API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 12th, 2013
406
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 44.02 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2013-07-12 21:08:11 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\robin\Desktop
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,90 Gb Total Physical Memory | 2,30 Gb Available Physical Memory | 58,89% Memory free
  8. 7,80 Gb Paging File | 6,13 Gb Available in Paging File | 78,59% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 200,00 Gb Total Space | 45,28 Gb Free Space | 22,64% Space Free | Partition Type: NTFS
  13. Drive E: | 4,33 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
  14. Drive F: | 699,10 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  15.  
  16. Computer Name: ROBIN-MSI | User Name: robin | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2013-07-12 21:06:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\robin\Desktop\OTL.exe
  23. PRC - [2013-07-08 13:09:11 | 004,317,536 | ---- | M] (TeamViewer GmbH) -- c:\program files (x86)\teamviewer\version8\TeamViewer_Desktop.exe
  24. PRC - [2013-07-08 13:09:10 | 011,596,128 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
  25. PRC - [2013-07-08 13:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
  26. PRC - [2013-07-08 12:59:02 | 000,195,936 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
  27. PRC - [2013-07-06 21:09:48 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  28. PRC - [2013-07-06 18:10:56 | 001,122,384 | ---- | M] (BitTorrent Inc.) -- C:\Users\robin\AppData\Roaming\BitTorrent\BitTorrent.exe
  29. PRC - [2013-06-28 14:02:06 | 002,255,184 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
  30. PRC - [2012-07-24 17:03:00 | 002,458,984 | R--- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  31. PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
  32.  
  33.  
  34. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  35.  
  36. MOD - [2013-07-06 21:09:33 | 003,285,912 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  37.  
  38.  
  39. [color=#E56717]========== Services (SafeList) ==========[/color]
  40.  
  41. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  42. SRV:[b]64bit:[/b] - [2013-01-27 11:34:32 | 000,379,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  43. SRV:[b]64bit:[/b] - [2013-01-27 11:34:32 | 000,022,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  44. SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  45. SRV - [2013-07-08 13:09:10 | 004,153,184 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
  46. SRV - [2013-07-06 21:09:48 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  47. SRV - [2013-06-28 14:02:04 | 002,470,736 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
  48. SRV - [2013-06-03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  49. SRV - [2012-12-14 02:42:10 | 000,277,616 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  50. SRV - [2012-07-24 17:03:00 | 002,458,984 | R--- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  51. SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  52. SRV - [2012-01-05 17:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe -- (AxAutoMntSrv)
  53. SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
  54. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  55.  
  56.  
  57. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  58.  
  59. DRV:[b]64bit:[/b] - [2013-04-25 11:39:03 | 000,564,824 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
  60. DRV:[b]64bit:[/b] - [2013-04-24 19:33:36 | 000,838,216 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  61. DRV:[b]64bit:[/b] - [2013-02-27 17:08:08 | 011,525,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
  62. DRV:[b]64bit:[/b] - [2013-01-20 15:59:04 | 000,130,008 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  63. DRV:[b]64bit:[/b] - [2012-12-14 02:42:22 | 005,353,888 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  64. DRV:[b]64bit:[/b] - [2012-08-23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  65. DRV:[b]64bit:[/b] - [2012-08-23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  66. DRV:[b]64bit:[/b] - [2012-08-23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  67. DRV:[b]64bit:[/b] - [2012-07-24 17:03:00 | 000,029,032 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  68. DRV:[b]64bit:[/b] - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  69. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  70. DRV:[b]64bit:[/b] - [2011-12-05 22:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  71. DRV:[b]64bit:[/b] - [2011-04-23 20:30:18 | 000,033,160 | ---- | M] (WeOnlyDo Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wod0205.sys -- (wod0205)
  72. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  73. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  74. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  75. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  76. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  77. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  78. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  79. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  80. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  81. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  82. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  83. DRV:[b]64bit:[/b] - [2009-03-18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  84. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  85.  
  86.  
  87. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  88.  
  89.  
  90. [color=#E56717]========== Internet Explorer ==========[/color]
  91.  
  92. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  93. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  94. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  95. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  96. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  97.  
  98.  
  99.  
  100.  
  101.  
  102.  
  103. IE - HKU\S-1-5-21-492225198-1014139875-2965224081-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
  104. IE - HKU\S-1-5-21-492225198-1014139875-2965224081-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  105. IE - HKU\S-1-5-21-492225198-1014139875-2965224081-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  106. IE - HKU\S-1-5-21-492225198-1014139875-2965224081-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  107.  
  108.  
  109. [color=#E56717]========== FireFox ==========[/color]
  110.  
  111. FF - prefs.js..browser.search.useDBForOrder: "false"
  112. FF - prefs.js..extensions.enabledAddons: addon%40dealplyshopping.com:2.0
  113. FF - prefs.js..extensions.enabledAddons: lyrmix%40lyrmix.net:1.114
  114. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
  115.  
  116.  
  117. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_169.dll File not found
  118. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  119. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  120. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
  121. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  122. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  123.  
  124. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  125. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  126. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\lyrmix@lyrmix.net: C:\Program Files (x86)\Lyrmix\FF\ [2013-06-12 15:48:05 | 000,000,000 | ---D | M]
  127. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  128. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  129.  
  130. [2013-04-24 20:35:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\robin\AppData\Roaming\mozilla\Extensions
  131. [2013-06-12 15:48:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\robin\AppData\Roaming\mozilla\Firefox\Profiles\rm3if1ae.default\extensions
  132. [2013-06-12 15:48:22 | 000,000,000 | ---D | M] (DealPly Shopping) -- C:\Users\robin\AppData\Roaming\mozilla\Firefox\Profiles\rm3if1ae.default\extensions\addon@dealplyshopping.com
  133. [2013-06-21 15:15:44 | 000,001,392 | ---- | M] () -- C:\Users\robin\AppData\Roaming\mozilla\firefox\profiles\rm3if1ae.default\searchplugins\privitize.xml
  134. [2013-07-06 21:09:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  135. [2013-07-06 21:09:48 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  136. [2013-06-12 15:48:05 | 000,000,000 | ---D | M] ("Lyrmix") -- C:\PROGRAM FILES (X86)\LYRMIX\FF
  137.  
  138. O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  139. O2 - BHO: (privitize Helper Object) - {1ACB5ABE-4890-4747-952C-F13BDB93FB75} - C:\Program Files (x86)\Industriya\privitize\1.8.21.6\bh\privitize.dll (Industriya LLC)
  140. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  141. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  142. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  143. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  144. O4:[b]64bit:[/b] - HKLM..\Run: [Wippien] C:\Program Files\Wippien\Wippien.exe ()
  145. O4 - HKLM..\Run: [Adobe] C:\ProgramData\Adobe\11C39C.vbe ()
  146. O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
  147. O4 - HKLM..\Run: [tuto4pc_pl_8] File not found
  148. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  149. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  150. O4 - HKU\S-1-5-21-492225198-1014139875-2965224081-1000..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team)
  151. O4 - HKU\S-1-5-21-492225198-1014139875-2965224081-1000..\Run: [BitTorrent] C:\Users\robin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc.)
  152. O4 - HKU\S-1-5-21-492225198-1014139875-2965224081-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  153. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  154. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  155. O4 - HKU\S-1-5-21-492225198-1014139875-2965224081-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  156. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  157. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  158. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
  159. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  160. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  161. O13[b]64bit:[/b] - gopher Prefix: missing
  162. O13 - gopher Prefix: missing
  163. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
  164. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{976126B2-6CAB-4FD8-9201-6AB8637FA6CB}: DhcpNameServer = 192.168.2.1
  165. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  166. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  167. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  168. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  169. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  170. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  171. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  172. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  173. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  174. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  175. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  176. O32 - HKLM CDRom: AutoRun - 1
  177. O32 - Unable to obtain root file information for disk E:\
  178. O32 - AutoRun File - [2004-08-18 20:33:36 | 000,057,344 | R--- | M] () - F:\Autorun.exe -- [ CDFS ]
  179. O32 - AutoRun File - [2004-08-18 20:33:31 | 000,121,080 | R--- | M] () - F:\autorun.bmp -- [ CDFS ]
  180. O32 - AutoRun File - [2003-12-10 12:12:47 | 000,000,043 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
  181. O32 - AutoRun File - [2004-08-18 20:33:40 | 000,000,220 | R--- | M] () - F:\autorun.txt -- [ CDFS ]
  182. O33 - MountPoints2\{20643275-ad8c-11e2-aa98-8c89a506f535}\Shell - "" = AutoRun
  183. O33 - MountPoints2\{20643275-ad8c-11e2-aa98-8c89a506f535}\Shell\AutoRun\command - "" = E:\autorun.exe -- [2012-10-11 19:41:40 | 896,532,480 | R--- | M] (2K Games )
  184. O33 - MountPoints2\{fa78c56f-db63-11e2-a6d5-8c89a506f535}\Shell - "" = AutoRun
  185. O33 - MountPoints2\{fa78c56f-db63-11e2-a6d5-8c89a506f535}\Shell\AutoRun\command - "" = F:\start.exe -- [2004-08-23 12:35:46 | 004,038,656 | R--- | M] ()
  186. O34 - HKLM BootExecute: (autocheck autochk *)
  187. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  188. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  189. O35 - HKLM\..comfile [open] -- "%1" %*
  190. O35 - HKLM\..exefile [open] -- "%1" %*
  191. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  192. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  193. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  194. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  195. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  196. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  197. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  198.  
  199. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  200.  
  201. [2013-07-12 21:06:58 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\robin\Desktop\OTL.exe
  202. [2013-07-12 19:52:41 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Malwarebytes
  203. [2013-07-12 19:52:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  204. [2013-07-12 19:52:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  205. [2013-07-12 19:52:27 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  206. [2013-07-12 19:52:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  207. [2013-07-12 19:35:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
  208. [2013-07-12 18:48:20 | 000,487,479 | ---- | C] (Appspeed Inc.) -- C:\Windows\SysWow64\SkinMagic.dll
  209. [2013-07-12 18:48:20 | 000,033,160 | ---- | C] (WeOnlyDo Software) -- C:\Windows\SysNative\drivers\wod0205.sys
  210. [2013-07-12 18:48:20 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Wippien
  211. [2013-07-12 18:48:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wippien
  212. [2013-07-12 18:48:20 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Language
  213. [2013-07-12 18:48:19 | 000,000,000 | ---D | C] -- C:\Program Files\Wippien
  214. [2013-07-12 18:48:04 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
  215. [2013-07-12 18:48:04 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
  216. [2013-07-12 18:48:03 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpGroupPolicyExtension.dll
  217. [2013-07-12 18:48:02 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
  218. [2013-07-12 18:48:02 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbGD.sys
  219. [2013-07-12 18:48:02 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
  220. [2013-07-12 18:48:01 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprtPS.dll
  221. [2013-07-12 18:48:00 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
  222. [2013-07-12 18:48:00 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp_winip.dll
  223. [2013-07-12 18:48:00 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsRdpWebAccess.dll
  224. [2013-07-12 18:48:00 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
  225. [2013-07-12 18:48:00 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
  226. [2013-07-12 18:48:00 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
  227. [2013-07-12 18:48:00 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wksprtPS.dll
  228. [2013-07-12 18:47:59 | 004,916,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
  229. [2013-07-12 18:47:59 | 003,174,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
  230. [2013-07-12 18:47:59 | 001,123,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
  231. [2013-07-12 18:47:59 | 001,048,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
  232. [2013-07-12 18:47:59 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
  233. [2013-07-12 18:47:59 | 000,322,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
  234. [2013-07-12 18:47:59 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
  235. [2013-07-12 18:47:59 | 000,228,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp_winip.dll
  236. [2013-07-12 18:47:59 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWbPrxy.exe
  237. [2013-07-12 18:47:59 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsRdpWebAccess.dll
  238. [2013-07-12 18:47:58 | 005,773,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
  239. [2013-07-12 18:44:54 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
  240. [2013-07-12 18:44:54 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
  241. [2013-07-12 18:44:53 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
  242. [2013-07-12 18:44:53 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
  243. [2013-07-12 18:44:42 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
  244. [2013-07-12 18:44:42 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
  245. [2013-07-12 18:44:37 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
  246. [2013-07-12 18:44:37 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
  247. [2013-07-12 18:44:37 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
  248. [2013-07-12 18:44:37 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
  249. [2013-07-12 18:44:37 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  250. [2013-07-12 18:44:37 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  251. [2013-07-12 18:44:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
  252. [2013-07-12 18:44:37 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
  253. [2013-07-12 18:44:37 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
  254. [2013-07-12 18:44:37 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
  255. [2013-07-12 18:44:36 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
  256. [2013-07-12 18:44:36 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
  257. [2013-07-12 18:44:36 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  258. [2013-07-12 18:44:36 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
  259. [2013-07-12 18:44:36 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
  260. [2013-07-12 18:44:36 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
  261. [2013-07-12 18:44:36 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
  262. [2013-07-12 18:44:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
  263. [2013-07-12 18:44:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
  264. [2013-07-12 18:44:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
  265. [2013-07-12 18:44:36 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
  266. [2013-07-12 18:44:35 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
  267. [2013-07-12 18:44:35 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
  268. [2013-07-12 18:44:35 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
  269. [2013-07-12 18:44:35 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
  270. [2013-07-12 18:44:35 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  271. [2013-07-12 18:44:34 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
  272. [2013-07-12 18:44:34 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
  273. [2013-07-12 18:44:34 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
  274. [2013-07-12 18:44:34 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
  275. [2013-07-12 18:44:34 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
  276. [2013-07-12 18:44:33 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
  277. [2013-07-12 18:44:33 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
  278. [2013-07-12 18:41:01 | 001,448,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  279. [2013-07-12 18:41:00 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
  280. [2013-07-12 18:40:59 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
  281. [2013-07-12 18:09:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Borderlands 2
  282. [2013-07-12 17:32:05 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Local\SKIDROW
  283. [2013-07-11 20:59:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Supreme commander 2
  284. [2013-07-10 17:19:13 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  285. [2013-07-10 17:19:13 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  286. [2013-07-10 17:19:12 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  287. [2013-07-10 17:19:12 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  288. [2013-07-10 17:19:12 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  289. [2013-07-10 17:19:11 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  290. [2013-07-10 17:19:11 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  291. [2013-07-10 17:19:11 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  292. [2013-07-10 17:19:10 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  293. [2013-07-10 17:19:10 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  294. [2013-07-10 17:19:10 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  295. [2013-07-10 17:19:10 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  296. [2013-07-10 17:19:09 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  297. [2013-07-10 17:19:09 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  298. [2013-07-10 17:19:08 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  299. [2013-07-10 13:46:10 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Local\Gas Powered Games
  300. [2013-07-10 13:44:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Media Center Programs
  301. [2013-07-10 13:43:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
  302. [2013-07-10 13:39:46 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
  303. [2013-07-10 13:39:45 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
  304. [2013-07-10 13:39:44 | 001,887,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
  305. [2013-07-10 13:39:44 | 001,620,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
  306. [2013-07-10 13:30:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\THQ
  307. [2013-07-10 13:25:31 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield
  308. [2013-07-09 17:32:12 | 000,000,000 | ---D | C] -- C:\Users\robin\Documents\OpenLieroX
  309. [2013-07-09 17:31:18 | 000,335,360 | ---- | C] (The cURL library, http://curl.haxx.se/) -- C:\Users\robin\Desktop\curllib.dll
  310. [2013-07-09 17:30:22 | 003,620,864 | ---- | C] (OpenLieroX Team) -- C:\Users\robin\Desktop\OpenLieroX.exe
  311. [2013-07-07 14:17:06 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Industriya
  312. [2013-07-06 21:09:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  313. [2013-07-06 18:09:55 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\BitTorrent
  314. [2013-07-03 13:53:42 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Local\Diagnostics
  315. [2013-07-03 13:49:09 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\dll-files.com
  316. [2013-07-03 13:49:02 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
  317. [2013-07-03 13:49:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Logs
  318. [2013-07-03 13:49:01 | 000,019,392 | ---- | C] (Dll-Files.com) -- C:\Windows\SysNative\roboot64.exe
  319. [2013-07-03 13:49:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
  320. [2013-07-03 13:48:39 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exclusive-Games
  321. [2013-07-03 13:48:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exclusive-Games
  322. [2013-07-03 13:47:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Exclusive-Games
  323. [2013-07-02 18:59:19 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Local\LogMeIn Hamachi
  324. [2013-07-02 18:49:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
  325. [2013-07-02 18:49:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
  326. [2013-07-02 18:43:39 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Skype
  327. [2013-07-02 18:43:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  328. [2013-07-02 18:43:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
  329. [2013-07-02 18:43:26 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
  330. [2013-07-02 18:43:22 | 000,000,000 | ---D | C] -- C:\Isa
  331. [2013-07-02 18:43:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
  332. [2013-07-02 18:21:42 | 001,491,560 | ---- | C] (Skype Technologies S.A.) -- C:\SkypeSetup.exe
  333. [2013-06-30 11:58:37 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3drm.dll
  334. [2013-06-30 11:47:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\directx
  335. [2013-06-30 11:46:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Slitherine
  336. [2013-06-30 11:46:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Slitherine
  337. [2013-06-24 13:50:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\2K Games
  338. [2013-06-24 13:48:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
  339. [2013-06-22 20:09:29 | 000,000,000 | ---D | C] -- C:\Users\robin\Documents\Red Alert 3
  340. [2013-06-22 20:04:37 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\Red Alert 3
  341. [2013-06-21 15:19:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEGA
  342. [2013-06-21 15:19:14 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\InstallShield
  343. [2013-06-21 15:16:17 | 000,000,000 | ---D | C] -- C:\Users\robin\AppData\Roaming\DownLite
  344. [2013-06-21 15:15:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Industriya
  345. [2013-06-21 14:44:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SEGA
  346. [2013-06-16 16:00:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Age of Empires 3
  347. [2013-06-16 15:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Games
  348. [2013-06-16 08:04:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
  349. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  350.  
  351. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  352.  
  353. [2013-07-12 21:06:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\robin\Desktop\OTL.exe
  354. [2013-07-12 21:04:39 | 000,022,080 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  355. [2013-07-12 21:04:39 | 000,022,080 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  356. [2013-07-12 21:03:33 | 001,669,190 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  357. [2013-07-12 21:03:33 | 000,740,348 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  358. [2013-07-12 21:03:33 | 000,654,140 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  359. [2013-07-12 21:03:33 | 000,155,890 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  360. [2013-07-12 21:03:33 | 000,122,012 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  361. [2013-07-12 20:56:46 | 000,293,376 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  362. [2013-07-12 20:56:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  363. [2013-07-12 20:56:31 | 3140,050,944 | -HS- | M] () -- C:\hiberfil.sys
  364. [2013-07-12 19:52:34 | 000,001,116 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  365. [2013-07-12 19:35:14 | 000,001,169 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
  366. [2013-07-12 19:13:49 | 000,001,308 | ---- | M] () -- C:\Users\robin\Desktop\Borderlands 2.lnk
  367. [2013-07-12 17:55:43 | 000,001,851 | ---- | M] () -- C:\Users\robin\Documents\ax_files.xml
  368. [2013-07-10 13:44:39 | 000,002,603 | ---- | M] () -- C:\Users\Public\Desktop\Forged Alliance.lnk
  369. [2013-07-06 18:10:56 | 000,000,880 | ---- | M] () -- C:\Users\robin\Desktop\BitTorrent.lnk
  370. [2013-07-03 15:10:30 | 000,000,292 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
  371. [2013-07-03 15:10:30 | 000,000,276 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
  372. [2013-07-03 13:48:39 | 000,002,119 | ---- | M] () -- C:\Users\robin\Desktop\Tank-o-box.lnk
  373. [2013-07-02 18:49:28 | 000,000,933 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
  374. [2013-07-02 18:43:28 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
  375. [2013-07-02 18:21:21 | 000,631,232 | ---- | M] () -- C:\Hamachi_Downloader.exe
  376. [2013-07-02 18:20:50 | 001,491,560 | ---- | M] (Skype Technologies S.A.) -- C:\SkypeSetup.exe
  377. [2013-06-30 11:58:39 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3drm.dll
  378. [2013-06-30 11:56:09 | 000,000,878 | ---- | M] () -- C:\Users\Public\Desktop\Graj w Troy.lnk
  379. [2013-06-27 13:46:19 | 000,000,988 | ---- | M] () -- C:\Users\robin\Desktop\Borderlands — skrót.lnk
  380. [2013-06-22 20:07:18 | 000,002,080 | ---- | M] () -- C:\Users\Public\Desktop\Command & Conquer™ Red Alert™ 3.lnk
  381. [2013-06-21 15:26:52 | 000,002,125 | ---- | M] () -- C:\Users\Public\Desktop\Medieval II Total War.lnk
  382. [2013-06-19 22:48:06 | 001,641,796 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  383. [2013-06-17 14:40:23 | 000,001,760 | ---- | M] () -- C:\Users\robin\Desktop\age3y.exe — skrót.lnk
  384. [2013-06-16 15:36:22 | 000,002,164 | ---- | M] () -- C:\Users\Public\Desktop\Age of Empires III.lnk
  385. [2013-06-15 13:15:00 | 000,002,148 | ---- | M] () -- C:\Users\Public\Desktop\Age of Mythology - The Titans Expansion.lnk
  386. [2013-06-15 13:04:11 | 000,002,139 | ---- | M] () -- C:\Users\Public\Desktop\Age of Mythology.lnk
  387. [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  388.  
  389. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  390.  
  391. [2013-07-12 19:52:34 | 000,001,116 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  392. [2013-07-12 19:35:14 | 000,001,181 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk
  393. [2013-07-12 19:35:14 | 000,001,169 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
  394. [2013-07-12 18:15:37 | 000,001,308 | ---- | C] () -- C:\Users\robin\Desktop\Borderlands 2.lnk
  395. [2013-07-10 13:44:39 | 000,002,603 | ---- | C] () -- C:\Users\Public\Desktop\Forged Alliance.lnk
  396. [2013-07-06 18:10:56 | 000,000,880 | ---- | C] () -- C:\Users\robin\Desktop\BitTorrent.lnk
  397. [2013-07-03 13:49:15 | 000,000,292 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
  398. [2013-07-03 13:49:14 | 000,000,276 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
  399. [2013-07-03 13:48:39 | 000,002,119 | ---- | C] () -- C:\Users\robin\Desktop\Tank-o-box.lnk
  400. [2013-07-02 18:49:28 | 000,000,933 | ---- | C] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
  401. [2013-07-02 18:43:28 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
  402. [2013-07-02 18:21:42 | 000,631,232 | ---- | C] () -- C:\Hamachi_Downloader.exe
  403. [2013-06-30 11:56:09 | 000,000,878 | ---- | C] () -- C:\Users\Public\Desktop\Graj w Troy.lnk
  404. [2013-06-30 11:44:16 | 733,061,120 | ---- | C] () -- C:\Users\robin\Desktop\TroyPL.iso
  405. [2013-06-27 13:46:19 | 000,000,988 | ---- | C] () -- C:\Users\robin\Desktop\Borderlands — skrót.lnk
  406. [2013-06-22 20:02:17 | 000,002,080 | ---- | C] () -- C:\Users\Public\Desktop\Command & Conquer™ Red Alert™ 3.lnk
  407. [2013-06-21 15:26:52 | 000,002,125 | ---- | C] () -- C:\Users\Public\Desktop\Medieval II Total War.lnk
  408. [2013-06-17 14:40:23 | 000,001,760 | ---- | C] () -- C:\Users\robin\Desktop\age3y.exe — skrót.lnk
  409. [2013-06-16 15:36:22 | 000,002,164 | ---- | C] () -- C:\Users\Public\Desktop\Age of Empires III.lnk
  410. [2013-06-15 13:15:00 | 000,002,148 | ---- | C] () -- C:\Users\Public\Desktop\Age of Mythology - The Titans Expansion.lnk
  411. [2013-06-15 13:04:11 | 000,002,139 | ---- | C] () -- C:\Users\Public\Desktop\Age of Mythology.lnk
  412. [2013-05-30 11:44:28 | 001,641,796 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  413. [2013-04-25 14:51:16 | 000,007,605 | ---- | C] () -- C:\Users\robin\AppData\Local\Resmon.ResmonCfg
  414. [2013-04-24 19:24:28 | 000,755,188 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin
  415. [2013-04-24 19:24:28 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin
  416. [2012-12-14 02:42:30 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  417. [2012-12-14 02:42:24 | 000,754,652 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
  418. [2012-12-14 02:42:24 | 000,598,384 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
  419.  
  420. [color=#E56717]========== ZeroAccess Check ==========[/color]
  421.  
  422. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  423.  
  424. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  425.  
  426. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  427.  
  428. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  429.  
  430. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  431.  
  432. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  433. "" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
  434. "ThreadingModel" = Apartment
  435.  
  436. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  437. "" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
  438. "ThreadingModel" = Apartment
  439.  
  440. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  441. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  442. "ThreadingModel" = Free
  443.  
  444. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  445. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  446. "ThreadingModel" = Free
  447.  
  448. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  449. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  450. "ThreadingModel" = Both
  451.  
  452. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  453.  
  454. [color=#E56717]========== LOP Check ==========[/color]
  455.  
  456. [2013-07-12 21:12:19 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\BitTorrent
  457. [2013-06-12 15:48:24 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\DealPly
  458. [2013-07-03 13:49:09 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\dll-files.com
  459. [2013-06-21 15:16:17 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\DownLite
  460. [2013-07-07 14:17:06 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\Industriya
  461. [2013-07-12 18:48:20 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\Language
  462. [2013-06-22 20:08:03 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\Red Alert 3
  463. [2013-07-12 18:49:53 | 000,000,000 | ---D | M] -- C:\Users\robin\AppData\Roaming\Wippien
  464.  
  465. [color=#E56717]========== Purity Check ==========[/color]
  466.  
  467.  
  468.  
  469. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!