API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jan 26th, 2014
52
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 35.92 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2014-01-26 15:47:54 - Run 3
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Fedycki\Downloads
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 2,00 Gb Total Physical Memory | 0,61 Gb Available Physical Memory | 30,52% Memory free
  8. 4,00 Gb Paging File | 2,46 Gb Available in Paging File | 61,58% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 146,48 Gb Total Space | 98,40 Gb Free Space | 67,18% Space Free | Partition Type: NTFS
  13. Drive D: | 146,48 Gb Total Space | 79,66 Gb Free Space | 54,38% Space Free | Partition Type: NTFS
  14. Drive E: | 172,79 Gb Total Space | 140,17 Gb Free Space | 81,12% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: FEDYCKI-KOMPUTE | User Name: Fedycki | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2014-01-26 15:24:34 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Fedycki\Downloads\OTL.exe
  23. PRC - [2013-12-04 03:48:06 | 000,863,184 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24.  
  25.  
  26. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  27.  
  28. MOD - [2013-12-04 03:48:04 | 000,399,312 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
  29. MOD - [2013-12-04 03:48:02 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
  30. MOD - [2013-12-04 03:47:11 | 000,702,416 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
  31. MOD - [2013-12-04 03:47:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
  32. MOD - [2013-12-04 03:47:08 | 001,619,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
  33.  
  34.  
  35. [color=#E56717]========== Services (SafeList) ==========[/color]
  36.  
  37. SRV:[b]64bit:[/b] - [2013-11-22 16:26:12 | 000,239,616 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  38. SRV:[b]64bit:[/b] - [2011-04-27 16:21:18 | 000,288,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
  39. SRV:[b]64bit:[/b] - [2011-04-27 16:21:18 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
  40. SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  41. SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  42. SRV - [2013-12-11 20:40:36 | 000,569,768 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  43. SRV - [2013-12-08 12:58:52 | 000,076,888 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  44. SRV - [2013-09-05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  45. SRV - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  46. SRV - [2012-11-09 20:35:57 | 000,666,720 | ---- | M] (Wellbia.com Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\xsherlock.xem -- (xsherlock)
  47. SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  48. SRV - [2012-03-06 16:19:00 | 003,953,632 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
  49. SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
  50. SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  51. SRV - [2008-11-11 08:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  52.  
  53.  
  54. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  55.  
  56. DRV:[b]64bit:[/b] - [2013-11-22 17:23:20 | 013,201,920 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  57. DRV:[b]64bit:[/b] - [2013-11-22 15:55:48 | 000,624,128 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  58. DRV:[b]64bit:[/b] - [2013-09-24 15:53:50 | 000,094,208 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  59. DRV:[b]64bit:[/b] - [2013-06-21 01:07:50 | 000,188,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
  60. DRV:[b]64bit:[/b] - [2013-06-21 01:07:50 | 000,169,288 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus)
  61. DRV:[b]64bit:[/b] - [2013-06-21 01:07:50 | 000,021,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
  62. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,188,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
  63. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,169,288 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
  64. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,158,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
  65. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,038,080 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
  66. DRV:[b]64bit:[/b] - [2013-06-21 01:07:34 | 000,021,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
  67. DRV:[b]64bit:[/b] - [2013-06-01 12:56:58 | 000,031,920 | ---- | M] (Wondershare) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apowersoft_AudioDevice.sys -- (Apowersoft_AudioDevice)
  68. DRV:[b]64bit:[/b] - [2012-12-19 08:42:10 | 000,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\t_mouse.sys -- (t_mouse.sys)
  69. DRV:[b]64bit:[/b] - [2012-05-16 16:45:34 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  70. DRV:[b]64bit:[/b] - [2011-08-17 09:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
  71. DRV:[b]64bit:[/b] - [2011-08-17 09:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
  72. DRV:[b]64bit:[/b] - [2011-08-17 09:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  73. DRV:[b]64bit:[/b] - [2011-08-17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  74. DRV:[b]64bit:[/b] - [2011-04-27 14:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
  75. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  76. DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  77. DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  78. DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  79. DRV:[b]64bit:[/b] - [2010-11-20 11:49:51 | 000,146,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rmcast.sys -- (RMCAST)
  80. DRV:[b]64bit:[/b] - [2010-06-14 08:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
  81. DRV:[b]64bit:[/b] - [2010-01-28 15:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
  82. DRV:[b]64bit:[/b] - [2010-01-21 02:03:10 | 000,027,648 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64diag.sys -- (UsbDiag)
  83. DRV:[b]64bit:[/b] - [2010-01-21 02:03:08 | 000,033,280 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64modem.sys -- (USBModem)
  84. DRV:[b]64bit:[/b] - [2010-01-21 02:03:06 | 000,017,920 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64bus.sys -- (usbbus)
  85. DRV:[b]64bit:[/b] - [2009-09-29 08:15:02 | 000,016,384 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lgbtpt64.sys -- (LgBttPort)
  86. DRV:[b]64bit:[/b] - [2009-09-29 08:15:00 | 000,017,408 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lgvmdm64.sys -- (LGVMODEM)
  87. DRV:[b]64bit:[/b] - [2009-09-29 08:15:00 | 000,014,848 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lgbtbs64.sys -- (lgbusenum)
  88. DRV:[b]64bit:[/b] - [2009-07-16 04:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
  89. DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  90. DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  91. DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  92. DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  93. DRV:[b]64bit:[/b] - [2009-07-14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (1394hub)
  94. DRV:[b]64bit:[/b] - [2009-07-14 01:09:49 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023.sys -- (USB_RNDIS)
  95. DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  96. DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  97. DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  98. DRV:[b]64bit:[/b] - [2009-06-10 21:34:18 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  99. DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  100. DRV:[b]64bit:[/b] - [2008-08-28 10:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  101. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,145,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdm.sys -- (s217mdm)
  102. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,138,792 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217unic.sys -- (s217unic)
  103. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,124,968 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217obex.sys -- (s217obex)
  104. DRV:[b]64bit:[/b] - [2007-11-02 12:22:30 | 000,033,832 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217nd5.sys -- (s217nd5)
  105. DRV:[b]64bit:[/b] - [2007-11-02 12:22:28 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217bus.sys -- (s217bus)
  106. DRV:[b]64bit:[/b] - [2007-11-02 12:22:28 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdfl.sys -- (s217mdfl)
  107. DRV:[b]64bit:[/b] - [2006-12-22 20:05:52 | 000,559,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrxusb.sys -- (athrusb)
  108. DRV - [2013-12-07 16:03:26 | 000,011,973 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (SecDrv)
  109. DRV - [2010-11-01 05:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- D:\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
  110. DRV - [2010-06-14 08:32:54 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
  111. DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  112.  
  113.  
  114. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  115.  
  116.  
  117. [color=#E56717]========== Internet Explorer ==========[/color]
  118.  
  119. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  120. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  121. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  122. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  123. IE - HKLM\..\SearchScopes,DefaultScope =
  124. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  125. IE - HKLM\..\SearchScopes\{FC1F8B48-3D71-4B13-8957-64337801A35F}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  126.  
  127. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  128. IE - HKCU\..\SearchScopes,DefaultScope =
  129. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=77e33cbf-705f-11e1-959c-0023481c491b&q={searchTerms}
  130. IE - HKCU\..\SearchScopes\{FC1F8B48-3D71-4B13-8957-64337801A35F}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  131. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  132.  
  133.  
  134. [color=#E56717]========== FireFox ==========[/color]
  135.  
  136. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll File not found
  137. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
  138. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
  139. FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
  140. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  141. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  142. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  143. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
  144. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  145. FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
  146. FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
  147. FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
  148. FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
  149. FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
  150. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  151. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
  152. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  153. FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\Users\Fedycki\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)
  154. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Fedycki\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  155. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
  156.  
  157. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-05-31 18:56:30 | 000,000,000 | ---D | M]
  158.  
  159. [2012-05-17 17:24:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fedycki\AppData\Roaming\mozilla\Firefox\extensions
  160. [2012-05-17 17:24:44 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Fedycki\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
  161. [2012-11-03 07:34:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fedycki\AppData\Roaming\mozilla\Firefox\Profiles\0\extensions
  162. [2012-11-03 07:34:32 | 000,213,316 | ---- | M] () (No name found) -- C:\Users\Fedycki\AppData\Roaming\mozilla\firefox\profiles\0\extensions\torntv@torntv.com.xpi
  163.  
  164. [color=#E56717]========== Chrome ==========[/color]
  165.  
  166. CHR - default_search_provider: Google (Enabled)
  167. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
  168. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
  169. CHR - homepage: http://www.google.com
  170. CHR - Extension: Adblock Plus = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\
  171. CHR - Extension: Search by Image (by Google) = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm\1.5.1_0\
  172. CHR - Extension: Tampermonkey = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo\3.6.3737_0\
  173. CHR - Extension: Last.fm Scrobbler = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm\1.30_0\
  174. CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_1\
  175. CHR - Extension: Google Wallet = C:\Users\Fedycki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
  176.  
  177. O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  178. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  179. O4:[b]64bit:[/b] - HKLM..\Run: [MouseDriver] C:\Windows\SysNative\TiltWheelMouse.exe (Pixart Imaging Inc)
  180. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  181. O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
  182. O4 - HKLM..\Run: [KiesTrayAgent] E:\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
  183. O4 - HKLM..\Run: [OrderReminder] C:\Program Files (x86)\Hewlett-Packard\OrderReminder\OrderReminder.exe (Hewlett-Packard)
  184. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
  185. O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
  186. O4 - HKCU..\Run: [] E:\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
  187. O4 - HKCU..\Run: [DAEMON Tools Lite] D:\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
  188. O4 - HKCU..\Run: [eRclient] C:\Users\Fedycki\AppData\Roaming\eRclient\eRclient.exe (eRmail Company, s. r. o.)
  189. O4 - HKCU..\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (AMD)
  190. O4 - HKCU..\Run: [KiesPreload] E:\Kies\Kies.exe (Samsung)
  191. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  192. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  193. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
  194. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 0
  195. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  196. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  197. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
  198. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
  199. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 0
  200. O13[b]64bit:[/b] - gopher Prefix: missing
  201. O13 - gopher Prefix: missing
  202. O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  203. O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  204. O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
  205. O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
  206. O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
  207. O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.66.2.cab (Battlefield Play4Free Updater)
  208. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  209. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0203BED9-3C2F-47DB-A0D9-ACB35EAAFDFC}: DhcpNameServer = 192.168.1.1
  210. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{663E2E42-83D0-46FF-B5DC-CE4A4DFFC17C}: NameServer = 192.168.1.1
  211. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9A884531-51D6-4CBC-A778-A3A55695C103}: DhcpNameServer = 192.168.1.1
  212. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  213. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  214. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  215. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  216. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  217. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  218. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  219. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  220. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  221. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  222. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  223. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  224. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  225. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  226. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
  227. O32 - HKLM CDRom: AutoRun - 1
  228. O33 - MountPoints2\{4164822c-4398-11e2-a02f-0023481c491b}\Shell - "" = AutoRun
  229. O33 - MountPoints2\{4164822c-4398-11e2-a02f-0023481c491b}\Shell\AutoRun\command - "" = G:\NokiaPCIA_Autorun.exe
  230. O33 - MountPoints2\{b4239810-694a-11e2-a3c1-0023481c491b}\Shell - "" = AutoRun
  231. O33 - MountPoints2\{b4239810-694a-11e2-a3c1-0023481c491b}\Shell\AutoRun\command - "" = G:\LGAutoRun.exe
  232. O33 - MountPoints2\{b4239817-694a-11e2-a3c1-0023481c491b}\Shell - "" = AutoRun
  233. O33 - MountPoints2\{b4239817-694a-11e2-a3c1-0023481c491b}\Shell\AutoRun\command - "" = G:\LGAutoRun.exe
  234. O34 - HKLM BootExecute: (autocheck autochk *)
  235. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  236. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  237. O35 - HKLM\..comfile [open] -- "%1" %*
  238. O35 - HKLM\..exefile [open] -- "%1" %*
  239. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  240. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  241. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  242. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  243. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  244. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  245. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  246.  
  247. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  248.  
  249. [2014-01-26 15:35:40 | 000,000,000 | ---D | C] -- C:\UsbFix
  250. [2014-01-26 15:25:23 | 000,000,000 | ---D | C] -- C:\_OTL
  251. [2014-01-26 13:55:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  252. [2014-01-24 19:52:45 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\WpfApplication1
  253. [2014-01-23 16:12:04 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\Blizzard Entertainment
  254. [2014-01-23 16:11:58 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\Battle.net
  255. [2014-01-23 16:11:58 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\Battle.net
  256. [2014-01-17 18:59:41 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\VOPackage
  257. [2014-01-16 17:38:27 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\TheBannerSaga
  258. [2014-01-15 18:41:47 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\Kalypso Media
  259. [2014-01-13 17:57:19 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\Documents\Almost Human
  260. [2014-01-13 17:20:30 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\cminstaller
  261. [2014-01-13 17:11:45 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\Desktop\Android
  262. [2014-01-11 20:31:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Last.fm
  263. [2014-01-11 20:29:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm
  264. [2014-01-11 20:29:32 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Local\Last.fm
  265. [2014-01-10 21:11:04 | 000,000,000 | ---D | C] -- C:\Users\Fedycki\AppData\Roaming\foobar2000
  266.  
  267. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  268.  
  269. [2014-01-26 15:36:21 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  270. [2014-01-26 15:36:13 | 000,017,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  271. [2014-01-26 15:36:13 | 000,017,120 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  272. [2014-01-26 15:35:42 | 000,001,497 | ---- | M] () -- C:\Users\Fedycki\Desktop\UsbFix.lnk
  273. [2014-01-26 15:29:15 | 000,000,452 | -H-- | M] () -- C:\Windows\tasks\SK.Enhancer-S-161304646.job
  274. [2014-01-26 15:29:09 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
  275. [2014-01-26 15:29:03 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  276. [2014-01-26 15:28:59 | 1609,916,416 | -HS- | M] () -- C:\hiberfil.sys
  277. [2014-01-26 15:07:37 | 000,069,945 | ---- | M] () -- C:\Users\Fedycki\AppData\Roaming\003CD0D6.exe
  278. [2014-01-26 14:59:03 | 000,002,579 | ---- | M] () -- C:\Users\Fedycki\FIX.REG
  279. [2014-01-26 14:50:01 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  280. [2014-01-24 17:35:54 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  281. [2014-01-24 17:35:54 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  282. [2014-01-11 20:29:37 | 000,000,550 | ---- | M] () -- C:\Users\Public\Desktop\Last.fm Scrobbler.lnk
  283. [2014-01-11 20:24:58 | 000,000,568 | ---- | M] () -- C:\Users\Public\Desktop\foobar2000.lnk
  284. [2014-01-06 13:43:24 | 000,000,868 | ---- | M] () -- C:\Users\Fedycki\Desktop\GaduGadu.lnk
  285.  
  286. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  287.  
  288. [2014-01-26 15:35:42 | 000,001,497 | ---- | C] () -- C:\Users\Fedycki\Desktop\UsbFix.lnk
  289. [2014-01-26 15:07:37 | 000,069,945 | ---- | C] () -- C:\Users\Fedycki\AppData\Roaming\003CD0D6.exe
  290. [2014-01-26 14:59:02 | 000,002,579 | ---- | C] () -- C:\Users\Fedycki\FIX.REG
  291. [2014-01-26 10:49:30 | 000,065,536 | ---- | C] () -- C:\Windows\SysNative\Ikeext.etl
  292. [2014-01-11 20:29:37 | 000,000,550 | ---- | C] () -- C:\Users\Public\Desktop\Last.fm Scrobbler.lnk
  293. [2014-01-10 21:11:02 | 000,000,638 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
  294. [2014-01-10 21:11:02 | 000,000,568 | ---- | C] () -- C:\Users\Public\Desktop\foobar2000.lnk
  295. [2014-01-06 13:43:31 | 000,000,868 | ---- | C] () -- C:\Users\Fedycki\Desktop\GaduGadu.lnk
  296. [2013-12-08 12:49:11 | 002,484,592 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_p4f.exe
  297. [2013-11-22 17:09:34 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
  298. [2013-11-22 17:09:34 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
  299. [2013-11-22 11:15:22 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  300. [2013-04-23 19:52:57 | 000,282,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  301. [2013-04-23 19:52:53 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  302. [2013-04-18 18:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
  303. [2013-04-18 18:06:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
  304. [2013-04-18 18:06:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
  305. [2013-04-18 18:06:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
  306. [2013-04-18 18:06:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
  307. [2013-04-10 14:35:43 | 000,000,853 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\recently-used.xbel
  308. [2013-02-25 19:22:17 | 000,003,584 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  309. [2012-08-04 13:10:32 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
  310. [2012-07-29 10:20:09 | 000,007,610 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\Resmon.ResmonCfg
  311. [2012-06-21 09:37:14 | 003,166,792 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
  312. [2012-06-17 08:28:51 | 000,000,095 | ---- | C] () -- C:\Users\Fedycki\AppData\Local\fusioncache.dat
  313. [2012-06-09 13:41:39 | 000,087,719 | ---- | C] () -- C:\Windows\SysWow64\wbers.dat.dmp
  314. [2012-04-14 15:44:03 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  315. [2012-04-14 15:43:36 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  316. [2012-04-14 15:40:54 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  317. [2012-04-08 19:42:15 | 000,075,045 | ---- | C] () -- C:\Windows\SysWow64\8fbbb479.exe
  318. [2012-03-09 20:51:12 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe
  319.  
  320. [color=#E56717]========== ZeroAccess Check ==========[/color]
  321.  
  322. [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  323.  
  324. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  325.  
  326. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  327.  
  328. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  329.  
  330. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  331.  
  332. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  333. "" = C:\Windows\SysNative\shell32.dll -- [2010-11-20 14:27:25 | 014,174,208 | ---- | M] (Microsoft Corporation)
  334. "ThreadingModel" = Apartment
  335.  
  336. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  337. "" = %SystemRoot%\system32\shell32.dll -- [2010-11-20 13:21:19 | 012,872,192 | ---- | M] (Microsoft Corporation)
  338. "ThreadingModel" = Apartment
  339.  
  340. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  341. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  342. "ThreadingModel" = Free
  343.  
  344. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  345. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  346. "ThreadingModel" = Free
  347.  
  348. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  349. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  350. "ThreadingModel" = Both
  351.  
  352. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  353.  
  354. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!