API tools faq
paste
Guest User

Untitled

a guest
Apr 21st, 2014
437
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 52.02 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-04-21 11:19:43 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gouran\Downloads
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16635)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 5,99 Gb Total Physical Memory | 1,80 Gb Available Physical Memory | 30,09% Memory free
  8. 11,98 Gb Paging File | 6,45 Gb Available in Paging File | 53,84% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 117,09 Gb Total Space | 50,52 Gb Free Space | 43,15% Space Free | Partition Type: NTFS
  13. Drive D: | 348,57 Gb Total Space | 156,48 Gb Free Space | 44,89% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: GOURAN-KOMPUTER | User Name: Gouran | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2014-04-21 11:19:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gouran\Downloads\OTL.exe
  22. PRC - [2014-04-02 13:37:23 | 003,774,312 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
  23. PRC - [2014-04-02 03:58:05 | 000,841,032 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. PRC - [2014-03-19 14:15:06 | 001,107,144 | ---- | M] (MK) -- C:\Program Files (x86)\MKJogo\MKLOL\MK.exe
  25. PRC - [2014-02-25 23:57:44 | 001,821,888 | ---- | M] (Valve Corporation) -- D:\Steam\Steam.exe
  26. PRC - [2014-02-14 20:48:24 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  27. PRC - [2014-02-08 03:43:50 | 001,140,736 | ---- | M] (Spotify Ltd) -- C:\Users\Gouran\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
  28. PRC - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  29. PRC - [2013-09-24 12:49:26 | 029,395,264 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe
  30. PRC - [2013-04-08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect\HelperService.exe
  31. PRC - [2013-04-08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect\ConversionService.exe
  32. PRC - [2011-10-19 16:30:50 | 000,423,424 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
  33. PRC - [2011-07-21 12:44:08 | 020,237,824 | ---- | M] () -- C:\Users\Gouran\Desktop\sf bot\sfBot.exe
  34. PRC - [2010-01-21 14:11:40 | 000,045,056 | ---- | M] (Realtek) -- C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe
  35. PRC - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
  36. PRC - [2007-02-09 00:55:11 | 000,074,672 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
  37. PRC - [2007-02-09 00:51:54 | 000,058,288 | ---- | M] (Lexmark International, Inc.) -- C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
  38.  
  39.  
  40. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  41.  
  42. MOD - [2014-04-02 03:58:03 | 000,390,472 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll
  43. MOD - [2014-04-02 03:58:02 | 013,691,720 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\PepperFlash\pepflashplayer.dll
  44. MOD - [2014-04-02 03:57:59 | 004,081,480 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\pdf.dll
  45. MOD - [2014-04-02 03:57:54 | 000,674,632 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\libglesv2.dll
  46. MOD - [2014-04-02 03:57:53 | 000,093,000 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\libegl.dll
  47. MOD - [2014-04-02 03:57:52 | 001,647,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll
  48. MOD - [2014-04-02 03:57:49 | 000,065,352 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll
  49. MOD - [2014-02-25 23:57:46 | 001,135,296 | ---- | M] () -- D:\Steam\bin\chromehtml.dll
  50. MOD - [2014-02-11 04:34:30 | 000,751,616 | ---- | M] () -- D:\Steam\SDL2.dll
  51. MOD - [2014-01-11 01:33:44 | 020,625,832 | ---- | M] () -- D:\Steam\bin\libcef.dll
  52. MOD - [2013-12-23 19:50:42 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  53. MOD - [2013-12-13 00:19:40 | 000,142,848 | ---- | M] () -- D:\Steam\libavresample-1.dll
  54. MOD - [2013-11-05 03:12:06 | 000,890,592 | ---- | M] () -- D:\Steam\libavutil-52.dll
  55. MOD - [2013-06-15 01:49:12 | 001,100,800 | ---- | M] () -- D:\Steam\bin\avcodec-53.dll
  56. MOD - [2013-06-15 01:49:12 | 000,192,000 | ---- | M] () -- D:\Steam\bin\avformat-53.dll
  57. MOD - [2013-06-15 01:49:12 | 000,124,416 | ---- | M] () -- D:\Steam\bin\avutil-51.dll
  58. MOD - [2011-07-21 12:44:08 | 020,237,824 | ---- | M] () -- C:\Users\Gouran\Desktop\sf bot\sfBot.exe
  59. MOD - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
  60. MOD - [2007-09-02 13:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll
  61.  
  62.  
  63. [color=#E56717]========== Services (SafeList) ==========[/color]
  64.  
  65. SRV:[b]64bit:[/b] - [2014-02-14 20:48:24 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  66. SRV:[b]64bit:[/b] - [2013-12-06 22:52:10 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  67. SRV:[b]64bit:[/b] - [2013-07-11 21:42:49 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  68. SRV:[b]64bit:[/b] - [2013-07-11 21:28:35 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  69. SRV:[b]64bit:[/b] - [2007-02-09 00:51:08 | 000,566,192 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxczcoms.exe -- (lxcz_device)
  70. SRV - [2014-04-15 15:05:04 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  71. SRV - [2014-02-07 20:34:20 | 000,131,912 | ---- | M] (Desura Pty Ltd) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Desura\desura_service.exe -- (Desura Install Service)
  72. SRV - [2014-01-07 23:00:22 | 000,569,768 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  73. SRV - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  74. SRV - [2013-12-05 21:36:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  75. SRV - [2013-10-25 14:33:56 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- D:\Smite\HiPatchService.exe -- (HiPatchService)
  76. SRV - [2013-10-23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  77. SRV - [2013-07-19 19:29:30 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
  78. SRV - [2013-07-19 19:29:21 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
  79. SRV - [2013-04-08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) [Auto | Running] -- C:\Program Files (x86)\PDF Architect\HelperService.exe -- (PDF Architect Helper Service)
  80. SRV - [2013-04-08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) [Auto | Running] -- C:\Program Files (x86)\PDF Architect\ConversionService.exe -- (PDF Architect Service)
  81. SRV - [2013-02-04 18:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
  82. SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  83. SRV - [2011-10-19 16:30:50 | 000,423,424 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
  84. SRV - [2011-02-24 02:42:54 | 000,025,832 | ---- | M] () [On_Demand | Stopped] -- D:\origin games\Dragon Age Origins PL\\bin_ship\DAUpdaterSvc.Service.exe -- (DAUpdaterSvc)
  85. SRV - [2010-01-21 14:11:40 | 000,045,056 | ---- | M] (Realtek) [Auto | Running] -- C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe -- (Realtek11nSU)
  86. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  87. SRV - [2007-02-09 00:50:33 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWOW64\lxczcoms.exe -- (lxcz_device)
  88.  
  89.  
  90. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  91.  
  92. DRV:[b]64bit:[/b] - [2014-04-21 11:17:50 | 000,079,064 | ---- | M] (Malwarebytes Corporation) [Kernel | Boot | Unknown] -- C:\Windows\SysNative\drivers\fcptbp.sys -- (iejhhv)
  93. DRV:[b]64bit:[/b] - [2014-04-21 10:42:33 | 000,016,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
  94. DRV:[b]64bit:[/b] - [2014-03-20 20:40:03 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
  95. DRV:[b]64bit:[/b] - [2014-03-20 20:40:03 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
  96. DRV:[b]64bit:[/b] - [2014-02-14 20:48:30 | 001,038,072 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  97. DRV:[b]64bit:[/b] - [2014-02-14 20:48:30 | 000,421,704 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  98. DRV:[b]64bit:[/b] - [2014-02-14 20:48:30 | 000,080,184 | ---- | M] (AVAST Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
  99. DRV:[b]64bit:[/b] - [2014-02-14 20:48:30 | 000,078,648 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  100. DRV:[b]64bit:[/b] - [2013-12-23 19:50:43 | 000,207,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  101. DRV:[b]64bit:[/b] - [2013-12-23 19:50:43 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  102. DRV:[b]64bit:[/b] - [2013-12-23 19:50:43 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  103. DRV:[b]64bit:[/b] - [2013-12-16 14:56:18 | 000,129,944 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
  104. DRV:[b]64bit:[/b] - [2013-12-06 23:52:14 | 013,207,552 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  105. DRV:[b]64bit:[/b] - [2013-12-06 22:21:44 | 000,626,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  106. DRV:[b]64bit:[/b] - [2013-09-24 16:53:50 | 000,094,208 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  107. DRV:[b]64bit:[/b] - [2013-07-21 14:43:34 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  108. DRV:[b]64bit:[/b] - [2013-07-11 21:43:56 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  109. DRV:[b]64bit:[/b] - [2013-07-11 21:43:56 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  110. DRV:[b]64bit:[/b] - [2013-07-11 21:09:41 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  111. DRV:[b]64bit:[/b] - [2010-11-21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  112. DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  113. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  114. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  115. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  116. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  117. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  118. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  119. DRV:[b]64bit:[/b] - [2010-03-10 19:32:58 | 000,687,136 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtl8192su.sys -- (RTL8192su)
  120. DRV:[b]64bit:[/b] - [2009-08-21 10:52:09 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  121. DRV:[b]64bit:[/b] - [2009-07-31 11:40:32 | 000,025,600 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\XENfiltv.sys -- (XENfiltv)
  122. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  123. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  124. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  125. DRV:[b]64bit:[/b] - [2009-07-14 02:01:09 | 000,679,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xnacc.sys -- (xnacc)
  126. DRV:[b]64bit:[/b] - [2009-06-10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  127. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  128. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  129. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  130. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  131. DRV:[b]64bit:[/b] - [2009-03-18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  132. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  133.  
  134.  
  135. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  136.  
  137.  
  138. [color=#E56717]========== Internet Explorer ==========[/color]
  139.  
  140. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  141. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  142. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  143. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  144. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  145. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  146. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  147. IE - HKLM\..\SearchScopes,DefaultScope =
  148. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  149.  
  150.  
  151. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  152. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  153.  
  154. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  155. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  156.  
  157. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  158.  
  159. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  160.  
  161. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  162. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  163. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/
  164. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-PL
  165. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 6F 71 E3 8E 9C 84 CE 01 [binary data]
  166. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  167. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  168. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\..\SearchScopes\{69945CCB-1A08-4724-967A-CEF013E9D982}: "URL" = http://www.idg.pl?q={searchTerms}
  169. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  170. IE - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  171.  
  172. [color=#E56717]========== FireFox ==========[/color]
  173.  
  174. FF - prefs.js..browser.search.selectedEngine: "Google"
  175. FF - prefs.js..browser.search.useDBForOrder: true
  176. FF - prefs.js..browser.startup.homepage: "about:home"
  177. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:26.0
  178. FF - user.js - File not found
  179.  
  180. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll File not found
  181. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\system32\npDeployJava1.dll File not found
  182. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  183. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  184. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
  185. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  186. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  187. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  188. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  189. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
  190. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
  191. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  192. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  193. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  194. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  195. FF - HKCU\Software\MozillaPlugins\thehappycloud.com/HappyCloudPlugin: C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)
  196. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
  197.  
  198. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-10-14 14:03:01 | 000,000,000 | ---D | M]
  199. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-14 20:48:31 | 000,000,000 | ---D | M]
  200. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  201. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 26.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  202. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{B64D9B05-48E1-4CEB-BF58-E0643994E900}: C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [2014-01-11 12:11:21 | 000,000,000 | ---D | M]
  203.  
  204. [2014-01-15 14:35:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gouran\AppData\Roaming\mozilla\Extensions
  205. [2013-08-29 22:52:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
  206. [2014-01-15 14:34:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  207. [2014-01-15 14:34:05 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  208.  
  209. [color=#E56717]========== Chrome ==========[/color]
  210.  
  211. CHR - default_search_provider: Google (Enabled)
  212. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  213. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  214. CHR - homepage:
  215. CHR - plugin: Error reading preferences file
  216. CHR - Extension: Dokumenty Google = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  217. CHR - Extension: Dysk Google = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  218. CHR - Extension: YouTube = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  219. CHR - Extension: Adblock Plus = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.4_0\
  220. CHR - Extension: Szukaj w Google = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  221. CHR - Extension: Poczta o2 = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdhkhehdcicfckijbllglgdkegdnhplm\1.0.21_0\
  222. CHR - Extension: FVD Downloader = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.7.7_0\
  223. CHR - Extension: DVDVideoSoft = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.3.0.0_0\
  224. CHR - Extension: Google Wallet = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  225. CHR - Extension: Gmail = C:\Users\Gouran\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
  226.  
  227. O1 HOSTS File: ([2013-07-19 17:55:54 | 000,000,921 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  228. O1 - Hosts: 127.0.0.1 genuine.microsoft.com
  229. O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
  230. O1 - Hosts: 127.0.0.1 sls.microsoft.com
  231. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  232. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  233. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  234. O2 - BHO: (PDF Architect Helper) - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
  235. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL (Microsoft Corporation)
  236. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  237. O2 - BHO: (no name) - {76D0AAAA-2A29-5299-9EC2-A48F20B23CE4} - No CLSID value found.
  238. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  239. O2 - BHO: (no name) - {CFD5A62F-AF15-D84D-C72D-993A3BEB11F0} - No CLSID value found.
  240. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  241. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  242. O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  243. O4:[b]64bit:[/b] - HKLM..\Run: [lxczbmgr.exe] C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe (Lexmark International, Inc.)
  244. O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation)
  245. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  246. O4 - HKLM..\Run: [FaxCenterServer] C:\Program Files (x86)\Lexmark Fax Solutions\fm3032.exe ()
  247. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
  248. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  249. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  250. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  251. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [Desura] C:\Program Files (x86)\Desura\desura.exe (Desura Pty Ltd)
  252. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [GG] C:\Users\Gouran\AppData\Local\GG\Application\gghub.exe (GG Network S.A.)
  253. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [MKLOL] C:\Program Files (x86)\MKJogo\MKLOL\MK.exe (MK)
  254. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
  255. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [Spotify Web Helper] C:\Users\Gouran\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
  256. O4 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001..\Run: [Steam] D:\Steam\steam.exe (Valve Corporation)
  257. O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe (Malwarebytes Corporation)
  258. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  259. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  260. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  261. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  262. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  263. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  264. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  265. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  266. O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
  267. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
  268. O9:[b]64bit:[/b] - Extra Button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
  269. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Reg Error: Key error. File not found
  270. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
  271. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)
  272. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
  273. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  274. O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  275. O13[b]64bit:[/b] - gopher Prefix: missing
  276. O13 - gopher Prefix: missing
  277. O15 - HKU\S-1-5-21-3251764016-1615116731-1846230976-1001\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
  278. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100
  279. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C8DC1D0D-D02D-4535-B6CA-0B78D5F121B9}: DhcpNameServer = 192.168.1.100
  280. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9709F6A-1948-496C-A256-C0EB9E4D206E}: DhcpNameServer = 192.168.1.100
  281. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  282. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  283. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  284. O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GRA32A~1.DLL (Microsoft Corporation)
  285. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  286. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  287. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  288. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  289. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  290. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  291. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  292. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  293. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office12\GR469A~1.DLL (Microsoft Corporation)
  294. O32 - HKLM CDRom: AutoRun - 1
  295. O33 - MountPoints2\{c221933e-f08c-11e2-b9a2-f46d0449e2ee}\Shell - "" = AutoRun
  296. O33 - MountPoints2\{c221933e-f08c-11e2-b9a2-f46d0449e2ee}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
  297. O33 - MountPoints2\{e3094a05-2ed4-11e3-bc33-f46d0449e2ee}\Shell - "" = AutoRun
  298. O33 - MountPoints2\{e3094a05-2ed4-11e3-bc33-f46d0449e2ee}\Shell\AutoRun\command - "" = G:\Startme.exe
  299. O34 - HKLM BootExecute: (autocheck autochk *)
  300. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  301. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  302. O35 - HKLM\..comfile [open] -- "%1" %*
  303. O35 - HKLM\..exefile [open] -- "%1" %*
  304. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  305. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  306. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  307. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  308. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  309. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  310. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  311.  
  312. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  313.  
  314. [2014-04-21 11:17:49 | 000,079,064 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\fcptbp.sys
  315. [2014-04-20 18:36:27 | 000,000,000 | ---D | C] -- C:\Users\Gouran\AppData\Roaming\.minecraft
  316. [2014-04-20 18:09:47 | 000,000,000 | ---D | C] -- C:\Users\Gouran\Desktop\s
  317. [2014-04-20 17:54:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
  318. [2014-04-20 17:54:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
  319. [2014-04-20 14:35:39 | 000,000,000 | ---D | C] -- C:\Users\Gouran\Desktop\Serious Sam 3 Original Soundtrack
  320. [2014-04-20 13:51:10 | 000,000,000 | ---D | C] -- C:\Users\Gouran\AppData\Local\SlimWare Utilities Inc
  321. [2014-04-20 13:50:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
  322. [2014-04-20 13:50:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers
  323. [2014-04-20 13:49:54 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
  324. [2014-04-20 13:49:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
  325. [2014-04-20 13:49:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
  326. [2014-04-20 13:47:31 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
  327. [2014-04-20 13:42:37 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloaded Installers
  328. [2014-04-20 13:41:38 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  329. [2014-04-18 23:58:33 | 000,000,000 | ---D | C] -- C:\Users\Gouran\Desktop\Heroes of Might and Magic III - Zlota Edycja
  330. [2014-04-14 20:47:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
  331. [2014-04-14 20:47:41 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
  332. [2014-04-09 20:32:07 | 000,000,000 | ---D | C] -- C:\Games
  333. [2014-04-08 19:49:25 | 000,000,000 | ---D | C] -- C:\Users\Gouran\AppData\Roaming\Nero
  334. [2014-04-08 19:40:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
  335. [2014-04-08 19:38:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
  336. [2014-04-01 23:53:17 | 000,119,512 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  337. [2014-04-01 23:53:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  338. [2014-04-01 23:53:01 | 000,088,280 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
  339. [2014-04-01 23:53:01 | 000,063,192 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
  340. [2014-04-01 23:53:01 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  341. [2014-04-01 23:53:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
  342. [2014-03-30 20:51:17 | 000,000,000 | ---D | C] -- C:\Users\Gouran\Desktop\hs dxd
  343. [2014-03-28 18:16:40 | 000,000,000 | ---D | C] -- C:\Users\Gouran\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Happy Cloud
  344. [2014-03-28 18:16:33 | 000,000,000 | ---D | C] -- C:\ProgramData\HappyCloud
  345. [2014-03-22 16:21:55 | 000,000,000 | ---D | C] -- C:\Users\Gouran\AppData\Local\Skype
  346. [2014-03-22 16:21:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  347. [2014-03-22 16:21:40 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
  348. [2014-03-22 16:21:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
  349.  
  350. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  351.  
  352. [2014-04-21 11:17:50 | 000,079,064 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\fcptbp.sys
  353. [2014-04-21 11:16:31 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  354. [2014-04-21 10:46:02 | 000,119,512 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  355. [2014-04-21 10:43:01 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  356. [2014-04-21 10:42:46 | 000,000,412 | ---- | M] () -- C:\Windows\tasks\SlimDrivers Startup.job
  357. [2014-04-21 10:42:33 | 000,016,152 | ---- | M] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
  358. [2014-04-21 10:42:31 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  359. [2014-04-21 10:42:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  360. [2014-04-21 10:42:05 | 529,833,983 | -HS- | M] () -- C:\hiberfil.sys
  361. [2014-04-21 00:37:53 | 000,022,528 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  362. [2014-04-21 00:37:53 | 000,022,528 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  363. [2014-04-21 00:30:35 | 000,001,768 | ---- | M] () -- C:\Users\Public\Desktop\Defraggler.lnk
  364. [2014-04-20 18:09:33 | 002,401,074 | ---- | M] () -- C:\Users\Gouran\Desktop\launcher^FTB_Launcher.exe
  365. [2014-04-20 17:54:38 | 000,001,106 | ---- | M] () -- C:\Users\Gouran\Desktop\EVEREST Home Edition.lnk
  366. [2014-04-20 13:43:25 | 001,638,314 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  367. [2014-04-20 13:43:25 | 000,734,210 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  368. [2014-04-20 13:43:25 | 000,655,932 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  369. [2014-04-20 13:43:25 | 000,156,232 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  370. [2014-04-20 13:43:25 | 000,122,274 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  371. [2014-04-20 13:43:07 | 001,638,314 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  372. [2014-04-20 13:03:53 | 000,001,106 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  373. [2014-04-19 00:02:29 | 000,001,405 | ---- | M] () -- C:\Users\Public\Desktop\HoMM3 HD.lnk
  374. [2014-04-16 23:38:28 | 000,000,913 | ---- | M] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk
  375. [2014-04-15 15:05:04 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  376. [2014-04-15 15:05:04 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  377. [2014-04-11 07:28:08 | 000,000,232 | ---- | M] () -- C:\Windows\Lexstat.ini
  378. [2014-04-10 21:19:26 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  379. [2014-04-09 20:32:19 | 000,001,718 | ---- | M] () -- C:\Users\Gouran\Desktop\Papers, Please v1.0.40.lnk
  380. [2014-04-05 16:55:31 | 000,417,560 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  381. [2014-04-03 09:51:16 | 000,063,192 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys
  382. [2014-04-03 09:51:04 | 000,088,280 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys
  383. [2014-04-03 09:50:58 | 000,025,816 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  384. [2014-04-02 14:58:08 | 000,000,864 | ---- | M] () -- C:\Windows\SysNative\Sora no otoshimono,To Love Ru,Rosario+Vampire,Infinite Stratos,Binbougami ga!,Full Metal Panic,My-Hime,R-15,B Gata H Kei,Onii-chan no Koto Nanka Zenzen Suki Janain Dakara ne,Ichiban Ushiro no Daimaou.lnk
  385. [2014-03-30 01:24:54 | 000,001,017 | ---- | M] () -- C:\Users\Gouran\Desktop\South Park - The Stick of Truth.lnk
  386.  
  387. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  388.  
  389. [2014-04-20 18:18:30 | 002,401,074 | ---- | C] () -- C:\Users\Gouran\Desktop\launcher^FTB_Launcher.exe
  390. [2014-04-20 17:54:38 | 000,001,106 | ---- | C] () -- C:\Users\Gouran\Desktop\EVEREST Home Edition.lnk
  391. [2014-04-20 14:11:57 | 000,001,768 | ---- | C] () -- C:\Users\Public\Desktop\Defraggler.lnk
  392. [2014-04-20 13:51:16 | 000,000,412 | ---- | C] () -- C:\Windows\tasks\SlimDrivers Startup.job
  393. [2014-04-20 13:51:12 | 000,016,152 | ---- | C] () -- C:\Windows\SysNative\drivers\SWDUMon.sys
  394. [2014-04-19 00:02:29 | 000,001,405 | ---- | C] () -- C:\Users\Public\Desktop\HoMM3 HD.lnk
  395. [2014-04-14 20:47:42 | 000,000,913 | ---- | C] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk
  396. [2014-04-09 20:32:19 | 000,001,718 | ---- | C] () -- C:\Users\Gouran\Desktop\Papers, Please v1.0.40.lnk
  397. [2014-04-02 14:45:53 | 000,000,864 | ---- | C] () -- C:\Windows\SysNative\Sora no otoshimono,To Love Ru,Rosario+Vampire,Infinite Stratos,Binbougami ga!,Full Metal Panic,My-Hime,R-15,B Gata H Kei,Onii-chan no Koto Nanka Zenzen Suki Janain Dakara ne,Ichiban Ushiro no Daimaou.lnk
  398. [2014-04-01 23:53:09 | 000,001,106 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  399. [2014-03-30 01:24:54 | 000,001,017 | ---- | C] () -- C:\Users\Gouran\Desktop\South Park - The Stick of Truth.lnk
  400. [2014-03-10 17:49:01 | 000,000,232 | ---- | C] () -- C:\Windows\Lexstat.ini
  401. [2014-03-10 17:45:36 | 000,413,696 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczinpa.dll
  402. [2014-03-10 17:45:36 | 000,274,432 | ---- | C] () -- C:\Windows\SysWow64\LXCZinst.dll
  403. [2014-03-10 17:45:35 | 000,413,696 | ---- | C] () -- C:\Windows\SysWow64\lxczutil.dll
  404. [2014-03-10 17:45:35 | 000,397,312 | ---- | C] ( ) -- C:\Windows\SysWow64\lxcziesc.dll
  405. [2014-03-10 17:45:34 | 000,643,072 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczpmui.dll
  406. [2014-03-10 17:45:33 | 001,224,704 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczserv.dll
  407. [2014-03-10 17:45:33 | 000,991,232 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczusb1.dll
  408. [2014-03-10 17:45:32 | 000,696,320 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczhbn3.dll
  409. [2014-03-10 17:45:32 | 000,585,728 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczlmpm.dll
  410. [2014-03-10 17:45:32 | 000,385,968 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczih.exe
  411. [2014-03-10 17:45:32 | 000,181,168 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczppls.exe
  412. [2014-03-10 17:45:32 | 000,163,840 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczprox.dll
  413. [2014-03-10 17:45:32 | 000,094,208 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczpplc.dll
  414. [2014-03-10 17:45:31 | 000,684,032 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczcomc.dll
  415. [2014-03-10 17:45:31 | 000,537,520 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczcoms.exe
  416. [2014-03-10 17:45:31 | 000,421,888 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczcomm.dll
  417. [2014-03-10 17:45:31 | 000,381,872 | ---- | C] ( ) -- C:\Windows\SysWow64\lxczcfg.exe
  418. [2014-01-20 01:23:48 | 000,000,054 | ---- | C] () -- C:\Windows\JQHApp.dat
  419. [2014-01-18 15:31:38 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
  420. [2014-01-18 15:31:37 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  421. [2014-01-18 15:31:37 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  422. [2014-01-18 15:31:28 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  423. [2014-01-15 21:50:56 | 000,122,884 | ---- | C] () -- C:\Windows\UnGins.exe
  424. [2013-12-06 16:44:26 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  425. [2013-11-22 23:05:57 | 000,000,002 | ---- | C] () -- C:\Windows\msoffice.ini
  426. [2013-11-22 22:33:51 | 000,000,335 | ---- | C] () -- C:\Windows\nsreg.dat
  427. [2013-09-12 17:35:05 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  428. [2013-07-19 19:29:35 | 000,253,440 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
  429. [2013-07-19 19:29:35 | 000,074,240 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
  430. [2013-07-19 19:29:35 | 000,002,169 | ---- | C] () -- C:\Windows\XENcfg.ini
  431. [2013-07-19 19:29:35 | 000,000,388 | ---- | C] () -- C:\Windows\XENMCcfg.ini
  432. [2013-07-19 18:27:11 | 001,638,314 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  433. [2013-07-19 18:18:49 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  434. [2013-07-19 18:02:08 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
  435. [2013-07-19 17:55:54 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe
  436. [2013-03-29 04:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
  437. [2013-03-29 04:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
  438. [2013-03-29 03:38:08 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  439. [2013-03-29 03:38:08 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  440.  
  441. [color=#E56717]========== ZeroAccess Check ==========[/color]
  442.  
  443. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  444.  
  445. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  446.  
  447. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  448.  
  449. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  450.  
  451. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  452.  
  453. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  454. "" = C:\Windows\SysNative\shell32.dll -- [2013-07-11 21:31:24 | 014,176,768 | ---- | M] (Microsoft Corporation)
  455. "ThreadingModel" = Apartment
  456.  
  457. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  458. "" = %SystemRoot%\system32\shell32.dll -- [2013-07-11 21:31:24 | 012,875,776 | ---- | M] (Microsoft Corporation)
  459. "ThreadingModel" = Apartment
  460.  
  461. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  462. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  463. "ThreadingModel" = Free
  464.  
  465. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  466. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  467. "ThreadingModel" = Free
  468.  
  469. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  470. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  471. "ThreadingModel" = Both
  472.  
  473. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  474.  
  475. [color=#E56717]========== LOP Check ==========[/color]
  476.  
  477. [2014-04-20 18:36:27 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\.minecraft
  478. [2013-09-12 17:46:53 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\0F1F1C2Y1H1P1C0I0T
  479. [2014-04-20 14:44:38 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\AIMP3
  480. [2013-12-23 19:52:13 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\AVAST Software
  481. [2013-12-02 19:38:30 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Awesomium
  482. [2014-01-28 13:13:48 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Battle.net
  483. [2013-07-19 21:27:22 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\BESTplayer
  484. [2014-01-20 11:51:17 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\DAEMON Tools Lite
  485. [2013-11-18 17:15:41 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\DMCache
  486. [2014-03-21 15:03:58 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\DVDVideoSoft
  487. [2013-10-03 21:13:25 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Firefly Studios
  488. [2013-10-14 14:12:50 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Foxit Advanced PDF Editor
  489. [2014-04-20 18:09:48 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\ftblauncher
  490. [2013-08-10 16:23:17 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Gadu-Gadu 10
  491. [2014-04-21 10:45:01 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\GG
  492. [2013-12-01 16:37:37 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\GHISLER
  493. [2013-12-15 18:50:01 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\IDM
  494. [2013-07-21 16:43:33 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Lionhead Studios
  495. [2013-07-19 22:39:14 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\LolClient
  496. [2014-02-22 19:56:30 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Metin2-Balmora
  497. [2013-07-22 16:51:15 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\MKKE
  498. [2014-01-19 21:08:31 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\MPC-HC
  499. [2013-10-18 16:57:18 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Mumble
  500. [2014-01-18 15:25:04 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\NapiProjekt
  501. [2013-12-04 00:31:58 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Natural Selection 2
  502. [2013-12-28 19:15:09 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Notepad++
  503. [2013-10-02 18:48:29 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Origin
  504. [2013-10-14 14:05:21 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\PDF Architect
  505. [2013-07-21 14:44:37 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\PowerISO
  506. [2013-07-20 22:23:41 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Riot Games
  507. [2013-07-19 21:44:31 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Rogue Legacy
  508. [2013-09-22 13:46:17 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\SFBot
  509. [2014-02-08 04:03:53 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Spotify
  510. [2014-04-21 11:21:10 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\TS3Client
  511. [2014-03-20 20:42:51 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\Ubisoft
  512. [2014-04-20 00:17:55 | 000,000,000 | ---D | M] -- C:\Users\Gouran\AppData\Roaming\uTorrent
  513. [2013-09-10 15:22:13 | 000,000,000 | -HSD | M] -- C:\Users\Gouran\AppData\Roaming\wyUpdate AU
  514. [2013-10-10 19:53:21 | 000,000,000 | ---D | M] -- C:\Users\Rob\AppData\Roaming\.minecraft
  515.  
  516. [color=#E56717]========== Purity Check ==========[/color]
  517.  
  518.  
  519.  
  520. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!