API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 11th, 2014
245
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 30.76 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 11.8.2014. 15:04:06 - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Damir\Desktop
  3. Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17207)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 2,00 Gb Total Physical Memory | 0,78 Gb Available Physical Memory | 39,12% Memory free
  8. 4,00 Gb Paging File | 2,46 Gb Available in Paging File | 61,56% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 146,48 Gb Total Space | 39,87 Gb Free Space | 27,22% Space Free | Partition Type: NTFS
  13. Drive D: | 151,60 Gb Total Space | 147,06 Gb Free Space | 97,00% Space Free | Partition Type: NTFS
  14. Drive E: | 6,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
  15.  
  16. Computer Name: DAMIR-PC | User Name: Damir | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Quick Scan
  18. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2014.08.10 12:19:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Damir\Desktop\OTL.exe
  23. PRC - [2014.07.17 07:42:02 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
  24. PRC - [2014.07.02 11:06:56 | 004,486,144 | ---- | M] () -- C:\Users\Damir\AppData\Roaming\JGArcadeApp\Jenkat Games Arcade App\JGAA.exe
  25. PRC - [2014.07.02 10:57:03 | 001,322,832 | ---- | M] (BitTorrent Inc.) -- C:\Users\Damir\AppData\Roaming\uTorrent\uTorrent.exe
  26. PRC - [2014.05.12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
  27. PRC - [2014.05.12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
  28. PRC - [2014.05.12 07:24:34 | 006,970,168 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
  29. PRC - [2014.03.11 10:13:24 | 000,279,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\NisSrv.exe
  30. PRC - [2014.03.11 10:13:24 | 000,022,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
  31. PRC - [2014.03.11 10:13:14 | 000,951,576 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
  32. PRC - [2013.10.10 08:23:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
  33. PRC - [2013.07.02 10:16:32 | 000,507,264 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
  34. PRC - [2012.07.09 18:01:12 | 000,863,400 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe
  35. PRC - [2012.07.09 18:01:10 | 000,502,952 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe
  36. PRC - [2012.04.02 16:44:14 | 001,058,912 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files\Epson Software\Event Manager\EEventManager.exe
  37. PRC - [2011.12.12 01:00:00 | 000,122,000 | ---- | M] (Seiko Epson Corporation) -- C:\Windows\System32\escsvc.exe
  38. PRC - [2011.04.20 02:04:38 | 000,393,216 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
  39. PRC - [2011.04.20 02:04:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
  40. PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  41. PRC - [2010.11.20 14:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
  42. PRC - [2010.10.28 13:17:06 | 000,054,616 | ---- | M] (NewSoft Technology Corporation) -- C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
  43. PRC - [2009.09.21 12:40:50 | 001,681,408 | R--- | M] (VIA) -- C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
  44. PRC - [2009.04.19 08:33:38 | 000,387,616 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
  45. PRC - [2009.04.19 08:33:38 | 000,178,720 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
  46. PRC - [2008.05.24 15:34:28 | 000,026,448 | ---- | M] (NewSoft Technology Corporation) -- C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
  47.  
  48.  
  49. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  50.  
  51. MOD - [2014.07.17 07:42:24 | 003,800,688 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
  52. MOD - [2014.07.02 11:06:56 | 004,486,144 | ---- | M] () -- C:\Users\Damir\AppData\Roaming\JGArcadeApp\Jenkat Games Arcade App\JGAA.exe
  53. MOD - [2014.02.14 04:25:42 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ede2c6c842840e009f01bcc74fa4c457\mscorlib.ni.dll
  54. MOD - [2014.02.12 21:58:32 | 000,073,544 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
  55. MOD - [2014.02.12 21:58:10 | 001,044,808 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
  56. MOD - [2009.09.02 03:28:04 | 047,628,288 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\Skin.dll
  57. MOD - [2009.05.07 10:53:18 | 000,106,496 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
  58. MOD - [2009.05.07 10:50:46 | 000,073,728 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
  59. MOD - [2008.02.14 07:57:00 | 000,094,208 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\VMicApi.dll
  60.  
  61.  
  62. [color=#E56717]========== Services (SafeList) ==========[/color]
  63.  
  64. SRV - [2014.07.17 07:42:18 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  65. SRV - [2014.07.09 19:32:46 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  66. SRV - [2014.06.19 01:23:24 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
  67. SRV - [2014.05.12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  68. SRV - [2014.05.12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  69. SRV - [2014.03.11 10:13:24 | 000,279,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  70. SRV - [2014.03.11 10:13:24 | 000,022,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  71. SRV - [2013.05.27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
  72. SRV - [2011.12.12 01:00:00 | 000,122,000 | ---- | M] (Seiko Epson Corporation) [Auto | Running] -- C:\Windows\System32\escsvc.exe -- (EpsonScanSvc)
  73. SRV - [2011.04.20 02:04:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
  74. SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  75. SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
  76. SRV - [2009.04.19 08:33:38 | 000,387,616 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe -- (ForceWare Intelligent Application Manager (IAM)
  77. SRV - [2009.04.19 08:33:38 | 000,178,720 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe -- (nSvcIp)
  78.  
  79.  
  80. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  81.  
  82. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
  83. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
  84. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
  85. DRV - File not found [Kernel | System | Stopped] -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E07F83D7-2E57-4ACB-9709-51B82A3ABFEF}\MpKslde9c7394.sys -- (MpKslde9c7394)
  86. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\Drivers\AsrCDDrv.sys -- (AsrCDDrv)
  87. DRV - [2014.08.11 14:47:04 | 000,110,296 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
  88. DRV - [2014.05.12 07:26:08 | 000,051,928 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
  89. DRV - [2014.05.12 07:25:54 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
  90. DRV - [2014.03.11 09:52:30 | 000,104,264 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
  91. DRV - [2012.08.23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  92. DRV - [2012.08.23 16:40:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  93. DRV - [2011.05.10 16:28:20 | 000,015,656 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | System | Running] -- C:\Windows\System32\drivers\AsrAppCharger.sys -- (AsrAppCharger)
  94. DRV - [2011.04.20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
  95. DRV - [2011.04.20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
  96. DRV - [2011.04.20 01:22:10 | 000,243,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
  97. DRV - [2010.11.20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
  98. DRV - [2010.11.20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
  99. DRV - [2010.11.20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
  100. DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  101. DRV - [2010.11.20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
  102. DRV - [2010.11.20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
  103. DRV - [2010.08.12 12:07:48 | 000,298,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET)
  104. DRV - [2009.09.17 13:02:04 | 001,086,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
  105. DRV - [2009.07.14 00:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
  106. DRV - [2009.06.30 11:32:54 | 000,212,000 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
  107.  
  108.  
  109. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  110.  
  111.  
  112. [color=#E56717]========== Internet Explorer ==========[/color]
  113.  
  114. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  115. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  116. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  117. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  118. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  119. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  120. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  121. IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a13277-396&apn_uid=7524757430204139&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
  122.  
  123. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  124. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE11HRHR/WOL_WCP
  125. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  126. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  127. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = hr
  128. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 20 15 2D 3A 00 C5 CE 01 [binary data]
  129. IE - HKCU\..\SearchScopes,DefaultScope =
  130. IE - HKCU\..\SearchScopes\{0860AA77-AD44-41C2-AD79-A4F450D39E90}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289075&CUI=UN41273149562272626&UM=1
  131. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  132. IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=210&systemid=488&v=a13277-396&apn_uid=7524757430204139&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
  133. IE - HKCU\..\SearchScopes\{E028F80D-AD55-4921-9F17-D17499917886}: "URL" = http://www.bing.com/search?FORM=U218DF&PC=U218&q={searchTerms}&src=IE-SearchBox
  134. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  135. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  136.  
  137. [color=#E56717]========== FireFox ==========[/color]
  138.  
  139. FF - prefs.js..extensions.enabledAddons: donottrackplus%40abine.com:3.2.1127
  140. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0
  141. FF - user.js - File not found
  142.  
  143. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
  144. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  145. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
  146. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  147. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  148. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  149. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  150. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
  151. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Damir\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  152. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Damir\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  153.  
  154. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
  155. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
  156.  
  157. [2014.08.10 13:15:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Damir\AppData\Roaming\mozilla\Extensions
  158. [2014.08.10 13:15:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Damir\AppData\Roaming\mozilla\Firefox\Profiles\pa4qn6g5.default\extensions
  159. [2014.07.31 14:09:32 | 000,000,000 | ---D | M] (DoNotTrackMe: Online Privacy Protection) -- C:\Users\Damir\AppData\Roaming\mozilla\Firefox\Profiles\pa4qn6g5.default\extensions\donottrackplus@abine.com
  160. [2014.08.10 12:57:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
  161. [2014.08.10 12:57:22 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  162.  
  163. [color=#E56717]========== Chrome ==========[/color]
  164.  
  165. CHR - default_search_provider: omiga-plus (Enabled)
  166. CHR - default_search_provider: search_url = http://isearch.omiga-plus.com/web/?type=ds&ts=1405268368&from=adks&uid=126614527_1052515_38C0C4F3&q={searchTerms}
  167. CHR - default_search_provider: suggest_url = ,
  168. CHR - homepage:
  169. CHR - Extension: Google Docs = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
  170. CHR - Extension: Google disk = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  171. CHR - Extension: YouTube = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  172. CHR - Extension: Google pretra\u017eivanje = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  173. CHR - Extension: YTTAdRemoVal = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\hadmfhddbeopeajjmcidgahdongkihai\1.5_0\
  174. CHR - Extension: Google Nov\u010danik = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  175. CHR - Extension: Gmail = C:\Users\Damir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
  176.  
  177. O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  178. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  179. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  180. O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
  181. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
  182. O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
  183. O4 - HKLM..\Run: [FUFAXRCV] C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION)
  184. O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
  185. O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
  186. O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  187. O4 - HKLM..\Run: [WrtMon.exe] C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe (NewSoft Technology Corporation)
  188. O4 - HKCU..\Run: [Facebook Update] C:\Users\Damir\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  189. O4 - HKCU..\Run: [Jenkat Games Arcade App] C:\Users\Damir\AppData\Roaming\JGArcadeApp\Jenkat Games Arcade App\JGAA.exe ()
  190. O4 - HKCU..\Run: [uTorrent] C:\Users\Damir\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
  191. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  192. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  193. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
  194. O9 - Extra Button: Pošalji u OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
  195. O9 - Extra 'Tools' menuitem : Po&šalji u OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Value error. File not found
  196. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
  197. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  198. O13 - gopher Prefix: missing
  199. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  200. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.5.1
  201. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F59F6B76-170F-4681-91EF-9699AF4D67B9}: DhcpNameServer = 192.168.5.1
  202. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  203. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  204. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  205. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  206. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  207. O32 - HKLM CDRom: AutoRun - 1
  208. O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  209. O34 - HKLM BootExecute: (autocheck autochk *)
  210. O35 - HKLM\..comfile [open] -- "%1" %*
  211. O35 - HKLM\..exefile [open] -- "%1" %*
  212. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  213. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  214. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  215. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  216. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  217.  
  218. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  219.  
  220. [2014.08.11 14:39:30 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
  221. [2014.08.11 14:38:32 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  222. [2014.08.11 14:33:36 | 000,000,000 | ---D | C] -- C:\_OTL
  223. [2014.08.10 12:57:23 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
  224. [2014.08.10 12:26:24 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Damir\Desktop\OTL.exe
  225. [2014.08.10 11:49:15 | 000,110,296 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
  226. [2014.08.10 11:48:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  227. [2014.08.10 11:48:45 | 000,074,456 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
  228. [2014.08.10 11:48:45 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
  229. [2014.08.10 11:48:45 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
  230. [2014.07.31 04:47:53 | 000,000,000 | ---D | C] -- C:\Windows\Software Display
  231. [2014.07.31 04:47:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Display
  232. [2014.07.31 04:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\Software Display
  233. [2014.07.31 04:17:40 | 000,000,000 | ---D | C] -- C:\Program Files\Display Offer
  234. [2014.07.30 09:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
  235. [2014.07.15 00:05:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)
  236. [2014.07.13 18:28:15 | 000,000,000 | ---D | C] -- C:\Users\Damir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JGArcadeApp
  237. [2014.07.13 18:28:12 | 000,000,000 | ---D | C] -- C:\Users\Damir\AppData\Roaming\JGArcadeApp
  238. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  239.  
  240. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  241.  
  242. [2014.08.11 14:57:02 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3111778192-3548337341-3427461874-1000UA.job
  243. [2014.08.11 14:53:56 | 000,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  244. [2014.08.11 14:53:56 | 000,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  245. [2014.08.11 14:47:04 | 000,110,296 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
  246. [2014.08.11 14:45:42 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  247. [2014.08.11 14:45:42 | 000,000,410 | ---- | M] () -- C:\Windows\tasks\PC Optimizer Pro startups.job
  248. [2014.08.11 14:45:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  249. [2014.08.11 14:45:29 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys
  250. [2014.08.11 14:44:01 | 000,000,934 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  251. [2014.08.11 14:42:58 | 000,001,268 | ---- | M] () -- C:\Users\Damir\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  252. [2014.08.11 14:42:58 | 000,001,130 | ---- | M] () -- C:\Users\Damir\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
  253. [2014.08.11 14:32:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  254. [2014.08.11 10:09:21 | 000,000,436 | ---- | M] () -- C:\Windows\tasks\PC Optimizer Pro Idle.job
  255. [2014.08.11 08:57:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3111778192-3548337341-3427461874-1000Core.job
  256. [2014.08.10 12:57:25 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  257. [2014.08.10 12:19:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Damir\Desktop\OTL.exe
  258. [2014.08.10 12:11:29 | 000,001,262 | ---- | M] () -- C:\Users\Damir\Desktop\Revo Uninstaller.lnk
  259. [2014.08.10 11:48:57 | 000,001,064 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  260. [2014.08.09 11:15:17 | 000,000,406 | ---- | M] () -- C:\Windows\tasks\PC Optimizer Pro Scan.job
  261. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  262.  
  263. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  264.  
  265. [2014.08.10 12:57:25 | 000,001,121 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  266. [2014.08.10 12:57:25 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
  267. [2014.08.10 12:11:29 | 000,001,262 | ---- | C] () -- C:\Users\Damir\Desktop\Revo Uninstaller.lnk
  268. [2014.08.10 11:48:57 | 000,001,064 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  269. [2014.07.13 18:26:51 | 000,000,406 | ---- | C] () -- C:\Windows\tasks\PC Optimizer Pro Scan.job
  270. [2014.07.13 18:26:42 | 000,000,436 | ---- | C] () -- C:\Windows\tasks\PC Optimizer Pro Idle.job
  271. [2014.07.13 18:26:28 | 000,000,410 | ---- | C] () -- C:\Windows\tasks\PC Optimizer Pro startups.job
  272. [2014.07.05 18:46:18 | 000,012,288 | ---- | C] () -- C:\Users\Damir\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  273. [2014.06.23 12:02:27 | 000,000,073 | ---- | C] () -- C:\Users\Damir\AppData\Roaming\mbam.context.scan
  274. [2014.01.30 22:48:39 | 000,002,446 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  275. [2014.01.12 17:52:43 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
  276. [2013.12.30 21:40:47 | 000,062,672 | ---- | C] () -- C:\Windows\System32\xinput1_1.dll
  277. [2013.10.09 22:14:58 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  278. [2013.10.09 20:41:16 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
  279. [2013.10.09 20:40:32 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
  280. [2013.10.09 16:34:19 | 000,704,512 | R--- | C] () -- C:\Windows\System32\cohelper.dll
  281. [2013.10.09 16:34:19 | 000,005,940 | R--- | C] () -- C:\Windows\System32\drivers\nvphy.bin
  282.  
  283. [color=#E56717]========== ZeroAccess Check ==========[/color]
  284.  
  285. [2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  286.  
  287. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  288.  
  289. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  290.  
  291. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  292. "" = %SystemRoot%\system32\shell32.dll -- [2014.03.25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
  293. "ThreadingModel" = Apartment
  294.  
  295. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  296. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  297. "ThreadingModel" = Free
  298.  
  299. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  300. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  301. "ThreadingModel" = Both
  302.  
  303. [color=#E56717]========== LOP Check ==========[/color]
  304.  
  305. [2014.07.12 12:49:30 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\.minecraft
  306. [2013.12.13 16:15:37 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\.mono
  307. [2014.02.04 16:13:51 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\.oit
  308. [2014.02.04 16:10:34 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\BitTorrent Sync
  309. [2014.01.25 10:42:40 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Digiarty
  310. [2014.02.05 14:59:46 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Epson
  311. [2014.07.13 18:28:12 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\JGArcadeApp
  312. [2013.11.25 19:02:45 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\NewSoft
  313. [2014.06.19 14:23:41 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Opera Software
  314. [2013.12.09 23:19:51 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Philipp Winterberg
  315. [2014.01.25 11:12:25 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Rovio
  316. [2014.01.20 15:13:22 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Rovio Entertainment Ltd
  317. [2013.11.15 19:47:11 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\Unity
  318. [2014.08.11 15:10:35 | 000,000,000 | ---D | M] -- C:\Users\Damir\AppData\Roaming\uTorrent
  319.  
  320. [color=#E56717]========== Purity Check ==========[/color]
  321.  
  322.  
  323.  
  324. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!