API tools faq
paste
Advertisement
Guest User

logotl

a guest
Jun 13th, 2014
236
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 60.52 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-06-13 14:55:23 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\admin\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17126)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 7,96 Gb Total Physical Memory | 5,59 Gb Available Physical Memory | 70,27% Memory free
  8. 15,91 Gb Paging File | 13,35 Gb Available in Paging File | 83,89% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 102,44 Gb Total Space | 49,44 Gb Free Space | 48,26% Space Free | Partition Type: NTFS
  13. Drive D: | 413,93 Gb Total Space | 397,61 Gb Free Space | 96,06% Space Free | Partition Type: NTFS
  14. Drive E: | 415,04 Gb Total Space | 196,06 Gb Free Space | 47,24% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: KONRAD-KOMPUTER | User Name: admin | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2014-06-13 12:48:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe
  23. PRC - [2014-02-04 12:37:00 | 001,290,752 | ---- | M] (Innova Co S.a r.l.) -- C:\Program Files (x86)\4game\3.2.0.214\4game-service.exe
  24. PRC - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  25. PRC - [2012-12-21 14:08:56 | 001,333,424 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
  26. PRC - [2012-04-11 11:41:04 | 000,097,280 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe
  27. PRC - [2012-01-31 11:46:56 | 000,019,232 | ---- | M] (Autodesk, Inc.) -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
  28.  
  29.  
  30. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  31.  
  32. MOD - [2014-05-14 01:40:54 | 000,414,536 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
  33. MOD - [2014-05-14 01:40:50 | 004,217,672 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll
  34. MOD - [2014-05-14 01:40:45 | 000,716,616 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
  35. MOD - [2014-05-14 01:40:44 | 000,126,280 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\libegl.dll
  36. MOD - [2014-05-14 01:40:43 | 001,732,424 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
  37.  
  38.  
  39. [color=#E56717]========== Services (SafeList) ==========[/color]
  40.  
  41. SRV:[b]64bit:[/b] - [2014-05-30 11:21:05 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  42. SRV:[b]64bit:[/b] - [2014-03-11 12:34:10 | 000,347,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  43. SRV:[b]64bit:[/b] - [2014-03-11 12:34:10 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  44. SRV:[b]64bit:[/b] - [2013-10-05 00:58:24 | 000,087,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe -- (VsEtwService120)
  45. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  46. SRV:[b]64bit:[/b] - [2013-02-21 18:12:02 | 001,432,400 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
  47. SRV:[b]64bit:[/b] - [2012-12-21 14:08:56 | 001,333,424 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
  48. SRV:[b]64bit:[/b] - [2012-12-19 21:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  49. SRV:[b]64bit:[/b] - [2012-12-19 16:32:12 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
  50. SRV:[b]64bit:[/b] - [2010-02-03 01:03:05 | 000,015,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe -- (c2wts)
  51. SRV - [2014-05-13 20:55:31 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  52. SRV - [2014-02-04 12:37:00 | 001,290,752 | ---- | M] (Innova Co S.a r.l.) [Auto | Running] -- C:\Program Files (x86)\4game\3.2.0.214\4game-service.exe -- (4game-service)
  53. SRV - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  54. SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  55. SRV - [2013-08-22 05:21:36 | 000,119,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe -- (Te.Service)
  56. SRV - [2013-08-22 04:55:00 | 000,142,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe -- (fussvc)
  57. SRV - [2013-02-18 18:15:38 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  58. SRV - [2012-10-24 19:16:51 | 004,702,568 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
  59. SRV - [2012-01-31 11:46:56 | 000,019,232 | ---- | M] (Autodesk, Inc.) [Auto | Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
  60. SRV - [2011-12-09 15:39:52 | 000,135,584 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
  61. SRV - [2010-01-21 18:51:12 | 030,963,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
  62. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  63.  
  64.  
  65. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  66.  
  67. DRV:[b]64bit:[/b] - [2014-05-16 14:03:30 | 000,141,600 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
  68. DRV:[b]64bit:[/b] - [2014-03-11 09:52:30 | 000,133,928 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  69. DRV:[b]64bit:[/b] - [2013-10-02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  70. DRV:[b]64bit:[/b] - [2013-06-30 21:41:56 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  71. DRV:[b]64bit:[/b] - [2013-01-10 10:25:22 | 000,190,232 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
  72. DRV:[b]64bit:[/b] - [2013-01-10 10:25:22 | 000,059,440 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
  73. DRV:[b]64bit:[/b] - [2013-01-10 10:25:22 | 000,057,904 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
  74. DRV:[b]64bit:[/b] - [2013-01-10 10:25:20 | 000,213,416 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
  75. DRV:[b]64bit:[/b] - [2013-01-10 10:25:20 | 000,150,616 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
  76. DRV:[b]64bit:[/b] - [2012-12-19 22:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  77. DRV:[b]64bit:[/b] - [2012-12-19 21:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  78. DRV:[b]64bit:[/b] - [2012-11-06 13:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  79. DRV:[b]64bit:[/b] - [2012-08-23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  80. DRV:[b]64bit:[/b] - [2012-08-23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  81. DRV:[b]64bit:[/b] - [2012-08-09 18:06:26 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  82. DRV:[b]64bit:[/b] - [2012-04-11 03:40:58 | 000,082,560 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
  83. DRV:[b]64bit:[/b] - [2012-04-11 03:40:58 | 000,042,624 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
  84. DRV:[b]64bit:[/b] - [2012-04-09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
  85. DRV:[b]64bit:[/b] - [2012-03-30 16:49:08 | 000,056,448 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
  86. DRV:[b]64bit:[/b] - [2012-03-30 03:44:54 | 000,223,872 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdxhc.sys -- (amdxhc)
  87. DRV:[b]64bit:[/b] - [2012-03-30 03:44:52 | 000,105,088 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdhub30.sys -- (amdhub30)
  88. DRV:[b]64bit:[/b] - [2012-03-09 18:40:06 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  89. DRV:[b]64bit:[/b] - [2012-03-09 18:40:06 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  90. DRV:[b]64bit:[/b] - [2011-08-23 15:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  91. DRV:[b]64bit:[/b] - [2010-11-24 17:12:00 | 001,579,520 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  92. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  93. DRV:[b]64bit:[/b] - [2010-06-19 01:36:04 | 000,017,920 | ---- | M] (Siliten) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\InputFilter_FlexDef2b.sys -- (InputFilter_Hid_FlexDef2b)
  94. DRV:[b]64bit:[/b] - [2009-11-18 01:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
  95. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  96. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  97. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  98. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  99. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  100. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  101. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  102. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  103.  
  104.  
  105. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  106.  
  107.  
  108. [color=#E56717]========== Internet Explorer ==========[/color]
  109.  
  110. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  111. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  112. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  113. IE - HKLM\..\SearchScopes,DefaultScope =
  114. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  115.  
  116.  
  117. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  118. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  119.  
  120. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  121. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  122.  
  123. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  124.  
  125. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  126.  
  127. IE - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  128. IE - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  129. IE - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
  130. IE - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  131. IE - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  132. IE - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 124.119.50.254:80
  133.  
  134. [color=#E56717]========== FireFox ==========[/color]
  135.  
  136. FF - prefs.js..browser.startup.homepage: "www.google.pl"
  137. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.2
  138. FF - user.js - File not found
  139.  
  140. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found
  141. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.0.2: C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  142. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.0.2: C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
  143. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  144. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  145. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  146. FF - HKLM\Software\MozillaPlugins\@4game.com/plugin: C:\Program Files (x86)\4game\3.2.0.214\npplugin4game.dll (Innova Co S.a r.l.)
  147. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
  148. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
  149. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  150. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  151. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  152. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  153. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  154. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  155. FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
  156. FF - HKLM\Software\MozillaPlugins\@ogplanet.com/npOGPPlugin: C:\Windows\system32\npOGPPlugin.dll (OGPlanet)
  157. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  158. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  159. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  160. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  161. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\admin\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  162. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\admin\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  163.  
  164. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2013-02-19 17:01:00 | 000,000,000 | ---D | M]
  165. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-02-18 18:15:39 | 000,000,000 | ---D | M]
  166. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  167. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-02-19 17:01:00 | 000,000,000 | ---D | M]
  168.  
  169. [2013-02-18 18:00:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Extensions
  170. [2013-02-18 18:15:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
  171. [2013-02-18 18:15:39 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  172. [2013-01-17 02:46:35 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
  173. [2013-01-17 02:46:35 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
  174. [2013-01-17 02:46:35 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
  175. [2013-01-17 02:46:35 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
  176. [2013-01-17 02:46:35 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
  177. [2013-01-17 02:46:35 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
  178.  
  179. [color=#E56717]========== Chrome ==========[/color]
  180.  
  181. CHR - default_search_provider: Google (Enabled)
  182. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  183. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  184. CHR - homepage:
  185. CHR - plugin: Shockwave Flash (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll
  186. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  187. CHR - plugin: Native Client (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
  188. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.114\pdf.dll
  189. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
  190. CHR - plugin: 4game (Enabled) = C:\Program Files (x86)\4game\npplugin4game.dll
  191. CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
  192. CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
  193. CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
  194. CHR - plugin: Google Update (Enabled) = C:\Users\admin\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll
  195. CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll
  196. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll
  197. CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
  198. CHR - plugin: Microsoft Office 2010 (Enabled) = D:\MICROS~1\Office14\NPAUTHZ.DLL
  199. CHR - plugin: Microsoft Office 2010 (Enabled) = D:\MICROS~1\Office14\NPSPWRAP.DLL
  200. CHR - Extension: Dokumenty Google = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.6_0\
  201. CHR - Extension: Dysk Google = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  202. CHR - Extension: YouTube Center Developer Build = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcegdpionpopahcglnfiiioapcclamdj\298_0\
  203. CHR - Extension: YouTube = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  204. CHR - Extension: Szukaj w Google = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  205. CHR - Extension: AdBlock = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.37_0\
  206. CHR - Extension: Mirkohelper = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jidefldfjoggdbebpaioplmhofgdahnk\1.6_0\
  207. CHR - Extension: Google Wallet = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  208. CHR - Extension: Gmail = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  209.  
  210. O1 HOSTS File: ([2014-06-13 14:15:08 | 000,450,712 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  211. O1 - Hosts: 127.0.0.1 www.007guard.com
  212. O1 - Hosts: 127.0.0.1 007guard.com
  213. O1 - Hosts: 127.0.0.1 008i.com
  214. O1 - Hosts: 127.0.0.1 www.008k.com
  215. O1 - Hosts: 127.0.0.1 008k.com
  216. O1 - Hosts: 127.0.0.1 www.00hq.com
  217. O1 - Hosts: 127.0.0.1 00hq.com
  218. O1 - Hosts: 127.0.0.1 010402.com
  219. O1 - Hosts: 127.0.0.1 www.032439.com
  220. O1 - Hosts: 127.0.0.1 032439.com
  221. O1 - Hosts: 127.0.0.1 www.0scan.com
  222. O1 - Hosts: 127.0.0.1 0scan.com
  223. O1 - Hosts: 127.0.0.1 1000gratisproben.com
  224. O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
  225. O1 - Hosts: 127.0.0.1 1001namen.com
  226. O1 - Hosts: 127.0.0.1 www.1001namen.com
  227. O1 - Hosts: 127.0.0.1 100888290cs.com
  228. O1 - Hosts: 127.0.0.1 www.100888290cs.com
  229. O1 - Hosts: 127.0.0.1 www.100sexlinks.com
  230. O1 - Hosts: 127.0.0.1 100sexlinks.com
  231. O1 - Hosts: 127.0.0.1 10sek.com
  232. O1 - Hosts: 127.0.0.1 www.10sek.com
  233. O1 - Hosts: 127.0.0.1 www.1-2005-search.com
  234. O1 - Hosts: 127.0.0.1 1-2005-search.com
  235. O1 - Hosts: 127.0.0.1 123fporn.info
  236. O1 - Hosts: 15469 more lines...
  237. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
  238. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
  239. O2 - BHO: (Microsoft Web Test Recorder 12.0 Helper) - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - D:\Microsoft Visual Studio\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
  240. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
  241. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  242. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
  243. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  244. O4:[b]64bit:[/b] - HKLM..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (Autodesk, Inc.)
  245. O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
  246. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  247. O4:[b]64bit:[/b] - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe (Advanced Micro Devices, Inc.)
  248. O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  249. O4 - HKLM..\Run: [] File not found
  250. O4 - HKLM..\Run: [BCSSync] D:\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
  251. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  252. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  253. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  254. O4 - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
  255. O4 - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000..\Run: [PlayNC Launcher] File not found
  256. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  257. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  258. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  259. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  260. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
  261. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  262. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  263. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  264. O7 - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
  265. O7 - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  266. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - D:\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
  267. O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - D:\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  268. O8 - Extra context menu item: E&xport to Microsoft Excel - D:\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
  269. O8 - Extra context menu item: Se&nd to OneNote - D:\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  270. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  271. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
  272. O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  273. O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
  274. O13[b]64bit:[/b] - gopher Prefix: missing
  275. O13 - gopher Prefix: missing
  276. O15 - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\..Trusted Domains: 4game.com ([]https in Trusted sites)
  277. O15 - HKU\S-1-5-21-3644161028-1820906183-3013661804-1000\..Trusted Ranges: Range1 ([https] in Trusted sites)
  278. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
  279. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 11.0.2)
  280. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.51.2)
  281. O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
  282. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.51.2)
  283. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.231.1.206
  284. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EB012D53-6A72-4FD4-9AFF-DE9384EB5E79}: DhcpNameServer = 217.172.224.160 89.231.1.206
  285. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  286. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  287. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  288. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  289. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  290. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  291. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  292. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
  293. O32 - HKLM CDRom: AutoRun - 1
  294. O32 - AutoRun File - [2013-09-29 19:28:59 | 000,000,000 | ---D | M] - D:\Autodesk -- [ NTFS ]
  295. O33 - MountPoints2\{9117fd06-79d4-11e2-8020-806e6f6e6963}\Shell - "" = AutoRun
  296. O33 - MountPoints2\{9117fd06-79d4-11e2-8020-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe
  297. O34 - HKLM BootExecute: (autocheck autochk *)
  298. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  299. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  300. O35 - HKLM\..comfile [open] -- "%1" %*
  301. O35 - HKLM\..exefile [open] -- "%1" %*
  302. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  303. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  304. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  305. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  306. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  307. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  308. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  309.  
  310. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  311.  
  312. [2014-06-13 14:08:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
  313. [2014-06-13 14:07:59 | 016,409,960 | ---- | C] (Safer Networking Limited ) -- C:\Users\admin\Desktop\spybotsd162.exe
  314. [2014-06-13 12:48:18 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe
  315. [2014-06-13 12:22:49 | 000,000,000 | ---D | C] -- C:\Users\admin\VirtualBox VMs
  316. [2014-06-13 12:20:18 | 000,000,000 | ---D | C] -- C:\Users\admin\.VirtualBox
  317. [2014-06-13 12:19:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
  318. [2014-06-13 12:10:30 | 109,574,432 | ---- | C] (Oracle Corporation) -- C:\Users\admin\Desktop\VirtualBox-4.3.12-93733-Win.exe
  319. [2014-06-12 13:56:18 | 006,574,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
  320. [2014-06-12 13:56:18 | 005,694,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
  321. [2014-06-12 02:33:10 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
  322. [2014-06-12 02:33:06 | 001,068,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
  323. [2014-06-12 02:33:06 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
  324. [2014-06-12 02:33:06 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWbPrxy.exe
  325. [2014-06-12 02:33:06 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
  326. [2014-06-12 02:33:06 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
  327. [2014-06-12 02:33:06 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsRdpWebAccess.dll
  328. [2014-06-12 02:33:06 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
  329. [2014-06-12 02:33:06 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsRdpWebAccess.dll
  330. [2014-06-12 02:33:06 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprtPS.dll
  331. [2014-06-12 02:33:06 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wksprtPS.dll
  332. [2014-06-12 02:33:06 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
  333. [2014-06-12 02:33:06 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
  334. [2014-06-12 02:33:05 | 001,147,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
  335. [2014-06-12 02:33:05 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll
  336. [2014-06-12 02:33:05 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll
  337. [2014-06-12 02:29:48 | 001,030,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
  338. [2014-06-12 02:29:47 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
  339. [2014-06-11 12:14:11 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
  340. [2014-06-11 12:14:11 | 000,288,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
  341. [2014-06-11 12:14:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll
  342. [2014-06-11 12:14:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll
  343. [2014-06-11 12:14:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
  344. [2014-06-11 12:14:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
  345. [2014-06-11 12:14:09 | 003,178,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
  346. [2014-06-11 12:14:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RdpGroupPolicyExtension.dll
  347. [2014-06-11 12:14:08 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  348. [2014-06-11 12:14:08 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  349. [2014-06-11 12:14:08 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  350. [2014-06-11 12:14:07 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  351. [2014-06-11 12:14:07 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  352. [2014-06-11 12:14:07 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  353. [2014-06-11 12:14:06 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  354. [2014-06-11 12:14:06 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  355. [2014-06-11 12:14:06 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  356. [2014-06-11 12:14:06 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  357. [2014-06-11 12:14:05 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  358. [2014-06-11 12:14:05 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  359. [2014-06-11 12:14:05 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  360. [2014-06-11 12:14:05 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  361. [2014-06-11 12:14:04 | 002,040,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  362. [2014-06-11 12:14:04 | 000,608,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  363. [2014-06-11 12:14:04 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  364. [2014-06-11 12:14:03 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  365. [2014-06-11 12:14:03 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  366. [2014-06-11 12:14:03 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  367. [2014-06-11 12:14:03 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  368. [2014-06-11 12:14:03 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  369. [2014-06-11 12:14:02 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  370. [2014-06-11 12:14:02 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  371. [2014-06-11 12:14:01 | 005,782,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  372. [2014-06-11 12:14:01 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  373. [2014-06-11 12:14:01 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  374. [2014-06-11 12:14:01 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  375. [2014-06-11 12:14:01 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  376. [2014-06-11 12:14:00 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  377. [2014-06-11 12:14:00 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  378. [2014-06-11 12:14:00 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  379. [2014-06-11 12:13:59 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  380. [2014-06-11 12:12:35 | 000,506,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  381. [2014-06-11 12:12:34 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  382. [2014-06-04 14:38:41 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Mumble
  383. [2014-06-03 01:01:06 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\na plyte
  384. [2014-06-01 20:31:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble
  385. [2014-06-01 20:29:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mumble
  386. [2014-05-23 00:51:52 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Doc do dyplomu
  387. [2014-05-21 17:32:03 | 000,000,000 | ---D | C] -- C:\Users\admin\pxgclient
  388. [2014-05-21 17:25:15 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\pxgclient
  389. [2014-05-20 12:31:33 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\praca
  390. [2014-05-18 22:56:46 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Sublime Text 2
  391. [2014-05-18 19:09:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PyScripter-x64
  392. [2014-05-18 19:09:11 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\PyScripter
  393. [2014-05-18 18:11:27 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Bazy Danych MySQL
  394. [2014-05-17 14:53:14 | 000,000,000 | ---D | C] -- C:\ProgramData\NexonEU
  395. [2014-05-16 14:03:30 | 000,141,600 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys
  396. [2014-05-16 14:01:18 | 000,204,064 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\VBoxNetFltNobj.dll
  397. [2014-05-14 23:47:11 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\cabal
  398. [2014-05-14 16:01:21 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  399. [2014-05-14 16:01:21 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  400. [2014-05-14 16:01:20 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  401. [2014-05-14 16:01:20 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  402. [2014-05-14 16:01:20 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll
  403. [2014-05-14 16:01:20 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
  404. [2014-05-14 16:01:19 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll
  405. [2014-05-14 16:01:18 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  406. [2014-05-14 16:01:18 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll
  407. [2014-05-14 16:01:18 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll
  408. [2014-05-14 16:01:17 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  409. [2014-05-14 16:01:17 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll
  410. [2014-05-14 16:01:17 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll
  411. [2014-05-14 16:01:17 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll
  412. [2014-05-14 16:01:17 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll
  413. [2014-05-14 16:01:17 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll
  414. [2014-05-14 16:01:17 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll
  415. [2014-05-14 16:01:17 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll
  416. [2014-05-14 16:01:17 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll
  417. [2014-05-14 16:01:17 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll
  418. [2014-05-14 16:01:17 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll
  419. [2014-05-14 16:01:17 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  420. [2014-05-14 16:01:17 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  421.  
  422. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  423.  
  424. [2014-06-13 14:56:35 | 000,022,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  425. [2014-06-13 14:56:35 | 000,022,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  426. [2014-06-13 14:55:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  427. [2014-06-13 14:49:13 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore1cec445254d4270.job
  428. [2014-06-13 14:48:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  429. [2014-06-13 14:48:09 | 2111,512,575 | -HS- | M] () -- C:\hiberfil.sys
  430. [2014-06-13 14:46:25 | 000,538,232 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  431. [2014-06-13 14:34:01 | 000,000,364 | ---- | M] () -- C:\Windows\wininit.ini
  432. [2014-06-13 14:15:08 | 000,450,712 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  433. [2014-06-13 14:08:08 | 016,409,960 | ---- | M] (Safer Networking Limited ) -- C:\Users\admin\Desktop\spybotsd162.exe
  434. [2014-06-13 14:05:00 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  435. [2014-06-13 13:58:00 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3644161028-1820906183-3013661804-1000UA1cec7361a2ac466.job
  436. [2014-06-13 12:48:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe
  437. [2014-06-13 12:19:39 | 000,000,608 | ---- | M] () -- C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
  438. [2014-06-13 12:15:53 | 208,666,624 | ---- | M] () -- C:\Users\admin\Desktop\android-x86-4.3-20130725.iso
  439. [2014-06-13 12:11:32 | 109,574,432 | ---- | M] (Oracle Corporation) -- C:\Users\admin\Desktop\VirtualBox-4.3.12-93733-Win.exe
  440. [2014-06-12 21:58:00 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3644161028-1820906183-3013661804-1000Core1cec7361a024d01.job
  441. [2014-06-08 23:40:50 | 000,003,588 | ---- | M] () -- C:\Users\admin\Desktop\tutorial6.zip
  442. [2014-06-08 16:55:18 | 000,000,917 | ---- | M] () -- C:\Users\admin\Desktop\macierze.py
  443. [2014-06-08 11:13:05 | 000,506,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  444. [2014-06-08 11:08:04 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  445. [2014-06-04 14:42:33 | 000,002,391 | ---- | M] () -- C:\Users\admin\Documents\MumbleAutomaticCertificateBackup.p12
  446. [2014-06-04 14:38:25 | 000,000,885 | ---- | M] () -- C:\Users\admin\Desktop\mumble.lnk
  447. [2014-05-30 12:02:09 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  448. [2014-05-30 11:39:43 | 000,548,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  449. [2014-05-30 11:39:23 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  450. [2014-05-30 11:38:29 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  451. [2014-05-30 11:27:57 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  452. [2014-05-30 11:24:28 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  453. [2014-05-30 11:21:23 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  454. [2014-05-30 11:21:05 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  455. [2014-05-30 11:20:36 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  456. [2014-05-30 11:11:24 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  457. [2014-05-30 11:08:22 | 005,782,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  458. [2014-05-30 11:06:42 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  459. [2014-05-30 10:55:36 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  460. [2014-05-30 10:49:21 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  461. [2014-05-30 10:46:48 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  462. [2014-05-30 10:44:23 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  463. [2014-05-30 10:43:06 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  464. [2014-05-30 10:42:16 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  465. [2014-05-30 10:35:44 | 000,608,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  466. [2014-05-30 10:33:48 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  467. [2014-05-30 10:30:43 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  468. [2014-05-30 10:29:31 | 000,631,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  469. [2014-05-30 10:28:33 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  470. [2014-05-30 10:27:56 | 000,592,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  471. [2014-05-30 10:24:19 | 001,249,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  472. [2014-05-30 10:23:22 | 002,040,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  473. [2014-05-30 10:10:46 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  474. [2014-05-30 10:06:06 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  475. [2014-05-30 10:04:20 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  476. [2014-05-30 09:50:09 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  477. [2014-05-30 09:49:38 | 001,964,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  478. [2014-05-30 09:13:47 | 000,704,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  479. [2014-05-30 09:13:09 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  480. [2014-05-29 13:03:50 | 000,044,867 | ---- | M] () -- C:\Users\admin\Desktop\CV_NSN.pdf
  481. [2014-05-28 00:19:48 | 000,000,872 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  482. [2014-05-27 23:06:56 | 000,000,346 | ---- | M] () -- C:\Users\admin\Desktop\lista12.hs
  483. [2014-05-27 22:04:37 | 000,001,071 | ---- | M] () -- C:\Users\admin\Desktop\creature.py
  484. [2014-05-27 19:40:29 | 000,084,132 | ---- | M] () -- C:\Users\admin\Desktop\pobrane.png
  485. [2014-05-27 19:35:05 | 000,117,607 | ---- | M] () -- C:\Users\admin\Desktop\CVTemplate.odt
  486. [2014-05-26 10:59:38 | 000,002,389 | ---- | M] () -- C:\Users\admin\Desktop\Google Chrome.lnk
  487. [2014-05-21 10:32:40 | 000,000,452 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for admin.job
  488. [2014-05-19 15:54:41 | 000,000,195 | -H-- | M] () -- C:\Users\admin\Documents\Rysunek1.dwl2
  489. [2014-05-19 15:54:41 | 000,000,045 | -H-- | M] () -- C:\Users\admin\Documents\Rysunek1.dwl
  490. [2014-05-18 22:53:14 | 000,000,945 | ---- | M] () -- C:\Users\admin\Desktop\Sublime Text.lnk
  491. [2014-05-18 19:09:11 | 000,000,564 | ---- | M] () -- C:\Users\admin\Desktop\PyScripter.lnk
  492. [2014-05-16 14:03:30 | 000,141,600 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys
  493. [2014-05-16 14:01:18 | 000,204,064 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\VBoxNetFltNobj.dll
  494.  
  495. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  496.  
  497. [2014-06-13 14:36:06 | 000,538,232 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
  498. [2014-06-13 14:34:00 | 000,000,364 | ---- | C] () -- C:\Windows\wininit.ini
  499. [2014-06-13 12:19:39 | 000,000,608 | ---- | C] () -- C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
  500. [2014-06-13 12:14:42 | 208,666,624 | ---- | C] () -- C:\Users\admin\Desktop\android-x86-4.3-20130725.iso
  501. [2014-06-08 23:40:49 | 000,003,588 | ---- | C] () -- C:\Users\admin\Desktop\tutorial6.zip
  502. [2014-06-08 16:31:35 | 000,000,917 | ---- | C] () -- C:\Users\admin\Desktop\macierze.py
  503. [2014-06-04 14:42:33 | 000,002,391 | ---- | C] () -- C:\Users\admin\Documents\MumbleAutomaticCertificateBackup.p12
  504. [2014-06-04 14:38:25 | 000,000,885 | ---- | C] () -- C:\Users\admin\Desktop\mumble.lnk
  505. [2014-05-27 22:04:49 | 000,000,346 | ---- | C] () -- C:\Users\admin\Desktop\lista12.hs
  506. [2014-05-27 22:04:37 | 000,001,071 | ---- | C] () -- C:\Users\admin\Desktop\creature.py
  507. [2014-05-27 20:32:55 | 000,044,867 | ---- | C] () -- C:\Users\admin\Desktop\CV_NSN.pdf
  508. [2014-05-27 19:40:32 | 000,084,132 | ---- | C] () -- C:\Users\admin\Desktop\pobrane.png
  509. [2014-05-27 19:35:04 | 000,117,607 | ---- | C] () -- C:\Users\admin\Desktop\CVTemplate.odt
  510. [2014-05-21 17:31:57 | 000,002,132 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PXG Client.lnk
  511. [2014-05-19 15:54:41 | 000,000,195 | -H-- | C] () -- C:\Users\admin\Documents\Rysunek1.dwl2
  512. [2014-05-19 15:54:41 | 000,000,045 | -H-- | C] () -- C:\Users\admin\Documents\Rysunek1.dwl
  513. [2014-05-18 22:53:14 | 000,000,945 | ---- | C] () -- C:\Users\admin\Desktop\Sublime Text.lnk
  514. [2014-05-18 22:52:55 | 000,000,554 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 2.lnk
  515. [2014-05-18 19:09:11 | 000,000,564 | ---- | C] () -- C:\Users\admin\Desktop\PyScripter.lnk
  516. [2014-02-08 22:27:34 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
  517. [2014-02-08 22:27:33 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  518. [2014-02-08 22:27:33 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  519. [2014-02-08 22:27:24 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  520. [2013-09-26 14:41:51 | 000,000,023 | ---- | C] () -- C:\Users\admin\jagexappletviewer.preferences
  521. [2013-09-26 14:37:45 | 000,000,044 | ---- | C] () -- C:\Users\admin\jagex_cl_runescape_LIVE.dat
  522. [2013-09-26 14:37:45 | 000,000,024 | ---- | C] () -- C:\Users\admin\random.dat
  523. [2013-08-29 01:01:36 | 000,000,148 | ---- | C] () -- C:\Users\admin\SciTE.recent
  524. [2013-08-29 01:01:36 | 000,000,021 | ---- | C] () -- C:\Users\admin\SciTE.session
  525. [2013-02-18 19:01:36 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  526. [2013-02-18 17:59:39 | 001,651,032 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  527. [2013-02-18 17:59:10 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  528. [2012-12-19 21:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  529. [2012-12-19 21:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  530.  
  531. [color=#E56717]========== ZeroAccess Check ==========[/color]
  532.  
  533. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  534.  
  535. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  536.  
  537. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  538.  
  539. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  540.  
  541. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  542.  
  543. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  544. "" = C:\Windows\SysNative\shell32.dll -- [2014-03-25 04:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation)
  545. "ThreadingModel" = Apartment
  546.  
  547. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  548. "" = %SystemRoot%\system32\shell32.dll -- [2014-03-25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation)
  549. "ThreadingModel" = Apartment
  550.  
  551. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  552. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  553. "ThreadingModel" = Free
  554.  
  555. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  556. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  557. "ThreadingModel" = Free
  558.  
  559. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  560. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  561. "ThreadingModel" = Both
  562.  
  563. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  564.  
  565. [color=#E56717]========== LOP Check ==========[/color]
  566.  
  567. [2013-09-29 22:23:51 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\AnvSoft
  568. [2013-09-29 19:28:59 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Autodesk
  569. [2014-01-31 21:41:37 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Battle.net
  570. [2014-03-08 15:52:55 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BESTplayer
  571. [2013-09-20 01:59:10 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BoL
  572. [2014-05-14 23:51:30 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\cabal
  573. [2014-05-03 03:26:26 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
  574. [2013-03-27 13:13:40 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DBKO
  575. [2013-08-22 14:04:33 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DBzF1
  576. [2014-03-10 13:43:31 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Dev-Cpp
  577. [2013-02-19 17:02:17 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ESET
  578. [2014-05-14 23:50:04 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ghc
  579. [2013-03-26 21:46:14 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ipla
  580. [2014-05-08 02:36:48 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\JetBrains
  581. [2013-02-18 18:01:38 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\LibreOffice
  582. [2013-09-04 12:38:01 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\livestreamer
  583. [2013-02-22 22:43:03 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\LolClient
  584. [2013-08-28 16:50:31 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\LRDon
  585. [2013-04-13 23:30:20 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Mathsoft
  586. [2013-09-29 22:08:50 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\mkvtoolnix
  587. [2014-02-08 22:30:32 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\MPC-HC
  588. [2013-08-27 17:24:17 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\MSDrvCfg
  589. [2014-06-04 18:57:09 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Mumble
  590. [2013-02-19 17:38:48 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\NapiProjekt
  591. [2014-04-23 13:33:26 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\NCSOFT
  592. [2014-04-03 15:46:24 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\NetBeans
  593. [2014-02-27 18:10:41 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Notepad++
  594. [2014-03-19 00:47:32 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\NuGet
  595. [2014-05-21 17:25:15 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\pxgclient
  596. [2014-05-19 02:44:28 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\PyScripter
  597. [2013-03-10 16:59:22 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\RIFT
  598. [2014-05-18 22:56:46 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Sublime Text 2
  599. [2014-02-26 18:15:52 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\SWI-Prolog
  600. [2013-08-23 16:46:23 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Tibia
  601. [2014-02-06 23:10:38 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TS3Client
  602. [2014-06-13 12:45:09 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\uTorrent
  603. [2013-09-29 20:50:23 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\WinAVI
  604. [2014-04-06 21:01:01 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\xpce
  605.  
  606. [color=#E56717]========== Purity Check ==========[/color]
  607.  
  608.  
  609.  
  610. [color=#E56717]========== Alternate Data Streams ==========[/color]
  611.  
  612. @Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:A1EDB939
  613.  
  614. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!