API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 17th, 2014
204
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 29.04 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-08-16 00:11:20 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Japan\Downloads
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 4,00 Gb Total Physical Memory | 2,03 Gb Available Physical Memory | 50,69% Memory free
  8. 8,00 Gb Paging File | 5,58 Gb Available in Paging File | 69,83% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 292,87 Gb Total Space | 177,60 Gb Free Space | 60,64% Space Free | Partition Type: NTFS
  13. Drive D: | 172,79 Gb Total Space | 172,48 Gb Free Space | 99,82% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: KOMPUTER | User Name: Japan | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2014-08-16 00:10:21 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Japan\Downloads\OTL.exe
  22. PRC - [2014-08-15 22:23:31 | 005,240,832 | ---- | M] (CipSoft GmbH) -- C:\Program Files (x86)\Tibia\Tibia.exe
  23. PRC - [2014-08-08 16:03:46 | 003,890,208 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
  24. PRC - [2014-07-23 14:00:50 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  25. PRC - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  26. PRC - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  27. PRC - [2014-07-01 14:09:52 | 000,457,216 | ---- | M] (Skillbrains) -- C:\Users\Japan\AppData\Local\Skillbrains\lightshot\5.1.4.6\Lightshot.exe
  28. PRC - [2014-05-24 16:03:36 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  29. PRC - [2014-05-21 16:55:21 | 001,863,856 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
  30. PRC - [2014-05-08 15:48:38 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  31. PRC - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
  32.  
  33.  
  34. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  35.  
  36. MOD - [2014-07-23 14:00:50 | 003,800,688 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  37. MOD - [2014-05-24 16:03:37 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  38. MOD - [2014-05-21 16:55:21 | 016,361,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
  39. MOD - [2010-01-21 01:34:10 | 008,793,952 | ---- | M] () -- C:\PROGRA~2\MICROS~2\Office14\1033\GrooveIntlResource.dll
  40. MOD - [2010-01-09 20:18:18 | 004,254,560 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
  41.  
  42.  
  43. [color=#E56717]========== Services (SafeList) ==========[/color]
  44.  
  45. SRV:[b]64bit:[/b] - [2014-05-24 16:03:36 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  46. SRV:[b]64bit:[/b] - [2012-12-19 21:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  47. SRV:[b]64bit:[/b] - [2012-12-19 15:32:12 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
  48. SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  49. SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  50. SRV - [2014-07-23 14:00:50 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  51. SRV - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  52. SRV - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  53. SRV - [2014-05-29 19:36:52 | 000,543,424 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  54. SRV - [2014-05-08 15:48:38 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  55. SRV - [2014-04-03 20:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  56. SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  57. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  58.  
  59.  
  60. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  61.  
  62. DRV:[b]64bit:[/b] - [2014-05-24 16:03:59 | 001,039,096 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
  63. DRV:[b]64bit:[/b] - [2014-05-24 16:03:59 | 000,423,240 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
  64. DRV:[b]64bit:[/b] - [2014-05-24 16:03:59 | 000,085,328 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
  65. DRV:[b]64bit:[/b] - [2014-05-24 16:03:37 | 000,208,416 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  66. DRV:[b]64bit:[/b] - [2014-05-24 16:03:37 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  67. DRV:[b]64bit:[/b] - [2014-05-24 16:03:37 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  68. DRV:[b]64bit:[/b] - [2014-05-24 16:03:37 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  69. DRV:[b]64bit:[/b] - [2014-05-24 16:03:37 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  70. DRV:[b]64bit:[/b] - [2014-03-30 08:26:02 | 000,129,944 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
  71. DRV:[b]64bit:[/b] - [2012-12-19 22:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  72. DRV:[b]64bit:[/b] - [2012-12-19 21:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  73. DRV:[b]64bit:[/b] - [2012-12-13 20:29:34 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  74. DRV:[b]64bit:[/b] - [2012-12-13 20:29:34 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  75. DRV:[b]64bit:[/b] - [2012-12-13 20:22:04 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  76. DRV:[b]64bit:[/b] - [2012-12-13 20:20:13 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  77. DRV:[b]64bit:[/b] - [2012-12-13 20:20:13 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  78. DRV:[b]64bit:[/b] - [2012-12-13 20:20:13 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  79. DRV:[b]64bit:[/b] - [2012-12-13 20:20:13 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  80. DRV:[b]64bit:[/b] - [2012-11-06 13:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  81. DRV:[b]64bit:[/b] - [2012-04-09 09:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
  82. DRV:[b]64bit:[/b] - [2011-12-12 08:52:44 | 000,082,048 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
  83. DRV:[b]64bit:[/b] - [2011-12-12 08:52:44 | 000,042,624 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
  84. DRV:[b]64bit:[/b] - [2011-09-21 17:56:24 | 000,049,760 | ---- | M] (Asmedia Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\asahci64.sys -- (asahci64)
  85. DRV:[b]64bit:[/b] - [2011-09-11 08:41:00 | 000,088,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
  86. DRV:[b]64bit:[/b] - [2011-09-11 08:41:00 | 000,065,152 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
  87. DRV:[b]64bit:[/b] - [2011-08-23 15:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  88. DRV:[b]64bit:[/b] - [2011-05-10 16:28:48 | 000,017,192 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AsrAppCharger.sys -- (AsrAppCharger)
  89. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  90. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  91. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  92. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  93. DRV:[b]64bit:[/b] - [2009-11-18 01:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  94. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  95. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  96. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  97. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  98. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  99. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  100. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  101. DRV:[b]64bit:[/b] - [2009-05-04 18:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
  102. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  103.  
  104.  
  105. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  106.  
  107.  
  108. [color=#E56717]========== Internet Explorer ==========[/color]
  109.  
  110. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  111. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  112. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  113. IE - HKLM\..\SearchScopes,DefaultScope =
  114. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  115.  
  116.  
  117. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  118. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  119.  
  120. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  121. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  122.  
  123. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  124.  
  125. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  126.  
  127. IE - HKU\S-1-5-21-1400327851-3545597313-1268321395-1000\..\SearchScopes,DefaultScope =
  128. IE - HKU\S-1-5-21-1400327851-3545597313-1268321395-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  129. IE - HKU\S-1-5-21-1400327851-3545597313-1268321395-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  130.  
  131. [color=#E56717]========== FireFox ==========[/color]
  132.  
  133. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0
  134. FF - user.js - File not found
  135.  
  136. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found
  137. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  138. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  139. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
  140. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  141. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  142. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  143. FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\Japan\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
  144. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  145.  
  146. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-24 16:03:38 | 000,000,000 | ---D | M]
  147. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  148. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  149. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  150. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  151.  
  152. [2014-05-21 16:49:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Japan\AppData\Roaming\mozilla\Extensions
  153. [2014-07-16 21:56:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Japan\AppData\Roaming\mozilla\Firefox\Profiles\vrhg0q0e.default\extensions
  154. [2014-08-06 21:09:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  155. [2014-07-23 14:00:50 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  156.  
  157. O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  158. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  159. O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  160. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
  161. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  162. O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  163. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
  164. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  165. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  166. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  167. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  168. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  169. O4 - HKU\S-1-5-21-1400327851-3545597313-1268321395-1000..\Run: [AQQ] C:\Program Files\MyPortal\AQQ\AQQ.exe (AQQ Sp. z o.o.)
  170. O4 - HKU\S-1-5-21-1400327851-3545597313-1268321395-1000..\Run: [LightShot] C:\Users\Japan\AppData\Local\Skillbrains\lightshot\Lightshot.exe ()
  171. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  172. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  173. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  174. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  175. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  176. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  177. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
  178. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 File not found
  179. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
  180. O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 File not found
  181. O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  182. O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  183. O13[b]64bit:[/b] - gopher Prefix: missing
  184. O13 - gopher Prefix: missing
  185. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  186. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E88AC5C3-5D2D-4BD6-9062-D927845B2A61}: DhcpNameServer = 192.168.1.1 192.168.1.1
  187. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  188. O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  189. O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  190. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  191. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  192. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  193. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  194. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  195. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  196. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
  197. O32 - HKLM CDRom: AutoRun - 1
  198. O33 - MountPoints2\F\Shell - "" = AutoRun
  199. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\Autorun.exe
  200. O33 - MountPoints2\G\Shell - "" = AutoRun
  201. O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\RunGame.exe
  202. O33 - MountPoints2\H\Shell - "" = AutoRun
  203. O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\RunGame.exe
  204. O33 - MountPoints2\I\Shell - "" = AutoRun
  205. O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\RunGame.exe
  206. O34 - HKLM BootExecute: (autocheck autochk *)
  207. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  208. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  209. O35 - HKLM\..comfile [open] -- "%1" %*
  210. O35 - HKLM\..exefile [open] -- "%1" %*
  211. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  212. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  213. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  214. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  215. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  216. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  217. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  218.  
  219. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  220.  
  221. [2014-07-28 17:27:47 | 000,000,000 | ---D | C] -- C:\Users\Japan\AppData\Roaming\Ventrilo
  222. [2014-07-28 17:27:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ventrilo
  223. [2014-07-28 17:26:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ventrilo
  224. [2014-07-28 17:26:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
  225. [2014-07-23 23:43:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
  226. [2014-07-23 23:36:28 | 000,000,000 | ---D | C] -- C:\Users\Japan\AppData\Local\Origin
  227. [2014-07-23 23:35:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
  228. [2014-07-23 23:35:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
  229. [2014-07-23 23:35:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin
  230. [2014-07-23 14:00:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  231. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  232. [1 C:\Users\Japan\Documents\*.tmp files -> C:\Users\Japan\Documents\*.tmp -> ]
  233.  
  234. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  235.  
  236. [2014-08-15 23:44:00 | 000,000,388 | ---- | M] () -- C:\Windows\tasks\update-sys.job
  237. [2014-08-15 22:48:01 | 000,000,388 | ---- | M] () -- C:\Windows\tasks\update-S-1-5-21-1400327851-3545597313-1268321395-1000.job
  238. [2014-08-15 22:19:15 | 001,549,696 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  239. [2014-08-15 22:19:15 | 000,697,674 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  240. [2014-08-15 22:19:15 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  241. [2014-08-15 22:19:15 | 000,134,784 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  242. [2014-08-15 22:19:15 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  243. [2014-08-15 22:12:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  244. [2014-08-15 22:12:02 | 3220,623,360 | -HS- | M] () -- C:\hiberfil.sys
  245. [2014-07-28 17:27:00 | 000,000,871 | ---- | M] () -- C:\Users\Public\Desktop\Ventrilo.lnk
  246. [2014-07-28 17:27:00 | 000,000,268 | ---- | M] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
  247. [2014-07-23 23:35:08 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
  248. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  249. [1 C:\Users\Japan\Documents\*.tmp files -> C:\Users\Japan\Documents\*.tmp -> ]
  250.  
  251. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  252.  
  253. [2014-07-28 17:27:00 | 000,000,871 | ---- | C] () -- C:\Users\Public\Desktop\Ventrilo.lnk
  254. [2014-07-28 17:26:58 | 000,000,268 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
  255. [2014-07-23 23:35:08 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
  256. [2014-07-02 10:54:54 | 000,000,436 | ---- | C] () -- C:\Users\Japan\AppData\Local\UserProducts.xml
  257. [2014-05-21 16:36:03 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  258. [2014-05-21 16:34:02 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  259. [2014-05-21 16:34:02 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  260. [2014-05-21 16:34:02 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  261.  
  262. [color=#E56717]========== ZeroAccess Check ==========[/color]
  263.  
  264. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  265.  
  266. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  267.  
  268. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  269.  
  270. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  271.  
  272. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  273.  
  274. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  275. "" = C:\Windows\SysNative\shell32.dll -- [2012-12-13 20:24:48 | 014,172,672 | ---- | M] (Microsoft Corporation)
  276. "ThreadingModel" = Apartment
  277.  
  278. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  279. "" = %SystemRoot%\system32\shell32.dll -- [2012-12-13 20:24:48 | 012,873,728 | ---- | M] (Microsoft Corporation)
  280. "ThreadingModel" = Apartment
  281.  
  282. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  283. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  284. "ThreadingModel" = Free
  285.  
  286. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  287. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  288. "ThreadingModel" = Free
  289.  
  290. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  291. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  292. "ThreadingModel" = Both
  293.  
  294. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  295.  
  296. [color=#E56717]========== LOP Check ==========[/color]
  297.  
  298. [2014-05-24 16:04:33 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\AVAST Software
  299. [2014-08-09 01:04:49 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\foobar2000
  300. [2014-06-22 18:35:07 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\NapiProjekt
  301. [2014-07-23 23:36:30 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\Origin
  302. [2014-05-24 23:48:55 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\PowerISO
  303. [2014-05-29 20:21:19 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\raidcall
  304. [2014-07-16 11:07:49 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\Tibia
  305. [2014-05-25 10:10:20 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\Tibiacast
  306. [2014-07-27 01:44:34 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\TS3Client
  307. [2014-08-06 03:32:07 | 000,000,000 | ---D | M] -- C:\Users\Japan\AppData\Roaming\uTorrent
  308.  
  309. [color=#E56717]========== Purity Check ==========[/color]
  310.  
  311.  
  312.  
  313. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!