API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Oct 26th, 2014
174
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 71.35 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-10-26 17:49:39 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Shpel\Downloads
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17358)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 7,90 Gb Total Physical Memory | 5,10 Gb Available Physical Memory | 64,59% Memory free
  8. 15,80 Gb Paging File | 12,87 Gb Available in Paging File | 81,45% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 463,90 Gb Total Space | 203,39 Gb Free Space | 43,84% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: SHPEL-KOMPUTER | User Name: Shpel | Logged in as Administrator.
  15. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2014-10-26 17:48:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Shpel\Downloads\OTL.exe
  21. PRC - [2014-10-15 23:36:03 | 004,143,096 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\LoLPatcher.exe
  22. PRC - [2014-10-15 23:35:54 | 002,448,376 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.224\deploy\LoLLauncher.exe
  23. PRC - [2014-10-08 18:21:57 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  24. PRC - [2014-10-07 14:21:49 | 002,662,424 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
  25. PRC - [2014-09-25 11:44:03 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  26. PRC - [2014-09-12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  27. PRC - [2014-09-11 11:00:06 | 000,242,912 | ---- | M] (Foxit Software Inc.) -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
  28. PRC - [2014-08-29 19:17:45 | 001,843,736 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe
  29. PRC - [2014-08-29 19:17:45 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\loggingserver.exe
  30. PRC - [2014-07-30 18:34:52 | 001,869,488 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
  31. PRC - [2014-06-15 22:42:10 | 000,202,080 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
  32. PRC - [2014-04-17 20:07:28 | 004,672,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Shpel\AppData\Local\Akamai\netsession_win.exe
  33. PRC - [2013-12-10 03:15:27 | 002,279,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  34. PRC - [2013-12-10 03:14:56 | 001,494,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  35. PRC - [2013-11-24 22:36:50 | 001,294,336 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
  36. PRC - [2013-11-08 21:46:18 | 001,028,384 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
  37. PRC - [2013-07-25 17:11:38 | 000,443,416 | ---- | M] (Trend Micro Inc.) -- C:\Program Files (x86)\Trend Micro\RUBotted\RUBotSrv.exe
  38. PRC - [2013-07-25 17:11:36 | 001,102,872 | ---- | M] (Trend Micro Inc.) -- C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe
  39. PRC - [2012-12-07 18:27:50 | 000,167,424 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
  40. PRC - [2012-04-24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
  41.  
  42.  
  43. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  44.  
  45. MOD - [2014-10-15 23:36:03 | 004,143,096 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\LoLPatcher.exe
  46. MOD - [2014-10-15 23:36:03 | 001,708,032 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\RiotRadsIO.dll
  47. MOD - [2014-10-15 23:36:03 | 001,629,176 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\RiotLauncher.dll
  48. MOD - [2014-10-15 23:35:54 | 002,448,376 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.224\deploy\LoLLauncher.exe
  49. MOD - [2014-10-07 14:21:49 | 002,662,424 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
  50. MOD - [2014-09-25 11:44:01 | 003,715,184 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  51. MOD - [2014-09-12 15:02:12 | 042,975,744 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\libcef.dll
  52. MOD - [2014-09-12 15:02:09 | 004,945,408 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\v8.dll
  53. MOD - [2014-09-12 15:02:06 | 001,559,552 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\icui18n.dll
  54. MOD - [2014-09-12 15:02:06 | 001,241,088 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.8\deploy\icuuc.dll
  55. MOD - [2014-08-29 19:17:45 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\log4cplusU.dll
  56. MOD - [2014-07-30 18:34:51 | 017,029,808 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll
  57. MOD - [2013-12-19 21:33:31 | 000,013,088 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
  58. MOD - [2013-11-24 22:36:50 | 001,294,336 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
  59.  
  60.  
  61. [color=#E56717]========== Services (SafeList) ==========[/color]
  62.  
  63. SRV:[b]64bit:[/b] - [2014-10-02 11:11:13 | 001,523,752 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe -- (VSSERV)
  64. SRV:[b]64bit:[/b] - [2014-09-29 13:40:57 | 000,078,144 | ---- | M] (Bitdefender) [On_Demand | Stopped] -- C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe -- (BdDesktopParental)
  65. SRV:[b]64bit:[/b] - [2014-09-19 02:25:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  66. SRV:[b]64bit:[/b] - [2014-09-12 10:45:20 | 000,067,320 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe -- (UPDATESRV)
  67. SRV:[b]64bit:[/b] - [2014-08-01 10:38:18 | 000,204,576 | ---- | M] (Microsoft) [Auto | Running] -- C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe -- (NovaPdfServer)
  68. SRV:[b]64bit:[/b] - [2013-12-10 03:14:39 | 015,129,376 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
  69. SRV:[b]64bit:[/b] - [2013-07-08 14:59:09 | 000,094,624 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe -- (SafeBox)
  70. SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  71. SRV:[b]64bit:[/b] - [2013-02-13 03:53:50 | 000,770,528 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
  72. SRV:[b]64bit:[/b] - [2013-02-08 17:40:34 | 003,386,608 | ---- | M] (Intel® Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
  73. SRV:[b]64bit:[/b] - [2013-02-08 17:40:08 | 000,273,136 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
  74. SRV:[b]64bit:[/b] - [2013-02-08 17:39:48 | 000,621,296 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
  75. SRV:[b]64bit:[/b] - [2013-02-08 17:39:14 | 000,149,744 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
  76. SRV:[b]64bit:[/b] - [2012-09-12 18:07:06 | 000,135,984 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
  77. SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  78. SRV - [2014-10-08 18:21:57 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  79. SRV - [2014-09-25 11:44:02 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  80. SRV - [2014-09-23 05:32:08 | 000,833,728 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  81. SRV - [2014-09-12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  82. SRV - [2014-09-11 11:00:06 | 000,242,912 | ---- | M] (Foxit Software Inc.) [Auto | Running] -- C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe -- (FoxitCloudUpdateService)
  83. SRV - [2014-08-29 19:17:45 | 001,843,736 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe -- (vToolbarUpdater3.2.0)
  84. SRV - [2014-08-22 08:04:08 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Running] -- C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
  85. SRV - [2014-06-15 22:42:10 | 000,202,080 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe -- (KSS)
  86. SRV - [2014-03-20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  87. SRV - [2014-02-17 14:09:48 | 004,915,040 | ---- | M] (TeamViewer GmbH) [Disabled | Stopped] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
  88. SRV - [2013-12-10 03:14:56 | 001,494,304 | ---- | M] (NVIDIA Corporation) [Auto | Start_Pending] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  89. SRV - [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  90. SRV - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  91. SRV - [2013-09-06 17:29:46 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  92. SRV - [2013-07-25 17:11:38 | 000,443,416 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files (x86)\Trend Micro\RUBotted\RUBotSrv.exe -- (RUBotSrv)
  93. SRV - [2013-03-01 02:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
  94. SRV - [2012-12-07 18:27:50 | 000,167,424 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
  95. SRV - [2012-04-24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  96.  
  97.  
  98. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  99.  
  100. DRV:[b]64bit:[/b] - [2014-09-09 16:27:58 | 000,142,528 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  101. DRV:[b]64bit:[/b] - [2014-08-29 19:17:45 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
  102. DRV:[b]64bit:[/b] - [2014-07-02 16:47:12 | 000,419,616 | ---- | M] (BitDefender S.R.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\trufos.sys -- (trufos)
  103. DRV:[b]64bit:[/b] - [2014-05-16 12:04:02 | 000,647,752 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\avckf.sys -- (avckf)
  104. DRV:[b]64bit:[/b] - [2014-05-16 12:01:02 | 001,260,120 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avc3.sys -- (avc3)
  105. DRV:[b]64bit:[/b] - [2014-01-22 07:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
  106. DRV:[b]64bit:[/b] - [2014-01-22 07:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  107. DRV:[b]64bit:[/b] - [2013-12-19 21:33:31 | 000,032,544 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  108. DRV:[b]64bit:[/b] - [2013-12-05 09:42:30 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
  109. DRV:[b]64bit:[/b] - [2013-11-15 20:47:41 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  110. DRV:[b]64bit:[/b] - [2013-11-13 14:41:29 | 000,093,600 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- c:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys -- (BdfNdisf)
  111. DRV:[b]64bit:[/b] - [2013-11-04 14:47:36 | 000,082,824 | ---- | M] (BitDefender SRL) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bdsandbox.sys -- (BDSandBox)
  112. DRV:[b]64bit:[/b] - [2013-08-23 12:48:49 | 000,150,256 | ---- | M] (BitDefender LLC) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\gzflt.sys -- (gzflt)
  113. DRV:[b]64bit:[/b] - [2013-07-29 21:32:26 | 000,452,088 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  114. DRV:[b]64bit:[/b] - [2013-07-29 21:28:50 | 004,448,192 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  115. DRV:[b]64bit:[/b] - [2013-07-02 13:04:11 | 000,121,928 | ---- | M] (Bitdefender SRL) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys -- (bdfwfpf_pc)
  116. DRV:[b]64bit:[/b] - [2013-03-01 02:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
  117. DRV:[b]64bit:[/b] - [2013-02-13 03:54:16 | 000,163,808 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
  118. DRV:[b]64bit:[/b] - [2013-02-13 03:54:16 | 000,163,808 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
  119. DRV:[b]64bit:[/b] - [2013-02-12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
  120. DRV:[b]64bit:[/b] - [2013-02-05 11:00:26 | 011,518,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
  121. DRV:[b]64bit:[/b] - [2012-12-07 18:27:50 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
  122. DRV:[b]64bit:[/b] - [2012-11-02 12:17:46 | 000,261,056 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avchv.sys -- (avchv)
  123. DRV:[b]64bit:[/b] - [2012-10-29 13:23:56 | 000,107,080 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys -- (bdfwfpf)
  124. DRV:[b]64bit:[/b] - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  125. DRV:[b]64bit:[/b] - [2012-04-17 13:34:26 | 000,076,944 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bdvedisk.sys -- (BDVEDISK)
  126. DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  127. DRV:[b]64bit:[/b] - [2011-06-10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  128. DRV:[b]64bit:[/b] - [2011-05-13 03:21:04 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
  129. DRV:[b]64bit:[/b] - [2011-05-13 03:21:04 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
  130. DRV:[b]64bit:[/b] - [2011-05-13 03:21:02 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
  131. DRV:[b]64bit:[/b] - [2011-05-13 03:21:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
  132. DRV:[b]64bit:[/b] - [2011-05-13 03:21:02 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
  133. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  134. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  135. DRV:[b]64bit:[/b] - [2010-11-21 04:25:00 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  136. DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  137. DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  138. DRV:[b]64bit:[/b] - [2010-11-21 04:24:14 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  139. DRV:[b]64bit:[/b] - [2009-11-02 11:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
  140. DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  141. DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  142. DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  143. DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  144. DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  145. DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  146. DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  147. DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  148.  
  149.  
  150. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  151.  
  152.  
  153. [color=#E56717]========== Internet Explorer ==========[/color]
  154.  
  155. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  156. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  157. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  158. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
  159. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
  160. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  161. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
  162. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  163. IE - HKLM\..\SearchScopes,DefaultScope =
  164. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  165.  
  166. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  167. IE - HKCU\..\SearchScopes,DefaultScope = {AFECF825-BE2B-45DB-866C-ECD85A6E06B9}
  168. IE - HKCU\..\SearchScopes\{0E8B38D6-4C99-47E4-A4BB-877372A77257}: "URL" = http://www.mysearchresults.com/search?c=8004&t=11&q={searchTerms}
  169. IE - HKCU\..\SearchScopes\{AFECF825-BE2B-45DB-866C-ECD85A6E06B9}: "URL" = http://www.idg.pl?q={searchTerms}
  170. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  171. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  172.  
  173. [color=#E56717]========== FireFox ==========[/color]
  174.  
  175. FF - prefs.js..browser.search.useDBForOrder: true
  176. FF - prefs.js..browser.startup.homepage: "torg.pl"
  177. FF - prefs.js..extensions.enabledAddons: bercow.piotr%40gmail.com:1.0
  178. FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:2.2
  179. FF - prefs.js..extensions.enabledAddons: avg%40toolbar:3.2.0.18
  180. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.3
  181. FF - prefs.js..keyword.URL: "http://www.google.pl/search?q= "
  182. FF - user.js - File not found
  183.  
  184. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll File not found
  185. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll File not found
  186. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  187. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  188. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  189. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
  190. FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\3.2.0\\npsitesafety.dll File not found
  191. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  192. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  193. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  194. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
  195. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  196. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
  197. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
  198. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  199. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Shpel\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  200. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Shpel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  201. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
  202.  
  203. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2015\BDTBEXT [2014-10-02 14:29:39 | 000,000,000 | ---D | M]
  204. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff\ [2014-10-02 14:30:02 | 000,000,000 | ---D | M]
  205. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  206. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  207. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-10-02 14:29:39 | 000,000,000 | ---D | M]
  208. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  209. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  210.  
  211. [2014-06-29 20:42:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\Extensions
  212. [2014-10-24 19:46:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\Firefox\Profiles\mm92foji.default\extensions
  213. [2014-10-26 15:58:28 | 000,000,000 | ---D | M] (AVG Web TuneUp) -- C:\Users\Shpel\AppData\Roaming\mozilla\Firefox\Profiles\mm92foji.default\extensions\avg@toolbar
  214. [2014-08-24 18:23:17 | 000,036,786 | ---- | M] () (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\firefox\profiles\mm92foji.default\extensions\[email protected]
  215. [2014-10-09 13:49:15 | 003,867,576 | ---- | M] () (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\firefox\profiles\mm92foji.default\extensions\[email protected]
  216. [2014-10-13 14:37:45 | 000,414,727 | ---- | M] () (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\firefox\profiles\mm92foji.default\extensions\[email protected]
  217. [2014-10-16 17:16:59 | 000,979,610 | ---- | M] () (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\firefox\profiles\mm92foji.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  218. [2014-10-21 20:31:47 | 000,300,373 | ---- | M] () (No name found) -- C:\Users\Shpel\AppData\Roaming\mozilla\firefox\profiles\mm92foji.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
  219. [2014-10-08 10:06:13 | 000,003,882 | ---- | M] () -- C:\Users\Shpel\AppData\Roaming\mozilla\firefox\profiles\mm92foji.default\searchplugins\avg-secure-search.xml
  220. [2014-09-25 11:43:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  221. [2014-09-25 11:44:04 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  222.  
  223. [color=#E56717]========== Chrome ==========[/color]
  224.  
  225. CHR - default_search_provider: (Enabled)
  226. CHR - default_search_provider: search_url =
  227. CHR - default_search_provider: suggest_url =
  228. CHR - plugin: Error reading preferences file
  229. CHR - Extension: No name found = C:\Users\Shpel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiicmmpkicnndkhlnnloilpgncbpkbjj\7.3_0\
  230. CHR - Extension: No name found = C:\Users\Shpel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabcmochhfpldjekobfaaggijgohadih\18.15.0_0\
  231. CHR - Extension: No name found = C:\Users\Shpel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.10.3_0\
  232. CHR - Extension: No name found = C:\Users\Shpel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  233.  
  234. O1 HOSTS File: ([2014-10-21 23:29:47 | 000,000,114 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  235. O1 - Hosts: 127.0.0.1 localhost
  236. O1 - Hosts: 178.217.186.2184 facebook.com
  237. O1 - Hosts: 96.8.113.205 karachan.org
  238. O1 - Hosts: 96.8.113.205 www.karachan.org
  239. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  240. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  241. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  242. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  243. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Bitdefender Wallet ) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender)
  244. O3 - HKLM\..\Toolbar: (Bitdefender Wallet) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\pmbxie.dll (Bitdefender)
  245. O4:[b]64bit:[/b] - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe (Bitdefender)
  246. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  247. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  248. O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
  249. O4:[b]64bit:[/b] - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
  250. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  251. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  252. O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
  253. O4 - HKLM..\Run: [Trend Micro RUBotted V2.0 Beta] C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe (Trend Micro Inc.)
  254. O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Web TuneUp\vprot.exe ()
  255. O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Shpel\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
  256. O4 - HKCU..\Run: [Bitdefender Wallet Agent] C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe (Bitdefender)
  257. O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  258. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  259. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  260. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  261. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  262. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  263. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  264. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  265. O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
  266. O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
  267. O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
  268. O13 - gopher Prefix: missing
  269. O15 - HKCU\..Trusted Domains: aeriagames.com ([]http in Trusted sites)
  270. O15 - HKCU\..Trusted Domains: aeriagames.com ([]https in Trusted sites)
  271. O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab (SysInfo Class)
  272. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  273. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.231.1.206
  274. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{55DE34AA-D104-4442-91B0-0E7DB43D68AD}: DhcpNameServer = 192.168.42.129
  275. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C6895189-1342-42A5-9876-82E01391900C}: DhcpNameServer = 192.168.42.129
  276. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F29A05A5-CF43-4505-97EC-8AC8F7093AEF}: DhcpNameServer = 217.172.224.160 89.231.1.206
  277. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  278. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  279. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  280. O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
  281. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  282. O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found
  283. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  284. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  285. O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
  286. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  287. O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\3.2.0\ViProtocol.dll (AVG Secure Search)
  288. O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
  289. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  290. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  291. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  292. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  293. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  294. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  295. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  296. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  297. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  298. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  299. O32 - HKLM CDRom: AutoRun - 1
  300. O34 - HKLM BootExecute: (autocheck autochk *)
  301. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  302. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  303. O35 - HKLM\..comfile [open] -- "%1" %*
  304. O35 - HKLM\..exefile [open] -- "%1" %*
  305. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  306. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  307. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  308. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  309. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  310. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  311. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  312.  
  313. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  314.  
  315. [2014-10-26 05:21:21 | 000,000,000 | ---D | C] -- C:\ProgramData\bdch
  316. [2014-10-25 03:07:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Masters ITC
  317. [2014-10-25 03:07:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Masters ITC
  318. [2014-10-25 03:07:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Masters ITC
  319. [2014-10-23 14:26:47 | 000,074,512 | ---- | C] (BitDefender SRL) -- C:\Windows\SysNative\bdsandboxuiskin32.dll
  320. [2014-10-23 13:57:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015
  321. [2014-10-23 13:56:52 | 001,721,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01009.dll
  322. [2014-10-23 13:56:40 | 000,000,000 | ---D | C] -- C:\ProgramData\BDLogging
  323. [2014-10-23 13:56:32 | 000,076,944 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\bdvedisk.sys
  324. [2014-10-23 13:56:30 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\capicom.dll
  325. [2014-10-23 13:56:30 | 000,093,600 | ---- | C] (BitDefender LLC) -- C:\Windows\SysNative\drivers\BdfNdisf6.sys
  326. [2014-10-23 13:56:30 | 000,082,824 | ---- | C] (BitDefender SRL) -- C:\Windows\SysNative\drivers\bdsandbox.sys
  327. [2014-10-23 13:56:30 | 000,074,512 | ---- | C] (BitDefender SRL) -- C:\Windows\SysWow64\bdsandboxuiskin32.dll
  328. [2014-10-23 13:56:19 | 001,260,120 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avc3.sys
  329. [2014-10-23 13:56:19 | 000,647,752 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avckf.sys
  330. [2014-10-23 13:56:19 | 000,261,056 | ---- | C] (BitDefender) -- C:\Windows\SysNative\drivers\avchv.sys
  331. [2014-10-23 13:56:09 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\Bitdefender
  332. [2014-10-23 13:52:47 | 000,150,256 | ---- | C] (BitDefender LLC) -- C:\Windows\SysNative\drivers\gzflt.sys
  333. [2014-10-23 13:52:47 | 000,084,848 | ---- | C] (BitDefender SRL) -- C:\Windows\SysNative\BDSandBoxUISkin.dll
  334. [2014-10-23 13:52:47 | 000,034,384 | ---- | C] (BitDefender SRL) -- C:\Windows\SysNative\BDSandBoxUH.dll
  335. [2014-10-23 13:52:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
  336. [2014-10-23 13:52:45 | 000,419,616 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\SysNative\drivers\trufos.sys
  337. [2014-10-23 13:52:45 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender
  338. [2014-10-23 13:52:25 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\QuickScan
  339. [2014-10-23 13:48:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Bitdefender
  340. [2014-10-22 15:27:45 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\EncryptStick
  341. [2014-10-21 16:52:35 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Desktop\kolos
  342. [2014-10-19 20:31:14 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\Mirillis
  343. [2014-10-19 20:31:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis
  344. [2014-10-19 20:30:51 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Documents\Action!
  345. [2014-10-19 20:30:49 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Local\Mirillis
  346. [2014-10-19 20:30:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
  347. [2014-10-19 20:30:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mirillis
  348. [2014-10-19 19:25:13 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Desktop\CD
  349. [2014-10-19 19:21:15 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Szkoła Hakerów - Odtwarzacz filmów instruktażowych
  350. [2014-10-19 19:21:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Szkoła Hakerów - Odtwarzacz filmów instruktażowych
  351. [2014-10-19 19:21:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Szkoła Hakerów - Odtwarzacz filmów instruktażowych
  352. [2014-10-19 19:08:00 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Desktop\SH
  353. [2014-10-19 13:46:27 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\Foxit Software
  354. [2014-10-19 13:46:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
  355. [2014-10-19 13:45:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software
  356. [2014-10-19 13:40:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
  357. [2014-10-19 13:40:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
  358. [2014-10-19 12:42:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  359. [2014-10-19 12:42:38 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
  360. [2014-10-19 12:42:28 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
  361. [2014-10-19 12:42:28 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
  362. [2014-10-19 12:42:28 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
  363. [2014-10-19 12:42:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
  364. [2014-10-15 06:53:17 | 001,943,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
  365. [2014-10-15 06:53:17 | 001,131,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
  366. [2014-10-15 06:53:17 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll
  367. [2014-10-15 06:53:17 | 000,156,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll
  368. [2014-10-15 06:53:17 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll
  369. [2014-10-15 06:53:17 | 000,073,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscories.dll
  370. [2014-10-15 06:53:06 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
  371. [2014-10-15 06:53:05 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmv2clt.dll
  372. [2014-10-15 06:53:05 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmv2clt.dll
  373. [2014-10-15 06:53:05 | 000,744,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
  374. [2014-10-15 06:53:04 | 014,632,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
  375. [2014-10-15 06:53:03 | 004,120,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
  376. [2014-10-15 06:53:02 | 000,782,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
  377. [2014-10-15 06:53:02 | 000,617,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
  378. [2014-10-15 06:53:01 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AUDIOKSE.dll
  379. [2014-10-15 06:53:00 | 011,411,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
  380. [2014-10-15 06:52:57 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
  381. [2014-10-15 06:52:55 | 003,208,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
  382. [2014-10-15 06:52:53 | 000,457,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
  383. [2014-10-15 06:52:53 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
  384. [2014-10-15 06:52:52 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AUDIOKSE.dll
  385. [2014-10-15 06:52:50 | 000,693,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
  386. [2014-10-15 06:52:50 | 000,616,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
  387. [2014-10-15 06:52:49 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll
  388. [2014-10-15 06:52:48 | 001,574,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
  389. [2014-10-15 06:52:47 | 000,619,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
  390. [2014-10-15 06:52:46 | 000,532,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
  391. [2014-10-15 06:52:45 | 005,551,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  392. [2014-10-15 06:52:45 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
  393. [2014-10-15 06:52:44 | 003,970,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  394. [2014-10-15 06:52:44 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
  395. [2014-10-15 06:52:43 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDump.dll
  396. [2014-10-15 06:52:42 | 003,914,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  397. [2014-10-15 06:52:42 | 001,480,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  398. [2014-10-15 06:52:42 | 001,329,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
  399. [2014-10-15 06:52:42 | 001,069,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
  400. [2014-10-15 06:52:42 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
  401. [2014-10-15 06:52:42 | 000,432,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll
  402. [2014-10-15 06:52:42 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
  403. [2014-10-15 06:52:41 | 001,005,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
  404. [2014-10-15 06:52:41 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
  405. [2014-10-15 06:52:41 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll
  406. [2014-10-15 06:52:40 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
  407. [2014-10-15 06:52:40 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
  408. [2014-10-15 06:52:40 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptsp.dll
  409. [2014-10-15 06:52:39 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
  410. [2014-10-15 06:52:38 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
  411. [2014-10-15 06:52:38 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
  412. [2014-10-15 06:52:38 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
  413. [2014-10-15 06:52:38 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
  414. [2014-10-15 06:52:38 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll
  415. [2014-10-15 06:52:38 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll
  416. [2014-10-15 06:52:38 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe
  417. [2014-10-15 06:52:38 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe
  418. [2014-10-15 06:52:37 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
  419. [2014-10-15 06:52:37 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
  420. [2014-10-15 06:52:37 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe
  421. [2014-10-15 06:52:37 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
  422. [2014-10-15 06:52:37 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll
  423. [2014-10-15 06:52:37 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
  424. [2014-10-15 06:52:37 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe
  425. [2014-10-15 06:52:37 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe
  426. [2014-10-15 06:52:37 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe
  427. [2014-10-15 06:52:37 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
  428. [2014-10-15 06:52:37 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
  429. [2014-10-15 06:52:37 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
  430. [2014-10-15 06:52:37 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
  431. [2014-10-15 06:52:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
  432. [2014-10-15 06:52:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
  433. [2014-10-15 06:52:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll
  434. [2014-10-15 06:52:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll
  435. [2014-10-15 06:52:25 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  436. [2014-10-15 06:52:23 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  437. [2014-10-15 06:52:21 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  438. [2014-10-15 06:52:17 | 000,710,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  439. [2014-10-15 06:52:17 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  440. [2014-10-15 06:52:17 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  441. [2014-10-15 06:52:17 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  442. [2014-10-15 06:52:17 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  443. [2014-10-15 06:52:17 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  444. [2014-10-15 06:52:17 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  445. [2014-10-15 06:52:17 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  446. [2014-10-15 06:52:17 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  447. [2014-10-15 06:52:15 | 002,017,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  448. [2014-10-15 06:52:15 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  449. [2014-10-15 06:52:14 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  450. [2014-10-15 06:52:14 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  451. [2014-10-15 06:52:14 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  452. [2014-10-15 06:52:14 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  453. [2014-10-15 06:52:14 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  454. [2014-10-15 06:52:13 | 002,108,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  455. [2014-10-15 06:52:13 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  456. [2014-10-15 06:52:12 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  457. [2014-10-15 06:52:12 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  458. [2014-10-15 06:52:12 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  459. [2014-10-15 06:52:11 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  460. [2014-10-15 06:52:11 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  461. [2014-10-15 06:52:10 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  462. [2014-10-15 06:52:09 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  463. [2014-10-15 06:52:09 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  464. [2014-10-15 06:52:09 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  465. [2014-10-15 06:52:08 | 005,829,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  466. [2014-10-15 06:52:08 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  467. [2014-10-15 06:52:08 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  468. [2014-10-15 06:52:08 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  469. [2014-10-15 06:52:08 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  470. [2014-10-15 06:52:07 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  471. [2014-10-15 06:52:07 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  472. [2014-10-15 06:52:07 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  473. [2014-10-15 06:51:53 | 003,722,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
  474. [2014-10-15 06:51:53 | 003,221,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
  475. [2014-10-15 06:51:52 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
  476. [2014-10-15 06:51:52 | 001,051,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
  477. [2014-10-15 06:51:52 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
  478. [2014-10-15 06:51:51 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
  479. [2014-10-15 06:51:51 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
  480. [2014-10-15 06:51:51 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
  481. [2014-10-15 06:51:36 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
  482. [2014-10-15 06:51:36 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
  483. [2014-10-15 06:51:32 | 003,241,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
  484. [2014-10-15 06:51:20 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
  485. [2014-10-15 06:51:20 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
  486. [2014-10-15 00:00:20 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Desktop\pdf różne
  487. [2014-10-13 20:50:59 | 000,000,000 | ---D | C] -- C:\Downloads
  488. [2014-10-13 14:28:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Free Download Manager
  489. [2014-10-13 14:27:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Download Manager
  490. [2014-10-08 20:30:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios
  491. [2014-10-08 20:30:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Firefly Studios
  492. [2014-10-08 18:17:51 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
  493. [2014-10-08 17:25:29 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Documents\My Games
  494. [2014-10-08 12:23:49 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Roaming\Awesomium
  495. [2014-10-08 12:22:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
  496. [2014-10-08 12:22:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Hi-Rez Studios
  497. [2014-10-08 12:22:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hi-Rez Studios
  498. [2014-10-08 12:19:36 | 000,000,000 | ---D | C] -- C:\Fraps
  499. [2014-10-05 00:32:51 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Desktop\tbi screens
  500. [2014-10-01 13:23:37 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
  501. [2014-10-01 13:23:37 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
  502. [2014-09-29 22:09:46 | 000,000,000 | ---D | C] -- C:\Users\Shpel\Desktop\Dobre Bity
  503. [2014-09-28 14:15:52 | 000,000,000 | ---D | C] -- C:\Users\Shpel\AppData\Local\Facebook
  504. [2 C:\Users\Shpel\Documents\*.tmp files -> C:\Users\Shpel\Documents\*.tmp -> ]
  505. [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  506. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  507.  
  508. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  509.  
  510. [2014-10-26 17:21:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  511. [2014-10-26 16:06:10 | 000,028,368 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  512. [2014-10-26 16:06:10 | 000,028,368 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  513. [2014-10-26 16:03:04 | 001,670,518 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  514. [2014-10-26 16:03:04 | 000,740,672 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  515. [2014-10-26 16:03:04 | 000,654,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  516. [2014-10-26 16:03:04 | 000,156,214 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  517. [2014-10-26 16:03:04 | 000,122,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  518. [2014-10-26 15:58:15 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  519. [2014-10-26 15:54:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  520. [2014-10-26 15:54:15 | 2066,309,119 | -HS- | M] () -- C:\hiberfil.sys
  521. [2014-10-26 03:23:01 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2101955463-1821921507-549610656-1000UA.job
  522. [2014-10-25 14:23:00 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2101955463-1821921507-549610656-1000Core.job
  523. [2014-10-25 13:17:08 | 000,407,528 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  524. [2014-10-25 03:07:46 | 000,001,300 | ---- | M] () -- C:\Users\Public\Desktop\BlindScanner Standard.lnk
  525. [2014-10-24 14:30:27 | 000,000,385 | ---- | M] () -- C:\Windows\SysNative\user_gensett.xml
  526. [2014-10-23 14:26:47 | 000,074,512 | ---- | M] (BitDefender SRL) -- C:\Windows\SysNative\bdsandboxuiskin32.dll
  527. [2014-10-23 13:58:11 | 000,522,886 | ---- | M] () -- C:\ProgramData\1414068745.bdinstall.bin
  528. [2014-10-23 13:57:25 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
  529. [2014-10-23 13:57:25 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
  530. [2014-10-23 13:57:25 | 000,000,684 | -H-- | M] () -- C:\bdr-cf01
  531. [2014-10-23 13:57:10 | 000,002,122 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk
  532. [2014-10-23 13:57:07 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_avchv_01009.Wdf
  533. [2014-10-21 23:29:47 | 000,000,114 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  534. [2014-10-20 18:23:28 | 000,047,099 | ---- | M] () -- C:\Users\Shpel\Desktop\eeee.jpg
  535. [2014-10-20 18:21:13 | 000,053,163 | ---- | M] () -- C:\Users\Shpel\Desktop\eeeeeeeeeeee.jpg
  536. [2014-10-19 20:30:22 | 000,002,035 | ---- | M] () -- C:\Users\Public\Desktop\Action!.lnk
  537. [2014-10-19 19:21:15 | 000,001,898 | ---- | M] () -- C:\Windows\SysWow64\odtwarzacz.csh
  538. [2014-10-19 14:04:17 | 000,000,222 | ---- | M] () -- C:\Users\Shpel\Desktop\Afterfall InSanity Extended Edition.url
  539. [2014-10-19 13:40:39 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
  540. [2014-10-19 12:42:21 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
  541. [2014-10-19 12:42:21 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
  542. [2014-10-19 12:42:21 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
  543. [2014-10-19 12:42:21 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
  544. [2014-10-18 01:18:51 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  545. [2014-10-16 17:59:56 | 000,057,639 | ---- | M] () -- C:\Users\Shpel\Desktop\tor.pdf
  546. [2014-10-13 15:26:51 | 000,000,000 | ---- | M] () -- C:\Users\Shpel\AppData\Local\{58965FD7-6C51-4C4A-B8AB-CAB869AF5003}
  547. [2014-10-13 15:23:44 | 558,496,899 | ---- | M] () -- C:\Windows\MEMORY.DMP
  548. [2014-10-10 03:05:59 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  549. [2014-10-10 03:05:42 | 000,507,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  550. [2014-10-10 03:00:38 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  551. [2014-10-09 13:54:26 | 000,044,828 | ---- | M] () -- C:\Users\Shpel\Desktop\plan.png
  552. [2014-10-08 20:30:28 | 000,001,314 | ---- | M] () -- C:\Users\Public\Desktop\Stronghold Kingdoms.lnk
  553. [2014-10-08 18:22:01 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
  554. [2014-10-08 18:21:57 | 000,075,136 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
  555. [2014-10-08 18:21:55 | 000,001,201 | ---- | M] () -- C:\Users\Shpel\Desktop\Uplay.lnk
  556. [2014-10-08 12:22:43 | 000,002,033 | ---- | M] () -- C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
  557. [2014-10-08 12:22:43 | 000,002,024 | ---- | M] () -- C:\Users\Public\Desktop\Smite.lnk
  558. [2014-10-05 13:08:13 | 000,061,547 | ---- | M] () -- C:\Users\Shpel\Desktop\lol.png
  559. [2 C:\Users\Shpel\Documents\*.tmp files -> C:\Users\Shpel\Documents\*.tmp -> ]
  560. [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  561. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  562.  
  563. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  564.  
  565. [2014-10-25 03:07:46 | 000,001,300 | ---- | C] () -- C:\Users\Public\Desktop\BlindScanner Standard.lnk
  566. [2014-10-24 14:30:27 | 000,000,385 | ---- | C] () -- C:\Windows\SysNative\user_gensett.xml
  567. [2014-10-23 13:58:11 | 000,522,886 | ---- | C] () -- C:\ProgramData\1414068745.bdinstall.bin
  568. [2014-10-23 13:57:25 | 000,000,684 | -H-- | C] () -- C:\bdr-cf01
  569. [2014-10-23 13:57:10 | 000,002,122 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Total Security 2015.lnk
  570. [2014-10-23 13:57:07 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_avchv_01009.Wdf
  571. [2014-10-23 13:56:01 | 003,271,472 | -H-- | C] () -- C:\bdr-bz01
  572. [2014-10-23 13:56:01 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
  573. [2014-10-23 13:56:00 | 049,563,064 | -H-- | C] () -- C:\bdr-im01.gz
  574. [2014-10-23 13:56:00 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
  575. [2014-10-20 18:23:21 | 000,047,099 | ---- | C] () -- C:\Users\Shpel\Desktop\eeee.jpg
  576. [2014-10-20 18:21:07 | 000,053,163 | ---- | C] () -- C:\Users\Shpel\Desktop\eeeeeeeeeeee.jpg
  577. [2014-10-19 20:30:22 | 000,002,035 | ---- | C] () -- C:\Users\Public\Desktop\Action!.lnk
  578. [2014-10-19 19:21:15 | 000,001,898 | ---- | C] () -- C:\Windows\SysWow64\odtwarzacz.csh
  579. [2014-10-19 14:04:17 | 000,000,222 | ---- | C] () -- C:\Users\Shpel\Desktop\Afterfall InSanity Extended Edition.url
  580. [2014-10-19 13:40:39 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  581. [2014-10-19 13:40:39 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
  582. [2014-10-18 00:21:03 | 734,617,600 | ---- | C] () -- C:\Users\Shpel\Desktop\transporter 3.avi
  583. [2014-10-16 17:59:51 | 000,057,639 | ---- | C] () -- C:\Users\Shpel\Desktop\tor.pdf
  584. [2014-10-13 15:26:51 | 000,000,000 | ---- | C] () -- C:\Users\Shpel\AppData\Local\{58965FD7-6C51-4C4A-B8AB-CAB869AF5003}
  585. [2014-10-08 20:30:28 | 000,001,314 | ---- | C] () -- C:\Users\Public\Desktop\Stronghold Kingdoms.lnk
  586. [2014-10-08 18:17:51 | 000,001,201 | ---- | C] () -- C:\Users\Shpel\Desktop\Uplay.lnk
  587. [2014-10-08 12:22:43 | 000,002,033 | ---- | C] () -- C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
  588. [2014-10-08 12:22:43 | 000,002,024 | ---- | C] () -- C:\Users\Public\Desktop\Smite.lnk
  589. [2014-10-05 23:05:31 | 000,044,828 | ---- | C] () -- C:\Users\Shpel\Desktop\plan.png
  590. [2014-10-05 13:08:12 | 000,061,547 | ---- | C] () -- C:\Users\Shpel\Desktop\lol.png
  591. [2014-09-28 14:15:59 | 000,000,928 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2101955463-1821921507-549610656-1000UA.job
  592. [2014-09-28 14:15:58 | 000,000,906 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2101955463-1821921507-549610656-1000Core.job
  593. [2014-05-12 19:20:01 | 000,003,584 | ---- | C] () -- C:\Users\Shpel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  594. [2014-04-20 21:00:00 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  595. [2014-02-25 21:54:31 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
  596. [2014-02-25 21:54:31 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
  597. [2014-02-25 21:54:31 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
  598. [2014-02-25 21:54:31 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
  599. [2014-02-25 21:54:31 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
  600. [2014-02-24 14:20:13 | 000,000,600 | ---- | C] () -- C:\Users\Shpel\AppData\Local\PUTTY.RND
  601. [2014-01-11 01:47:51 | 000,314,656 | ---- | C] () -- C:\Windows\SysWow64\NvIFROpenGL.dll
  602. [2013-12-14 20:53:44 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  603. [2013-12-14 20:53:42 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  604. [2013-11-17 19:12:26 | 000,000,892 | RHS- | C] () -- C:\Users\Shpel\ntuser.pol
  605. [2013-11-17 18:24:22 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  606. [2013-11-14 18:12:20 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
  607. [2013-11-13 00:25:09 | 001,643,124 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  608. [2013-10-30 12:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
  609. [2013-10-30 12:06:54 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
  610. [2013-10-30 12:06:54 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
  611. [2013-10-30 12:06:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
  612. [2013-10-30 12:06:54 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
  613. [2013-07-29 21:27:48 | 000,241,152 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  614. [2013-07-29 21:27:46 | 000,109,056 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
  615. [2013-07-29 21:21:18 | 019,587,072 | ---- | C] () -- C:\Windows\SysWow64\igdfcl32.dll
  616. [2013-05-28 21:22:48 | 000,641,024 | ---- | C] () -- C:\Windows\SysWow64\ficvdec_x86.dll
  617. [2013-03-01 02:47:36 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
  618.  
  619. [color=#E56717]========== ZeroAccess Check ==========[/color]
  620.  
  621. [2009-07-14 06:00:09 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  622.  
  623. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  624.  
  625. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  626.  
  627. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  628.  
  629. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  630.  
  631. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  632. "" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
  633. "ThreadingModel" = Apartment
  634.  
  635. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  636. "" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
  637. "ThreadingModel" = Apartment
  638.  
  639. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  640. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  641. "ThreadingModel" = Free
  642.  
  643. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  644. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:46 | 000,606,208 | ---- | M] (Microsoft Corporation)
  645. "ThreadingModel" = Free
  646.  
  647. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  648. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  649. "ThreadingModel" = Both
  650.  
  651. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  652.  
  653. [color=#E56717]========== LOP Check ==========[/color]
  654.  
  655. [2014-09-15 23:06:30 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\4t Niagara Software
  656. [2013-11-25 20:23:49 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\AC3Filter
  657. [2014-09-14 22:43:18 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\AVG2015
  658. [2014-10-08 12:23:49 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Awesomium
  659. [2014-07-16 18:44:48 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Battle.net
  660. [2014-10-23 14:03:04 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Bitdefender
  661. [2014-09-05 01:52:25 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\BitTorrent Sync
  662. [2013-11-15 20:52:09 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\DAEMON Tools Lite
  663. [2014-10-24 19:56:22 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Embarcadero
  664. [2014-10-22 15:27:45 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\EncryptStick
  665. [2014-04-15 14:20:02 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Firefly Studios
  666. [2014-10-25 20:16:45 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\foobar2000
  667. [2014-10-20 01:15:04 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Foxit Software
  668. [2014-04-23 19:49:32 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Highresolution Enterprises
  669. [2013-11-13 16:25:05 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\LolClient
  670. [2014-10-19 20:31:14 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Mirillis
  671. [2014-09-21 19:57:27 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Mount&Blade Warband
  672. [2013-11-27 20:36:31 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\MSDrvCfg
  673. [2014-10-21 20:56:41 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Notepad++
  674. [2014-10-23 13:52:25 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\QuickScan
  675. [2014-09-06 17:12:28 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\RenPy
  676. [2013-11-13 00:34:55 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Riot Games
  677. [2013-12-02 22:11:47 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Samsung
  678. [2014-09-11 22:06:23 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Softland
  679. [2014-03-13 21:06:21 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\TeamViewer
  680. [2014-04-02 13:24:34 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Tibia
  681. [2014-01-28 01:31:44 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Tibiacast
  682. [2014-09-05 21:33:16 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\TibiaPreview
  683. [2014-10-26 02:01:53 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\TS3Client
  684. [2013-11-12 21:44:42 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\TuneUp Software
  685. [2014-05-28 23:23:26 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Ubisoft
  686. [2014-03-16 00:42:34 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Unity
  687. [2014-10-18 12:46:02 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\uTorrent
  688. [2014-02-12 14:02:27 | 000,000,000 | ---D | M] -- C:\Users\Shpel\AppData\Roaming\Web Solution Mart
  689.  
  690. [color=#E56717]========== Purity Check ==========[/color]
  691.  
  692.  
  693.  
  694. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!