API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 25th, 2014
245
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 60.04 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-05-25 11:19:42 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\User\Downloads
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16863)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,90 Gb Total Physical Memory | 2,11 Gb Available Physical Memory | 54,03% Memory free
  8. 10,79 Gb Paging File | 8,45 Gb Available in Paging File | 78,24% Paging File free
  9. Paging file location(s): c:\pagefile.sys 3531 4000d:\pagef [Binary data over 200 bytes]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 99,75 Gb Total Space | 51,51 Gb Free Space | 51,63% Space Free | Partition Type: NTFS
  13. Drive D: | 365,66 Gb Total Space | 272,92 Gb Free Space | 74,64% Space Free | Partition Type: NTFS
  14. Drive I: | 126,37 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  15.  
  16. Computer Name: STANDARD-PC | User Name: User | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2014-05-25 11:18:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\User\Downloads\OTL.exe
  23. PRC - [2014-05-14 14:27:34 | 000,183,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
  24. PRC - [2014-05-14 14:27:34 | 000,123,984 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
  25. PRC - [2014-05-13 20:18:32 | 001,863,856 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
  26. PRC - [2014-05-10 13:05:34 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  27. PRC - [2014-05-09 11:16:58 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
  28. PRC - [2014-05-09 11:16:43 | 000,737,872 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
  29. PRC - [2014-05-09 11:16:43 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
  30. PRC - [2014-05-07 12:40:45 | 000,263,048 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
  31. PRC - [2013-11-01 18:03:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  32. PRC - [2013-09-18 13:51:02 | 000,106,472 | ---- | M] (Razer Inc.) -- D:\Razer Game Booster\RzKLService.exe
  33. PRC - [2013-09-12 10:31:23 | 005,071,712 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
  34. PRC - [2013-03-26 00:46:08 | 000,101,888 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
  35. PRC - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe
  36.  
  37.  
  38. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  39.  
  40. MOD - [2014-05-14 14:27:32 | 000,137,296 | ---- | M] () -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
  41. MOD - [2014-05-14 14:27:28 | 000,049,744 | ---- | M] () -- C:\Users\User\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
  42. MOD - [2014-05-13 20:18:31 | 016,361,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll
  43. MOD - [2014-05-10 13:05:25 | 003,839,088 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  44. MOD - [2014-02-14 13:27:30 | 007,660,032 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\d7aaae3b1c95a1a658446d302b9a7f88\System.Xml.ni.dll
  45. MOD - [2014-02-14 13:27:26 | 001,900,544 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\0e9817b12da250f8d4c680e1cb26e1c0\System.Xaml.ni.dll
  46. MOD - [2014-02-14 13:27:25 | 012,877,824 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\11b4af16e791a6b0ada4a97d3e64e27a\System.Windows.Forms.ni.dll
  47. MOD - [2014-02-14 13:27:19 | 000,222,208 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\0227d737c879308fad54b7d71b172d37\System.ServiceProcess.ni.dll
  48. MOD - [2014-02-14 13:27:18 | 019,713,024 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\35742fb7e85a09be10d83cae494cd828\System.ServiceModel.ni.dll
  49. MOD - [2014-02-14 13:27:08 | 002,822,656 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\deba9405e920eefee41a8efe93e93cc6\System.Runtime.Serialization.ni.dll
  50. MOD - [2014-02-14 13:27:05 | 001,644,544 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\61be23d6a688188e3419a1eb46fc9d9d\System.Drawing.ni.dll
  51. MOD - [2014-02-14 13:27:04 | 007,329,792 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Data\4ea3bf622034c9d59b7246492ae5506b\System.Data.ni.dll
  52. MOD - [2014-02-14 13:27:01 | 000,975,872 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\ffb7bbc6548ff34bc125a8fec79315dc\System.Configuration.ni.dll
  53. MOD - [2014-02-14 13:27:00 | 000,475,648 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\d3abe72a65b16c5ca129dd4509450190\PresentationFramework.Aero2.ni.dll
  54. MOD - [2014-02-14 13:26:59 | 018,785,280 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\952cc4d9a277dc4b0abc0de4a64b11a6\PresentationFramework.ni.dll
  55. MOD - [2014-02-14 13:26:51 | 011,021,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\d860b38580f4403397d67fa84d624447\PresentationCore.ni.dll
  56. MOD - [2014-02-14 13:26:46 | 003,941,888 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\e2fb4aca9e25e4eaac703466d36b17ed\WindowsBase.ni.dll
  57. MOD - [2014-02-14 13:26:43 | 007,041,536 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\bca236f576ea12db3a9191f4586a445a\System.Core.ni.dll
  58. MOD - [2014-02-14 13:26:39 | 010,051,072 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\f0602360211041a6be208f0b4138dddd\System.ni.dll
  59. MOD - [2014-02-14 13:26:34 | 016,953,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\391541c89ed7585fc7e8936c43cee387\mscorlib.ni.dll
  60.  
  61.  
  62. [color=#E56717]========== Services (SafeList) ==========[/color]
  63.  
  64. SRV:[b]64bit:[/b] - [2014-04-12 11:08:17 | 000,439,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  65. SRV:[b]64bit:[/b] - [2014-03-29 10:05:59 | 000,016,056 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  66. SRV:[b]64bit:[/b] - [2013-08-16 07:39:26 | 002,371,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  67. SRV:[b]64bit:[/b] - [2013-06-25 00:54:45 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  68. SRV:[b]64bit:[/b] - [2013-06-01 11:19:58 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  69. SRV:[b]64bit:[/b] - [2013-05-04 08:58:02 | 000,470,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  70. SRV:[b]64bit:[/b] - [2013-05-04 08:57:05 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  71. SRV:[b]64bit:[/b] - [2013-04-09 06:48:42 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  72. SRV:[b]64bit:[/b] - [2013-03-02 04:45:07 | 000,171,008 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  73. SRV:[b]64bit:[/b] - [2013-03-02 04:45:05 | 000,180,224 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  74. SRV:[b]64bit:[/b] - [2013-01-10 01:23:16 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  75. SRV:[b]64bit:[/b] - [2012-11-06 06:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  76. SRV:[b]64bit:[/b] - [2012-09-20 08:31:18 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  77. SRV:[b]64bit:[/b] - [2012-07-26 05:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  78. SRV:[b]64bit:[/b] - [2012-07-26 05:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  79. SRV:[b]64bit:[/b] - [2012-07-26 05:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  80. SRV:[b]64bit:[/b] - [2012-07-26 05:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  81. SRV:[b]64bit:[/b] - [2012-07-26 05:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  82. SRV:[b]64bit:[/b] - [2012-07-26 05:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  83. SRV:[b]64bit:[/b] - [2012-07-26 05:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  84. SRV:[b]64bit:[/b] - [2012-07-26 05:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  85. SRV:[b]64bit:[/b] - [2012-07-26 05:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  86. SRV:[b]64bit:[/b] - [2012-07-26 05:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent)
  87. SRV:[b]64bit:[/b] - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  88. SRV:[b]64bit:[/b] - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  89. SRV:[b]64bit:[/b] - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  90. SRV:[b]64bit:[/b] - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  91. SRV:[b]64bit:[/b] - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  92. SRV:[b]64bit:[/b] - [2012-07-26 02:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  93. SRV - [2014-05-14 14:27:34 | 000,123,984 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe -- (Avira.OE.ServiceHost)
  94. SRV - [2014-05-13 20:18:32 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  95. SRV - [2014-05-10 13:05:34 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  96. SRV - [2014-05-09 11:16:58 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
  97. SRV - [2014-05-09 11:16:44 | 001,039,952 | ---- | M] (Avira Operations GmbH & Co. KG) [Disabled | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe -- (AntiVirWebService)
  98. SRV - [2014-05-09 11:16:43 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
  99. SRV - [2014-04-24 00:01:04 | 000,572,096 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  100. SRV - [2013-11-01 18:03:00 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  101. SRV - [2013-10-23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  102. SRV - [2013-09-18 13:51:02 | 000,106,472 | ---- | M] (Razer Inc.) [Auto | Running] -- D:\Razer Game Booster\RzKLService.exe -- (RzKLService)
  103. SRV - [2013-09-12 10:31:23 | 005,071,712 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
  104. SRV - [2013-03-26 00:46:08 | 000,101,888 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
  105. SRV - [2012-11-06 06:36:55 | 002,675,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify)
  106. SRV - [2012-10-10 03:22:26 | 000,277,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  107. SRV - [2012-07-26 05:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
  108. SRV - [2011-08-30 16:55:54 | 000,160,256 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
  109. SRV - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)
  110.  
  111.  
  112. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  113.  
  114. DRV:[b]64bit:[/b] - [2014-05-09 11:16:43 | 000,130,584 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avipbb.sys -- (avipbb)
  115. DRV:[b]64bit:[/b] - [2014-05-09 11:16:43 | 000,112,080 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\avgntflt.sys -- (avgntflt)
  116. DRV:[b]64bit:[/b] - [2014-05-09 11:16:43 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avkmgr.sys -- (avkmgr)
  117. DRV:[b]64bit:[/b] - [2014-03-28 21:19:38 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot)
  118. DRV:[b]64bit:[/b] - [2014-03-24 00:11:52 | 000,269,592 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter)
  119. DRV:[b]64bit:[/b] - [2013-10-10 13:53:35 | 000,096,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS)
  120. DRV:[b]64bit:[/b] - [2013-10-05 08:10:20 | 000,285,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport)
  121. DRV:[b]64bit:[/b] - [2013-10-02 04:50:07 | 000,447,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3)
  122. DRV:[b]64bit:[/b] - [2013-08-16 07:41:13 | 000,058,200 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam)
  123. DRV:[b]64bit:[/b] - [2013-08-10 08:30:22 | 000,151,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM)
  124. DRV:[b]64bit:[/b] - [2013-07-22 04:19:42 | 000,126,872 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\WINDOWS\SysNative\drivers\scdemu.sys -- (SCDEmu)
  125. DRV:[b]64bit:[/b] - [2013-07-09 10:04:07 | 000,120,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101)
  126. DRV:[b]64bit:[/b] - [2013-07-02 03:41:47 | 000,337,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI)
  127. DRV:[b]64bit:[/b] - [2013-07-02 03:41:47 | 000,213,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000)
  128. DRV:[b]64bit:[/b] - [2013-06-29 08:15:54 | 000,195,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus)
  129. DRV:[b]64bit:[/b] - [2013-06-01 05:08:57 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  130. DRV:[b]64bit:[/b] - [2013-05-21 14:14:51 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\dtsoftbus01.sys -- (dtsoftbus01)
  131. DRV:[b]64bit:[/b] - [2013-03-02 12:57:46 | 000,077,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci)
  132. DRV:[b]64bit:[/b] - [2013-03-02 12:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc)
  133. DRV:[b]64bit:[/b] - [2013-01-10 03:53:32 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32)
  134. DRV:[b]64bit:[/b] - [2012-11-27 05:55:44 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid)
  135. DRV:[b]64bit:[/b] - [2012-11-21 18:41:48 | 003,744,256 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\athuw8x.sys -- (athur)
  136. DRV:[b]64bit:[/b] - [2012-11-20 06:54:31 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c)
  137. DRV:[b]64bit:[/b] - [2012-11-06 05:55:44 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM)
  138. DRV:[b]64bit:[/b] - [2012-10-12 10:08:01 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  139. DRV:[b]64bit:[/b] - [2012-10-11 09:25:48 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor)
  140. DRV:[b]64bit:[/b] - [2012-10-10 03:22:28 | 005,343,584 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx)
  141. DRV:[b]64bit:[/b] - [2012-09-20 09:55:27 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv)
  142. DRV:[b]64bit:[/b] - [2012-09-20 09:55:24 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv)
  143. DRV:[b]64bit:[/b] - [2012-07-26 07:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  144. DRV:[b]64bit:[/b] - [2012-07-26 07:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv)
  145. DRV:[b]64bit:[/b] - [2012-07-26 07:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID)
  146. DRV:[b]64bit:[/b] - [2012-07-26 07:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt)
  147. DRV:[b]64bit:[/b] - [2012-07-26 07:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor)
  148. DRV:[b]64bit:[/b] - [2012-07-26 07:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex)
  149. DRV:[b]64bit:[/b] - [2012-07-26 07:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis)
  150. DRV:[b]64bit:[/b] - [2012-07-26 07:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor)
  151. DRV:[b]64bit:[/b] - [2012-07-26 07:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2)
  152. DRV:[b]64bit:[/b] - [2012-07-26 07:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS)
  153. DRV:[b]64bit:[/b] - [2012-07-26 07:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD)
  154. DRV:[b]64bit:[/b] - [2012-07-26 07:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  155. DRV:[b]64bit:[/b] - [2012-07-26 07:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass)
  156. DRV:[b]64bit:[/b] - [2012-07-26 07:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs)
  157. DRV:[b]64bit:[/b] - [2012-07-26 07:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware)
  158. DRV:[b]64bit:[/b] - [2012-07-26 07:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata)
  159. DRV:[b]64bit:[/b] - [2012-07-26 07:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata)
  160. DRV:[b]64bit:[/b] - [2012-07-26 06:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS)
  161. DRV:[b]64bit:[/b] - [2012-07-26 06:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci)
  162. DRV:[b]64bit:[/b] - [2012-07-26 05:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt)
  163. DRV:[b]64bit:[/b] - [2012-07-26 04:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf)
  164. DRV:[b]64bit:[/b] - [2012-07-26 04:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay)
  165. DRV:[b]64bit:[/b] - [2012-07-26 04:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo)
  166. DRV:[b]64bit:[/b] - [2012-07-26 04:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender)
  167. DRV:[b]64bit:[/b] - [2012-07-26 04:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter)
  168. DRV:[b]64bit:[/b] - [2012-07-26 04:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic)
  169. DRV:[b]64bit:[/b] - [2012-07-26 04:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime)
  170. DRV:[b]64bit:[/b] - [2012-07-26 04:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig)
  171. DRV:[b]64bit:[/b] - [2012-07-26 04:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr)
  172. DRV:[b]64bit:[/b] - [2012-07-26 04:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr)
  173. DRV:[b]64bit:[/b] - [2012-07-26 04:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd)
  174. DRV:[b]64bit:[/b] - [2012-07-26 04:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx)
  175. DRV:[b]64bit:[/b] - [2012-07-26 04:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx)
  176. DRV:[b]64bit:[/b] - [2012-07-26 04:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD)
  177. DRV:[b]64bit:[/b] - [2012-07-26 04:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum)
  178. DRV:[b]64bit:[/b] - [2012-07-26 04:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc)
  179. DRV:[b]64bit:[/b] - [2012-07-26 04:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt)
  180. DRV:[b]64bit:[/b] - [2012-07-26 04:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr)
  181. DRV:[b]64bit:[/b] - [2012-07-26 04:25:01 | 000,146,944 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\rmcast.sys -- (RMCAST)
  182. DRV:[b]64bit:[/b] - [2012-07-26 04:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform)
  183. DRV:[b]64bit:[/b] - [2012-07-26 04:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp)
  184. DRV:[b]64bit:[/b] - [2012-07-26 04:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu)
  185. DRV:[b]64bit:[/b] - [2012-06-02 16:31:56 | 000,589,824 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168)
  186. DRV:[b]64bit:[/b] - [2010-10-20 00:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64)
  187. DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hamachi.sys -- (hamachi)
  188. DRV:[b]64bit:[/b] - [2008-07-29 05:47:00 | 001,075,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\athrxusb.sys -- (athrusb)
  189. DRV:[b]64bit:[/b] - [2006-01-19 18:33:26 | 000,493,440 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WlanBZ64.sys -- (SG762_64)
  190. DRV - [2012-11-22 09:05:49 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
  191. DRV - [2012-11-21 22:29:08 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
  192.  
  193.  
  194. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  195.  
  196.  
  197. [color=#E56717]========== Internet Explorer ==========[/color]
  198.  
  199. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  200. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  201. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22find.com/newtab?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000AAKX-75U6AA0_WD-WMC2E298007280072&ts=1362937668
  202. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  203. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.22find.com/newtab?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000AAKX-75U6AA0_WD-WMC2E298007280072&ts=1362937668
  204. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  205. IE - HKLM\..\SearchScopes\{5C1BAD4A-1B3D-4D57-ACEA-FC5455E21140}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  206.  
  207. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  208. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.web-entrance.com/main.cgi?ID=215
  209. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C6 C8 A6 61 40 C1 CD 01 [binary data]
  210. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  211. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  212. IE - HKCU\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
  213. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchab.com/?aff=7&uid=34aa686a-2dc1-11e2-be6b-902b34ba8b66&q={searchTerms}
  214. IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&affID=119816&tt=gc_&babsrc=SP_ss&mntrId=6C71647002221354
  215. IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.freemake.com/search.php?query={searchTerms}&category=web&exp=1
  216. IE - HKCU\..\SearchScopes\{5C1BAD4A-1B3D-4D57-ACEA-FC5455E21140}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  217. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear
  218. IE - HKCU\..\SearchScopes\{D18F54D3-6852-4CE5-B40C-D48D2C0BEDCE}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=24F5276F-B24C-4E91-B797-9F3D0D8DABFE&apn_sauid=5500A7EB-415C-4ADA-BCF9-4E085387160B
  219. IE - HKCU\..\SearchScopes\{EE536877-EA05-4BC7-9592-FE69C5633937}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
  220. IE - HKCU\..\SearchScopes\Freemake: "URL" = http://search.22find.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=WDCXWD5000AAKX-75U6AA0_WD-WMC2E298007280072&ts=1362937669
  221. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  222. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  223.  
  224. [color=#E56717]========== FireFox ==========[/color]
  225.  
  226. FF - prefs.js..browser.search.defaultengine: "Ask.com"
  227. FF - prefs.js..browser.search.useDBForOrder: true
  228. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
  229.  
  230.  
  231. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found
  232. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
  233. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  234. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  235. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
  236. FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.1: C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB)
  237. FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
  238. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  239. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.0.0: C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  240. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.0.0: C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
  241. FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll File not found
  242. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
  243. FF - HKLM\Software\MozillaPlugins\@nullsoft.com/winampDetector;version=1: C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
  244. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  245. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  246. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
  247. FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  248.  
  249. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
  250. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  251. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  252. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  253. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  254.  
  255. [2013-01-02 18:07:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\mozilla\Extensions
  256. [2014-05-24 09:42:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\qb8xuywg.default\extensions
  257. [2014-05-24 09:42:47 | 000,000,000 | ---D | M] (Avira Browser Safety) -- C:\Users\User\AppData\Roaming\mozilla\Firefox\Profiles\qb8xuywg.default\extensions\abs@avira.com
  258. [2014-01-13 14:16:40 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\extensions\IplextoALL@ALLPlayer.org.xpi
  259. [2014-05-06 22:35:42 | 000,957,880 | ---- | M] () (No name found) -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  260. [2013-05-19 21:34:04 | 000,002,308 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\searchplugins\askcom.xml
  261. [2014-05-24 09:42:47 | 000,000,971 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\searchplugins\avira-safesearch.xml
  262. [2013-05-21 14:15:32 | 000,006,505 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\searchplugins\babylon.xml
  263. [2013-05-21 14:15:54 | 000,001,294 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\searchplugins\delta.xml
  264. [2013-04-02 16:41:54 | 000,000,881 | ---- | M] () -- C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qb8xuywg.default\searchplugins\freemake.xml
  265. [2014-05-10 13:05:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  266. [2014-05-10 13:05:35 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  267.  
  268. [color=#E56717]========== Chrome ==========[/color]
  269.  
  270. CHR - default_search_provider: Google (Enabled)
  271. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  272. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  273. CHR - plugin: Error reading preferences file
  274. CHR - Extension: Dokumenty Google = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1\
  275. CHR - Extension: Dysk Google = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
  276. CHR - Extension: Zoomex = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bedncjagcllpejkajnfmajkcpckolbgc\3.2_0\
  277. CHR - Extension: YouTube = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
  278. CHR - Extension: Szukaj w Google = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
  279. CHR - Extension: PrivitizeBar = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hepfenndjoibhgfopdfkohmnbdmpgapk\10.26.9.505_0\
  280. CHR - Extension: PrivitizeBar = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hepfenndjoibhgfopdfkohmnbdmpgapk\10.26.9.505_0\nativeMessaging\nmHost
  281. CHR - Extension: Google Wallet = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
  282. CHR - Extension: Gmail = C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
  283.  
  284. O1 HOSTS File: ([2014-02-02 13:58:13 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
  285. O1 - Hosts: 127.0.0.1 localhost
  286. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  287. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  288. O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll File not found
  289. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
  290. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
  291. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  292. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  293. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  294. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  295. O4 - HKLM..\Run: [] File not found
  296. O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
  297. O4 - HKLM..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG)
  298. O4 - HKLM..\Run: [MSys32] "C:\Program Files (x86)\Tetris 4000\morfitwebentrance.exe" File not found
  299. O4 - HKCU..\Run: [ALLUpdate] "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" File not found
  300. O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts)
  301. O4 - HKCU..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)
  302. O4 - HKCU..\Run: [NextLive] C:\Users\User\AppData\Roaming\newnext.me\nengine.dll (NewNextDotMe)
  303. O4 - HKCU..\Run: [Steam] D:\Steam\steam.exe (Valve Corporation)
  304. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  305. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  306. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  307. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  309. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  310. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  311. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 File not found
  312. O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  313. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\SysWow64\GPhotos.scr (Google Inc.)
  314. O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  315. O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
  316. O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
  317. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
  318. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wlidnsp.dll (Microsoft Corporation)
  319. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Windows\SysNative\wlidnsp.dll (Microsoft Corporation)
  320. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wlidnsp.dll (Microsoft Corporation)
  321. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Windows\SysWOW64\wlidnsp.dll (Microsoft Corporation)
  322. O13 - gopher Prefix: missing
  323. O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab (Microsoft Office Template and Media Control)
  324. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  325. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{02DDB85E-5AF9-4E21-B110-DA2F8C43CC24}: DhcpNameServer = 192.168.1.1
  326. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7A6FB941-6829-4F4F-89F5-63964FDD6916}: DhcpNameServer = 192.168.1.1
  327. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{805663D6-12EA-4999-AE92-DE09AF945C67}: DhcpNameServer = 192.168.1.1
  328. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{806ECE0A-137F-4CB1-8B5C-589719ACE247}: NameServer = 192.168.1.1
  329. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A9C0974E-B796-412C-8FAD-1C4D731E3EDC}: DhcpNameServer = 192.168.1.1
  330. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D6D3B54E-FE06-4BDA-929A-D4AE8EDB7181}: DhcpNameServer = 192.168.1.1
  331. O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
  332. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  333. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  334. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  335. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  336. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  337. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  338. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
  339. O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  340. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\WINDOWS\SysNative\igfxdev.dll (Intel Corporation)
  341. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  342. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  343. O30 - LSA: Security Packages - (livessp) - File not found
  344. O32 - HKLM CDRom: AutoRun - 1
  345. O32 - AutoRun File - [2005-11-14 16:39:27 | 000,755,712 | R--- | M] () - I:\autorun.exe -- [ CDFS ]
  346. O32 - AutoRun File - [2005-11-14 16:25:27 | 000,003,262 | R--- | M] () - I:\autorun.ico -- [ CDFS ]
  347. O32 - AutoRun File - [2001-11-13 16:18:04 | 000,000,047 | R--- | M] () - I:\autorun.inf -- [ CDFS ]
  348. O34 - HKLM BootExecute: (autocheck autochk *)
  349. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  350. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  351. O35 - HKLM\..comfile [open] -- "%1" %*
  352. O35 - HKLM\..exefile [open] -- "%1" %*
  353. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  354. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  355. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  356. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  357. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  358. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  359.  
  360. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  361.  
  362. [2014-05-21 22:11:59 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Avira
  363. [2014-05-21 22:09:05 | 000,130,584 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avipbb.sys
  364. [2014-05-21 22:09:05 | 000,112,080 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avgntflt.sys
  365. [2014-05-21 22:09:05 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avkmgr.sys
  366. [2014-05-21 22:06:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
  367. [2014-05-21 22:06:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
  368. [2014-05-21 22:06:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
  369. [2014-05-21 22:06:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
  370. [2014-05-17 23:29:18 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\dddd
  371. [2014-05-15 15:20:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  372. [2014-05-15 12:21:25 | 000,269,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdFilter.sys
  373. [2014-05-15 12:21:24 | 000,035,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdBoot.sys
  374. [2014-05-15 12:21:03 | 001,281,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
  375. [2014-05-15 12:21:00 | 006,987,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
  376. [2014-05-15 12:20:59 | 000,982,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
  377. [2014-05-15 12:20:58 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\objsel.dll
  378. [2014-05-15 12:20:58 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
  379. [2014-05-15 12:20:58 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll
  380. [2014-05-15 12:20:54 | 000,588,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
  381. [2014-05-15 12:20:54 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\objsel.dll
  382. [2014-05-15 12:20:54 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dpapisrv.dll
  383. [2014-05-15 12:20:51 | 001,043,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
  384. [2014-05-15 12:20:51 | 000,439,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsm.dll
  385. [2014-05-15 12:20:50 | 000,961,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
  386. [2014-05-15 12:20:49 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
  387. [2014-05-15 12:20:49 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dimsroam.dll
  388. [2014-05-15 12:20:49 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspisrv.dll
  389. [2014-05-15 12:20:48 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dimsroam.dll
  390. [2014-05-15 12:20:47 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\workerdd.dll
  391. [2014-05-15 12:20:31 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  392. [2014-05-15 12:20:22 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  393. [2014-05-15 12:19:49 | 001,258,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel32.dll
  394. [2014-05-15 12:19:48 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpedit.dll
  395. [2014-05-15 12:19:47 | 001,075,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpedit.dll
  396. [2014-05-10 13:05:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  397. [2014-05-06 22:32:56 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\Bartek
  398. [2014-05-06 10:30:09 | 000,628,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationUI.exe
  399. [2014-05-06 10:30:08 | 000,693,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll
  400. [2014-05-06 10:30:08 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll
  401. [2014-05-06 10:30:08 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
  402. [2014-05-06 10:30:07 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
  403.  
  404. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  405.  
  406. [2014-05-25 11:18:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
  407. [2014-05-25 10:45:42 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  408. [2014-05-25 10:40:05 | 000,001,064 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  409. [2014-05-25 10:17:05 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
  410. [2014-05-24 22:32:14 | 003,670,016 | -HS- | M] () -- C:\Users\User\ntuser.dat
  411. [2014-05-23 23:37:01 | 000,117,852 | -H-- | M] () -- C:\Users\User\AppData\Local\IconCache.db
  412. [2014-05-22 20:42:03 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  413. [2014-05-21 22:06:37 | 000,001,133 | ---- | M] () -- C:\Users\Public\Desktop\Avira.lnk
  414. [2014-05-18 18:40:26 | 000,965,767 | ---- | M] () -- C:\Users\User\Desktop\giphy.gif
  415. [2014-05-17 23:30:13 | 000,027,648 | -H-- | M] () -- C:\Users\User\Desktop\photothumb.db
  416. [2014-05-17 10:40:19 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
  417. [2014-05-17 10:40:01 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  418. [2014-05-17 10:39:58 | 3348,492,288 | -HS- | M] () -- C:\hiberfil.sys
  419. [2014-05-15 22:42:22 | 000,010,780 | ---- | M] () -- C:\Users\User\Desktop\images.jpg
  420. [2014-05-15 11:50:38 | 000,030,633 | ---- | M] () -- C:\Users\User\Desktop\1959794_566928246736894_1797586767_n.jpg
  421. [2014-05-13 19:14:23 | 000,006,684 | ---- | M] () -- C:\Users\User\Desktop\indeks.jpg
  422. [2014-05-11 20:21:06 | 001,793,398 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
  423. [2014-05-11 20:21:06 | 000,793,704 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat
  424. [2014-05-11 20:21:06 | 000,710,046 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
  425. [2014-05-11 20:21:06 | 000,159,324 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat
  426. [2014-05-11 20:21:06 | 000,132,416 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
  427. [2014-05-09 17:23:17 | 000,813,275 | ---- | M] () -- C:\Users\User\Desktop\2014-04-29 16.48.51.jpg
  428. [2014-05-09 11:16:43 | 000,130,584 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avipbb.sys
  429. [2014-05-09 11:16:43 | 000,112,080 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avgntflt.sys
  430. [2014-05-09 11:16:43 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\WINDOWS\SysNative\drivers\avkmgr.sys
  431. [2014-05-06 07:14:19 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
  432. [2014-05-06 05:48:50 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
  433. [2014-05-01 22:37:50 | 000,694,240 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
  434. [2014-05-01 22:37:50 | 000,078,296 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
  435. [2014-04-25 13:51:09 | 000,071,461 | ---- | M] () -- C:\Users\User\Desktop\czesłąw.jpg
  436.  
  437. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  438.  
  439. [2014-05-21 22:06:37 | 000,001,133 | ---- | C] () -- C:\Users\Public\Desktop\Avira.lnk
  440. [2014-05-15 22:42:22 | 000,010,780 | ---- | C] () -- C:\Users\User\Desktop\images.jpg
  441. [2014-05-15 11:50:37 | 000,030,633 | ---- | C] () -- C:\Users\User\Desktop\1959794_566928246736894_1797586767_n.jpg
  442. [2014-05-13 19:16:32 | 000,965,767 | ---- | C] () -- C:\Users\User\Desktop\giphy.gif
  443. [2014-05-13 19:14:22 | 000,006,684 | ---- | C] () -- C:\Users\User\Desktop\indeks.jpg
  444. [2014-05-09 17:21:55 | 000,813,275 | ---- | C] () -- C:\Users\User\Desktop\2014-04-29 16.48.51.jpg
  445. [2014-04-25 13:51:09 | 000,071,461 | ---- | C] () -- C:\Users\User\Desktop\czesłąw.jpg
  446. [2014-02-18 22:38:58 | 000,002,385 | ---- | C] () -- C:\Users\User\AppData\Local\recently-used.xbel
  447. [2014-02-15 18:12:14 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
  448. [2014-02-02 13:42:32 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
  449. [2014-02-02 13:42:32 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
  450. [2014-02-02 13:42:32 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
  451. [2014-02-02 13:42:32 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
  452. [2014-02-02 13:42:32 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
  453. [2014-01-21 19:56:04 | 000,130,384 | ---- | C] () -- C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
  454. [2013-12-28 16:08:24 | 000,000,041 | ---- | C] () -- C:\Users\User\.gtk-bookmarks
  455. [2013-11-01 15:45:34 | 000,290,184 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe
  456. [2013-11-01 15:45:33 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe
  457. [2013-10-24 22:16:32 | 000,003,584 | ---- | C] () -- C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  458. [2013-10-24 21:22:31 | 000,641,024 | ---- | C] () -- C:\WINDOWS\SysWow64\ficvdec_x86.dll
  459. [2013-09-11 17:57:23 | 000,083,968 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
  460. [2013-09-10 17:40:56 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
  461. [2013-04-05 18:16:28 | 000,004,521 | ---- | C] () -- C:\Users\User\AppData\Roaming\CamStudio.cfg
  462. [2013-04-05 18:16:28 | 000,000,408 | ---- | C] () -- C:\Users\User\AppData\Roaming\CamShapes.ini
  463. [2013-04-05 18:16:28 | 000,000,408 | ---- | C] () -- C:\Users\User\AppData\Roaming\CamLayout.ini
  464. [2013-04-05 18:16:28 | 000,000,089 | ---- | C] () -- C:\Users\User\AppData\Roaming\Camdata.ini
  465. [2013-02-25 19:10:50 | 000,000,201 | ---- | C] () -- C:\Users\User\AppData\Roaming\xampp.apache
  466. [2013-01-11 19:18:10 | 000,524,288 | -HS- | C] () -- C:\Users\User\ntuser.dat{a0696b3b-5c12-11e2-be97-d19eb0dae79d}.TMContainer00000000000000000002.regtrans-ms
  467. [2013-01-11 19:18:10 | 000,524,288 | -HS- | C] () -- C:\Users\User\ntuser.dat{a0696b3b-5c12-11e2-be97-d19eb0dae79d}.TMContainer00000000000000000001.regtrans-ms
  468. [2013-01-11 19:18:10 | 000,065,536 | -HS- | C] () -- C:\Users\User\ntuser.dat{a0696b3b-5c12-11e2-be97-d19eb0dae79d}.TM.blf
  469. [2012-11-21 22:00:51 | 000,030,528 | ---- | C] () -- C:\WINDOWS\GVTDrv64.sys
  470. [2012-11-19 09:33:32 | 000,065,656 | ---- | C] () -- C:\WINDOWS\SysWow64\bdmpegv.dll
  471. [2012-11-19 09:33:30 | 000,022,640 | ---- | C] () -- C:\WINDOWS\SysWow64\bdmjpeg.dll
  472. [2012-11-13 03:28:20 | 000,117,852 | -H-- | C] () -- C:\Users\User\AppData\Local\IconCache.db
  473. [2012-11-13 02:55:12 | 000,000,020 | -HS- | C] () -- C:\Users\User\ntuser.ini
  474. [2012-11-13 02:47:18 | 003,670,016 | -HS- | C] () -- C:\Users\User\ntuser.dat
  475. [2012-11-13 02:47:18 | 000,524,288 | -HS- | C] () -- C:\Users\User\NTUSER.DAT{6446b4ee-d702-11e1-913f-a4badb27a706}.TMContainer00000000000000000002.regtrans-ms
  476. [2012-11-13 02:47:18 | 000,524,288 | -HS- | C] () -- C:\Users\User\NTUSER.DAT{6446b4ee-d702-11e1-913f-a4badb27a706}.TMContainer00000000000000000001.regtrans-ms
  477. [2012-11-13 02:47:18 | 000,065,536 | -HS- | C] () -- C:\Users\User\NTUSER.DAT{6446b4ee-d702-11e1-913f-a4badb27a706}.TM.blf
  478. [2012-10-10 03:22:34 | 000,064,512 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll
  479. [2012-10-10 03:22:32 | 000,598,780 | ---- | C] () -- C:\WINDOWS\SysWow64\igvpkrng700.bin
  480. [2012-10-10 03:22:16 | 000,755,048 | ---- | C] () -- C:\WINDOWS\SysWow64\igcodeckrng700.bin
  481. [2012-07-26 10:13:10 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
  482. [2012-07-26 10:13:09 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
  483. [2012-07-26 09:21:26 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
  484. [2012-07-26 07:26:52 | 000,000,215 | ---- | C] () -- C:\WINDOWS\system.ini
  485. [2012-07-26 07:26:52 | 000,000,186 | ---- | C] () -- C:\WINDOWS\win.ini
  486. [2012-07-26 03:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
  487. [2012-07-25 22:37:29 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
  488. [2012-07-25 22:28:31 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
  489. [2012-06-02 16:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
  490.  
  491. [color=#E56717]========== ZeroAccess Check ==========[/color]
  492.  
  493. [2013-02-10 14:13:43 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
  494.  
  495. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  496.  
  497. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  498.  
  499. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  500.  
  501. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  502.  
  503. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  504. "" = C:\Windows\SysNative\shell32.dll -- [2014-03-28 10:23:06 | 019,759,104 | ---- | M] (Microsoft Corporation)
  505. "ThreadingModel" = Apartment
  506.  
  507. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  508. "" = %SystemRoot%\system32\shell32.dll -- [2014-03-28 08:18:26 | 017,562,112 | ---- | M] (Microsoft Corporation)
  509. "ThreadingModel" = Apartment
  510.  
  511. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  512. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012-07-26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
  513. "ThreadingModel" = Free
  514.  
  515. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  516. "" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
  517. "ThreadingModel" = Free
  518.  
  519. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  520. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012-07-26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
  521. "ThreadingModel" = Both
  522.  
  523. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  524.  
  525. [color=#E56717]========== Alternate Data Streams ==========[/color]
  526.  
  527. @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:373E1720
  528.  
  529. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!