API tools faq
paste
Advertisement
Guest User

otl

a guest
Jun 26th, 2013
415
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.90 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 6/26/2013 9:43:58 PM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Daniel\Downloads
  3. 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.0.8112.16421)
  5. Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3.86 Gb Total Physical Memory | 1.29 Gb Available Physical Memory | 33.40% Memory free
  8. 7.73 Gb Paging File | 4.44 Gb Available in Paging File | 57.47% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 79.05 Gb Total Space | 19.77 Gb Free Space | 25.01% Space Free | Partition Type: NTFS
  13. Drive D: | 366.45 Gb Total Space | 172.56 Gb Free Space | 47.09% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: DANIEL-KOMPUTER | User Name: Daniel | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2013/06/26 21:43:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Downloads\OTL.exe
  22. PRC - [2013/06/15 03:28:44 | 000,825,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  23. PRC - [2013/05/10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  24. PRC - [2013/05/09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  25. PRC - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  26. PRC - [2013/04/19 01:14:03 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
  27. PRC - [2013/04/19 01:13:50 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  28. PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- D:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe
  29. PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- D:\Programy\Malwarebytes' Anti-Malware\mbamgui.exe
  30. PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- D:\Programy\Malwarebytes' Anti-Malware\mbamscheduler.exe
  31. PRC - [2013/02/19 09:41:44 | 012,805,888 | ---- | M] (www.BitComet.com) -- D:\Programy\BitComet\BitComet.exe
  32. PRC - [2010/01/19 04:34:48 | 002,201,192 | ---- | M] (SEC) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
  33. PRC - [2009/12/14 09:17:48 | 000,091,136 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
  34. PRC - [2009/11/20 09:35:40 | 000,079,360 | ---- | M] (DoctorSoft) -- C:\Program Files (x86)\AnyPC Client\APLanMgrC.exe
  35. PRC - [2009/11/04 06:11:48 | 000,835,072 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
  36. PRC - [2009/10/13 12:03:04 | 000,716,800 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
  37. PRC - [2009/03/05 11:54:50 | 000,311,296 | ---- | M] () -- C:\Windows\SysWOW64\Rezip.exe
  38. PRC - [2007/03/06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe
  39.  
  40.  
  41. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  42.  
  43. MOD - [2013/06/15 03:28:42 | 000,393,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll
  44. MOD - [2013/06/15 03:28:41 | 013,140,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll
  45. MOD - [2013/06/15 03:28:40 | 004,051,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll
  46. MOD - [2013/06/15 03:27:51 | 000,599,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\libglesv2.dll
  47. MOD - [2013/06/15 03:27:50 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\libegl.dll
  48. MOD - [2013/06/15 03:27:48 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll
  49. MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
  50. MOD - [2006/08/12 05:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Display Manager\HookDllPS2.dll
  51.  
  52.  
  53. [color=#E56717]========== Services (SafeList) ==========[/color]
  54.  
  55. SRV:[b]64bit:[/b] - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  56. SRV:[b]64bit:[/b] - [2009/10/02 18:39:44 | 000,873,248 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
  57. SRV:[b]64bit:[/b] - [2009/09/29 17:25:48 | 000,126,392 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
  58. SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  59. SRV - [2013/06/14 10:28:30 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  60. SRV - [2013/06/07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  61. SRV - [2013/05/10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  62. SRV - [2013/04/19 01:14:03 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
  63. SRV - [2013/04/19 01:13:50 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  64. SRV - [2013/04/10 08:56:49 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  65. SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  66. SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Programy\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  67. SRV - [2013/02/28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  68. SRV - [2012/07/09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  69. SRV - [2010/12/28 10:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- D:\Programy\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
  70. SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  71. SRV - [2009/03/05 11:54:50 | 000,311,296 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\Rezip.exe -- (Rezip)
  72. SRV - [2007/03/06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)
  73.  
  74.  
  75. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  76.  
  77. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  78. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\SysNative\drivers\aswSP.sys -- (aswSP)
  79. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  80. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  81. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  82. DRV:[b]64bit:[/b] - [2013/05/09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  83. DRV:[b]64bit:[/b] - [2013/05/09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  84. DRV:[b]64bit:[/b] - [2013/05/09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  85. DRV:[b]64bit:[/b] - [2013/04/18 23:03:06 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  86. DRV:[b]64bit:[/b] - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  87. DRV:[b]64bit:[/b] - [2013/02/18 09:22:16 | 000,189,288 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  88. DRV:[b]64bit:[/b] - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  89. DRV:[b]64bit:[/b] - [2012/09/10 10:41:06 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
  90. DRV:[b]64bit:[/b] - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  91. DRV:[b]64bit:[/b] - [2012/03/01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  92. DRV:[b]64bit:[/b] - [2011/12/13 03:32:22 | 002,797,056 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  93. DRV:[b]64bit:[/b] - [2011/03/11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  94. DRV:[b]64bit:[/b] - [2011/03/11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  95. DRV:[b]64bit:[/b] - [2010/09/23 00:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
  96. DRV:[b]64bit:[/b] - [2010/08/01 23:01:04 | 000,030,720 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\remobo64.sys -- (hipeer20)
  97. DRV:[b]64bit:[/b] - [2009/11/25 23:32:58 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  98. DRV:[b]64bit:[/b] - [2009/11/20 08:09:48 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  99. DRV:[b]64bit:[/b] - [2009/10/10 05:16:28 | 000,293,936 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  100. DRV:[b]64bit:[/b] - [2009/10/02 18:47:38 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
  101. DRV:[b]64bit:[/b] - [2009/09/29 17:25:50 | 000,012,728 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
  102. DRV:[b]64bit:[/b] - [2009/09/28 11:22:00 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
  103. DRV:[b]64bit:[/b] - [2009/08/29 05:15:32 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
  104. DRV:[b]64bit:[/b] - [2009/08/29 05:15:26 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
  105. DRV:[b]64bit:[/b] - [2009/08/21 01:52:10 | 000,079,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  106. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  107. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  108. DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  109. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  110. DRV:[b]64bit:[/b] - [2009/07/14 02:01:09 | 000,679,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xnacc.sys -- (xnacc)
  111. DRV:[b]64bit:[/b] - [2009/07/01 22:46:58 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt)
  112. DRV:[b]64bit:[/b] - [2009/06/10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  113. DRV:[b]64bit:[/b] - [2009/06/10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  114. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  115. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  116. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  117. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  118. DRV:[b]64bit:[/b] - [2009/05/28 08:38:04 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI)
  119. DRV:[b]64bit:[/b] - [2009/04/08 01:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
  120. DRV:[b]64bit:[/b] - [2008/06/27 07:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\windows\SysNative\drivers\adfs.sys -- (adfs)
  121. DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  122.  
  123.  
  124. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  125.  
  126.  
  127. [color=#E56717]========== Internet Explorer ==========[/color]
  128.  
  129. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
  130. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  131. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  132. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  133. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?ptr=100&crg=3.1010006.10029&barid={222AE33C-CBE0-11E2-88B1-B482FE3A16DE}
  134. IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
  135. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  136. IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
  137. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  138. IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={222AE33C-CBE0-11E2-88B1-B482FE3A16DE}
  139.  
  140. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
  141. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?ptr=100&crg=3.1010006.10029&barid={222AE33C-CBE0-11E2-88B1-B482FE3A16DE}
  142. IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
  143. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  144. IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={222AE33C-CBE0-11E2-88B1-B482FE3A16DE}
  145. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  146. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  147.  
  148. [color=#E56717]========== FireFox ==========[/color]
  149.  
  150. FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.15
  151. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
  152. FF - user.js - File not found
  153.  
  154. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
  155. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  156. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  157. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  158. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll File not found
  159. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
  160. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
  161. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  162. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programy\iTunes\Mozilla Plugins\npitunes.dll ()
  163. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  164. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  165. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  166. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
  167. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  168. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  169. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  170. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  171. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  172. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  173. FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\Daniel\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
  174.  
  175. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013/06/08 14:10:12 | 000,000,000 | ---D | M]
  176. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: D:\Programy\Mozilla Firefox\components
  177. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: D:\Programy\Mozilla Firefox\plugins
  178. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: D:\Programy\Mozilla Firefox\components
  179. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: D:\Programy\Mozilla Firefox\plugins
  180.  
  181. [2013/04/18 22:58:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Extensions
  182. [2013/06/01 19:48:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\uvx9wwa2.default\extensions
  183. [2013/06/01 19:48:45 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\uvx9wwa2.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
  184. [2013/05/11 01:21:02 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\uvx9wwa2.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  185. [2013/06/03 08:10:23 | 000,004,120 | ---- | M] () -- C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\uvx9wwa2.default\searchplugins\SweetIM Search.xml
  186.  
  187. [color=#E56717]========== Chrome ==========[/color]
  188.  
  189. CHR - default_search_provider: Google (Enabled)
  190. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
  191. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
  192. CHR - homepage: http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
  193. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll
  194. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  195. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll
  196. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll
  197. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
  198. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
  199. CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll
  200. CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
  201. CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  202. CHR - Extension: Dokumenty Google = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  203. CHR - Extension: Dysk Google = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  204. CHR - Extension: YouTube = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  205. CHR - Extension: Szukaj w Google = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  206. CHR - Extension: DealPly Shopping = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmfnfnpmhcllokmkepffndflpnadjmma\3.5.3.0_0\
  207. CHR - Extension: AdBlock = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.2_0\
  208. CHR - Extension: Gmail = C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  209.  
  210. O1 HOSTS File: ([2013/06/12 21:52:45 | 000,001,794 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  211. O1 - Hosts: 127.0.0.1 activate.adobe.com
  212. O1 - Hosts: 127.0.0.1 practivate.adobe.com
  213. O1 - Hosts: 127.0.0.1 ereg.adobe.com
  214. O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
  215. O1 - Hosts: 127.0.0.1 wip3.adobe.com
  216. O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
  217. O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
  218. O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
  219. O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
  220. O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
  221. O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
  222. O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
  223. O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
  224. O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
  225. O1 - Hosts: 127.0.0.1 adobe.activate.com
  226. O1 - Hosts: 127.0.0.1 adobeereg.com
  227. O1 - Hosts: 127.0.0.1 www.adobeereg.com
  228. O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
  229. O1 - Hosts: 127.0.0.1 125.252.224.90
  230. O1 - Hosts: 127.0.0.1 125.252.224.91
  231. O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
  232. O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  233. O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Programy\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
  234. O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
  235. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  236. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  237. O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
  238. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  239. O2 - BHO: (DealPly) - {EF7BD87A-8024-11E2-F316-F3E56188709B} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly)
  240. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  241. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  242. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  243. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  244. O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation)
  245. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  246. O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
  247. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  248. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  249. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  250. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  251. O8:[b]64bit:[/b] - Extra context menu item: &P&obierz &za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
  252. O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystko za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
  253. O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
  254. O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  255. O8 - Extra context menu item: &P&obierz &za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
  256. O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - D:\Programy\BitComet\BitComet.exe (www.BitComet.com)
  257. O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
  258. O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  259. O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  260. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  261. O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  262. O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
  263. O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - D:\Programy\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
  264. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  265. O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  266. O13[b]64bit:[/b] - gopher Prefix: missing
  267. O13 - gopher Prefix: missing
  268. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  269. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EABE426E-350D-4439-A0C7-12994866A417}: DhcpNameServer = 192.168.0.1
  270. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  271. O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
  272. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  273. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  274. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  275. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  276. O18 - Protocol\Handler\ms-help - No CLSID value found
  277. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  278. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
  279. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  280. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
  281. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
  282. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  283. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  284. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
  285. O32 - HKLM CDRom: AutoRun - 1
  286. O33 - MountPoints2\{d1e2bf3e-a864-11e2-8811-b482fe3a16de}\Shell - "" = AutoRun
  287. O33 - MountPoints2\{d1e2bf3e-a864-11e2-8811-b482fe3a16de}\Shell\AutoRun\command - "" = F:\SETUP.EXE
  288. O34 - HKLM BootExecute: (autocheck autochk *)
  289. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  290. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  291. O35 - HKLM\..comfile [open] -- "%1" %*
  292. O35 - HKLM\..exefile [open] -- "%1" %*
  293. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  294. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  295. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  296. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  297. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  298. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  299. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  300.  
  301. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  302.  
  303. [2013/06/26 21:22:04 | 000,000,000 | ---D | C] -- C:\windows\SysNative\SPReview
  304. [2013/06/26 21:09:37 | 000,000,000 | ---D | C] -- C:\windows\SoftwareDistribution
  305. [2013/06/26 13:20:08 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\TS3Client
  306. [2013/06/25 21:03:24 | 000,000,000 | ---D | C] -- C:\windows\SDTemp
  307. [2013/06/25 20:59:03 | 000,000,000 | ---D | C] -- C:\windows\SysNative\catroot2
  308. [2013/06/23 14:43:59 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Malwarebytes
  309. [2013/06/23 14:43:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  310. [2013/06/23 14:43:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  311. [2013/06/23 14:43:45 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys
  312. [2013/06/21 12:45:47 | 000,263,592 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaws.exe
  313. [2013/06/21 12:45:42 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaw.exe
  314. [2013/06/21 12:45:42 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\java.exe
  315. [2013/06/21 12:45:42 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\WindowsAccessBridge-32.dll
  316. [2013/06/18 11:54:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lame For Audacity
  317. [2013/06/18 11:50:23 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Audacity
  318. [2013/06/14 16:52:20 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\Adobe
  319. [2013/06/14 14:44:47 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\Ashampoo Burning Studio 12
  320. [2013/06/14 10:21:48 | 000,692,104 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
  321. [2013/06/14 10:21:48 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
  322. [2013/06/14 03:42:36 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\Adobe
  323. [2013/06/12 23:38:06 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
  324. [2013/06/12 23:31:58 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
  325. [2013/06/12 23:30:21 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\Adobe Scripts
  326. [2013/06/12 20:16:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Impka
  327. [2013/06/11 16:35:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  328. [2013/06/11 16:34:14 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
  329. [2013/06/11 16:34:13 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
  330. [2013/06/11 16:34:13 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
  331. [2013/06/10 18:31:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Impka
  332. [2013/06/10 18:30:59 | 009,760,724 | -H-- | C] (indevIT ) -- C:\Users\Daniel\AppData\Roaming\impka2.exe
  333. [2013/06/07 20:58:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Installer Clean Up
  334. [2013/06/07 20:56:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECACHE
  335. [2013/06/05 22:07:20 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\TeamViewer
  336. [2013/06/05 01:21:20 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Application Data
  337. [2013/06/03 01:57:15 | 000,829,264 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msvcr100.dll
  338. [2013/06/03 01:57:15 | 000,608,080 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msvcp100.dll
  339. [2013/06/03 00:26:33 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\Microsoft_Corporation
  340. [2013/06/03 00:23:41 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server
  341. [2013/06/01 23:54:50 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\IsolatedStorage
  342. [2013/06/01 23:54:34 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\SolidDocuments
  343. [2013/06/01 23:54:23 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\SolidDocuments
  344. [2013/06/01 23:53:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SolidDocuments
  345. [2013/05/31 11:45:32 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Ashampoo
  346. [2013/05/30 15:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
  347. [2013/05/30 15:38:43 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\My Games
  348. [2013/05/30 15:38:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
  349. [2013/05/29 21:53:50 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\ElevatedDiagnostics
  350. [2013/05/28 23:17:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 13
  351. [2013/05/28 12:46:37 | 000,000,000 | ---D | C] -- C:\eb19fd4d015b37632ae1324a
  352.  
  353. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  354.  
  355. [2013/06/26 21:32:22 | 000,001,044 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
  356. [2013/06/26 21:32:11 | 000,001,048 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
  357. [2013/06/26 21:29:18 | 000,176,058 | ---- | M] () -- C:\Users\Daniel\Desktop\2.png
  358. [2013/06/26 21:29:09 | 000,134,848 | ---- | M] () -- C:\Users\Daniel\Desktop\1.png
  359. [2013/06/26 21:28:29 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
  360. [2013/06/26 21:14:50 | 000,014,144 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  361. [2013/06/26 21:14:50 | 000,014,144 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  362. [2013/06/26 21:05:24 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
  363. [2013/06/26 19:54:55 | 001,279,930 | ---- | M] () -- C:\Users\Daniel\Desktop\architekruty.jpg
  364. [2013/06/26 19:15:02 | 000,000,932 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2195184045-3265951034-2981680463-1000UA.job
  365. [2013/06/26 18:43:53 | 000,207,193 | ---- | M] () -- C:\Users\Daniel\Desktop\screen1.png
  366. [2013/06/26 16:13:32 | 4148,740,096 | -HS- | M] () -- C:\hiberfil.sys
  367. [2013/06/25 22:15:00 | 000,000,910 | ---- | M] () -- C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-2195184045-3265951034-2981680463-1000Core.job
  368. [2013/06/25 20:31:47 | 001,666,088 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
  369. [2013/06/25 20:31:47 | 000,739,220 | ---- | M] () -- C:\windows\SysNative\perfh015.dat
  370. [2013/06/25 20:31:47 | 000,653,200 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
  371. [2013/06/25 20:31:47 | 000,155,298 | ---- | M] () -- C:\windows\SysNative\perfc015.dat
  372. [2013/06/25 20:31:47 | 000,121,602 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
  373. [2013/06/25 20:06:12 | 001,226,118 | ---- | M] () -- C:\Users\Daniel\Desktop\IO_zagadnienia_opr .pdf
  374. [2013/06/23 14:43:51 | 000,000,743 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  375. [2013/06/19 17:16:11 | 000,020,215 | ---- | M] () -- C:\Users\Daniel\oo
  376. [2013/06/19 17:15:43 | 000,046,883 | ---- | M] () -- C:\Users\Daniel\gra
  377. [2013/06/15 13:09:58 | 005,080,968 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
  378. [2013/06/14 10:28:30 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
  379. [2013/06/14 10:28:30 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
  380. [2013/06/14 02:19:10 | 000,001,496 | ---- | M] () -- C:\Users\Daniel\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
  381. [2013/06/12 21:52:45 | 000,001,794 | ---- | M] () -- C:\windows\SysNative\drivers\etc\hosts
  382. [2013/06/12 21:48:23 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\npDeployJava1.dll
  383. [2013/06/12 21:48:17 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\deployJava1.dll
  384. [2013/06/12 21:47:57 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\WindowsAccessBridge-32.dll
  385. [2013/06/12 21:43:48 | 000,263,592 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\javaws.exe
  386. [2013/06/12 21:43:44 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\javaw.exe
  387. [2013/06/12 21:43:25 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\windows\SysWow64\java.exe
  388. [2013/06/11 16:35:10 | 000,001,547 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
  389. [2013/06/10 22:12:44 | 000,020,236 | ---- | M] () -- C:\Users\Daniel\dg
  390. [2013/06/10 18:31:00 | 009,760,724 | -H-- | M] (indevIT ) -- C:\Users\Daniel\AppData\Roaming\impka2.exe
  391. [2013/06/08 14:10:14 | 000,000,000 | ---- | M] () -- C:\windows\SysWow64\config.nt
  392. [2013/06/07 21:24:18 | 001,638,694 | ---- | M] () -- C:\windows\SysWow64\PerfStringBackup.INI
  393. [2013/05/30 21:05:23 | 000,001,413 | ---- | M] () -- C:\Users\Daniel\Desktop\grid2 — skrót.lnk
  394. [2013/05/28 23:17:57 | 000,000,714 | ---- | M] () -- C:\Users\Public\Desktop\FIFA 13.lnk
  395.  
  396. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  397.  
  398. [2013/06/26 21:29:18 | 000,176,058 | ---- | C] () -- C:\Users\Daniel\Desktop\2.png
  399. [2013/06/26 21:29:08 | 000,134,848 | ---- | C] () -- C:\Users\Daniel\Desktop\1.png
  400. [2013/06/26 18:43:53 | 000,207,193 | ---- | C] () -- C:\Users\Daniel\Desktop\screen1.png
  401. [2013/06/26 16:41:17 | 001,279,930 | ---- | C] () -- C:\Users\Daniel\Desktop\architekruty.jpg
  402. [2013/06/25 20:06:07 | 001,226,118 | ---- | C] () -- C:\Users\Daniel\Desktop\IO_zagadnienia_opr .pdf
  403. [2013/06/23 14:43:51 | 000,000,743 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  404. [2013/06/19 17:15:42 | 000,046,883 | ---- | C] () -- C:\Users\Daniel\gra
  405. [2013/06/14 10:21:50 | 000,000,930 | ---- | C] () -- C:\windows\tasks\Adobe Flash Player Updater.job
  406. [2013/06/14 01:54:35 | 000,001,496 | ---- | C] () -- C:\Users\Daniel\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
  407. [2013/06/12 22:18:35 | 000,000,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
  408. [2013/06/11 16:35:10 | 000,001,547 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
  409. [2013/06/10 18:35:51 | 000,020,215 | ---- | C] () -- C:\Users\Daniel\oo
  410. [2013/06/10 18:34:49 | 000,020,236 | ---- | C] () -- C:\Users\Daniel\dg
  411. [2013/06/07 20:58:33 | 000,002,859 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Install Clean Up.lnk
  412. [2013/06/01 23:53:37 | 000,031,016 | ---- | C] () -- C:\windows\SysNative\solidlocalmon.dll
  413. [2013/06/01 23:53:37 | 000,019,240 | ---- | C] () -- C:\windows\SysNative\solidlocalui.dll
  414. [2013/05/30 21:05:23 | 000,001,413 | ---- | C] () -- C:\Users\Daniel\Desktop\grid2 — skrót.lnk
  415. [2013/05/29 23:12:46 | 001,638,694 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
  416. [2013/05/28 23:17:57 | 000,000,714 | ---- | C] () -- C:\Users\Public\Desktop\FIFA 13.lnk
  417. [2013/05/15 12:24:13 | 000,003,584 | ---- | C] () -- C:\Users\Daniel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  418. [2013/04/24 16:31:36 | 000,000,313 | ---- | C] () -- C:\windows\shell45.ini
  419. [2013/04/24 16:31:36 | 000,000,051 | ---- | C] () -- C:\windows\neuronix.ini
  420. [2013/04/24 16:31:36 | 000,000,045 | ---- | C] () -- C:\windows\dk.ini
  421. [2013/04/24 16:31:07 | 000,000,140 | ---- | C] () -- C:\windows\odbc.ini
  422. [2013/04/19 01:13:55 | 000,189,248 | ---- | C] () -- C:\windows\SysWow64\PnkBstrB.exe
  423. [2013/04/19 01:13:50 | 002,434,856 | ---- | C] () -- C:\windows\SysWow64\pbsvc_bc2.exe
  424. [2013/04/19 01:13:50 | 000,075,064 | ---- | C] () -- C:\windows\SysWow64\PnkBstrA.exe
  425.  
  426. [color=#E56717]========== ZeroAccess Check ==========[/color]
  427.  
  428. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
  429.  
  430. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  431.  
  432. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  433.  
  434. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  435.  
  436. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  437.  
  438. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  439. "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
  440. "ThreadingModel" = Apartment
  441.  
  442. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  443. "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
  444. "ThreadingModel" = Apartment
  445.  
  446. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  447. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  448. "ThreadingModel" = Free
  449.  
  450. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  451. "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
  452. "ThreadingModel" = Free
  453.  
  454. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  455. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  456. "ThreadingModel" = Both
  457.  
  458. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  459.  
  460. [color=#E56717]========== Alternate Data Streams ==========[/color]
  461.  
  462. @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:890CC2F3
  463.  
  464. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!