API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 14th, 2014
42
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 55.12 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 15.12.2014 00:16:36 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sanda\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17280)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 3,86 Gb Total Physical Memory | 2,40 Gb Available Physical Memory | 62,29% Memory free
  8. 7,72 Gb Paging File | 6,14 Gb Available in Paging File | 79,62% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 288,34 Gb Total Space | 207,40 Gb Free Space | 71,93% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: TOSHIBA | User Name: Sanda | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  16. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - File not found --
  21. PRC - [2014.12.15 00:13:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Downloads\OTL.exe
  22. PRC - [2014.12.14 21:32:12 | 005,227,112 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  23. PRC - [2014.12.14 21:31:08 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  24. PRC - [2014.12.03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  25. PRC - [2014.12.02 06:33:41 | 000,338,032 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  26. PRC - [2014.09.15 08:44:04 | 000,795,936 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  27. PRC - [2014.04.10 12:38:44 | 000,350,528 | ---- | M] (ClientConnect Ltd.) -- C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe
  28. PRC - [2013.08.18 07:00:27 | 001,643,184 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe
  29. PRC - [2013.02.21 18:45:28 | 000,968,880 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
  30. PRC - [2012.11.29 20:31:04 | 000,038,608 | ---- | M] () -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
  31. PRC - [2009.10.28 11:15:10 | 000,304,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
  32. PRC - [2009.10.02 13:26:12 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  33. PRC - [2009.10.02 13:26:10 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  34. PRC - [2009.09.30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  35. PRC - [2009.09.30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  36. PRC - [2009.07.28 20:26:42 | 000,062,848 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
  37. PRC - [2009.03.10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
  38. PRC - [2007.01.04 19:48:50 | 000,112,152 | ---- | M] (InterVideo) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
  39.  
  40.  
  41. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  42.  
  43. MOD - [2014.12.14 21:31:29 | 038,562,088 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  44. MOD - [2014.12.02 06:34:14 | 003,925,104 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  45. MOD - [2014.09.16 14:48:38 | 000,774,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2508b25b4d961a45659a8a8f128818a1\System.Runtime.Remoting.ni.dll
  46. MOD - [2014.09.16 14:47:52 | 012,435,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3f2952ec748f60fbb5deacfc4db0a2a3\System.Windows.Forms.ni.dll
  47. MOD - [2014.09.16 14:47:44 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8b7f86e5a6f0aa23f4b25dfeeaa6b318\System.Drawing.ni.dll
  48. MOD - [2014.09.16 14:47:32 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3fad44f7fd9f6c117eb02265ab63f80d\System.Xml.ni.dll
  49. MOD - [2014.09.16 14:47:28 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5bf56d6064af88d8812a3f78e0dfd376\System.Configuration.ni.dll
  50. MOD - [2014.09.16 14:47:09 | 003,348,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4c4507612d22786d45594a65a0213c1f\WindowsBase.ni.dll
  51. MOD - [2014.09.16 14:47:02 | 007,989,760 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\95854f4f1f37b8eab1b1e3d7103b48ef\System.ni.dll
  52. MOD - [2014.09.16 14:45:47 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
  53. MOD - [2014.09.15 08:45:02 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
  54. MOD - [2010.11.13 01:08:41 | 000,315,392 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
  55.  
  56.  
  57. [color=#E56717]========== Services (SafeList) ==========[/color]
  58.  
  59. SRV:[b]64bit:[/b] - [2014.12.14 21:31:08 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  60. SRV:[b]64bit:[/b] - [2014.12.14 21:30:45 | 004,012,248 | ---- | M] (Avast Software) [On_Demand | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe -- (AvastVBoxSvc)
  61. SRV:[b]64bit:[/b] - [2014.08.18 23:03:37 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  62. SRV:[b]64bit:[/b] - [2013.08.12 13:11:04 | 000,366,600 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  63. SRV:[b]64bit:[/b] - [2013.08.12 13:11:04 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  64. SRV:[b]64bit:[/b] - [2013.05.27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  65. SRV:[b]64bit:[/b] - [2009.11.10 13:54:54 | 000,824,688 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TPHM\TPCHSrv.exe -- (TPCHSrv)
  66. SRV:[b]64bit:[/b] - [2009.11.05 22:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
  67. SRV:[b]64bit:[/b] - [2009.11.05 09:19:12 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
  68. SRV:[b]64bit:[/b] - [2009.10.21 09:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
  69. SRV:[b]64bit:[/b] - [2009.09.28 14:46:02 | 000,251,760 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
  70. SRV:[b]64bit:[/b] - [2009.07.28 14:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
  71. SRV - [2014.12.14 23:04:28 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  72. SRV - [2014.12.03 07:31:16 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  73. SRV - [2014.12.02 06:34:05 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  74. SRV - [2014.04.10 12:38:44 | 000,350,528 | ---- | M] (ClientConnect Ltd.) [Auto | Running] -- C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe -- (TBSrv)
  75. SRV - [2014.03.20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  76. SRV - [2013.10.23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  77. SRV - [2013.09.11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  78. SRV - [2013.08.18 07:00:27 | 001,643,184 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe -- (vToolbarUpdater15.5.0)
  79. SRV - [2013.02.21 18:45:28 | 000,968,880 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe -- (vToolbarUpdater14.2.0)
  80. SRV - [2013.02.04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
  81. SRV - [2012.11.29 20:31:04 | 000,038,608 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
  82. SRV - [2011.02.11 13:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
  83. SRV - [2010.10.12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  84. SRV - [2010.06.14 14:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  85. SRV - [2009.10.27 20:12:14 | 000,252,784 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
  86. SRV - [2009.10.21 10:40:44 | 000,193,904 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
  87. SRV - [2009.10.15 16:49:56 | 000,116,104 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
  88. SRV - [2009.10.02 13:26:12 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  89. SRV - [2009.09.30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  90. SRV - [2009.09.30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  91. SRV - [2009.03.10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
  92. SRV - [2007.01.04 19:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
  93.  
  94.  
  95. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  96.  
  97. DRV:[b]64bit:[/b] - [2014.12.14 21:32:08 | 001,050,432 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
  98. DRV:[b]64bit:[/b] - [2014.12.14 21:31:38 | 000,116,728 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
  99. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,436,624 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
  100. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,267,632 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  101. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  102. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,083,280 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  103. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  104. DRV:[b]64bit:[/b] - [2014.12.14 21:31:37 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  105. DRV:[b]64bit:[/b] - [2014.12.14 21:30:45 | 000,271,752 | ---- | M] (Avast Software) [Kernel | Auto | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys -- (VBoxAswDrv)
  106. DRV:[b]64bit:[/b] - [2014.06.03 02:05:44 | 000,017,600 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver)
  107. DRV:[b]64bit:[/b] - [2013.01.18 20:27:11 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
  108. DRV:[b]64bit:[/b] - [2013.01.18 20:27:11 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
  109. DRV:[b]64bit:[/b] - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  110. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  111. DRV:[b]64bit:[/b] - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  112. DRV:[b]64bit:[/b] - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  113. DRV:[b]64bit:[/b] - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  114. DRV:[b]64bit:[/b] - [2010.11.20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  115. DRV:[b]64bit:[/b] - [2010.09.16 08:52:00 | 000,020,672 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
  116. DRV:[b]64bit:[/b] - [2009.11.05 22:15:40 | 000,291,328 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  117. DRV:[b]64bit:[/b] - [2009.10.26 12:39:44 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  118. DRV:[b]64bit:[/b] - [2009.10.15 20:11:26 | 000,307,760 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  119. DRV:[b]64bit:[/b] - [2009.10.02 13:33:48 | 000,946,688 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se)
  120. DRV:[b]64bit:[/b] - [2009.10.02 12:58:58 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  121. DRV:[b]64bit:[/b] - [2009.09.24 17:55:00 | 000,212,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
  122. DRV:[b]64bit:[/b] - [2009.09.17 12:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
  123. DRV:[b]64bit:[/b] - [2009.09.14 14:30:26 | 000,058,744 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
  124. DRV:[b]64bit:[/b] - [2009.08.21 13:24:04 | 000,084,512 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  125. DRV:[b]64bit:[/b] - [2009.08.05 12:56:04 | 000,063,856 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
  126. DRV:[b]64bit:[/b] - [2009.07.30 19:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
  127. DRV:[b]64bit:[/b] - [2009.07.28 20:02:10 | 000,081,768 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
  128. DRV:[b]64bit:[/b] - [2009.07.28 18:24:12 | 000,081,408 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdpe64.sys -- (risdpcie)
  129. DRV:[b]64bit:[/b] - [2009.07.24 15:57:08 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
  130. DRV:[b]64bit:[/b] - [2009.07.24 11:33:14 | 000,026,472 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
  131. DRV:[b]64bit:[/b] - [2009.07.14 13:25:14 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ.SYS -- (TVALZ)
  132. DRV:[b]64bit:[/b] - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  133. DRV:[b]64bit:[/b] - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  134. DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  135. DRV:[b]64bit:[/b] - [2009.07.14 01:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
  136. DRV:[b]64bit:[/b] - [2009.07.13 22:12:36 | 000,019,824 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
  137. DRV:[b]64bit:[/b] - [2009.07.04 19:27:02 | 000,055,808 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpe64.sys -- (rixdpcie)
  138. DRV:[b]64bit:[/b] - [2009.07.02 08:54:52 | 000,060,416 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspe64.sys -- (rimspci)
  139. DRV:[b]64bit:[/b] - [2009.06.29 16:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
  140. DRV:[b]64bit:[/b] - [2009.06.29 10:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
  141. DRV:[b]64bit:[/b] - [2009.06.22 17:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
  142. DRV:[b]64bit:[/b] - [2009.06.20 03:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  143. DRV:[b]64bit:[/b] - [2009.06.19 19:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
  144. DRV:[b]64bit:[/b] - [2009.06.19 10:00:26 | 000,094,336 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
  145. DRV:[b]64bit:[/b] - [2009.06.19 09:59:32 | 000,050,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
  146. DRV:[b]64bit:[/b] - [2009.06.17 12:01:04 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
  147. DRV:[b]64bit:[/b] - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  148. DRV:[b]64bit:[/b] - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  149. DRV:[b]64bit:[/b] - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  150. DRV:[b]64bit:[/b] - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  151. DRV:[b]64bit:[/b] - [2008.08.28 11:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  152. DRV:[b]64bit:[/b] - [2007.04.16 20:51:50 | 000,014,112 | R--- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
  153. DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  154.  
  155.  
  156. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  157.  
  158.  
  159. [color=#E56717]========== Internet Explorer ==========[/color]
  160.  
  161. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  162. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  163. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  164. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  165. IE - HKLM\..\URLSearchHook: {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found
  166. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  167. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  168. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  169.  
  170. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  171. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com
  172. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  173. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.bing.com
  174. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  175. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  176. IE - HKCU\..\URLSearchHook: {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found
  177. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  178. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
  179. IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=109220&babsrc=SP_ss&mntrId=b898532b000000000000b482fe6f212c
  180. IE - HKCU\..\SearchScopes\{1324C2C7-9262-4FB9-88A4-32E0A3C82477}: "URL" = http://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
  181. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TSEH_deDE379
  182. IE - HKCU\..\SearchScopes\{9B12E31A-4E39-4353-A582-EE2AFE488EE1}: "URL" = http://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
  183. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  184.  
  185. [color=#E56717]========== FireFox ==========[/color]
  186.  
  187. FF - prefs.js..browser.search.isUS: false
  188. FF - prefs.js..browser.startup.homepage: "https://www.google.hr/webhp?tab=ww&ei=sjQYVMyCEIflPN2KgYAL&ved=0CAkQqS4oAQ"
  189. FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:10.0.2502.149
  190. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0
  191. FF - user.js - File not found
  192.  
  193. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll File not found
  194. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  195. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  196. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
  197. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
  198. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  199. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  200. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  201. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  202. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  203. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  204. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  205. FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
  206. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  207. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
  208. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
  209. FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
  210. FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
  211. FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
  212. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  213. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
  214. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  215. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  216. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  217.  
  218. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{34712C68-7391-4c47-94F3-8F88D49AD632}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013.01.11 12:57:50 | 000,000,000 | ---D | M]
  219. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013.01.11 12:57:50 | 000,000,000 | ---D | M]
  220. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.12.14 21:31:39 | 000,000,000 | ---D | M]
  221. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2014.09.25 14:56:10 | 000,000,000 | ---D | M]
  222. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014.12.14 21:48:59 | 000,000,000 | ---D | M]
  223. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  224.  
  225. [2010.09.20 11:42:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Extensions
  226. [2010.09.20 11:42:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
  227. [2014.12.14 21:49:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\ar35zl3e.default-1410868885627\extensions
  228. [2014.12.14 21:49:19 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\ar35zl3e.default-1410868885627\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  229. [2014.09.25 14:56:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  230. [2014.09.25 14:56:11 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
  231. [2010.02.16 23:07:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  232. [2010.02.16 23:07:57 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  233. [2014.12.14 21:31:39 | 000,000,000 | ---D | M] ("Avast Online Security") -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
  234. [2013.01.11 12:57:24 | 000,124,056 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll
  235.  
  236. [color=#E56717]========== Chrome ==========[/color]
  237.  
  238. CHR - default_search_provider: (Enabled)
  239. CHR - default_search_provider: search_url =
  240. CHR - default_search_provider: suggest_url =
  241. CHR - plugin: Error reading preferences file
  242. CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
  243. CHR - Extension: Avast Online Security = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.0.2502.149_0\
  244. CHR - Extension: Avast Online Security = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2022.121_0\
  245. CHR - Extension: Google Wallet = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  246.  
  247. O1 HOSTS File: ([2012.05.26 12:39:58 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  248. O1 - Hosts: 127.0.0.1 localhost
  249. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  250. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  251. O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
  252. O2 - BHO: (no name) - {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found.
  253. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  254. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  255. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  256. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  257. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  258. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
  259. O3 - HKLM\..\Toolbar: (no name) - {31264a33-a653-46c4-af49-1232c59a7da5} - No CLSID value found.
  260. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  261. O4:[b]64bit:[/b] - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
  262. O4:[b]64bit:[/b] - HKLM..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.)
  263. O4:[b]64bit:[/b] - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
  264. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  265. O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation)
  266. O4:[b]64bit:[/b] - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
  267. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  268. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  269. O4 - HKCU..\RunOnce: [Adobe Speed Launcher] 1418598347 File not found
  270. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  271. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  272. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  273. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  274. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  275. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
  276. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found
  277. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  278. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\SysWow64\GPhotos.scr (Google Inc.)
  279. O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  280. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  281. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  282. O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (Reg Error: Key error.)
  283. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  284. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.139.104.2 83.139.105.2
  285. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53865356-8237-4773-BE1D-AE315541FA4C}: DhcpNameServer = 83.139.104.2 83.139.105.2
  286. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85777D5C-4977-47C0-8469-B7633442FEA4}: DhcpNameServer = 192.168.1.1
  287. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  288. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  289. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  290. O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
  291. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  292. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  293. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  294. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  295. O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
  296. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
  297. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  298. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
  299. O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  300. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  301. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  302. O32 - HKLM CDRom: AutoRun - 1
  303. O34 - HKLM BootExecute: (autocheck autochk *)
  304. O34 - HKLM BootExecute: (BootDefrag.exe)
  305. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  306. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  307. O35 - HKLM\..comfile [open] -- "%1" %*
  308. O35 - HKLM\..exefile [open] -- "%1" %*
  309. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  310. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  311. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  312. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  313. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  314. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  315. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  316.  
  317.  
  318. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  319. Drivers32: msacm.dvacm - C:\Program Files (x86)\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
  320. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  321. Drivers32: msacm.mpegacm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
  322. Drivers32: msacm.ulmp3acm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
  323. Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
  324.  
  325. CREATERESTOREPOINT
  326. Restore point Set: OTL Restore Point
  327.  
  328. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  329.  
  330. [2014.12.14 22:58:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  331. [2014.12.14 21:52:32 | 000,000,000 | -H-D | C] -- C:\Users\Sanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
  332. [2014.12.14 21:50:17 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\vbox
  333. [2014.12.14 21:50:17 | 000,000,000 | ---D | C] -- C:\windows\SysNative\vbox
  334. [2014.12.14 21:31:42 | 000,364,512 | ---- | C] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
  335. [2014.12.14 21:31:34 | 000,043,152 | ---- | C] (AVAST Software) -- C:\windows\avastSS.scr
  336.  
  337. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  338.  
  339. [2014.12.15 00:14:41 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  340. [2014.12.15 00:14:41 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  341. [2014.12.15 00:07:55 | 000,000,334 | ---- | M] () -- C:\windows\tasks\GlaryInitialize 5.job
  342. [2014.12.15 00:06:42 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore1cf1173209a7c2b.job
  343. [2014.12.15 00:05:12 | 000,000,884 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
  344. [2014.12.15 00:05:08 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
  345. [2014.12.15 00:02:42 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  346. [2014.12.14 23:59:07 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA1cf117321a204f7.job
  347. [2014.12.14 22:09:17 | 001,706,428 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
  348. [2014.12.14 22:09:17 | 000,739,050 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
  349. [2014.12.14 22:09:17 | 000,671,796 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
  350. [2014.12.14 22:09:17 | 000,164,442 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
  351. [2014.12.14 22:09:17 | 000,134,888 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
  352. [2014.12.14 21:32:16 | 000,001,935 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  353. [2014.12.14 21:32:08 | 001,050,432 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsnx.sys
  354. [2014.12.14 21:31:38 | 000,116,728 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswstm.sys
  355. [2014.12.14 21:31:37 | 000,436,624 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsp.sys
  356. [2014.12.14 21:31:37 | 000,364,512 | ---- | M] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe
  357. [2014.12.14 21:31:37 | 000,267,632 | ---- | M] () -- C:\windows\SysNative\drivers\aswVmm.sys
  358. [2014.12.14 21:31:37 | 000,093,568 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswRdr2.sys
  359. [2014.12.14 21:31:37 | 000,083,280 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswMonFlt.sys
  360. [2014.12.14 21:31:37 | 000,065,776 | ---- | M] () -- C:\windows\SysNative\drivers\aswRvrt.sys
  361. [2014.12.14 21:31:37 | 000,029,208 | ---- | M] () -- C:\windows\SysNative\drivers\aswHwid.sys
  362. [2014.12.14 21:31:34 | 000,043,152 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
  363. [2014.12.14 21:31:28 | 000,001,028 | ---- | M] () -- C:\Users\Sanda\Desktop\Dropbox.lnk
  364.  
  365. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  366.  
  367. [2014.12.14 21:32:16 | 000,001,935 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
  368. [2014.03.07 17:30:24 | 001,680,708 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
  369. [2010.11.14 18:36:57 | 000,000,033 | ---- | C] () -- C:\ProgramData\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
  370. [2010.11.13 13:13:02 | 000,001,302 | ---- | C] () -- C:\ProgramData\ss.ini
  371. [2010.10.10 12:52:46 | 000,009,728 | ---- | C] () -- C:\Users\Sanda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  372. [2010.09.16 19:44:43 | 000,000,000 | ---- | C] () -- C:\Users\Sanda\AppData\Roaming\wklnhst.dat
  373. [2010.09.07 09:10:51 | 000,023,024 | ---- | C] () -- C:\Users\Sanda\AppData\Roaming\UserTile.png
  374. [2010.05.15 20:19:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  375.  
  376. [color=#E56717]========== ZeroAccess Check ==========[/color]
  377.  
  378. [2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
  379.  
  380. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  381.  
  382. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  383.  
  384. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  385.  
  386. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  387.  
  388. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  389. "" = C:\Windows\SysNative\shell32.dll -- [2014.06.25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
  390. "ThreadingModel" = Apartment
  391.  
  392. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  393. "" = %SystemRoot%\system32\shell32.dll -- [2014.06.25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
  394. "ThreadingModel" = Apartment
  395.  
  396. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  397. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  398. "ThreadingModel" = Free
  399.  
  400. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  401. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  402. "ThreadingModel" = Free
  403.  
  404. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  405. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  406. "ThreadingModel" = Both
  407.  
  408. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  409.  
  410. [color=#E56717]========== LOP Check ==========[/color]
  411.  
  412. [2013.01.11 13:27:26 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AnvSoft
  413. [2013.01.17 19:34:38 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\APP_NAME_NON_STRING
  414. [2010.10.24 18:29:32 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ashampoo
  415. [2014.01.13 17:18:34 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AVAST Software
  416. [2013.01.25 16:47:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Babylon
  417. [2013.01.11 17:12:33 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer
  418. [2010.05.20 18:17:01 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer Pro
  419. [2014.12.14 21:43:48 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Dropbox
  420. [2014.09.16 20:28:51 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\DVDVideoSoft
  421. [2010.05.28 17:56:46 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\eu.myphotobook.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
  422. [2014.06.01 18:11:27 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\GlarySoft
  423. [2010.09.30 13:21:14 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\InterVideo
  424. [2010.11.14 18:41:26 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Jumping Bytes
  425. [2010.09.29 18:32:36 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Nokia
  426. [2014.09.16 20:27:16 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\OpenCandy
  427. [2014.09.16 20:28:34 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Opera Software
  428. [2010.09.29 18:25:02 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\PC Suite
  429. [2013.01.17 19:35:33 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\PDF Software
  430. [2014.09.16 20:27:17 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\RHEng
  431. [2012.04.29 13:49:42 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Sony
  432. [2010.09.16 19:44:43 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Template
  433. [2013.01.19 20:14:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Toshiba
  434. [2010.06.15 16:31:31 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ulead Systems
  435. [2012.05.08 21:04:57 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Unity
  436. [2012.10.18 17:33:56 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\WildTangent
  437. [2012.02.16 22:21:28 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\WinBatch
  438.  
  439. [color=#E56717]========== Purity Check ==========[/color]
  440.  
  441.  
  442.  
  443. [color=#E56717]========== Custom Scans ==========[/color]
  444.  
  445. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  446. [2011.03.13 16:16:05 | 000,005,530 | ---- | M] () -- C:\aaw7boot.log
  447. [2010.09.16 08:49:39 | 000,000,234 | ---- | M] () -- C:\BackupLoader.ini
  448. [2009.07.14 02:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
  449. [2009.12.05 09:36:43 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  450. [2014.03.16 22:17:34 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat
  451. [2014.01.13 21:21:57 | 000,000,075 | ---- | M] () -- C:\DiskDefrag.log
  452. [2014.09.16 20:39:28 | 000,000,009 | ---- | M] () -- C:\END
  453. [2014.01.13 16:56:34 | 000,022,258 | ---- | M] () -- C:\FixitRegBackup.reg
  454. [2014.12.15 00:02:42 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  455. [2014.12.15 00:05:07 | 4144,418,816 | -HS- | M] () -- C:\pagefile.sys
  456.  
  457. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  458. [2009.07.14 06:32:31 | 000,026,040 | ---- | M] () -- C:\windows\Fonts\GlobalMonospace.CompositeFont
  459. [2009.07.14 06:32:31 | 000,026,489 | ---- | M] () -- C:\windows\Fonts\GlobalSansSerif.CompositeFont
  460. [2009.07.14 06:32:31 | 000,029,779 | ---- | M] () -- C:\windows\Fonts\GlobalSerif.CompositeFont
  461. [2009.07.14 06:32:31 | 000,043,318 | ---- | M] () -- C:\windows\Fonts\GlobalUserInterface.CompositeFont
  462.  
  463. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  464.  
  465. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  466. [2009.06.10 21:49:50 | 000,000,065 | ---- | M] () -- C:\windows\Fonts\desktop.ini
  467.  
  468. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  469.  
  470. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  471.  
  472. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  473.  
  474. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  475.  
  476. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  477.  
  478. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  479.  
  480. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  481.  
  482. [color=#A23BEC]< %systemroot%\*.png >[/color]
  483.  
  484. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  485. [2014.12.14 21:31:34 | 000,043,152 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
  486. [2009.07.10 13:10:44 | 000,307,568 | ---- | M] (Microsoft Corporation) -- C:\windows\WLXPGSS.SCR
  487.  
  488. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  489.  
  490. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  491.  
  492. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  493.  
  494. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  495.  
  496. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  497. [2009.07.14 05:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  498.  
  499. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  500.  
  501. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  502.  
  503. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  504.  
  505. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  506.  
  507. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  508.  
  509. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  510.  
  511. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  512.  
  513. [color=#A23BEC]< %systemroot%\*.config >[/color]
  514.  
  515. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  516.  
  517. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  518. [2011.05.10 15:38:57 | 000,000,314 | -HS- | M] () -- C:\Users\Sanda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  519.  
  520. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  521.  
  522. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  523.  
  524. [color=#A23BEC]< %systemroot%\*.src >[/color]
  525.  
  526. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  527.  
  528. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  529.  
  530. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  531.  
  532. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  533.  
  534. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  535.  
  536. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  537.  
  538. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  539.  
  540. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  541.  
  542. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  543.  
  544. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  545.  
  546. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  547.  
  548. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  549.  
  550. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  551.  
  552. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  553.  
  554. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  555.  
  556. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  557. [2009.06.10 22:20:04 | 000,000,802 | ---- | M] () -- C:\windows\ADDINS\FXSEXT.ecf
  558.  
  559. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  560.  
  561. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  562.  
  563. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  564.  
  565. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  566. [2011.06.27 11:10:18 | 000,008,192 | ---- | M] () -- C:\windows\SECURITY\Database\edb.chk
  567. [2011.06.27 11:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edb.log
  568. [2011.06.27 11:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edbres00001.jrs
  569. [2011.06.27 11:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edbres00002.jrs
  570. [2011.06.27 11:10:18 | 000,786,432 | ---- | M] () -- C:\windows\SECURITY\Database\edbtmp.log
  571. [2011.06.27 11:10:18 | 001,056,768 | ---- | M] () -- C:\windows\SECURITY\Database\tmp.edb
  572.  
  573. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  574.  
  575. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  576.  
  577. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  578.  
  579. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  580.  
  581. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  582.  
  583. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  584.  
  585. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  586. [2014.09.16 14:40:18 | 000,000,402 | -HS- | M] () -- C:\Users\Sanda\Favorites\desktop.ini
  587.  
  588. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  589. [2009.07.14 02:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\mofcomp.exe
  590. [2009.07.14 02:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WinMgmt.exe
  591. [2009.07.14 02:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WMIADAP.exe
  592. [2009.07.14 02:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WMIC.exe
  593. [2010.11.20 13:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WmiPrvSE.exe
  594.  
  595. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  596.  
  597. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  598.  
  599. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!