API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 19th, 2014
246
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 47.99 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 19.12.2014 20:35:15 - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sanda\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17501)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 3,86 Gb Total Physical Memory | 1,04 Gb Available Physical Memory | 26,96% Memory free
  8. 7,72 Gb Paging File | 4,66 Gb Available in Paging File | 60,38% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 288,34 Gb Total Space | 194,76 Gb Free Space | 67,54% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: TOSHIBA | User Name: Sanda | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  16. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - File not found --
  21. PRC - [2014.12.15 19:37:57 | 005,227,112 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  22. PRC - [2014.12.15 00:13:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  23. PRC - [2014.12.14 21:42:31 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
  24. PRC - [2014.12.14 21:31:08 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  25. PRC - [2014.12.08 06:46:54 | 000,402,720 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\MemfilesService.exe
  26. PRC - [2014.12.08 06:46:30 | 000,846,624 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  27. PRC - [2014.12.06 02:50:53 | 000,856,904 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  28. PRC - [2014.12.03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  29. PRC - [2014.09.30 06:45:10 | 000,350,528 | ---- | M] (ClientConnect Ltd.) -- C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe
  30. PRC - [2012.11.29 20:31:04 | 000,038,608 | ---- | M] () -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
  31. PRC - [2009.10.02 13:26:10 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  32. PRC - [2009.09.30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  33. PRC - [2009.09.30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  34. PRC - [2009.03.10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
  35. PRC - [2007.01.04 19:48:50 | 000,112,152 | ---- | M] (InterVideo) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
  36.  
  37.  
  38. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  39.  
  40. MOD - [2014.12.15 10:30:11 | 000,774,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\875c35969785fa170d186e7ca546ac9e\System.Runtime.Remoting.ni.dll
  41. MOD - [2014.12.15 10:28:59 | 012,435,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1453d9e9a4989833ef3db4b22549ba1a\System.Windows.Forms.ni.dll
  42. MOD - [2014.12.15 10:28:43 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\836e10dfd0811b303553216f5cb092ef\System.Drawing.ni.dll
  43. MOD - [2014.12.15 10:28:29 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
  44. MOD - [2014.12.15 10:28:20 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\237d509a79aeef6e4635b09450d98f2a\System.Configuration.ni.dll
  45. MOD - [2014.12.15 10:27:49 | 007,991,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
  46. MOD - [2014.12.14 21:31:29 | 038,562,088 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  47. MOD - [2014.12.08 06:47:36 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
  48. MOD - [2014.12.06 02:50:50 | 009,009,480 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
  49. MOD - [2014.12.06 02:50:46 | 001,077,064 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
  50. MOD - [2014.12.06 02:50:45 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
  51. MOD - [2014.12.06 02:50:44 | 001,677,128 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
  52. MOD - [2014.09.16 14:45:47 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
  53. MOD - [2013.07.09 07:38:55 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
  54. MOD - [2010.11.13 01:08:41 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
  55.  
  56.  
  57. [color=#E56717]========== Services (SafeList) ==========[/color]
  58.  
  59. SRV:[b]64bit:[/b] - [2014.12.14 21:31:08 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  60. SRV:[b]64bit:[/b] - [2014.12.14 21:30:45 | 004,012,248 | ---- | M] (Avast Software) [On_Demand | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe -- (AvastVBoxSvc)
  61. SRV:[b]64bit:[/b] - [2014.11.22 03:35:29 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  62. SRV:[b]64bit:[/b] - [2013.08.12 13:11:04 | 000,366,600 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  63. SRV:[b]64bit:[/b] - [2013.08.12 13:11:04 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  64. SRV:[b]64bit:[/b] - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  65. SRV:[b]64bit:[/b] - [2009.11.10 13:54:54 | 000,824,688 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TPHM\TPCHSrv.exe -- (TPCHSrv)
  66. SRV:[b]64bit:[/b] - [2009.11.05 22:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
  67. SRV:[b]64bit:[/b] - [2009.11.05 09:19:12 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
  68. SRV:[b]64bit:[/b] - [2009.10.21 09:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
  69. SRV:[b]64bit:[/b] - [2009.09.28 14:46:02 | 000,251,760 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
  70. SRV:[b]64bit:[/b] - [2009.07.28 14:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
  71. SRV - [2014.12.18 20:53:10 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  72. SRV - [2014.12.14 23:04:28 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  73. SRV - [2014.12.03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  74. SRV - [2014.09.30 06:45:10 | 000,350,528 | ---- | M] (ClientConnect Ltd.) [Auto | Running] -- C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe -- (TBSrv)
  75. SRV - [2014.03.20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  76. SRV - [2013.10.23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  77. SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  78. SRV - [2013.02.04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
  79. SRV - [2012.11.29 20:31:04 | 000,038,608 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
  80. SRV - [2011.02.11 13:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
  81. SRV - [2010.10.12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  82. SRV - [2010.06.14 14:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  83. SRV - [2009.10.27 20:12:14 | 000,252,784 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
  84. SRV - [2009.10.21 10:40:44 | 000,193,904 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
  85. SRV - [2009.10.15 16:49:56 | 000,116,104 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
  86. SRV - [2009.10.02 13:26:12 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  87. SRV - [2009.09.30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  88. SRV - [2009.09.30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  89. SRV - [2009.03.10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
  90. SRV - [2007.01.04 19:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
  91.  
  92.  
  93. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  94.  
  95. DRV:[b]64bit:[/b] - [2014.12.15 19:49:15 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
  96. DRV:[b]64bit:[/b] - [2014.12.15 19:37:55 | 001,050,432 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
  97. DRV:[b]64bit:[/b] - [2014.12.14 21:31:38 | 000,116,728 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
  98. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,436,624 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
  99. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,267,632 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  100. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  101. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,083,280 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  102. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  103. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  104. DRV:[b]64bit:[/b] - [2014.12.14 21:30:45 | 000,271,752 | ---- | M] (Avast Software) [Kernel | Auto | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys -- (VBoxAswDrv)
  105. DRV:[b]64bit:[/b] - [2014.06.03 02:05:44 | 000,017,600 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver)
  106. DRV:[b]64bit:[/b] - [2013.01.18 20:27:11 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
  107. DRV:[b]64bit:[/b] - [2013.01.18 20:27:11 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
  108. DRV:[b]64bit:[/b] - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  109. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  110. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  111. DRV:[b]64bit:[/b] - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  112. DRV:[b]64bit:[/b] - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  113. DRV:[b]64bit:[/b] - [2010.11.20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  114. DRV:[b]64bit:[/b] - [2009.11.05 22:15:40 | 000,291,328 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  115. DRV:[b]64bit:[/b] - [2009.10.26 12:39:44 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  116. DRV:[b]64bit:[/b] - [2009.10.15 20:11:26 | 000,307,760 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  117. DRV:[b]64bit:[/b] - [2009.10.02 13:33:48 | 000,946,688 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se)
  118. DRV:[b]64bit:[/b] - [2009.10.02 12:58:58 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  119. DRV:[b]64bit:[/b] - [2009.09.24 17:55:00 | 000,212,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
  120. DRV:[b]64bit:[/b] - [2009.09.17 12:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
  121. DRV:[b]64bit:[/b] - [2009.09.14 14:30:26 | 000,058,744 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
  122. DRV:[b]64bit:[/b] - [2009.08.21 13:24:04 | 000,084,512 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  123. DRV:[b]64bit:[/b] - [2009.08.05 12:56:04 | 000,063,856 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
  124. DRV:[b]64bit:[/b] - [2009.07.30 19:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
  125. DRV:[b]64bit:[/b] - [2009.07.28 20:02:10 | 000,081,768 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
  126. DRV:[b]64bit:[/b] - [2009.07.28 18:24:12 | 000,081,408 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdpe64.sys -- (risdpcie)
  127. DRV:[b]64bit:[/b] - [2009.07.24 15:57:08 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
  128. DRV:[b]64bit:[/b] - [2009.07.24 11:33:14 | 000,026,472 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
  129. DRV:[b]64bit:[/b] - [2009.07.14 13:25:14 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ.SYS -- (TVALZ)
  130. DRV:[b]64bit:[/b] - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  131. DRV:[b]64bit:[/b] - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  132. DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  133. DRV:[b]64bit:[/b] - [2009.07.14 01:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
  134. DRV:[b]64bit:[/b] - [2009.07.13 22:12:36 | 000,019,824 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
  135. DRV:[b]64bit:[/b] - [2009.07.04 19:27:02 | 000,055,808 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpe64.sys -- (rixdpcie)
  136. DRV:[b]64bit:[/b] - [2009.07.02 08:54:52 | 000,060,416 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspe64.sys -- (rimspci)
  137. DRV:[b]64bit:[/b] - [2009.06.29 16:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
  138. DRV:[b]64bit:[/b] - [2009.06.29 10:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
  139. DRV:[b]64bit:[/b] - [2009.06.22 17:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
  140. DRV:[b]64bit:[/b] - [2009.06.20 03:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  141. DRV:[b]64bit:[/b] - [2009.06.19 19:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
  142. DRV:[b]64bit:[/b] - [2009.06.19 10:00:26 | 000,094,336 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
  143. DRV:[b]64bit:[/b] - [2009.06.19 09:59:32 | 000,050,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
  144. DRV:[b]64bit:[/b] - [2009.06.17 12:01:04 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
  145. DRV:[b]64bit:[/b] - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  146. DRV:[b]64bit:[/b] - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  147. DRV:[b]64bit:[/b] - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  148. DRV:[b]64bit:[/b] - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  149. DRV:[b]64bit:[/b] - [2008.08.28 11:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  150. DRV:[b]64bit:[/b] - [2007.04.16 20:51:50 | 000,014,112 | R--- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
  151. DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  152.  
  153.  
  154. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  155.  
  156.  
  157. [color=#E56717]========== Internet Explorer ==========[/color]
  158.  
  159. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  160. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  161. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  162. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  163. IE - HKLM\..\URLSearchHook: {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found
  164. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  165. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  166. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  167.  
  168. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  169. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com
  170. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  171. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.bing.com
  172. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  173. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  174. IE - HKCU\..\URLSearchHook: {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found
  175. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  176. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  177. IE - HKCU\..\SearchScopes\{1324C2C7-9262-4FB9-88A4-32E0A3C82477}: "URL" = http://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
  178. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TSEH_deDE379
  179. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  180.  
  181. [color=#E56717]========== FireFox ==========[/color]
  182.  
  183. FF - prefs.js..browser.search.highlightCount: 0
  184. FF - prefs.js..browser.search.isUS: false
  185. FF - prefs.js..browser.startup.homepage: "http://www.google.hr"
  186. FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:10.0.2502.149
  187. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0
  188. FF - user.js - File not found
  189.  
  190. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll File not found
  191. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  192. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  193. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
  194. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
  195. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  196. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  197. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  198. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  199. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  200. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  201. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  202. FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
  203. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  204. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
  205. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
  206. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
  207. FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
  208. FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
  209. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  210. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  211. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  212. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  213. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  214.  
  215. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013.01.11 12:57:50 | 000,000,000 | ---D | M]
  216. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013.01.11 12:57:50 | 000,000,000 | ---D | M]
  217. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.12.15 19:37:29 | 000,000,000 | ---D | M]
  218. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2014.12.18 20:52:38 | 000,000,000 | ---D | M]
  219. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014.12.18 20:52:50 | 000,000,000 | ---D | M]
  220. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  221.  
  222. [2014.12.15 17:28:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Extensions
  223. [2014.12.18 20:44:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\25e2lgxy.default-1418670126341\extensions
  224. [2014.12.18 20:41:09 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\25e2lgxy.default-1418670126341\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  225. [2014.12.18 20:52:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  226. [2014.12.18 20:52:37 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  227. [2014.12.15 19:37:29 | 000,000,000 | ---D | M] ("Avast Online Security") -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
  228. [2013.01.11 12:57:24 | 000,124,056 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
  229.  
  230. [color=#E56717]========== Chrome ==========[/color]
  231.  
  232. CHR - default_search_provider: (Enabled)
  233. CHR - default_search_provider: search_url =
  234. CHR - default_search_provider: suggest_url =
  235. CHR - plugin: Error reading preferences file
  236. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
  237. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.14.4_0\
  238. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  239.  
  240. O1 HOSTS File: ([2012.05.26 12:39:58 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  241. O1 - Hosts: 127.0.0.1 localhost
  242. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  243. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  244. O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
  245. O2 - BHO: (no name) - {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found.
  246. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  247. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  248. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  249. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  250. O3 - HKLM\..\Toolbar: (no name) - {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found.
  251. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  252. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  253. O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation)
  254. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  255. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  256. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files (x86)\CCleaner\CCleaner64.exe (Piriform Ltd)
  257. O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd)
  258. O4 - HKCU..\RunOnce: [Adobe Speed Launcher] 1418672256 File not found
  259. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  260. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  261. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  262. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  263. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  264. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
  265. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found
  266. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  267. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\SysWow64\GPhotos.scr (Google Inc.)
  268. O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  269. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  270. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  271. O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (Reg Error: Key error.)
  272. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  273. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  274. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53865356-8237-4773-BE1D-AE315541FA4C}: DhcpNameServer = 83.139.104.2 83.139.105.2
  275. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85777D5C-4977-47C0-8469-B7633442FEA4}: DhcpNameServer = 192.168.0.1
  276. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  277. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  278. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  279. O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
  280. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  281. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  282. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  283. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  284. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream - No CLSID value found
  285. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus - No CLSID value found
  286. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload - No CLSID value found
  287. O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
  288. O18 - Protocol\Filter\application/octet-stream - No CLSID value found
  289. O18 - Protocol\Filter\application/x-complus - No CLSID value found
  290. O18 - Protocol\Filter\application/x-msdownload - No CLSID value found
  291. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
  292. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  293. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
  294. O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  295. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  296. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  297. O32 - HKLM CDRom: AutoRun - 1
  298. O34 - HKLM BootExecute: (autocheck autochk *)
  299. O34 - HKLM BootExecute: (BootDefrag.exe)
  300. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  301. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  302. O35 - HKLM\..comfile [open] -- "%1" %*
  303. O35 - HKLM\..exefile [open] -- "%1" %*
  304. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  305. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  306. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  307. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  308. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  309. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  310. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  311.  
  312. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  313.  
  314. [2014.12.18 22:51:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tbccint
  315. [2014.12.18 22:51:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Tbccint
  316. [2014.12.18 22:51:06 | 000,000,000 | ---D | C] -- C:\Users\Sanda\AppData\Local\Tbccint
  317. [2014.12.18 20:52:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  318. [2014.12.15 19:38:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
  319. [2014.12.15 19:37:41 | 000,364,512 | ---- | C] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
  320. [2014.12.15 17:34:01 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  321. [2014.12.15 17:19:11 | 000,000,000 | ---D | C] -- C:\_OTL
  322. [2014.12.15 10:16:24 | 000,000,000 | ---D | C] -- C:\windows\SysNative\appraiser
  323. [2014.12.15 00:13:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  324. [2014.12.14 22:58:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  325. [2014.12.14 21:52:32 | 000,000,000 | -H-D | C] -- C:\Users\Sanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
  326. [2014.12.14 21:50:17 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\vbox
  327. [2014.12.14 21:50:17 | 000,000,000 | ---D | C] -- C:\windows\SysNative\vbox
  328. [2014.12.14 21:31:34 | 000,043,152 | ---- | C] (AVAST Software) -- C:\windows\avastSS.scr
  329.  
  330. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  331.  
  332. [2014.12.19 20:27:56 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA1cf117321a204f7.job
  333. [2014.12.19 20:26:25 | 000,001,104 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
  334. [2014.12.19 20:26:14 | 000,001,108 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
  335. [2014.12.19 20:25:49 | 000,000,884 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
  336. [2014.12.19 20:25:17 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
  337. [2014.12.18 22:51:15 | 000,000,009 | ---- | M] () -- C:\END
  338. [2014.12.18 22:43:29 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  339. [2014.12.18 22:43:29 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  340. [2014.12.18 22:06:46 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore1cf1173209a7c2b.job
  341. [2014.12.18 20:42:43 | 000,000,992 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  342. [2014.12.15 20:37:55 | 000,000,334 | ---- | M] () -- C:\windows\tasks\GlaryInitialize 5.job
  343. [2014.12.15 20:36:12 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  344. [2014.12.15 20:16:26 | 000,002,222 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  345. [2014.12.15 19:49:19 | 000,001,055 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
  346. [2014.12.15 19:49:15 | 000,020,160 | ---- | M] (Glarysoft Ltd) -- C:\windows\SysNative\drivers\GUBootStartup.sys
  347. [2014.12.15 19:38:02 | 000,001,935 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  348. [2014.12.15 19:37:55 | 001,050,432 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsnx.sys
  349. [2014.12.15 17:32:15 | 002,166,272 | ---- | M] () -- C:\Users\Sanda\Desktop\AdwCleaner.exe
  350. [2014.12.15 10:20:30 | 000,361,672 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
  351. [2014.12.15 00:13:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  352. [2014.12.14 22:09:17 | 001,706,428 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
  353. [2014.12.14 22:09:17 | 000,739,050 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
  354. [2014.12.14 22:09:17 | 000,671,796 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
  355. [2014.12.14 22:09:17 | 000,164,442 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
  356. [2014.12.14 22:09:17 | 000,134,888 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
  357. [2014.12.14 21:31:38 | 000,116,728 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswstm.sys
  358. [2014.12.14 21:31:37 | 000,436,624 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsp.sys
  359. [2014.12.14 21:31:37 | 000,364,512 | ---- | M] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
  360. [2014.12.14 21:31:37 | 000,267,632 | ---- | M] () -- C:\windows\SysNative\drivers\aswVmm.sys
  361. [2014.12.14 21:31:37 | 000,093,568 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswRdr2.sys
  362. [2014.12.14 21:31:37 | 000,083,280 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswMonFlt.sys
  363. [2014.12.14 21:31:37 | 000,065,776 | ---- | M] () -- C:\windows\SysNative\drivers\aswRvrt.sys
  364. [2014.12.14 21:31:37 | 000,029,208 | ---- | M] () -- C:\windows\SysNative\drivers\aswHwid.sys
  365. [2014.12.14 21:31:34 | 000,043,152 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
  366. [2014.12.14 21:31:28 | 000,001,028 | ---- | M] () -- C:\Users\Sanda\Desktop\Dropbox.lnk
  367.  
  368. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  369.  
  370. [2014.12.18 22:51:15 | 000,000,009 | ---- | C] () -- C:\END
  371. [2014.12.15 20:15:26 | 000,001,108 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
  372. [2014.12.15 20:15:26 | 000,001,104 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
  373. [2014.12.15 17:33:28 | 002,166,272 | ---- | C] () -- C:\Users\Sanda\Desktop\AdwCleaner.exe
  374. [2014.12.14 21:32:16 | 000,001,935 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  375. [2014.03.07 17:30:24 | 001,680,708 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
  376. [2010.11.14 18:36:57 | 000,000,033 | ---- | C] () -- C:\ProgramData\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
  377. [2010.11.13 13:13:02 | 000,001,302 | ---- | C] () -- C:\ProgramData\ss.ini
  378. [2010.10.10 12:52:46 | 000,009,728 | ---- | C] () -- C:\Users\Sanda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  379. [2010.09.07 09:10:51 | 000,023,024 | ---- | C] () -- C:\Users\Sanda\AppData\Roaming\UserTile.png
  380. [2010.05.15 20:19:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  381.  
  382. [color=#E56717]========== ZeroAccess Check ==========[/color]
  383.  
  384. [2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
  385.  
  386. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  387.  
  388. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  389.  
  390. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  391.  
  392. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  393.  
  394. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  395. "" = C:\Windows\SysNative\shell32.dll -- [2014.06.25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
  396. "ThreadingModel" = Apartment
  397.  
  398. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  399. "" = %SystemRoot%\system32\shell32.dll -- [2014.06.25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
  400. "ThreadingModel" = Apartment
  401.  
  402. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  403. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  404. "ThreadingModel" = Free
  405.  
  406. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  407. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  408. "ThreadingModel" = Free
  409.  
  410. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  411. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  412. "ThreadingModel" = Both
  413.  
  414. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  415.  
  416. [color=#E56717]========== LOP Check ==========[/color]
  417.  
  418. [2013.01.11 13:27:26 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AnvSoft
  419. [2013.01.17 19:34:38 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\APP_NAME_NON_STRING
  420. [2010.10.24 18:29:32 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ashampoo
  421. [2014.01.13 17:18:34 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AVAST Software
  422. [2014.12.18 22:52:06 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer
  423. [2010.05.20 18:17:01 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer Pro
  424. [2014.12.14 21:43:48 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Dropbox
  425. [2014.09.16 20:28:51 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\DVDVideoSoft
  426. [2010.05.28 17:56:46 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
  427. [2014.06.01 18:11:27 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\GlarySoft
  428. [2010.09.30 13:21:14 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\InterVideo
  429. [2010.11.14 18:41:26 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Jumping Bytes
  430. [2010.09.29 18:32:36 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Nokia
  431. [2014.09.16 20:28:34 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Opera Software
  432. [2010.09.29 18:25:02 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\PC Suite
  433. [2013.01.17 19:35:33 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\PDF Software
  434. [2012.04.29 13:49:42 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Sony
  435. [2010.09.16 19:44:43 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Template
  436. [2013.01.19 20:14:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Toshiba
  437. [2010.06.15 16:31:31 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ulead Systems
  438. [2012.05.08 21:04:57 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Unity
  439. [2012.10.18 17:33:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\WildTangent
  440. [2012.02.16 22:21:28 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\WinBatch
  441.  
  442. [color=#E56717]========== Purity Check ==========[/color]
  443.  
  444.  
  445.  
  446. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!