API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Dec 25th, 2015
55
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.83 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2015-12-25 18:34:30 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Michał\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17959)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 7,90 Gb Total Physical Memory | 5,90 Gb Available Physical Memory | 74,65% Memory free
  8. 15,80 Gb Paging File | 13,56 Gb Available in Paging File | 85,82% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 50,88 Gb Total Space | 4,65 Gb Free Space | 9,13% Space Free | Partition Type: NTFS
  13. Drive D: | 68,26 Gb Total Space | 40,29 Gb Free Space | 59,03% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: MIGO | User Name: Michał | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  17. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2015-12-25 18:32:42 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Michał\Downloads\OTL.exe
  22. PRC - [2015-12-11 03:54:14 | 000,741,704 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  23. PRC - [2015-12-05 06:29:09 | 000,245,576 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
  24. PRC - [2015-11-19 03:38:33 | 003,886,672 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe
  25. PRC - [2015-11-04 14:01:00 | 022,790,776 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe
  26. PRC - [2015-10-28 18:49:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  27. PRC - [2015-08-27 00:37:44 | 002,634,872 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  28. PRC - [2015-08-27 00:37:41 | 001,872,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  29. PRC - [2015-04-01 16:23:59 | 000,568,904 | ---- | M] () -- D:\Programy\Puush\puush.exe
  30. PRC - [2015-02-09 17:24:52 | 004,192,464 | ---- | M] (Unified Intents AB) -- D:\Programy\Unified Remote 3\RemoteServerWin.exe
  31. PRC - [2013-11-07 09:17:30 | 000,269,848 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
  32. PRC - [2012-05-21 15:26:28 | 000,291,648 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  33. PRC - [2011-12-16 12:37:30 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  34. PRC - [2011-12-16 12:37:26 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  35. PRC - [2011-12-16 12:37:10 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  36. PRC - [2011-12-09 15:45:00 | 000,548,864 | ---- | M] (Vimicro) -- C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
  37. PRC - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  38. PRC - [2011-11-29 20:04:54 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  39.  
  40.  
  41. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  42.  
  43. MOD - [2015-12-25 18:23:51 | 001,208,320 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_ssl.pyd
  44. MOD - [2015-12-25 18:23:51 | 001,176,576 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._core_.pyd
  45. MOD - [2015-12-25 18:23:51 | 001,067,008 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._controls_.pyd
  46. MOD - [2015-12-25 18:23:51 | 000,816,128 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._windows_.pyd
  47. MOD - [2015-12-25 18:23:51 | 000,806,400 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._gdi_.pyd
  48. MOD - [2015-12-25 18:23:51 | 000,776,704 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_hashlib.pyd
  49. MOD - [2015-12-25 18:23:51 | 000,733,184 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._misc_.pyd
  50. MOD - [2015-12-25 18:23:51 | 000,686,080 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\unicodedata.pyd
  51. MOD - [2015-12-25 18:23:51 | 000,682,496 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\pysqlite2._sqlite.pyd
  52. MOD - [2015-12-25 18:23:51 | 000,525,640 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\windows._lib_cacheinvalidation.pyd
  53. MOD - [2015-12-25 18:23:51 | 000,364,544 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\pythoncom27.dll
  54. MOD - [2015-12-25 18:23:51 | 000,320,512 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32com.shell.shell.pyd
  55. MOD - [2015-12-25 18:23:51 | 000,167,936 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32gui.pyd
  56. MOD - [2015-12-25 18:23:51 | 000,128,512 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_elementtree.pyd
  57. MOD - [2015-12-25 18:23:51 | 000,127,488 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\pyexpat.pyd
  58. MOD - [2015-12-25 18:23:51 | 000,123,392 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._wizard.pyd
  59. MOD - [2015-12-25 18:23:51 | 000,119,808 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32file.pyd
  60. MOD - [2015-12-25 18:23:51 | 000,110,080 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\pywintypes27.dll
  61. MOD - [2015-12-25 18:23:51 | 000,108,544 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32security.pyd
  62. MOD - [2015-12-25 18:23:51 | 000,098,816 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32api.pyd
  63. MOD - [2015-12-25 18:23:51 | 000,088,064 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_ctypes.pyd
  64. MOD - [2015-12-25 18:23:51 | 000,079,360 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\usb_ext.pyd
  65. MOD - [2015-12-25 18:23:51 | 000,078,848 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._animate.pyd
  66. MOD - [2015-12-25 18:23:51 | 000,077,312 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\wx._html2.pyd
  67. MOD - [2015-12-25 18:23:51 | 000,046,080 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_socket.pyd
  68. MOD - [2015-12-25 18:23:51 | 000,038,912 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32inet.pyd
  69. MOD - [2015-12-25 18:23:51 | 000,036,864 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_psutil_windows.pyd
  70. MOD - [2015-12-25 18:23:51 | 000,035,840 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32process.pyd
  71. MOD - [2015-12-25 18:23:51 | 000,027,136 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_multiprocessing.pyd
  72. MOD - [2015-12-25 18:23:51 | 000,025,600 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32pdh.pyd
  73. MOD - [2015-12-25 18:23:51 | 000,024,064 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32pipe.pyd
  74. MOD - [2015-12-25 18:23:51 | 000,022,528 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32ts.pyd
  75. MOD - [2015-12-25 18:23:51 | 000,020,480 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\_yappi.pyd
  76. MOD - [2015-12-25 18:23:51 | 000,018,432 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32event.pyd
  77. MOD - [2015-12-25 18:23:51 | 000,017,920 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\thumbnails_ext.pyd
  78. MOD - [2015-12-25 18:23:51 | 000,017,408 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32profile.pyd
  79. MOD - [2015-12-25 18:23:51 | 000,013,824 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\common.time34.pyd
  80. MOD - [2015-12-25 18:23:51 | 000,011,264 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\win32crypt.pyd
  81. MOD - [2015-12-25 18:23:51 | 000,010,240 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\select.pyd
  82. MOD - [2015-12-25 18:23:51 | 000,007,168 | ---- | M] () -- C:\Users\MICHA~1\AppData\Local\Temp\_MEI35682\hashobjs_ext.pyd
  83. MOD - [2015-12-24 07:46:02 | 016,792,256 | ---- | M] () -- C:\Users\Michał\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll
  84. MOD - [2015-12-11 03:54:11 | 001,583,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
  85. MOD - [2015-12-11 03:54:09 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll
  86. MOD - [2015-08-27 00:37:44 | 000,011,896 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
  87. MOD - [2015-08-12 15:40:20 | 000,487,424 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2311d2f75408cef49252cabd683491bc\IAStorUtil.ni.dll
  88. MOD - [2015-08-12 15:17:28 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\a6265e4a24c4f8361d84fc84f10e9736\WindowsBase.ni.dll
  89. MOD - [2015-07-23 04:06:23 | 000,012,104 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
  90. MOD - [2015-05-13 13:36:40 | 012,438,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6949c4470a81970ec3de0a575d93babc\System.Windows.Forms.ni.dll
  91. MOD - [2015-05-13 13:36:34 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5a401fd2a7689ff13fb54182953f9c40\System.Drawing.ni.dll
  92. MOD - [2015-05-13 13:36:31 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\007fc007edc388d9806dff94ee04f129\System.Configuration.ni.dll
  93. MOD - [2015-04-16 11:55:35 | 000,774,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0967cf5c31691f38d013263304d2dacb\System.Runtime.Remoting.ni.dll
  94. MOD - [2015-04-01 16:23:59 | 000,568,904 | ---- | M] () -- D:\Programy\Puush\puush.exe
  95. MOD - [2014-10-24 07:25:03 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\2cf12fa95900b4488a6cb9e4aac51c5c\System.Xml.ni.dll
  96. MOD - [2014-10-24 07:24:44 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
  97. MOD - [2014-09-11 08:55:13 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\b3131ca726aaef63c3306c2a7636449f\IAStorCommon.ni.dll
  98. MOD - [2014-09-11 07:24:48 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
  99. MOD - [2013-07-08 12:46:09 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll
  100. MOD - [2013-07-08 12:46:03 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
  101. MOD - [2011-08-11 15:30:04 | 000,659,456 | ---- | M] () -- C:\Windows\SysWOW64\vmprp332.ax
  102.  
  103.  
  104. [color=#E56717]========== Services (SafeList) ==========[/color]
  105.  
  106. SRV:[b]64bit:[/b] - [2015-08-27 00:37:41 | 001,155,192 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService)
  107. SRV:[b]64bit:[/b] - [2015-08-27 00:37:39 | 005,544,568 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe -- (NvStreamSvc)
  108. SRV:[b]64bit:[/b] - [2015-07-16 20:21:50 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  109. SRV:[b]64bit:[/b] - [2013-05-27 05:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  110. SRV:[b]64bit:[/b] - [2012-03-21 13:03:16 | 000,957,216 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- c:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins)
  111. SRV:[b]64bit:[/b] - [2011-12-08 16:38:24 | 000,607,456 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- c:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  112. SRV:[b]64bit:[/b] - [2010-12-17 16:46:00 | 000,198,784 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
  113. SRV - [2015-12-09 15:00:21 | 000,269,504 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  114. SRV - [2015-10-28 18:49:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  115. SRV - [2015-10-14 20:56:14 | 000,838,224 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  116. SRV - [2015-08-27 00:37:41 | 001,872,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
  117. SRV - [2015-07-09 12:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  118. SRV - [2015-02-09 17:24:52 | 004,192,464 | ---- | M] (Unified Intents AB) [Auto | Running] -- D:\Programy\Unified Remote 3\RemoteServerWin.exe -- (RemoteServerWin)
  119. SRV - [2014-03-20 22:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  120. SRV - [2014-01-29 23:02:44 | 000,279,000 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  121. SRV - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  122. SRV - [2011-12-16 12:37:30 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  123. SRV - [2011-12-16 12:37:26 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  124. SRV - [2011-12-16 12:37:10 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  125. SRV - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  126.  
  127.  
  128. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  129.  
  130. DRV:[b]64bit:[/b] - [2015-08-27 00:37:39 | 000,019,576 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
  131. DRV:[b]64bit:[/b] - [2015-08-11 04:52:30 | 000,050,472 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
  132. DRV:[b]64bit:[/b] - [2015-07-23 04:06:23 | 000,031,376 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  133. DRV:[b]64bit:[/b] - [2015-02-09 17:24:32 | 000,025,592 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uvhid.sys -- (uvhid)
  134. DRV:[b]64bit:[/b] - [2014-11-29 00:37:06 | 000,180,648 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
  135. DRV:[b]64bit:[/b] - [2014-06-19 05:00:57 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  136. DRV:[b]64bit:[/b] - [2014-05-17 16:45:08 | 000,031,744 | ---- | M] (Astrill) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\asvpndrv.sys -- (asvpndrv)
  137. DRV:[b]64bit:[/b] - [2014-02-18 12:22:05 | 004,719,168 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
  138. DRV:[b]64bit:[/b] - [2014-02-18 11:45:10 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
  139. DRV:[b]64bit:[/b] - [2014-02-18 11:45:09 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr)
  140. DRV:[b]64bit:[/b] - [2014-01-29 23:02:28 | 005,363,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  141. DRV:[b]64bit:[/b] - [2013-10-02 02:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  142. DRV:[b]64bit:[/b] - [2013-05-30 16:16:40 | 000,064,280 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
  143. DRV:[b]64bit:[/b] - [2012-08-23 14:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  144. DRV:[b]64bit:[/b] - [2012-07-17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  145. DRV:[b]64bit:[/b] - [2012-05-21 15:25:32 | 000,789,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  146. DRV:[b]64bit:[/b] - [2012-05-21 15:25:32 | 000,357,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  147. DRV:[b]64bit:[/b] - [2012-05-21 15:25:32 | 000,019,264 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  148. DRV:[b]64bit:[/b] - [2012-03-21 13:46:20 | 000,594,472 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)
  149. DRV:[b]64bit:[/b] - [2012-03-20 13:30:50 | 000,163,368 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bcbtums.sys -- (bcbtums)
  150. DRV:[b]64bit:[/b] - [2012-03-05 20:29:46 | 000,184,872 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
  151. DRV:[b]64bit:[/b] - [2012-03-05 20:29:42 | 000,210,984 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
  152. DRV:[b]64bit:[/b] - [2012-03-05 20:29:40 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
  153. DRV:[b]64bit:[/b] - [2012-03-02 18:49:00 | 000,104,048 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  154. DRV:[b]64bit:[/b] - [2012-03-01 06:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  155. DRV:[b]64bit:[/b] - [2012-02-06 10:31:00 | 000,958,800 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vm332avs.sys -- (vm332avs)
  156. DRV:[b]64bit:[/b] - [2012-01-31 13:17:00 | 001,601,152 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
  157. DRV:[b]64bit:[/b] - [2011-12-15 17:29:42 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
  158. DRV:[b]64bit:[/b] - [2011-12-06 04:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  159. DRV:[b]64bit:[/b] - [2011-11-29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  160. DRV:[b]64bit:[/b] - [2011-09-17 09:38:52 | 000,039,976 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
  161. DRV:[b]64bit:[/b] - [2011-03-11 06:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  162. DRV:[b]64bit:[/b] - [2011-03-11 06:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  163. DRV:[b]64bit:[/b] - [2010-11-20 13:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  164. DRV:[b]64bit:[/b] - [2009-11-24 00:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
  165. DRV:[b]64bit:[/b] - [2009-11-24 00:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
  166. DRV:[b]64bit:[/b] - [2009-07-14 01:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  167. DRV:[b]64bit:[/b] - [2009-07-14 01:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  168. DRV:[b]64bit:[/b] - [2009-07-14 01:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  169. DRV:[b]64bit:[/b] - [2009-06-10 20:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  170. DRV:[b]64bit:[/b] - [2009-06-10 20:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  171. DRV:[b]64bit:[/b] - [2009-06-10 20:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  172. DRV:[b]64bit:[/b] - [2009-06-10 20:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  173. DRV - [2009-07-14 01:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  174. DRV - [2006-09-21 03:53:16 | 000,004,442 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\_tpb0000.tmp\TPPWRIF.sys -- (TPPWRIF)
  175.  
  176.  
  177. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  178.  
  179.  
  180. [color=#E56717]========== Internet Explorer ==========[/color]
  181.  
  182. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  183. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  184. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  185. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  186. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  187. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  188. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  189.  
  190.  
  191. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  192.  
  193. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  194.  
  195.  
  196.  
  197. IE - HKU\S-1-5-21-586651673-2604713930-1693546525-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  198. IE - HKU\S-1-5-21-586651673-2604713930-1693546525-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  199. IE - HKU\S-1-5-21-586651673-2604713930-1693546525-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  200. IE - HKU\S-1-5-21-586651673-2604713930-1693546525-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  201. IE - HKU\S-1-5-21-586651673-2604713930-1693546525-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  202.  
  203.  
  204. [color=#E56717]========== FireFox ==========[/color]
  205.  
  206. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.25.2: D:\Programy\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  207. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2: D:\Programy\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
  208. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  209. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  210. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.31.2: C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  211. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2: C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
  212. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
  213. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll (Google Inc.)
  214. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  215.  
  216. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[email protected]: C:\Users\Michał\AppData\Roaming\IDM\idmmzcc5 [2015-11-19 03:37:32 | 000,000,000 | ---D | M]
  217.  
  218. [2015-05-15 20:26:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Michał\AppData\Roaming\mozilla\Extensions
  219. [2015-05-15 20:26:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Michał\AppData\Roaming\mozilla\Extensions\[email protected]
  220.  
  221. [color=#E56717]========== Chrome ==========[/color]
  222.  
  223. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\apboafhkiegglekeafbckfjldecefkhn\21.2.6_0\
  224. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
  225. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
  226. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnlojoclkbpmfhakhaagjpjfifbaoadf\0.1.3.2_0\
  227. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
  228. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh\1.1_0\
  229. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2015.12.16_0\
  230. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\
  231. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.45_0\
  232. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.21.16_0\
  233. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljamgkbcojbnmcaonjokopmcblmmpfch\1.0.2_0\
  234. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh\3.2_0\
  235. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\5.4.8.1_0\
  236. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  237. CHR - Extension: No name found = C:\Users\Michał\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  238.  
  239. O1 HOSTS File: ([2014-02-18 11:25:36 | 000,000,921 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  240. O1 - Hosts: 127.0.0.1 genuine.microsoft.com
  241. O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
  242. O1 - Hosts: 127.0.0.1 sls.microsoft.com
  243. O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
  244. O2:[b]64bit:[/b] - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
  245. O2:[b]64bit:[/b] - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
  246. O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  247. O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] c:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.)
  248. O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.)
  249. O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
  250. O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited)
  251. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  252. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  253. O4:[b]64bit:[/b] - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
  254. O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
  255. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  256. O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)
  257. O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
  258. O4 - HKLM..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332_STI.EXE (Vimicro)
  259. O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Dolby Laboratories Inc.)
  260. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  261. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  262. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  263. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  264. O4 - HKU\S-1-5-21-586651673-2604713930-1693546525-1000..\Run: [Astrill] "C:\Program Files (x86)\Astrill\astrill.exe" /autostart File not found
  265. O4 - HKU\S-1-5-21-586651673-2604713930-1693546525-1000..\Run: [ccleaner] D:\Programy\CCleaner64.exe (Piriform Ltd)
  266. O4 - HKU\S-1-5-21-586651673-2604713930-1693546525-1000..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)
  267. O4 - HKU\S-1-5-21-586651673-2604713930-1693546525-1000..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
  268. O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
  269. O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
  270. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  271. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  272. O4 - Startup: C:\Users\Gość\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk = File not found
  273. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  274. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  275. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
  276. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  277. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  278. O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  279. O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  280. O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
  281. O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
  282. O13[b]64bit:[/b] - gopher Prefix: missing
  283. O13 - gopher Prefix: missing
  284. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  285. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.168.4.100 194.168.8.100
  286. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2CB43A04-7388-439A-8936-06E10B59C686}: DhcpNameServer = 194.168.4.100 194.168.8.100
  287. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4C51AA90-1425-4675-952F-4B196BAE7565}: DhcpNameServer = 8.8.8.8
  288. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  289. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  290. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  291. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  292. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  293. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  294. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  295. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  296. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  297. O32 - HKLM CDRom: AutoRun - 0
  298. O34 - HKLM BootExecute: (autocheck autochk *)
  299. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  300. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  301. O35 - HKLM\..comfile [open] -- "%1" %*
  302. O35 - HKLM\..exefile [open] -- "%1" %*
  303. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  304. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  305. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  306. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  307. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  308. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  309. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  310.  
  311. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  312.  
  313. [2015-12-19 12:05:07 | 000,000,000 | ---D | C] -- C:\Users\Michał\Desktop\praca
  314. [2015-12-11 10:17:17 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Roaming\DVDVideoSoft
  315. [2015-12-11 10:17:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreeCodecPack
  316. [2015-12-09 15:00:04 | 008,879,808 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  317. [2015-12-05 11:22:55 | 000,555,032 | ---- | C] (Astrill) -- C:\Windows\SysNative\ASProxy64.dll
  318. [2015-12-05 11:22:55 | 000,391,192 | ---- | C] (Astrill) -- C:\Windows\SysWow64\ASProxy.dll
  319. [2015-12-05 11:22:45 | 000,031,744 | ---- | C] (Astrill) -- C:\Windows\SysNative\drivers\asvpndrv.sys
  320. [2015-12-05 11:21:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kepard
  321. [2015-12-04 05:01:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\inCloak VPN
  322. [2015-12-02 19:37:04 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Local\SaferVPN
  323. [2015-12-01 08:18:30 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Roaming\MP3SkypeRecorder
  324. [2015-12-01 08:18:30 | 000,000,000 | ---D | C] -- C:\ProgramData\IsolatedStorage
  325. [2015-12-01 08:18:30 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Local\Domit_UK_LTD
  326. [2015-12-01 08:11:00 | 000,000,000 | ---D | C] -- D:\Dokumenty\athtek_video
  327. [2015-12-01 08:11:00 | 000,000,000 | ---D | C] -- D:\Dokumenty\athtek_record
  328. [2015-12-01 08:11:00 | 000,000,000 | ---D | C] -- D:\Dokumenty\athtek_offline
  329. [2015-12-01 08:11:00 | 000,000,000 | ---D | C] -- D:\Dokumenty\athtek_config
  330. [2015-12-01 08:10:23 | 000,000,000 | ---D | C] -- C:\Users\Michał\AppData\Roaming\Athtek
  331. [2015-11-29 05:26:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CactusVPN
  332. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  333.  
  334. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  335.  
  336. [2015-12-25 18:34:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  337. [2015-12-25 18:31:29 | 000,022,752 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  338. [2015-12-25 18:31:29 | 000,022,752 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  339. [2015-12-25 18:29:56 | 001,670,518 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  340. [2015-12-25 18:29:56 | 000,740,672 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  341. [2015-12-25 18:29:56 | 000,654,464 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  342. [2015-12-25 18:29:56 | 000,156,214 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  343. [2015-12-25 18:29:56 | 000,122,336 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  344. [2015-12-25 18:23:59 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  345. [2015-12-25 18:23:39 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
  346. [2015-12-25 18:23:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  347. [2015-12-25 15:00:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  348. [2015-12-22 12:52:14 | 000,395,585 | ---- | M] () -- D:\Dokumenty\2015-12-16 11.26.29.jpg
  349. [2015-12-22 12:52:11 | 000,382,476 | ---- | M] () -- D:\Dokumenty\2015-12-16 11.26.11.jpg
  350. [2015-12-22 12:52:10 | 000,333,093 | ---- | M] () -- D:\Dokumenty\2015-12-15 19.40.10.jpg
  351. [2015-12-22 12:52:09 | 000,325,275 | ---- | M] () -- D:\Dokumenty\2015-12-15 19.40.49.jpg
  352. [2015-12-22 12:52:08 | 000,319,106 | ---- | M] () -- D:\Dokumenty\2015-12-15 19.39.25.jpg
  353. [2015-12-22 12:52:07 | 000,366,766 | ---- | M] () -- D:\Dokumenty\2015-12-16 11.26.46.jpg
  354. [2015-12-22 12:52:04 | 000,305,157 | ---- | M] () -- D:\Dokumenty\2015-12-16 11.26.02.jpg
  355. [2015-12-17 05:03:46 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  356. [2015-12-15 16:19:18 | 000,480,356 | ---- | M] () -- C:\Users\Michał\Desktop\ss+(2015-12-15+at+04.03.09).jpg
  357. [2015-12-09 15:00:12 | 000,796,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  358. [2015-12-09 15:00:12 | 000,142,528 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  359. [2015-12-09 15:00:05 | 008,879,808 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
  360. [2015-12-05 11:35:51 | 000,003,672 | ---- | M] () -- C:\Windows\SysWow64\ASProxyOff.ini
  361. [2015-12-05 11:35:51 | 000,003,672 | ---- | M] () -- C:\Windows\SysNative\ASProxyOff.ini
  362. [2015-12-04 04:56:22 | 000,000,003 | ---- | M] () -- C:\END
  363. [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  364.  
  365. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  366.  
  367. [2015-12-18 19:01:28 | 000,395,585 | ---- | C] () -- D:\Dokumenty\2015-12-16 11.26.29.jpg
  368. [2015-12-18 19:01:28 | 000,382,476 | ---- | C] () -- D:\Dokumenty\2015-12-16 11.26.11.jpg
  369. [2015-12-18 19:01:28 | 000,366,766 | ---- | C] () -- D:\Dokumenty\2015-12-16 11.26.46.jpg
  370. [2015-12-18 19:01:28 | 000,333,093 | ---- | C] () -- D:\Dokumenty\2015-12-15 19.40.10.jpg
  371. [2015-12-18 19:01:28 | 000,325,275 | ---- | C] () -- D:\Dokumenty\2015-12-15 19.40.49.jpg
  372. [2015-12-18 19:01:28 | 000,319,106 | ---- | C] () -- D:\Dokumenty\2015-12-15 19.39.25.jpg
  373. [2015-12-18 19:01:28 | 000,305,157 | ---- | C] () -- D:\Dokumenty\2015-12-16 11.26.02.jpg
  374. [2015-12-15 16:03:26 | 000,480,356 | ---- | C] () -- C:\Users\Michał\Desktop\ss+(2015-12-15+at+04.03.09).jpg
  375. [2015-12-05 11:35:51 | 000,003,672 | ---- | C] () -- C:\Windows\SysWow64\ASProxyOff.ini
  376. [2015-12-05 11:35:51 | 000,003,672 | ---- | C] () -- C:\Windows\SysNative\ASProxyOff.ini
  377. [2015-12-03 16:26:35 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
  378. [2015-12-02 19:36:37 | 000,000,003 | ---- | C] () -- C:\END
  379. [2015-07-30 07:43:13 | 037,748,880 | ---- | C] () -- C:\Windows\SysWow64\nvcompiler.dll
  380. [2015-07-03 02:34:01 | 000,000,000 | ---- | C] () -- C:\Users\Michał\AppData\Local\{4CBDFCD7-AB1B-4952-9FE8-FC378D8B245E}
  381. [2015-01-17 10:06:43 | 000,000,000 | ---- | C] () -- C:\Users\Michał\AppData\Local\{FBCAFADA-074F-49DD-9B74-DD3E0EF67463}
  382. [2014-08-29 11:09:53 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  383. [2014-02-19 12:38:28 | 000,007,606 | ---- | C] () -- C:\Users\Michał\AppData\Local\Resmon.ResmonCfg
  384. [2014-02-18 11:41:51 | 000,001,779 | ---- | C] () -- C:\Windows\vm332Rmv.ini
  385. [2014-02-18 11:41:51 | 000,001,779 | ---- | C] () -- C:\Windows\SysWow64\vm332Rmv.ini
  386. [2014-02-18 11:31:13 | 001,643,124 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  387. [2014-02-18 11:25:37 | 000,002,048 | ---- | C] () -- C:\Windows\SysWow64\winver.exe
  388. [2014-01-29 23:02:42 | 000,272,928 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin
  389. [2014-01-29 23:02:22 | 000,077,312 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  390. [2014-01-29 23:02:20 | 000,963,452 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin
  391.  
  392. [color=#E56717]========== ZeroAccess Check ==========[/color]
  393.  
  394. [2009-07-14 04:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  395.  
  396. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  397.  
  398. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  399.  
  400. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  401.  
  402. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  403.  
  404. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  405. "" = C:\Windows\SysNative\shell32.dll -- [2015-07-10 17:51:25 | 014,177,280 | ---- | M] (Microsoft Corporation)
  406. "ThreadingModel" = Apartment
  407.  
  408. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  409. "" = %SystemRoot%\system32\shell32.dll -- [2015-07-10 17:34:07 | 012,875,776 | ---- | M] (Microsoft Corporation)
  410. "ThreadingModel" = Apartment
  411.  
  412. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  413. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 01:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  414. "ThreadingModel" = Free
  415.  
  416. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  417. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 12:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  418. "ThreadingModel" = Free
  419.  
  420. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  421. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 01:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  422. "ThreadingModel" = Both
  423.  
  424. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  425.  
  426. [color=#E56717]========== LOP Check ==========[/color]
  427.  
  428. [2014-09-11 17:50:27 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\OpenOffice.org
  429. [2015-03-21 17:53:03 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Acrylic Wi-Fi Free
  430. [2015-12-01 08:10:23 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Athtek
  431. [2015-08-21 10:04:47 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Battle.net
  432. [2014-07-29 22:41:53 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\BESTplayer
  433. [2015-11-18 15:15:41 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\DAEMON Tools Lite
  434. [2015-12-22 17:29:45 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\DMCache
  435. [2015-12-25 18:33:17 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\DVDVideoSoft
  436. [2015-10-12 18:19:28 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\FreeDownloadManager.ORG
  437. [2015-12-11 14:30:41 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\IDM
  438. [2015-12-01 08:19:27 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\MP3SkypeRecorder
  439. [2014-08-29 11:12:30 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\MPC-HC
  440. [2015-09-05 12:35:50 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Notepad++
  441. [2014-02-24 22:16:09 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\OpenOffice.org
  442. [2015-02-28 16:10:51 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\puush
  443. [2014-02-25 13:20:52 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Testy-na-prawo-jazdy-w-UK
  444. [2015-05-15 20:26:29 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\TomTom
  445. [2015-02-11 08:54:46 | 000,000,000 | ---D | M] -- C:\Users\Michał\AppData\Roaming\Unified Remote
  446.  
  447. [color=#E56717]========== Purity Check ==========[/color]
  448.  
  449.  
  450.  
  451. [color=#E56717]========== Alternate Data Streams ==========[/color]
  452.  
  453. @Alternate Data Stream - 231 bytes -> C:\ProgramData\Temp:6BE50C2B
  454.  
  455. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!