163. SRV - [2012-02-01 16:29:58 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  164. SRV - [2011-12-07 09:38:10 | 002,429,544 | R--- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
  165. SRV - [2011-02-07 09:56:11 | 000,138,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
  166. SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  167.  
  168.  
  169. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  170.  
  171. DRV:[b]64bit:[/b] - [2015-03-11 01:00:55 | 000,819,896 | ---- | M] (Kaspersky Lab ZAO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF)
  172. DRV:[b]64bit:[/b] - [2014-12-13 12:08:08 | 000,031,376 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  173. DRV:[b]64bit:[/b] - [2014-12-13 02:13:03 | 000,019,600 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
  174. DRV:[b]64bit:[/b] - [2014-12-09 16:42:02 | 000,077,512 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klwtp.sys -- (Klwtp)
  175. DRV:[b]64bit:[/b] - [2014-12-09 16:42:01 | 000,150,536 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klflt.sys -- (klflt)
  176. DRV:[b]64bit:[/b] - [2014-11-22 12:46:30 | 000,038,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
  177. DRV:[b]64bit:[/b] - [2014-08-12 19:33:02 | 000,246,456 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klhk.sys -- (klhk)
  178. DRV:[b]64bit:[/b] - [2014-07-09 17:23:54 | 000,179,776 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps)
  179. DRV:[b]64bit:[/b] - [2014-07-02 17:10:38 | 000,046,144 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\kldisk.sys -- (kldisk)
  180. DRV:[b]64bit:[/b] - [2014-06-05 20:02:08 | 000,055,872 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi)
  181. DRV:[b]64bit:[/b] - [2014-03-31 12:47:10 | 000,468,576 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1)
  182. DRV:[b]64bit:[/b] - [2014-03-28 18:51:04 | 000,028,768 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt)
  183. DRV:[b]64bit:[/b] - [2014-02-25 14:09:02 | 000,030,304 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6)
  184. DRV:[b]64bit:[/b] - [2013-12-25 13:44:19 | 000,121,416 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MijXfilt.sys -- (MotioninJoyXFilter)
  185. DRV:[b]64bit:[/b] - [2013-08-08 18:11:00 | 000,029,280 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt)
  186. DRV:[b]64bit:[/b] - [2013-06-28 12:16:46 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  187. DRV:[b]64bit:[/b] - [2013-04-12 16:34:48 | 000,015,456 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klpd.sys -- (klpd)
  188. DRV:[b]64bit:[/b] - [2013-01-31 11:50:58 | 000,028,160 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcaudrv_x64.sys -- (mcaudrv_simple)
  189. DRV:[b]64bit:[/b] - [2013-01-14 22:10:52 | 000,238,288 | ---- | M] (Kaspersky Lab UK Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\cm_km_w.sys -- (cm_km_w)
  190. DRV:[b]64bit:[/b] - [2012-10-11 05:08:10 | 000,044,928 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mcvidrv_x64.sys -- (ManyCam)
  191. DRV:[b]64bit:[/b] - [2012-03-26 13:09:54 | 014,748,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  192. DRV:[b]64bit:[/b] - [2012-03-12 14:06:46 | 011,471,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
  193. DRV:[b]64bit:[/b] - [2012-03-07 21:59:46 | 000,075,880 | ---- | M] (Bigfoot Networks, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bflwfx64.sys -- (BfLwf)
  194. DRV:[b]64bit:[/b] - [2012-03-07 21:59:44 | 000,161,616 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e22W7x64.sys -- (L1C)
  195. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  196. DRV:[b]64bit:[/b] - [2012-02-29 12:31:16 | 000,143,144 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
  197. DRV:[b]64bit:[/b] - [2012-02-26 21:01:00 | 000,788,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  198. DRV:[b]64bit:[/b] - [2012-02-26 21:01:00 | 000,356,120 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  199. DRV:[b]64bit:[/b] - [2012-02-26 21:01:00 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  200. DRV:[b]64bit:[/b] - [2012-02-01 16:16:40 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  201. DRV:[b]64bit:[/b] - [2012-01-09 12:32:40 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
  202. DRV:[b]64bit:[/b] - [2012-01-09 12:32:40 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
  203. DRV:[b]64bit:[/b] - [2012-01-03 05:21:44 | 000,340,072 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
  204. DRV:[b]64bit:[/b] - [2011-12-05 22:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  205. DRV:[b]64bit:[/b] - [2011-11-09 20:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  206. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  207. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  208. DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  209. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  210. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  211. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  212. DRV:[b]64bit:[/b] - [2010-08-19 20:24:34 | 000,074,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  213. DRV:[b]64bit:[/b] - [2009-11-18 01:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  214. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  215. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  216. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  217. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  218. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  219. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  220. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  221. DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  222. DRV:[b]64bit:[/b] - [2008-08-28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  223. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  224.  
  225.  
  226. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  227.  
  228.  
  229. [color=#E56717]========== Internet Explorer ==========[/color]
  230.  
  231. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  232. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  233. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  234. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  235. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  236. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  237. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  238. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  239. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  240. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  241. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  242. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  243. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  244. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  245. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  246.  
  247.  
  248. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  249. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  250.  
  251. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  252. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  253.  
  254. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  255.  
  256. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  257.  
  258. IE - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  259. IE - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  260. IE - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  261. IE - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  262. IE - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SAVB_plPL530
  263. IE - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  264.  
  265. [color=#E56717]========== FireFox ==========[/color]
  266.  
  267. FF - prefs.js..browser.search.countryCode: "PL"
  268. FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search"
  269. FF - prefs.js..browser.search.isUS: false
  270. FF - prefs.js..browser.search.region: "PL"
  271. FF - prefs.js..browser.search.searchengine.desc: "this is my first firefox searchEngine"
  272. FF - prefs.js..browser.search.searchengine.ptid: "cor"
  273. FF - prefs.js..browser.search.searchengine.uid: "WDCXWD7500BPKT-22PK4T0_WD-WX31CC19205492054"
  274. FF - prefs.js..browser.search.selectedEngine: "Yahoo! Search"
  275. FF - prefs.js..browser.search.useDBForOrder: true
  276. FF - prefs.js..browser.startup.homepage: "http://search.yahoo.com/?fr=hp-ddc-bd&type=bg_616_bl-is-20__alt__ddc_dsssyc_bd_com"
  277. FF - prefs.js..extensions.enabledAddons: online_banking_69A4E213815F42BD863D889007201D82%40kaspersky.com:4.5.3.8
  278. FF - prefs.js..extensions.enabledAddons: content_blocker_6418E0D362104DADA084DC312DFA8ABC%40kaspersky.com:4.5.3.8
  279. FF - prefs.js..extensions.enabledAddons: virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB%40kaspersky.com:4.5.3.8
  280. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:37.0.2
  281. FF - prefs.js..keyword.URL: "http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bg_616_bl-is-20__alt__ddc_dss_bd_com&p={searchTerms}"
  282. FF - user.js - File not found
  283.  
  284. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll File not found
  285. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll File not found
  286. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  287. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  288. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll ()
  289. FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
  290. FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll File not found
  291. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  292. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  293. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  294. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  295. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
  296. FF - HKLM\Software\MozillaPlugins\@kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-09 16:46:03 | 000,000,000 | ---D | M]
  297. FF - HKLM\Software\MozillaPlugins\@kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-09 16:46:03 | 000,000,000 | ---D | M]
  298. FF - HKLM\Software\MozillaPlugins\@kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-09 16:46:03 | 000,000,000 | ---D | M]
  299. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  300. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  301. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  302. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
  303. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
  304. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  305. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Jerzy Lis\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  306. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Jerzy Lis\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  307. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
  308.  
  309. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-09 16:46:03 | 000,000,000 | ---D | M]
  310. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-09 16:46:03 | 000,000,000 | ---D | M]
  311. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\[email protected] [2014-12-09 16:46:03 | 000,000,000 | ---D | M]
  312. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  313. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  314. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  315. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  316.  
  317. [2012-10-08 16:55:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jerzy Lis\AppData\Roaming\mozilla\Extensions
  318. [2015-04-13 17:41:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jerzy Lis\AppData\Roaming\mozilla\Firefox\Profiles\zacfr2d8.default\extensions
  319. [2015-04-12 14:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jerzy Lis\AppData\Roaming\mozilla\Firefox\Profiles\zacfr2d8.default\extensions\1428841384_xpi
  320. [2015-04-12 06:18:42 | 000,006,423 | ---- | M] () (No name found) -- C:\Users\Jerzy Lis\AppData\Roaming\mozilla\firefox\profiles\zacfr2d8.default\extensions\{1f575d58-4843-48b3-90d3-c79b549f437a}.xpi
  321. [2015-05-11 22:09:22 | 000,000,388 | ---- | M] () -- C:\Users\Jerzy Lis\AppData\Roaming\mozilla\firefox\profiles\zacfr2d8.default\searchplugins\yahoo.xml
  322. [2015-04-25 09:22:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  323. [2015-04-25 09:22:41 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  324. [2014-12-09 16:46:03 | 000,000,000 | ---D | M] (Модуль блокування небезпечних веб-сайтів) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 15.0.1\FFEXT\[email protected]
  325. [2014-12-09 16:46:03 | 000,000,000 | ---D | M] (Безпечні платежі) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 15.0.1\FFEXT\[email protected]
  326. [2014-12-09 16:46:03 | 000,000,000 | ---D | M] (Віртуальна клавіатура) -- C:\PROGRAM FILES (X86)\KASPERSKY LAB\KASPERSKY INTERNET SECURITY 15.0.1\FFEXT\[email protected]
  327.  
  328. [color=#E56717]========== Chrome ==========[/color]
  329.  
  330. CHR - default_search_provider: (Enabled)
  331. CHR - default_search_provider: search_url =
  332. CHR - default_search_provider: suggest_url =
  333. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\22.0.1229.92\PepperFlash\pepflashplayer.dll
  334. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll
  335. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  336. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\ppGoogleNaClPluginChrome.dll
  337. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\pdf.dll
  338. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
  339. CHR - plugin: Intel Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
  340. CHR - plugin: Intel Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
  341. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aenjcjfefbgcfibhhcdhgcbmkafimedm\1.0.5577.28124_0\
  342. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
  343. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
  344. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho\4.0.9.130_0\
  345. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpnbbonpgadmkipdlclghcekaklebdpi\1.2_0\
  346. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.31_0\
  347. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik\2.2015.506.11355_0\
  348. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.0.0_0\
  349. CHR - Extension: No name found = C:\Users\Jerzy Lis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  350.  
  351. Hosts file not found
  352. O2:[b]64bit:[/b] - BHO: (Content Blocker Plugin) - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  353. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  354. O2:[b]64bit:[/b] - BHO: (Virtual Keyboard Plugin) - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  355. O2:[b]64bit:[/b] - BHO: (Safe Money Plugin) - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  356. O2 - BHO: (Content Blocker Plugin) - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  357. O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
  358. O2 - BHO: (ALLYouTubeDownloader) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.dll (ALLCinema Ltd.)
  359. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
  360. O2 - BHO: (Virtual Keyboard Plugin) - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  361. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
  362. O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL File not found
  363. O2 - BHO: (Safe Money Plugin) - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  364. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  365. O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
  366. O3:[b]64bit:[/b] - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  367. O4:[b]64bit:[/b] - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
  368. O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
  369. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  370. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  371. O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
  372. O4:[b]64bit:[/b] - HKLM..\Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" File not found
  373. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  374. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  375. O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
  376. O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
  377. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
  378. O4 - HKLM..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.)
  379. O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
  380. O4 - HKLM..\Run: [Setup Utility 14.0] X:\Program Files (x86)\Navigator14\Setup Utility\clickertray.exe File not found
  381. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  382. O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
  383. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  384. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  385. O4 - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000..\Run: [ALLUpdate] "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" File not found
  386. O4 - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  387. O4 - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000..\Run: [EADM] X:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
  388. O4 - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000..\Run: [Facebook Update] C:\Users\Jerzy Lis\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  389. O4 - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000..\Run: [ManyCam] C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
  390. O4 - HKU\S-1-5-21-1609210849-1246747946-3306009675-1000..\Run: [Steam] X:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
  391. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  392. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  393. O4 - Startup: C:\Users\Jerzy Lis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
  394. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  395. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  396. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
  397. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  398. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  399. O9:[b]64bit:[/b] - Extra Button: Klawiatura wirtualna - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  400. O9 - Extra Button: Klawiatura wirtualna - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll (Kaspersky Lab ZAO)
  401. O13[b]64bit:[/b] - gopher Prefix: missing
  402. O13 - gopher Prefix: missing
  403. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.1.1.1
  404. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A4449257-F426-4093-A89E-596AF9F71845}: DhcpNameServer = 10.1.1.1
  405. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DB293845-C857-42F1-AA52-039700EA8F22}: DhcpNameServer = 10.1.1.1
  406. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DB293845-C857-42F1-AA52-039700EA8F22}: NameServer = 8.8.8.8,8.8.4.4
  407. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  408. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  409. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  410. O20 - AppInit_DLLs: (c:\windows\syswow64\nvinit.dll) - c:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  411. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  412. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  413. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  414. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  415. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  416. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  417. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  418. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  419. O32 - HKLM CDRom: AutoRun - 1
  420. O32 - AutoRun File - [2014-10-19 14:14:01 | 000,000,043 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
  421. O33 - MountPoints2\{35016bf8-1027-11e4-8605-8c89a504a575}\Shell - "" = AutoRun
  422. O33 - MountPoints2\{35016bf8-1027-11e4-8605-8c89a504a575}\Shell\AutoRun\command - "" = F:\AutoRun.exe
  423. O33 - MountPoints2\{35016c05-1027-11e4-8605-8c89a504a575}\Shell - "" = AutoRun
  424. O33 - MountPoints2\{35016c05-1027-11e4-8605-8c89a504a575}\Shell\AutoRun\command - "" = F:\AutoRun.exe
  425. O33 - MountPoints2\{373af775-dfda-11e2-a33c-8c89a504a575}\Shell - "" = AutoRun
  426. O33 - MountPoints2\{373af775-dfda-11e2-a33c-8c89a504a575}\Shell\AutoRun\command - "" = E:\setup.exe -- [2014-10-19 15:55:56 | 000,919,636 | R--- | M] ( )
  427. O33 - MountPoints2\{3b2c5ead-f942-11e3-9884-8c89a504a575}\Shell - "" = AutoRun
  428. O33 - MountPoints2\{3b2c5ead-f942-11e3-9884-8c89a504a575}\Shell\AutoRun\command - "" = F:\LGAutoRun.exe
  429. O33 - MountPoints2\{405db368-cb57-11e2-a166-8c89a504a575}\Shell - "" = AutoRun
  430. O33 - MountPoints2\{405db368-cb57-11e2-a166-8c89a504a575}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
  431. O33 - MountPoints2\{5576f2f6-0e55-11e2-87a4-806e6f6e6963}\Shell - "" = AutoRun
  432. O33 - MountPoints2\{5576f2f6-0e55-11e2-87a4-806e6f6e6963}\Shell\AutoRun\command - "" = D:\CDSetup.exe
  433. O33 - MountPoints2\{a5c88c68-1bc0-11e4-8ae2-8c89a504a575}\Shell - "" = AutoRun
  434. O33 - MountPoints2\{a5c88c68-1bc0-11e4-8ae2-8c89a504a575}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
  435. O33 - MountPoints2\{c8c427dc-1997-11e4-8549-8c89a504a575}\Shell - "" = AutoRun
  436. O33 - MountPoints2\{c8c427dc-1997-11e4-8549-8c89a504a575}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
  437. O33 - MountPoints2\{c8c427ef-1997-11e4-8549-8c89a504a575}\Shell - "" = AutoRun
  438. O33 - MountPoints2\{c8c427ef-1997-11e4-8549-8c89a504a575}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
  439. O33 - MountPoints2\{c8c42890-1997-11e4-8549-8c89a504a575}\Shell - "" = AutoRun
  440. O33 - MountPoints2\{c8c42890-1997-11e4-8549-8c89a504a575}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
  441. O33 - MountPoints2\{f73f82ce-7255-11e3-9e3c-8c89a504a575}\Shell - "" = AutoRun
  442. O33 - MountPoints2\{f73f82ce-7255-11e3-9e3c-8c89a504a575}\Shell\AutoRun\command - "" = G:\iStudio.exe
  443. O34 - HKLM BootExecute: (autocheck autochk *)
  444. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  445. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  446. O35 - HKLM\..comfile [open] -- "%1" %*
  447. O35 - HKLM\..exefile [open] -- "%1" %*
  448. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  449. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  450. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  451. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  452. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  453. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  454. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  455.  
  456. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  457.  
  458. [2015-05-12 12:07:33 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Jerzy Lis\Desktop\OTL.exe
  459. [2015-05-12 11:38:13 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  460. [2015-05-11 19:07:06 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\Documents\Electronic Arts
  461. [2015-05-11 19:02:56 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\AppData\Local\Origin
  462. [2015-05-11 19:00:21 | 098,124,856 | ---- | C] (Electronic Arts, Inc.) -- C:\Users\Jerzy Lis\Desktop\OriginSetup.exe
  463. [2015-04-30 14:06:58 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\Desktop\buty sell
  464. [2015-04-30 03:00:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
  465. [2015-04-28 22:01:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Estelar PDF Unlock Tool
  466. [2015-04-28 22:01:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Estelar PDF Unlock Tool
  467. [2015-04-28 12:59:24 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\AppData\Local\Nokia
  468. [2015-04-28 12:59:08 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\AppData\Roaming\PC Suite
  469. [2015-04-28 12:54:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
  470. [2015-04-28 12:54:02 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
  471. [2015-04-28 12:54:01 | 000,025,600 | ---- | C] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys
  472. [2015-04-28 12:53:59 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
  473. [2015-04-28 12:53:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
  474. [2015-04-28 12:53:09 | 000,035,892 | ---- | C] (Prolific Technology Inc.) -- C:\Windows\SysWow64\SER9PL.sys
  475. [2015-04-28 12:52:58 | 000,057,856 | ---- | C] (Nokia) -- C:\Windows\SysNative\nmwcdclsX64.dll
  476. [2015-04-28 12:52:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nokia
  477. [2015-04-28 12:52:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nokia
  478. [2015-04-28 12:51:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Nokia
  479. [2015-04-28 12:49:14 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\Desktop\Nokia_Care_Suite_5_4_119_1432_windowsmania.pl
  480. [2015-04-25 13:13:39 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\AppData\Roaming\Tibia
  481. [2015-04-25 13:13:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia
  482. [2015-04-25 09:22:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  483. [2015-04-23 17:48:07 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\Tracing
  484. [2015-04-15 21:32:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElfBot NG
  485. [2015-04-15 21:24:41 | 000,119,296 | ---- | C] (OTLand) -- C:\Users\Jerzy Lis\Desktop\ipchanger.exe
  486. [2015-04-15 20:14:11 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appraiser
  487. [2015-04-15 13:04:51 | 003,298,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  488. [2015-04-15 13:04:51 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  489. [2015-04-15 13:04:51 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
  490. [2015-04-15 13:04:51 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  491. [2015-04-15 13:04:51 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
  492. [2015-04-15 13:04:51 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  493. [2015-04-15 13:04:51 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  494. [2015-04-15 13:04:51 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
  495. [2015-04-15 13:04:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
  496. [2015-04-15 13:04:51 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  497. [2015-04-15 13:04:51 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  498. [2015-04-15 13:04:51 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  499. [2015-04-15 13:04:51 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
  500. [2015-04-15 13:04:51 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
  501. [2015-04-15 13:04:51 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
  502. [2015-04-15 13:04:21 | 001,239,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitstatic.exe
  503. [2015-04-15 13:04:21 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  504. [2015-04-15 13:04:21 | 000,957,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
  505. [2015-04-15 13:04:21 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
  506. [2015-04-15 13:04:21 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  507. [2015-04-15 13:04:21 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
  508. [2015-04-15 13:04:21 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  509. [2015-04-15 13:04:21 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll
  510. [2015-04-15 13:04:21 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
  511. [2015-04-15 13:03:45 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
  512. [2015-04-15 13:03:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
  513. [2015-04-15 13:03:17 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
  514. [2015-04-15 13:02:58 | 005,557,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  515. [2015-04-15 13:02:57 | 003,976,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  516. [2015-04-15 13:02:57 | 003,920,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  517. [2015-04-15 13:02:57 | 001,727,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
  518. [2015-04-15 13:02:57 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  519. [2015-04-15 13:02:57 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
  520. [2015-04-15 13:02:57 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  521. [2015-04-15 13:02:57 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
  522. [2015-04-15 13:02:55 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
  523. [2015-04-15 13:02:55 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
  524. [2015-04-15 13:02:55 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  525. [2015-04-15 13:02:55 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
  526. [2015-04-15 13:02:55 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
  527. [2015-04-15 13:02:55 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
  528. [2015-04-15 13:02:55 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  529. [2015-04-15 13:02:55 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
  530. [2015-04-15 13:02:55 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
  531. [2015-04-15 13:02:55 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
  532. [2015-04-15 13:02:55 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
  533. [2015-04-15 13:02:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
  534. [2015-04-15 13:02:55 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  535. [2015-04-15 13:02:55 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  536. [2015-04-15 13:02:55 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
  537. [2015-04-15 13:02:55 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
  538. [2015-04-15 13:02:55 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
  539. [2015-04-15 13:02:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
  540. [2015-04-15 13:02:55 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
  541. [2015-04-15 13:02:55 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
  542. [2015-04-15 13:02:55 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
  543. [2015-04-15 13:02:55 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
  544. [2015-04-15 13:02:55 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
  545. [2015-04-15 13:02:55 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
  546. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
  547. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
  548. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
  549. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
  550. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
  551. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
  552. [2015-04-15 13:02:55 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
  553. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
  554. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
  555. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
  556. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
  557. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
  558. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
  559. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
  560. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
  561. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
  562. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
  563. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
  564. [2015-04-15 13:02:55 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
  565. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
  566. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
  567. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
  568. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
  569. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
  570. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
  571. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
  572. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
  573. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
  574. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
  575. [2015-04-15 13:02:55 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
  576. [2015-04-15 13:02:54 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
  577. [2015-04-15 13:02:54 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
  578. [2015-04-15 13:02:54 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
  579. [2015-04-15 13:02:54 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
  580. [2015-04-15 13:02:54 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
  581. [2015-04-15 13:02:54 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
  582. [2015-04-15 13:02:54 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
  583. [2015-04-15 13:02:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
  584. [2015-04-15 13:02:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
  585. [2015-04-15 13:02:54 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
  586. [2015-04-15 13:02:54 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
  587. [2015-04-15 13:02:54 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
  588. [2015-04-15 13:02:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
  589. [2015-04-15 13:02:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
  590. [2015-04-15 13:02:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
  591. [2015-04-15 13:02:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
  592. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
  593. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
  594. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
  595. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
  596. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
  597. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
  598. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
  599. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
  600. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
  601. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
  602. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
  603. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
  604. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
  605. [2015-04-15 13:02:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
  606. [2015-04-15 13:02:54 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
  607. [2015-04-15 13:02:01 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  608. [2015-04-15 13:02:01 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  609. [2015-04-15 13:02:01 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  610. [2015-04-15 13:02:01 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  611. [2015-04-15 13:02:01 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  612. [2015-04-15 13:02:01 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  613. [2015-04-15 13:02:00 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  614. [2015-04-15 13:02:00 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  615. [2015-04-15 13:02:00 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  616. [2015-04-15 13:01:59 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  617. [2015-04-15 13:01:59 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  618. [2015-04-15 13:01:59 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  619. [2015-04-15 13:01:58 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  620. [2015-04-15 13:01:58 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  621. [2015-04-15 13:01:58 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  622. [2015-04-15 13:01:58 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  623. [2015-04-15 13:01:58 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  624. [2015-04-15 13:01:58 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  625. [2015-04-15 13:01:58 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  626. [2015-04-15 13:01:58 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  627. [2015-04-15 13:01:58 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  628. [2015-04-15 13:01:58 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  629. [2015-04-15 13:01:57 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  630. [2015-04-15 13:01:57 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  631. [2015-04-15 13:01:57 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  632. [2015-04-15 13:01:57 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  633. [2015-04-15 13:01:57 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  634. [2015-04-15 13:01:56 | 006,025,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  635. [2015-04-15 13:01:56 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  636. [2015-04-15 13:01:56 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  637. [2015-04-15 13:01:56 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  638. [2015-04-15 13:01:56 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  639. [2015-04-15 13:01:56 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  640. [2015-04-15 13:01:55 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  641. [2015-04-15 13:01:55 | 000,417,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  642. [2015-04-15 13:01:55 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  643. [2015-04-15 13:01:55 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  644. [2015-04-15 13:00:44 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clfsw32.dll
  645. [2015-04-15 13:00:44 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clfsw32.dll
  646. [2015-04-12 14:27:28 | 000,000,000 | ---D | C] -- C:\Users\Jerzy Lis\AppData\Roaming\vlc
  647. [2015-04-12 14:27:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
  648. [2015-04-12 14:23:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\5b4b2b13-bc3c-4690-a9ac-2f28c7e74c15
  649. [2015-04-12 14:22:59 | 000,000,000 | ---D | C] -- C:\ProgramData\5b4b2b13-bc3c-4690-a9ac-2f28c7e74c15
  650. [2015-03-15 18:22:10 | 005,453,312 | ---- | C] (CipSoft GmbH) -- C:\ProgramData\Tibia.bak
  651. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  652.  
  653. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  654.  
  655. [2015-05-12 12:13:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  656. [2015-05-12 12:07:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Jerzy Lis\Desktop\OTL.exe
  657. [2015-05-12 11:50:31 | 000,022,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  658. [2015-05-12 11:50:31 | 000,022,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  659. [2015-05-12 11:48:14 | 001,670,518 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  660. [2015-05-12 11:48:14 | 000,740,672 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  661. [2015-05-12 11:48:14 | 000,654,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  662. [2015-05-12 11:48:14 | 000,156,214 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  663. [2015-05-12 11:48:14 | 000,122,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  664. [2015-05-12 11:42:37 | 000,000,266 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  665. [2015-05-12 11:40:29 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  666. [2015-05-12 11:40:28 | 000,000,828 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
  667. [2015-05-12 11:40:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  668. [2015-05-12 11:40:08 | 2066,436,095 | -HS- | M] () -- C:\hiberfil.sys
  669. [2015-05-12 11:37:08 | 002,204,160 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\hijack.exe
  670. [2015-05-12 11:37:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  671. [2015-05-12 10:50:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
  672. [2015-05-12 10:05:53 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1609210849-1246747946-3306009675-1000UA.job
  673. [2015-05-12 07:16:02 | 000,148,111 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\co mialem 1.png
  674. [2015-05-12 07:15:49 | 000,185,500 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\co mialem 2.png
  675. [2015-05-11 23:00:36 | 000,012,002 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\dwa rozne.jpg
  676. [2015-05-11 19:01:48 | 098,124,856 | ---- | M] (Electronic Arts, Inc.) -- C:\Users\Jerzy Lis\Desktop\OriginSetup.exe
  677. [2015-05-11 18:59:21 | 000,000,698 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
  678. [2015-05-11 18:53:28 | 000,000,878 | ---- | M] () -- C:\Users\Public\Desktop\The Sims 4.lnk
  679. [2015-05-11 18:50:22 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1609210849-1246747946-3306009675-1000Core.job
  680. [2015-05-08 10:55:28 | 952,683,195 | ---- | M] () -- C:\Windows\MEMORY.DMP
  681. [2015-05-01 13:07:37 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
  682. [2015-04-30 20:07:06 | 000,234,581 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\SelfTimer2015-04-30 20_01_41.jpg
  683. [2015-04-30 19:05:04 | 000,090,440 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\vic.jpg
  684. [2015-04-30 15:20:03 | 000,035,736 | -HS- | M] () -- C:\Users\Jerzy Lis\Desktop\Folder.jpg
  685. [2015-04-30 15:20:03 | 000,007,290 | -HS- | M] () -- C:\Users\Jerzy Lis\Desktop\AlbumArtSmall.jpg
  686. [2015-04-30 14:58:58 | 000,068,875 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\kunta.jpg
  687. [2015-04-30 08:18:02 | 000,301,616 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  688. [2015-04-28 17:17:44 | 000,117,477 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\rozpiska matur.jpg
  689. [2015-04-28 12:57:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
  690. [2015-04-28 12:55:37 | 000,001,573 | ---- | M] () -- C:\Users\Public\Desktop\Launch Nokia Care Suite.lnk
  691. [2015-04-25 13:13:11 | 000,000,686 | ---- | M] () -- C:\Users\Public\Desktop\Tibia.lnk
  692. [2015-04-25 09:08:04 | 000,646,983 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\kac.png
  693. [2015-04-23 16:29:47 | 000,000,221 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\Call of Duty Modern Warfare 3 - Multiplayer.url
  694. [2015-04-23 09:05:31 | 000,000,919 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 10.lnk
  695. [2015-04-21 22:58:39 | 000,064,757 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\ckeee.jpg
  696. [2015-04-15 21:24:41 | 000,119,296 | ---- | M] (OTLand) -- C:\Users\Jerzy Lis\Desktop\ipchanger.exe
  697. [2015-04-15 19:59:32 | 001,643,124 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  698. [2015-04-15 18:56:16 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  699. [2015-04-15 18:56:16 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  700. [2015-04-15 18:56:03 | 018,178,736 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  701. [2015-04-12 14:27:17 | 000,000,779 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
  702. [2015-04-12 14:26:01 | 028,509,232 | ---- | M] () -- C:\Users\Jerzy Lis\Desktop\vlc-2.2.0-win32.exe
  703. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  704.  
  705. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  706.  
  707. [2015-05-12 11:42:37 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  708. [2015-05-12 11:37:05 | 002,204,160 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\hijack.exe
  709. [2015-05-12 07:16:02 | 000,148,111 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\co mialem 1.png
  710. [2015-05-12 07:15:49 | 000,185,500 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\co mialem 2.png
  711. [2015-05-11 23:00:35 | 000,012,002 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\dwa rozne.jpg
  712. [2015-05-11 18:59:21 | 000,000,698 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
  713. [2015-05-11 18:53:28 | 000,000,878 | ---- | C] () -- C:\Users\Public\Desktop\The Sims 4.lnk
  714. [2015-05-11 18:53:28 | 000,000,878 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk
  715. [2015-05-01 13:07:37 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
  716. [2015-04-30 20:07:06 | 000,234,581 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\SelfTimer2015-04-30 20_01_41.jpg
  717. [2015-04-30 19:05:04 | 000,090,440 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\vic.jpg
  718. [2015-04-30 14:58:58 | 000,068,875 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\kunta.jpg
  719. [2015-04-28 17:17:42 | 000,117,477 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\rozpiska matur.jpg
  720. [2015-04-28 12:57:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
  721. [2015-04-28 12:55:37 | 000,001,573 | ---- | C] () -- C:\Users\Public\Desktop\Launch Nokia Care Suite.lnk
  722. [2015-04-28 12:53:09 | 000,026,719 | ---- | C] () -- C:\Windows\SysWow64\SERSPL.VXD
  723. [2015-04-25 13:13:11 | 000,000,686 | ---- | C] () -- C:\Users\Public\Desktop\Tibia.lnk
  724. [2015-04-25 09:08:04 | 000,646,983 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\kac.png
  725. [2015-04-23 16:29:47 | 000,000,221 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\Call of Duty Modern Warfare 3 - Multiplayer.url
  726. [2015-04-21 22:58:38 | 000,064,757 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\ckeee.jpg
  727. [2015-04-15 13:02:01 | 000,016,303 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
  728. [2015-04-15 13:02:00 | 000,016,303 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
  729. [2015-04-12 14:27:17 | 000,000,779 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
  730. [2015-04-12 14:25:36 | 028,509,232 | ---- | C] () -- C:\Users\Jerzy Lis\Desktop\vlc-2.2.0-win32.exe
  731. [2015-04-01 22:14:01 | 000,002,243 | ---- | C] () -- C:\Users\Jerzy Lis\AppData\Local\recently-used.xbel
  732. [2015-03-15 18:21:52 | 139,752,553 | ---- | C] () -- C:\ProgramData\Tibia_spr.bak
  733. [2015-03-15 18:21:35 | 001,677,096 | ---- | C] () -- C:\ProgramData\Tibia_dat.bak
  734. [2014-05-31 13:06:52 | 000,133,706 | ---- | C] () -- C:\Users\Jerzy Lis\101.png
  735. [2013-09-26 21:32:49 | 000,113,843 | ---- | C] () -- C:\Users\Jerzy Lis\46.png
  736. [2013-09-26 21:25:20 | 000,128,048 | ---- | C] () -- C:\Users\Jerzy Lis\43.png
  737. [2013-09-12 20:59:40 | 000,111,113 | ---- | C] () -- C:\Users\Jerzy Lis\12.png
  738. [2013-08-18 22:19:09 | 000,281,688 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  739. [2013-06-25 19:05:48 | 001,643,124 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  740.  
  741. [color=#E56717]========== ZeroAccess Check ==========[/color]
  742.  
  743. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  744.  
  745. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  746.  
  747. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  748.  
  749. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  750.  
  751. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  752.  
  753. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  754. "" = C:\Windows\SysNative\shell32.dll -- [2015-02-13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
  755. "ThreadingModel" = Apartment
  756.  
  757. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  758. "" = %SystemRoot%\system32\shell32.dll -- [2015-02-13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
  759. "ThreadingModel" = Apartment
  760.  
  761. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  762. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  763. "ThreadingModel" = Free
  764.  
  765. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  766. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  767. "ThreadingModel" = Free
  768.  
  769. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  770. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  771. "ThreadingModel" = Both
  772.  
  773. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  774.  
  775. [color=#E56717]========== LOP Check ==========[/color]
  776.  
  777. [2013-11-01 18:09:31 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\.minecraft
  778. [2014-06-15 12:58:51 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\.mono
  779. [2015-04-17 12:39:20 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Audacity
  780. [2013-09-08 12:28:48 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Awesomium
  781. [2014-06-15 17:11:30 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Canon
  782. [2014-10-12 18:24:11 | 000,000,000 | -HSD | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Common
  783. [2014-07-30 22:35:32 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\DAEMON Tools Lite
  784. [2014-10-12 18:24:09 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\DisplayFusion
  785. [2013-08-13 16:56:18 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\FlowStone
  786. [2013-04-28 09:28:51 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\GG
  787. [2014-06-25 15:58:46 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Grupa IMAGE
  788. [2013-08-13 16:56:33 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Image-Line
  789. [2012-10-08 15:41:25 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\LolClient
  790. [2013-06-17 22:38:13 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\LoLPlus
  791. [2013-02-24 15:19:35 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\LOVE
  792. [2013-07-31 20:25:32 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\ManyCam
  793. [2013-03-21 18:19:05 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Mirillis
  794. [2013-12-25 13:42:47 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\MotioninJoy
  795. [2014-06-18 17:28:14 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Mp3tag
  796. [2014-08-14 19:21:30 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\MPC-HC
  797. [2013-09-22 13:44:16 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\NapiProjekt
  798. [2014-12-21 19:19:35 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Navigator
  799. [2015-01-31 19:13:36 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\OBS
  800. [2012-11-11 16:09:10 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\OpenOffice.org
  801. [2012-10-08 15:04:54 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Opera
  802. [2014-07-16 20:27:45 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Origin
  803. [2015-04-28 12:59:08 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\PC Suite
  804. [2014-07-20 18:23:21 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\PLAY ONLINE
  805. [2015-04-05 23:27:21 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Publish Providers
  806. [2014-07-17 15:21:00 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Riot Games
  807. [2015-04-05 23:27:19 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Sony
  808. [2013-03-21 18:07:59 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\SplitMediaLabs
  809. [2014-06-07 15:56:02 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\TERA
  810. [2015-04-25 13:22:39 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Tibia
  811. [2015-03-28 16:20:47 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\TS3Client
  812. [2013-07-10 11:52:04 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\Tunngle
  813. [2015-05-12 07:04:37 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\uTorrent
  814. [2014-06-04 06:57:49 | 000,000,000 | ---D | M] -- C:\Users\Jerzy Lis\AppData\Roaming\WizardWars
  815. [2013-04-18 17:19:10 | 000,000,000 | -HSD | M] -- C:\Users\Jerzy Lis\AppData\Roaming\wyUpdate AU
  816. [2013-10-05 19:39:13 | 000,000,000 | ---D | M] -- C:\Users\test2\AppData\Roaming\Canon
  817. [2013-07-19 18:39:25 | 000,000,000 | ---D | M] -- C:\Users\test2\AppData\Roaming\ManyCam
  818. [2013-11-02 09:24:17 | 000,000,000 | ---D | M] -- C:\Users\test2\AppData\Roaming\Origin
  819. [2014-07-20 18:59:04 | 000,000,000 | ---D | M] -- C:\Users\test2\AppData\Roaming\PLAY ONLINE
  820.  
  821. [color=#E56717]========== Purity Check ==========[/color]
  822.  
  823.  
  824.  
  825. [color=#E56717]========== Alternate Data Streams ==========[/color]
  826.  
  827. @Alternate Data Stream - 231 bytes -> C:\ProgramData\Temp:6BE50C2B
  828.  
  829. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!