API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 19th, 2014
196
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 43.85 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 19.12.2014. 15:06:06 - Run 1
  2. OTL by OldTimer - Version 3.2.70.2 Folder = C:\Users\Ivan\Downloads
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17501)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 3,47 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 55,23% Memory free
  8. 6,95 Gb Paging File | 5,11 Gb Available in Paging File | 73,48% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 67,58 Gb Total Space | 21,34 Gb Free Space | 31,58% Space Free | Partition Type: NTFS
  13. Drive D: | 600,67 Gb Total Space | 502,38 Gb Free Space | 83,64% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: IVAN-PC | User Name: Ivan | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2014.12.19 14:52:43 | 000,601,088 | ---- | M] (OldTimer Tools) -- C:\Users\Ivan\Downloads\OTL.exe
  22. PRC - [2014.12.06 02:50:53 | 000,856,904 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  23. PRC - [2014.11.15 17:08:30 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
  24. PRC - [2014.10.03 15:04:15 | 004,085,896 | ---- | M] (AVAST Software) -- D:\AVAST Software\Avast\avastui.exe
  25. PRC - [2014.10.03 15:03:39 | 000,050,344 | ---- | M] (AVAST Software) -- D:\AVAST Software\Avast\AvastSvc.exe
  26. PRC - [2010.05.25 19:53:46 | 002,139,400 | ---- | M] () -- D:\AcronisDiscDirector\OSS\reinstall_svc.exe
  27.  
  28.  
  29. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  30.  
  31. MOD - [2014.12.06 02:50:51 | 014,913,352 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll
  32. MOD - [2014.12.06 02:50:50 | 009,009,480 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
  33. MOD - [2014.12.06 02:50:46 | 001,077,064 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
  34. MOD - [2014.12.06 02:50:45 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
  35. MOD - [2014.12.06 02:50:44 | 001,677,128 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
  36. MOD - [2014.10.03 15:03:40 | 019,329,904 | ---- | M] () -- D:\AVAST Software\Avast\libcef.dll
  37. MOD - [2014.10.03 15:03:40 | 000,301,152 | ---- | M] () -- D:\AVAST Software\Avast\aswProperty.dll
  38.  
  39.  
  40. [color=#E56717]========== Services (SafeList) ==========[/color]
  41.  
  42. SRV:[b]64bit:[/b] - [2014.11.22 03:35:29 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  43. SRV:[b]64bit:[/b] - [2014.09.15 23:03:18 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  44. SRV:[b]64bit:[/b] - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  45. SRV:[b]64bit:[/b] - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  46. SRV - [2014.12.18 14:52:47 | 001,903,472 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- D:\Origin\OriginClientService.exe -- (Origin Client Service)
  47. SRV - [2014.12.11 10:30:48 | 000,315,496 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  48. SRV - [2014.12.03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  49. SRV - [2014.11.21 06:12:56 | 000,969,016 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- D:\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  50. SRV - [2014.11.21 06:12:54 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- D:\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  51. SRV - [2014.11.12 14:14:44 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  52. SRV - [2014.10.03 15:03:39 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- D:\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  53. SRV - [2014.09.15 17:13:38 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- D:\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
  54. SRV - [2014.09.01 23:06:42 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- D:\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)
  55. SRV - [2014.03.20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  56. SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  57. SRV - [2010.05.25 19:53:46 | 002,139,400 | ---- | M] () [Auto | Running] -- D:\AcronisDiscDirector\OSS\reinstall_svc.exe -- (OS Selector)
  58. SRV - [2009.02.26 18:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
  59.  
  60.  
  61. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  62.  
  63. DRV:[b]64bit:[/b] - [2014.11.25 15:43:23 | 001,041,168 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
  64. DRV:[b]64bit:[/b] - [2014.11.21 06:14:22 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
  65. DRV:[b]64bit:[/b] - [2014.11.21 06:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  66. DRV:[b]64bit:[/b] - [2014.10.21 23:08:29 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
  67. DRV:[b]64bit:[/b] - [2014.10.03 15:04:13 | 000,427,360 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
  68. DRV:[b]64bit:[/b] - [2014.10.03 15:03:41 | 000,224,896 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  69. DRV:[b]64bit:[/b] - [2014.10.03 15:03:41 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  70. DRV:[b]64bit:[/b] - [2014.10.03 15:03:41 | 000,092,008 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
  71. DRV:[b]64bit:[/b] - [2014.10.03 15:03:41 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  72. DRV:[b]64bit:[/b] - [2014.10.03 15:03:41 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  73. DRV:[b]64bit:[/b] - [2014.10.03 15:03:41 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  74. DRV:[b]64bit:[/b] - [2014.10.03 13:01:27 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  75. DRV:[b]64bit:[/b] - [2014.09.15 23:26:58 | 016,750,080 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  76. DRV:[b]64bit:[/b] - [2014.09.15 22:59:06 | 000,576,000 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  77. DRV:[b]64bit:[/b] - [2014.06.21 18:01:22 | 000,094,720 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  78. DRV:[b]64bit:[/b] - [2013.02.25 09:12:04 | 002,426,672 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
  79. DRV:[b]64bit:[/b] - [2012.10.10 18:49:05 | 000,030,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hitmanpro36.sys -- (hitmanpro36)
  80. DRV:[b]64bit:[/b] - [2012.03.08 17:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
  81. DRV:[b]64bit:[/b] - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  82. DRV:[b]64bit:[/b] - [2012.02.09 00:20:15 | 000,276,576 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
  83. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  84. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  85. DRV:[b]64bit:[/b] - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  86. DRV:[b]64bit:[/b] - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  87. DRV:[b]64bit:[/b] - [2010.11.20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  88. DRV:[b]64bit:[/b] - [2010.05.31 10:46:50 | 000,333,928 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  89. DRV:[b]64bit:[/b] - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
  90. DRV:[b]64bit:[/b] - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  91. DRV:[b]64bit:[/b] - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  92. DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  93. DRV:[b]64bit:[/b] - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  94. DRV:[b]64bit:[/b] - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  95. DRV:[b]64bit:[/b] - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  96. DRV:[b]64bit:[/b] - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  97. DRV - [2014.02.11 16:36:52 | 000,059,616 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- D:\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.3)
  98. DRV - [2011.07.22 17:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
  99. DRV - [2011.07.12 22:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
  100. DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  101.  
  102.  
  103. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  104.  
  105.  
  106. [color=#E56717]========== Internet Explorer ==========[/color]
  107.  
  108. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  109. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  110. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  111. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  112. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  113.  
  114. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
  115. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.msn.com/
  116. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = hr-HR
  117. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 75 04 33 46 A2 DC CF 01 [binary data]
  118. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  119. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  120. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  121.  
  122. [color=#E56717]========== FireFox ==========[/color]
  123.  
  124. FF - prefs.js..browser.startup.homepage: "http://www.google.hr/"
  125. FF - user.js - File not found
  126.  
  127. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll File not found
  128. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  129. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
  130. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  131. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  132. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll File not found
  133. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
  134. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  135. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  136. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  137. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  138. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  139. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  140. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  141. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  142.  
  143. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: D:\AVAST Software\Avast\WebRep\FF [2014.10.03 15:03:41 | 000,000,000 | ---D | M]
  144.  
  145. [2012.02.09 00:26:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Extensions
  146. [2014.12.19 00:09:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\9tfen7kb.default\extensions
  147.  
  148. [color=#E56717]========== Chrome ==========[/color]
  149.  
  150. CHR - default_search_provider: ()
  151. CHR - default_search_provider: search_url =
  152. CHR - default_search_provider: suggest_url =
  153. CHR - plugin: Error reading preferences file
  154. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.8_0\
  155. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
  156. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  157. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  158. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  159. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.0_0\
  160. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  161. CHR - Extension: No name found = C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
  162.  
  163. O1 HOSTS File: ([2012.10.11 20:45:34 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  164. O1 - Hosts: 127.0.0.1 localhost
  165. O2:[b]64bit:[/b] - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
  166. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
  167. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  168. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
  169. O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
  170. O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
  171. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  172. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  173. O2 - BHO: (Evernote extension) - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - D:\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
  174. O4 - HKLM..\Run: [AvastUI.exe] D:\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  175. O4 - HKLM..\Run: [GrooveMonitor] D:\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
  176. O4 - HKLM..\Run: [StartCCC] D:\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
  177. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
  178. O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  179. O4 - Startup: C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()
  180. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  181. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  182. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
  183. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
  184. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  185. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  186. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  187. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  188. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
  189. O8:[b]64bit:[/b] - Extra context menu item: Clip Image - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
  190. O8:[b]64bit:[/b] - Extra context menu item: Clip selection - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
  191. O8:[b]64bit:[/b] - Extra context menu item: Clip this page - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
  192. O8:[b]64bit:[/b] - Extra context menu item: Clip URL - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
  193. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  194. O8:[b]64bit:[/b] - Extra context menu item: New Note - D:\Evernote\\EvernoteIERes\NewNote.html ()
  195. O8 - Extra context menu item: Clip Image - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found
  196. O8 - Extra context menu item: Clip selection - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found
  197. O8 - Extra context menu item: Clip this page - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found
  198. O8 - Extra context menu item: Clip URL - D:\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found
  199. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  200. O8 - Extra context menu item: New Note - D:\Evernote\\EvernoteIERes\NewNote.html ()
  201. O9 - Extra Button: Pošalji u OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  202. O9 - Extra 'Tools' menuitem : Po&šalji u OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
  203. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
  204. O9 - Extra Button: @D:\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\Evernote\\EvernoteIERes\AddNote.html ()
  205. O9 - Extra 'Tools' menuitem : @D:\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\Evernote\\EvernoteIERes\AddNote.html ()
  206. O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
  207. O13 - gopher Prefix: missing
  208. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  209. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.139.104.2 83.139.105.2
  210. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E389148-D858-414E-AA7C-09FB3251840E}: DhcpNameServer = 83.139.104.2 83.139.105.2
  211. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  212. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  213. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  214. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  215. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  216. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  217. O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
  218. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  219. O18:[b]64bit:[/b] - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  220. O18:[b]64bit:[/b] - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  221. O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  222. O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
  223. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  224. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  225. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  226. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  227. O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
  228. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  229. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
  230. O32 - HKLM CDRom: AutoRun - 1
  231. O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
  232. O34 - HKLM BootExecute: (autocheck autochk *)
  233. O34 - HKLM BootExecute: (bootdelete)
  234. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  235. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  236. O35 - HKLM\..comfile [open] -- "%1" %*
  237. O35 - HKLM\..exefile [open] -- "%1" %*
  238. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  239. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  240. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  241. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  242. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  243. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  244. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  245.  
  246. NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  247.  
  248. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  249. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  250. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  251.  
  252. CREATERESTOREPOINT
  253. System Restore Service not available.
  254.  
  255. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  256.  
  257. [2014.12.19 15:03:30 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
  258. [2014.12.19 14:50:38 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
  259. [2014.12.19 14:50:12 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
  260. [2014.12.19 01:35:38 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  261. [2014.12.18 23:32:56 | 000,129,752 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  262. [2014.12.18 23:32:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  263. [2014.12.18 23:32:00 | 000,093,400 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
  264. [2014.12.18 23:32:00 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
  265. [2014.12.18 23:32:00 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  266. [2014.12.18 23:32:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  267. [2014.12.18 23:30:26 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Local\Programs
  268. [2014.12.18 20:34:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  269. [2014.12.17 18:09:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
  270. [2014.12.17 18:04:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
  271. [2014.12.17 18:03:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio
  272. [2014.12.17 17:59:18 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
  273. [2014.12.17 17:59:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
  274. [2014.12.17 16:27:56 | 000,028,960 | ---- | C] (Glarysoft Ltd) -- C:\Windows\SysNative\RegBootDefrag.exe
  275. [2014.12.16 23:54:51 | 000,000,000 | ---D | C] -- C:\Users\Ivan\Documents\KONAMI
  276. [2014.12.16 23:54:51 | 000,000,000 | ---D | C] -- C:\ProgramData\KONAMI
  277. [2014.12.16 23:54:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
  278. [2014.12.16 21:43:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pro Evolution Soccer 2015
  279. [2014.12.05 23:39:14 | 000,000,000 | ---D | C] -- C:\Users\Ivan\.jmc
  280. [2014.12.05 23:37:58 | 000,000,000 | ---D | C] -- C:\Users\Ivan\.eclipse
  281. [2014.12.05 20:44:50 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Local\Eclipse
  282. [2014.12.05 20:42:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  283. [2014.12.05 20:41:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
  284. [2014.12.05 20:40:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
  285. [2014.12.05 20:40:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  286. [2014.12.05 20:39:32 | 000,000,000 | ---D | C] -- C:\Program Files\Java
  287. [2014.12.05 19:25:59 | 000,000,000 | -HSD | C] -- C:\Users\Ivan\AppData\Local\EmieBrowserModeList
  288. [2014.12.05 19:03:09 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Roaming\Notepad++
  289. [2014.12.05 18:46:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
  290. [2014.12.05 18:00:04 | 000,000,000 | ---D | C] -- C:\Users\Ivan\Documents\Visual Studio 2005
  291. [2014.11.25 19:31:24 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Sports Interactive
  292. [2014.11.25 19:31:24 | 000,000,000 | ---D | C] -- C:\Users\Ivan\Documents\Sports Interactive
  293. [2014.11.25 19:31:24 | 000,000,000 | ---D | C] -- C:\Users\Ivan\AppData\Local\Sports Interactive
  294. [2014.11.25 19:31:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
  295. [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
  296.  
  297. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  298.  
  299. [2014.12.19 15:03:30 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
  300. [2014.12.19 15:03:30 | 000,000,280 | ---- | M] () -- C:\Windows\SysNative\bootdelete.lst
  301. [2014.12.19 14:50:39 | 000,001,893 | ---- | M] () -- C:\Users\Public\Desktop\HitmanPro.lnk
  302. [2014.12.19 13:46:41 | 000,026,400 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  303. [2014.12.19 13:46:41 | 000,026,400 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  304. [2014.12.19 13:39:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  305. [2014.12.19 13:39:45 | 2798,211,072 | -HS- | M] () -- C:\hiberfil.sys
  306. [2014.12.19 01:43:42 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  307. [2014.12.18 22:45:30 | 000,007,601 | ---- | M] () -- C:\Users\Ivan\AppData\Local\resmon.resmoncfg
  308. [2014.12.17 23:22:02 | 004,967,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  309. [2014.12.17 00:04:36 | 000,000,702 | ---- | M] () -- C:\Users\Public\Desktop\Pro Evolution Soccer 2015.lnk
  310. [2014.12.16 15:16:58 | 000,000,322 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize 5.job
  311. [2014.12.16 15:16:58 | 000,000,242 | ---- | M] () -- C:\Windows\tasks\GU5SkipUAC.job
  312. [2014.12.09 19:28:56 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  313. [2014.12.08 06:48:10 | 000,028,960 | ---- | M] (Glarysoft Ltd) -- C:\Windows\SysNative\RegBootDefrag.exe
  314. [2014.12.05 17:55:37 | 000,884,308 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  315. [2014.12.05 17:55:37 | 000,724,840 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  316. [2014.12.05 17:55:37 | 000,151,418 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  317. [2014.11.26 23:47:02 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  318. [2014.11.25 15:43:23 | 001,041,168 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswsnx.sys
  319. [2014.11.21 06:14:22 | 000,063,704 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
  320. [2014.11.21 06:14:12 | 000,093,400 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
  321. [2014.11.21 06:14:08 | 000,025,816 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  322. [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
  323.  
  324. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  325.  
  326. [2014.12.19 15:03:30 | 000,000,280 | ---- | C] () -- C:\Windows\SysNative\bootdelete.lst
  327. [2014.12.19 14:50:39 | 000,001,893 | ---- | C] () -- C:\Users\Public\Desktop\HitmanPro.lnk
  328. [2014.12.16 21:43:48 | 000,000,702 | ---- | C] () -- C:\Users\Public\Desktop\Pro Evolution Soccer 2015.lnk
  329. [2014.10.21 22:10:34 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  330. [2014.09.15 23:18:02 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
  331. [2014.09.15 23:18:02 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
  332. [2014.09.15 23:06:34 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  333. [2014.09.15 23:06:34 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  334. [2014.09.15 17:19:58 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  335. [2012.08.27 23:35:46 | 000,294,867 | ---- | C] () -- C:\Users\Ivan\AppData\Local\debuggee.mdmp
  336. [2012.02.21 15:56:49 | 000,007,601 | ---- | C] () -- C:\Users\Ivan\AppData\Local\resmon.resmoncfg
  337.  
  338. [color=#E56717]========== ZeroAccess Check ==========[/color]
  339.  
  340. [2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  341.  
  342. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  343.  
  344. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  345.  
  346. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  347.  
  348. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  349.  
  350. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  351. "" = C:\Windows\SysNative\shell32.dll -- [2014.06.25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
  352. "ThreadingModel" = Apartment
  353.  
  354. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  355. "" = %SystemRoot%\system32\shell32.dll -- [2014.06.25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
  356. "ThreadingModel" = Apartment
  357.  
  358. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  359. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  360. "ThreadingModel" = Free
  361.  
  362. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  363. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  364. "ThreadingModel" = Free
  365.  
  366. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  367. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  368. "ThreadingModel" = Both
  369.  
  370. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  371.  
  372. [color=#E56717]========== LOP Check ==========[/color]
  373.  
  374. [2014.10.03 15:04:35 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\AVAST Software
  375. [2012.02.09 16:00:34 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\AVG2012
  376. [2014.12.18 20:26:08 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Azureus
  377. [2012.04.02 23:21:23 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\BSplayer
  378. [2014.10.21 16:28:37 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\BSplayer Pro
  379. [2013.03.05 21:50:46 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
  380. [2014.12.18 20:19:23 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\DAEMON Tools Lite
  381. [2013.12.14 17:20:05 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\DAEMON Tools Pro
  382. [2014.10.21 23:08:29 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\DiskDefrag
  383. [2013.10.09 12:48:50 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Dropbox
  384. [2014.10.21 23:08:38 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\GlarySoft
  385. [2013.10.14 20:07:22 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Grand Ages Rome
  386. [2014.12.05 19:03:48 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Notepad++
  387. [2014.10.16 19:07:32 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Origin
  388. [2013.03.05 22:28:31 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\PDAppFlex
  389. [2014.10.21 16:28:35 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\RadeonPro
  390. [2013.06.04 21:11:33 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Rainmeter
  391. [2014.10.03 14:12:56 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Steam
  392. [2013.12.13 21:12:33 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\Utherverse
  393. [2014.01.21 14:08:30 | 000,000,000 | ---D | M] -- C:\Users\Ivan\AppData\Roaming\ViberPC
  394.  
  395. [color=#E56717]========== Purity Check ==========[/color]
  396.  
  397.  
  398.  
  399. [color=#E56717]========== Custom Scans ==========[/color]
  400.  
  401. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  402. [2014.10.17 13:34:22 | 000,006,144 | ---- | M] () -- C:\bootex.log
  403. [2014.10.17 13:34:23 | 000,003,624 | ---- | M] () -- C:\bootsqm.dat
  404. [2014.12.19 13:39:45 | 2798,211,072 | -HS- | M] () -- C:\hiberfil.sys
  405. [2014.12.19 13:39:43 | 3730,948,096 | -HS- | M] () -- C:\pagefile.sys
  406.  
  407. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  408. [2009.07.14 06:32:31 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
  409. [2009.07.14 06:32:31 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
  410. [2009.07.14 06:32:31 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
  411. [2009.07.14 06:32:31 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
  412.  
  413. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  414.  
  415. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  416. [2009.06.10 21:49:50 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
  417.  
  418. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  419.  
  420. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  421.  
  422. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  423.  
  424. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  425.  
  426. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  427.  
  428. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  429.  
  430. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  431.  
  432. [color=#A23BEC]< %systemroot%\*.png >[/color]
  433.  
  434. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  435. [2014.10.03 15:03:40 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  436. [2012.03.08 17:37:20 | 000,302,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR
  437.  
  438. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  439.  
  440. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  441.  
  442. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  443.  
  444. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  445.  
  446. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  447. [2009.07.14 05:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  448. [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
  449.  
  450. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  451.  
  452. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  453.  
  454. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  455.  
  456. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  457.  
  458. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  459.  
  460. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  461.  
  462. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  463.  
  464. [color=#A23BEC]< %systemroot%\*.config >[/color]
  465.  
  466. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  467.  
  468. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  469. [2012.03.08 19:05:51 | 000,000,221 | -HS- | M] () -- C:\Users\Ivan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  470.  
  471. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  472.  
  473. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  474.  
  475. [color=#A23BEC]< %systemroot%\*.src >[/color]
  476.  
  477. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  478.  
  479. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  480.  
  481. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  482.  
  483. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  484.  
  485. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  486.  
  487. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  488.  
  489. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  490.  
  491. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  492.  
  493. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  494.  
  495. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  496.  
  497. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  498.  
  499. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  500.  
  501. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  502.  
  503. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  504.  
  505. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  506.  
  507. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  508. [2009.06.10 22:20:04 | 000,000,802 | ---- | M] () -- C:\Windows\ADDINS\FXSEXT.ecf
  509.  
  510. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  511.  
  512. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  513.  
  514. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  515.  
  516. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  517.  
  518. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  519.  
  520. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  521.  
  522. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  523.  
  524. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  525.  
  526. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  527.  
  528. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  529.  
  530. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  531. [2014.08.18 22:48:34 | 000,000,402 | -HS- | M] () -- C:\Users\Ivan\Favorites\desktop.ini
  532.  
  533. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  534. [2009.07.14 02:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\mofcomp.exe
  535. [2009.07.14 02:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WinMgmt.exe
  536. [2009.07.14 02:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIADAP.exe
  537. [2009.07.14 02:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIC.exe
  538. [2010.11.20 13:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiPrvSE.exe
  539.  
  540. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  541.  
  542. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  543.  
  544. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!