API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 28th, 2014
337
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 47.29 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 28.7.2014. 22:39:58 - Run 2
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\ZP\Desktop
  3. Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 3,25 Gb Total Physical Memory | 1,91 Gb Available Physical Memory | 58,82% Memory free
  8. 6,49 Gb Paging File | 5,06 Gb Available in Paging File | 77,89% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
  12. Drive C: | 97,65 Gb Total Space | 28,31 Gb Free Space | 28,99% Space Free | Partition Type: NTFS
  13. Drive D: | 195,31 Gb Total Space | 84,83 Gb Free Space | 43,43% Space Free | Partition Type: NTFS
  14. Drive E: | 172,79 Gb Total Space | 137,03 Gb Free Space | 79,31% Space Free | Partition Type: NTFS
  15. Drive G: | 671,58 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  16. Drive H: | 665,90 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  17. Drive I: | 670,51 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
  18.  
  19. Computer Name: ZP-PC | User Name: ZP | Logged in as Administrator.
  20. Boot Mode: Normal | Scan Mode: Current user | Quick Scan
  21. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  22.  
  23. [color=#E56717]========== Processes (SafeList) ==========[/color]
  24.  
  25. PRC - [2014.07.28 14:58:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ZP\Desktop\OTL.exe
  26. PRC - [2014.05.12 20:40:01 | 000,879,456 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
  27. PRC - [2014.05.12 07:33:50 | 000,860,472 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
  28. PRC - [2014.05.12 07:33:48 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
  29. PRC - [2014.05.12 07:33:42 | 006,970,168 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
  30. PRC - [2014.04.11 19:45:50 | 001,764,992 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  31. PRC - [2014.04.11 19:45:42 | 001,390,720 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  32. PRC - [2014.03.07 19:18:28 | 004,942,336 | ---- | M] (FNet Co., Ltd.) -- C:\Program Files\XFastUsb\XFastUsb.exe
  33. PRC - [2014.02.06 01:59:19 | 003,825,232 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
  34. PRC - [2013.11.07 13:17:30 | 000,269,848 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe
  35. PRC - [2013.07.02 10:16:32 | 000,507,264 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
  36. PRC - [2012.09.23 21:43:36 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
  37. PRC - [2011.02.22 08:02:52 | 002,145,904 | R--- | M] (VIA) -- C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
  38. PRC - [2011.02.17 16:50:50 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\System32\ViakaraokeSrv.exe
  39. PRC - [2010.11.20 23:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
  40. PRC - [2010.11.20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
  41.  
  42.  
  43. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  44.  
  45. MOD - [2011.02.22 08:02:34 | 000,623,216 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\skin.dll
  46. MOD - [2011.02.22 08:02:32 | 000,080,496 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
  47. MOD - [2011.02.22 08:02:26 | 000,113,264 | R--- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
  48. MOD - [2010.07.29 19:19:04 | 000,234,496 | ---- | M] () -- C:\Program Files\Total Video Converter\TVCShellExt.dll
  49.  
  50.  
  51. [color=#E56717]========== Services (SafeList) ==========[/color]
  52.  
  53. SRV - [2014.07.09 16:52:44 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  54. SRV - [2014.05.12 07:33:50 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  55. SRV - [2014.05.12 07:33:48 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  56. SRV - [2014.04.11 19:45:50 | 001,764,992 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  57. SRV - [2014.04.11 19:45:42 | 001,390,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  58. SRV - [2013.10.23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
  59. SRV - [2013.04.18 12:06:42 | 000,737,616 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  60. SRV - [2012.09.23 21:43:36 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  61. SRV - [2011.04.04 11:57:28 | 002,072,592 | ---- | M] (Agnitum Ltd.) [Auto | Running] -- C:\Program Files\Agnitum\Outpost Security Suite Free\acs.exe -- (acssrv)
  62. SRV - [2011.02.17 16:50:50 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\System32\ViakaraokeSrv.exe -- (VIAKaraokeService)
  63. SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
  64. SRV - [2009.07.14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
  65. SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  66.  
  67.  
  68. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  69.  
  70. DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
  71. DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\Drivers\IesDrv.sys -- (IesDrv)
  72. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\h648103.sys -- (h648103)
  73. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\h648101.sys -- (h648101)
  74. DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\h647906.sys -- (h647906)
  75. DRV - [2014.07.28 22:22:23 | 000,110,296 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
  76. DRV - [2014.05.12 07:35:18 | 000,051,928 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
  77. DRV - [2014.05.12 07:35:02 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
  78. DRV - [2014.03.08 12:53:13 | 000,029,248 | ---- | M] (FNet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\FNETTBOH_305.SYS -- (FNETTBOH_305)
  79. DRV - [2014.03.07 19:18:32 | 000,014,656 | ---- | M] (FNet Co., Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\FNETURPX.SYS -- (FNETURPX)
  80. DRV - [2013.11.28 02:24:18 | 000,108,000 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\idmwfp.sys -- (IDMWFP)
  81. DRV - [2013.01.23 11:31:50 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
  82. DRV - [2013.01.23 11:31:50 | 000,018,560 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
  83. DRV - [2013.01.23 11:31:50 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
  84. DRV - [2013.01.23 11:31:50 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
  85. DRV - [2012.10.17 15:53:46 | 000,019,072 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
  86. DRV - [2011.03.21 17:27:58 | 000,708,760 | ---- | M] (Agnitum Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\SandBox.sys -- (SandBox)
  87. DRV - [2011.03.21 17:27:20 | 000,034,096 | ---- | M] (Agnitum Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\Filt\VBFilt.dll -- (VBFilt)
  88. DRV - [2011.03.21 17:27:16 | 000,070,160 | ---- | M] (Agnitum Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\Filt\ASWFilt.dll -- (ASWFilt)
  89. DRV - [2011.02.17 16:50:46 | 001,801,328 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
  90. DRV - [2011.02.02 18:04:22 | 000,242,040 | ---- | M] (VirusBuster Kft.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VBEngNT.sys -- (VBEngNT)
  91. DRV - [2010.11.20 23:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  92. DRV - [2010.11.20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  93. DRV - [2010.11.20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
  94. DRV - [2010.11.20 23:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
  95. DRV - [2010.11.20 23:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  96. DRV - [2010.11.20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
  97. DRV - [2010.11.20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
  98. DRV - [2010.11.20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
  99. DRV - [2010.11.20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
  100. DRV - [2010.11.20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
  101. DRV - [2010.11.20 23:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
  102. DRV - [2010.11.20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
  103. DRV - [2010.11.20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
  104. DRV - [2010.09.27 16:37:40 | 000,328,296 | ---- | M] (Agnitum Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afwcore.sys -- (afwcore)
  105. DRV - [2010.04.20 17:01:46 | 000,034,920 | ---- | M] (Agnitum Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\afw.sys -- (afw)
  106. DRV - [2009.07.24 08:02:56 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
  107. DRV - [2009.07.14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
  108. DRV - [2009.04.29 16:37:26 | 000,025,088 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
  109. DRV - [2008.08.08 15:31:18 | 000,043,192 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hid8101.sys -- (hid8101)
  110. DRV - [2008.08.08 15:31:18 | 000,040,856 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hid8103.sys -- (hid8103)
  111. DRV - [2008.08.08 15:31:16 | 000,041,272 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hid7906.sys -- (hid7906)
  112.  
  113.  
  114. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  115.  
  116.  
  117. [color=#E56717]========== Internet Explorer ==========[/color]
  118.  
  119. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.myhoome.com/
  120. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  121. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  122. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  123.  
  124. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.myhoome.com/
  125. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
  126. IE - HKCU\..\SearchScopes,DefaultScope =
  127. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  128. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  129.  
  130.  
  131. [color=#E56717]========== FireFox ==========[/color]
  132.  
  133. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
  134. FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
  135. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
  136. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  137. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  138. FF - HKLM\Software\MozillaPlugins\@mozilla.zeniko.ch/SumatraPDF_Browser_Plugin: C:\Program Files\SumatraPDF\npPdfViewer.dll (Simon Bünzli)
  139. FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
  140. FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
  141. FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
  142. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\ZP\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  143. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
  144. FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll File not found
  145.  
  146. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014.01.24 18:01:49 | 000,000,000 | ---D | M]
  147. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox
  148. FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\ZP\AppData\Roaming\IDM\idmmzcc5 [2014.02.28 12:24:11 | 000,000,000 | ---D | M]
  149.  
  150.  
  151. [color=#E56717]========== Chrome ==========[/color]
  152.  
  153. CHR - default_search_provider: WebSearch (Enabled)
  154. CHR - default_search_provider: search_url =
  155. CHR - default_search_provider: suggest_url = http://localhost,
  156. CHR - plugin: Error reading preferences file
  157. CHR - Extension: Adobe Acrobat - stvaranje PDF-a = C:\Users\ZP\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\11.0.0.379_0\
  158. CHR - Extension: Adobe Acrobat - stvaranje PDF-a = C:\Users\ZP\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\11.0.7.52_0\
  159. CHR - Extension: IDM Integration Module = C:\Users\ZP\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.19.1_0\
  160. CHR - Extension: IDM Integration Module = C:\Users\ZP\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.19.1_1\
  161. CHR - Extension: Skype Click to Call = C:\Users\ZP\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.3.16540.9015_0\
  162.  
  163. O1 HOSTS File: ([2014.07.28 22:01:45 | 000,000,019 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
  164. O1 - Hosts: 127.0.0.1 localhost
  165. O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
  166. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  167. O2 - BHO: (Adobe Acrobat Create PDF Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  168. O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  169. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  170. O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  171. O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  172. O3 - HKCU\..\Toolbar\WebBrowser: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  173. O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  174. O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
  175. O4 - HKLM..\Run: [OutpostFeedBack] C:\Program Files\Agnitum\Outpost Security Suite Free\feedback.exe (Agnitum Ltd.)
  176. O4 - HKLM..\Run: [OutpostMonitor] C:\Program Files\Agnitum\Outpost Security Suite Free\op_mon.exe (Agnitum Ltd.)
  177. O4 - HKLM..\Run: [XFastUsb] C:\Program Files\XFastUsb\XFastUsb.exe (FNet Co., Ltd.)
  178. O4 - HKCU..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
  179. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  180. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  181. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  182. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
  183. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
  184. O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  185. O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  186. O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  187. O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
  188. O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
  189. O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
  190. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  191. O13 - gopher Prefix: missing
  192. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.5.1
  193. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{89E1603D-18D4-4DB0-BADE-2BFBB6D01DA1}: DhcpNameServer = 192.168.5.1
  194. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  195. O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  196. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  197. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
  198. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
  199. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  200. O32 - HKLM CDRom: AutoRun - 1
  201. O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  202. O32 - AutoRun File - [2002.07.11 18:32:54 | 000,000,045 | R--- | M] () - G:\AUTORUN.INF -- [ CDFS ]
  203. O32 - AutoRun File - [2002.07.12 00:33:30 | 000,000,033 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ]
  204. O32 - AutoRun File - [2002.07.12 00:33:30 | 000,000,033 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ]
  205. O33 - MountPoints2\{32671b2c-b195-11e3-9fd1-00e04c21928c}\Shell - "" = AutoRun
  206. O33 - MountPoints2\{32671b2c-b195-11e3-9fd1-00e04c21928c}\Shell\AutoRun\command - "" = K:\Autorun.exe
  207. O33 - MountPoints2\{465dce6b-50f0-11e3-a17e-00e04c21928c}\Shell - "" = AutoRun
  208. O33 - MountPoints2\{465dce6b-50f0-11e3-a17e-00e04c21928c}\Shell\AutoRun\command - "" = H:\blank.exe
  209. O33 - MountPoints2\{a5b63867-aa8d-11e3-9cfe-00e04c21928c}\Shell - "" = AutoRun
  210. O33 - MountPoints2\{a5b63867-aa8d-11e3-9cfe-00e04c21928c}\Shell\AutoRun\command - "" = G:\MafiaLauncher.exe -- [2003.04.01 06:39:22 | 001,396,736 | R--- | M] ()
  211. O33 - MountPoints2\{a5b63868-aa8d-11e3-9cfe-00e04c21928c}\Shell - "" = AutoRun
  212. O33 - MountPoints2\{a5b63868-aa8d-11e3-9cfe-00e04c21928c}\Shell\AutoRun\command - "" = H:\m.exe -- [2002.07.12 00:31:18 | 000,040,960 | R--- | M] ()
  213. O33 - MountPoints2\{a5b63869-aa8d-11e3-9cfe-00e04c21928c}\Shell - "" = AutoRun
  214. O33 - MountPoints2\{a5b63869-aa8d-11e3-9cfe-00e04c21928c}\Shell\AutoRun\command - "" = I:\m.exe -- [2002.07.12 00:31:18 | 000,040,960 | R--- | M] ()
  215. O34 - HKLM BootExecute: (autocheck autochk *)
  216. O35 - HKLM\..comfile [open] -- "%1" %*
  217. O35 - HKLM\..exefile [open] -- "%1" %*
  218. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  219. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  220. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  221. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  222. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  223.  
  224. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  225.  
  226. [2014.07.28 22:21:52 | 000,110,296 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
  227. [2014.07.28 22:21:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
  228. [2014.07.28 22:21:05 | 000,074,456 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
  229. [2014.07.28 22:21:05 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
  230. [2014.07.28 22:20:59 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
  231. [2014.07.28 22:20:59 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
  232. [2014.07.28 22:19:50 | 017,292,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\ZP\Desktop\mbam-setup.exe
  233. [2014.07.28 22:12:00 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
  234. [2014.07.28 22:10:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  235. [2014.07.28 21:53:06 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
  236. [2014.07.28 21:52:32 | 010,279,264 | ---- | C] (SurfRight B.V.) -- C:\Users\ZP\Desktop\hitmanpro.exe
  237. [2014.07.28 21:34:44 | 000,000,000 | ---D | C] -- C:\_OTL
  238. [2014.07.28 18:25:52 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mafia
  239. [2014.07.28 18:18:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia
  240. [2014.07.28 15:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rome - Total War
  241. [2014.07.28 14:58:11 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\ZP\Desktop\OTL.exe
  242. [2014.07.27 18:57:16 | 000,000,000 | ---D | C] -- C:\Users\ZP\Desktop\MOFWAS
  243. [2014.07.26 20:44:12 | 000,000,000 | ---D | C] -- C:\Users\ZP\Desktop\Calradia Imperial Age
  244. [2014.07.24 17:50:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Firefly Studios
  245. [2014.07.24 17:49:45 | 000,000,000 | ---D | C] -- C:\Users\ZP\Documents\CivCity Rome
  246. [2014.07.24 17:46:44 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
  247. [2014.07.24 17:44:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios
  248. [2014.07.21 19:47:36 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mount&Blade Warband
  249. [2014.07.21 09:13:30 | 000,000,000 | ---D | C] -- C:\Users\ZP\Desktop\New folder
  250. [2014.07.20 20:01:05 | 000,000,000 | ---D | C] -- C:\Users\ZP\Desktop\Mount and Blade Warband 1158 crack
  251. [2014.07.19 15:49:10 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Children of the Nile - Enhanced Edition
  252. [2014.07.19 15:49:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Children of the Nile - Enhanced Edition
  253. [2014.07.19 10:56:55 | 000,000,000 | ---D | C] -- C:\Program Files\Landwirtschafts Simulator 2011
  254. [2014.07.18 15:47:31 | 000,000,000 | ---D | C] -- C:\Users\ZP\Desktop\Jurassic park - Operation Genesis [DownloadGamess.Net]
  255. [2014.07.17 14:15:32 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Users\ZP\Desktop\Minecraft Updater.exe
  256. [2014.07.12 18:44:59 | 000,000,000 | ---D | C] -- C:\Windows\Super nude patch 3
  257. [2014.07.12 15:26:34 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
  258. [2014.07.11 16:40:30 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
  259. [2014.07.11 16:39:29 | 002,770,592 | ---- | C] (Beepa Pty Ltd) -- C:\Users\ZP\Desktop\Fraps 3.5.1 Full by Pointer.exe
  260. [2014.07.10 17:59:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft
  261. [2014.07.09 18:11:21 | 000,000,000 | R--D | C] -- C:\Users\ZP\Desktop\the sims 3 crack only
  262. [2014.07.07 20:46:15 | 000,000,000 | ---D | C] -- C:\Users\ZP\Documents\Criterion Games
  263. [2014.07.06 17:40:02 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Easeware
  264. [2014.07.06 17:13:21 | 000,043,192 | ---- | C] (Your Corporation) -- C:\Windows\System32\drivers\hid8101.sys
  265. [2014.07.06 17:13:21 | 000,041,272 | ---- | C] (Your Corporation) -- C:\Windows\System32\drivers\hid7906.sys
  266. [2014.07.06 17:13:21 | 000,040,856 | ---- | C] (Your Corporation) -- C:\Windows\System32\drivers\hid8103.sys
  267. [2014.07.06 17:13:21 | 000,000,000 | ---D | C] -- C:\Windows\USB Vibration
  268. [2014.07.06 17:12:58 | 000,000,000 | ---D | C] -- C:\Program Files\USB Vibration
  269. [2014.07.05 17:46:58 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Local\CrashRpt
  270. [2014.07.05 17:46:00 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Roaming\Mirillis
  271. [2014.07.05 17:46:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis
  272. [2014.07.05 17:45:57 | 000,000,000 | ---D | C] -- C:\Users\ZP\Documents\Action!
  273. [2014.07.05 17:45:49 | 000,000,000 | ---D | C] -- C:\Users\ZP\AppData\Local\Mirillis
  274. [2014.07.05 17:45:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
  275. [2014.07.05 17:45:40 | 000,000,000 | ---D | C] -- C:\Program Files\Mirillis
  276. [2014.06.30 16:03:18 | 000,000,000 | ---D | C] -- C:\Users\ZP\Desktop\GTA
  277. [2014.06.29 18:14:21 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
  278.  
  279. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  280.  
  281. [2014.07.28 22:24:38 | 000,021,248 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  282. [2014.07.28 22:24:38 | 000,021,248 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  283. [2014.07.28 22:22:23 | 000,110,296 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
  284. [2014.07.28 22:21:15 | 000,001,064 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  285. [2014.07.28 22:20:26 | 017,292,208 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\ZP\Desktop\mbam-setup.exe
  286. [2014.07.28 22:17:38 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  287. [2014.07.28 22:17:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  288. [2014.07.28 22:17:26 | 2614,951,936 | -HS- | M] () -- C:\hiberfil.sys
  289. [2014.07.28 22:10:13 | 001,365,551 | ---- | M] () -- C:\Users\ZP\Desktop\AdwCleaner.exe
  290. [2014.07.28 22:01:45 | 000,000,019 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
  291. [2014.07.28 22:01:41 | 000,014,112 | ---- | M] () -- C:\Windows\System32\.crusader
  292. [2014.07.28 22:01:00 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  293. [2014.07.28 21:52:53 | 010,279,264 | ---- | M] (SurfRight B.V.) -- C:\Users\ZP\Desktop\hitmanpro.exe
  294. [2014.07.28 21:52:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  295. [2014.07.28 21:35:26 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.hitmanpro
  296. [2014.07.28 21:26:07 | 000,000,916 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2378688177-1987642750-1806887780-1001UA.job
  297. [2014.07.28 18:25:55 | 000,000,531 | ---- | M] () -- C:\Users\ZP\Desktop\Mafia.lnk
  298. [2014.07.28 16:05:02 | 000,000,403 | ---- | M] () -- C:\Users\Public\Desktop\RTW - Barbarian Invasion.lnk
  299. [2014.07.28 15:59:50 | 000,000,389 | ---- | M] () -- C:\Users\Public\Desktop\Rome Total War.lnk
  300. [2014.07.28 15:26:01 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2378688177-1987642750-1806887780-1001Core.job
  301. [2014.07.28 14:58:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ZP\Desktop\OTL.exe
  302. [2014.07.27 19:03:49 | 000,000,686 | ---- | M] () -- C:\Users\Public\Desktop\Men of War - Assault Squad GoTY.lnk
  303. [2014.07.27 18:50:35 | 000,004,612 | ---- | M] () -- C:\Users\ZP\Documents\cc_20140727_185030.reg
  304. [2014.07.27 18:39:42 | 000,002,186 | RHS- | M] () -- C:\ProgramData\ntuser.pol
  305. [2014.07.27 15:22:21 | 000,001,397 | ---- | M] () -- C:\Users\ZP\Documents\Uz bogat program obilježen blagdan sv. Ane u Osekovu.rtf
  306. [2014.07.27 14:52:56 | 000,001,665 | ---- | M] () -- C:\Users\ZP\Documents\Kamen temeljac za prvi autokamp u SMŽ županiji.rtf
  307. [2014.07.26 20:29:31 | 000,001,010 | ---- | M] () -- C:\Users\ZP\Desktop\mb_warband - Shortcut.lnk
  308. [2014.07.25 10:59:25 | 000,004,053 | ---- | M] () -- C:\Users\ZP\Documents\vijeće Ludina 24.07.2014..rtf
  309. [2014.07.25 10:28:05 | 000,002,208 | ---- | M] () -- C:\Users\ZP\Documents\Gradsko vijeće Popovače prihvatili izmjene proračuna.rtf
  310. [2014.07.24 19:22:00 | 000,660,218 | ---- | M] () -- C:\Windows\System32\perfh009.dat
  311. [2014.07.24 19:22:00 | 000,124,408 | ---- | M] () -- C:\Windows\System32\perfc009.dat
  312. [2014.07.24 19:21:37 | 004,280,478 | ---- | M] () -- C:\Users\ZP\Desktop\Dino Merlin - Školjka (Official Video).mp3
  313. [2014.07.24 17:44:49 | 000,000,605 | ---- | M] () -- C:\Users\Public\Desktop\Play CivCity Rome.lnk
  314. [2014.07.24 15:19:47 | 002,288,179 | ---- | M] () -- C:\Users\ZP\Desktop\TLD_3.3_wbcompat.1.7z
  315. [2014.07.24 14:31:01 | 000,058,097 | ---- | M] () -- C:\Users\ZP\Desktop\Senate.zip
  316. [2014.07.24 12:23:41 | 000,000,957 | ---- | M] () -- C:\Users\ZP\Documents\Vijećnici Velike Ludine usvojili druge izmjene proračuna.rtf
  317. [2014.07.21 19:26:58 | 595,184,821 | ---- | M] () -- C:\Users\ZP\Desktop\TPW_0.5.exe
  318. [2014.07.21 12:22:46 | 000,000,919 | ---- | M] () -- C:\Users\ZP\Documents\Sokolu memorijalni turnir u Donjoj Vlahiničkoj.rtf
  319. [2014.07.21 12:05:29 | 000,000,957 | ---- | M] () -- C:\Users\ZP\Documents\Likovna kolonija pred blagdan sv. Ane.rtf
  320. [2014.07.20 20:00:40 | 006,514,872 | ---- | M] () -- C:\Users\ZP\Desktop\Mount-and-Blade-Warband-1158-crack.rar
  321. [2014.07.20 19:49:09 | 279,540,232 | ---- | M] () -- C:\Users\ZP\Desktop\Calradia_Imperial_Age.rar
  322. [2014.07.20 19:44:58 | 101,128,938 | ---- | M] () -- C:\Users\ZP\Desktop\mb_warband_upgrade_1100_to_1153_2.zip
  323. [2014.07.20 19:01:51 | 040,799,489 | ---- | M] () -- C:\Users\ZP\Desktop\Roman_Invasion_1.3.exe
  324. [2014.07.19 20:48:16 | 000,000,858 | ---- | M] () -- C:\Users\ZP\Desktop\medieval2 - Shortcut.lnk
  325. [2014.07.19 15:51:54 | 000,000,509 | ---- | M] () -- C:\Users\ZP\Desktop\Children of the Nile.lnk
  326. [2014.07.19 15:39:07 | 064,964,754 | ---- | M] () -- C:\Users\ZP\Desktop\CotN_v1.3.0.1_US.exe
  327. [2014.07.19 11:19:19 | 001,383,562 | ---- | M] () -- C:\Users\ZP\Desktop\farming-simulator-2011-crack-v1.0-en_2.zip
  328. [2014.07.18 16:03:02 | 000,001,028 | ---- | M] () -- C:\Users\ZP\Desktop\SimJP - Shortcut.lnk
  329. [2014.07.18 15:46:34 | 095,008,085 | ---- | M] () -- C:\Users\ZP\Desktop\Jurassic park - Operation Genesis [DownloadGamess.Net].rar
  330. [2014.07.18 12:16:37 | 000,001,479 | ---- | M] () -- C:\Users\ZP\Documents\Pripreme za rebalans proračuna Grada Popovača.rtf
  331. [2014.07.17 13:37:44 | 000,042,740 | ---- | M] () -- C:\Users\ZP\Documents\cc_20140717_133739.reg
  332. [2014.07.14 13:52:14 | 000,002,469 | ---- | M] () -- C:\Users\ZP\Documents\likovna kolonija.rtf
  333. [2014.07.12 15:26:34 | 000,000,596 | ---- | M] () -- C:\Users\ZP\Desktop\Alexander.lnk
  334. [2014.07.11 16:40:30 | 000,000,572 | ---- | M] () -- C:\Users\ZP\Desktop\Fraps.lnk
  335. [2014.07.11 16:40:13 | 002,770,592 | ---- | M] (Beepa Pty Ltd) -- C:\Users\ZP\Desktop\Fraps 3.5.1 Full by Pointer.exe
  336. [2014.07.11 16:39:20 | 002,650,932 | ---- | M] () -- C:\Users\ZP\Desktop\Fraps_3.5.9 by-Takis Pan.rar
  337. [2014.07.09 18:11:12 | 006,746,467 | ---- | M] () -- C:\Users\ZP\Desktop\the-sims-3-crack-only.rar
  338. [2014.07.09 13:39:28 | 002,581,523 | ---- | M] () -- C:\Users\ZP\Desktop\Atum-1.7.2-0.6.7.jar
  339. [2014.07.09 11:36:21 | 000,000,969 | ---- | M] () -- C:\Users\ZP\Documents\Subvencije za pčelarstvo i povrtlarstvo.rtf
  340. [2014.07.08 12:50:06 | 000,164,867 | ---- | M] () -- C:\Users\ZP\Desktop\Izbor-udzbenika-osnovne-škole-popovača1.pdf
  341. [2014.07.08 12:29:35 | 000,000,800 | ---- | M] () -- C:\Users\ZP\Documents\U vrtić upisano 36 nove djece.rtf
  342. [2014.07.08 12:20:41 | 000,001,307 | ---- | M] () -- C:\Users\ZP\Documents\Gradsko vijeće Popovače podijelilo komunalne poslove.rtf
  343. [2014.07.07 09:00:08 | 000,000,400 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
  344. [2014.07.06 19:34:33 | 001,120,524 | ---- | M] () -- C:\Users\ZP\Desktop\farming-simulator-2011-crack-v2.1-en.zip
  345. [2014.07.06 19:29:16 | 001,383,562 | ---- | M] () -- C:\Users\ZP\Desktop\farming-simulator-2011-crack-v1.0-en.zip
  346. [2014.07.06 17:12:13 | 003,588,448 | ---- | M] () -- C:\Users\ZP\Desktop\Usb_Driver_setup.rar
  347. [2014.07.06 10:38:44 | 000,002,098 | ---- | M] () -- C:\Users\ZP\Documents\Na stočnom sajmu u Popovači najprodavanija telad i janjci.rtf
  348. [2014.07.05 21:34:37 | 000,001,739 | ---- | M] () -- C:\Users\ZP\Desktop\A.R.S.E.N.A.L. Extended Power.lnk
  349. [2014.07.03 12:35:18 | 000,001,165 | ---- | M] () -- C:\Users\ZP\Documents\Lovrenčić predsjednik ogranka laburista.rtf
  350. [2014.07.01 15:51:46 | 000,001,276 | ---- | M] () -- C:\Users\ZP\Documents\Održan Vatrogasni kup.rtf
  351. [2014.06.30 15:07:40 | 101,128,938 | ---- | M] () -- C:\Users\ZP\Desktop\mb_warband_upgrade_1100_to_1153.zip
  352.  
  353. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  354.  
  355. [2014.07.28 22:21:15 | 000,001,064 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  356. [2014.07.28 22:10:09 | 001,365,551 | ---- | C] () -- C:\Users\ZP\Desktop\AdwCleaner.exe
  357. [2014.07.28 22:01:41 | 000,014,112 | ---- | C] () -- C:\Windows\System32\.crusader
  358. [2014.07.28 18:25:55 | 000,000,531 | ---- | C] () -- C:\Users\ZP\Desktop\Mafia.lnk
  359. [2014.07.28 16:05:02 | 000,000,403 | ---- | C] () -- C:\Users\Public\Desktop\RTW - Barbarian Invasion.lnk
  360. [2014.07.28 15:59:50 | 000,000,389 | ---- | C] () -- C:\Users\Public\Desktop\Rome Total War.lnk
  361. [2014.07.27 19:13:37 | 000,001,208 | ---- | C] () -- C:\Users\ZP\Desktop\mow_assault_squad_ed - Shortcut.lnk
  362. [2014.07.27 19:03:49 | 000,000,686 | ---- | C] () -- C:\Users\Public\Desktop\Men of War - Assault Squad GoTY.lnk
  363. [2014.07.27 18:50:32 | 000,004,612 | ---- | C] () -- C:\Users\ZP\Documents\cc_20140727_185030.reg
  364. [2014.07.27 15:22:21 | 000,001,397 | ---- | C] () -- C:\Users\ZP\Documents\Uz bogat program obilježen blagdan sv. Ane u Osekovu.rtf
  365. [2014.07.27 14:52:56 | 000,001,665 | ---- | C] () -- C:\Users\ZP\Documents\Kamen temeljac za prvi autokamp u SMŽ županiji.rtf
  366. [2014.07.26 20:29:35 | 000,001,010 | ---- | C] () -- C:\Users\ZP\Desktop\mb_warband - Shortcut.lnk
  367. [2014.07.25 10:51:47 | 000,004,053 | ---- | C] () -- C:\Users\ZP\Documents\vijeće Ludina 24.07.2014..rtf
  368. [2014.07.25 10:28:05 | 000,002,208 | ---- | C] () -- C:\Users\ZP\Documents\Gradsko vijeće Popovače prihvatili izmjene proračuna.rtf
  369. [2014.07.24 19:21:31 | 004,280,478 | ---- | C] () -- C:\Users\ZP\Desktop\Dino Merlin - Školjka (Official Video).mp3
  370. [2014.07.24 17:44:49 | 000,000,605 | ---- | C] () -- C:\Users\Public\Desktop\Play CivCity Rome.lnk
  371. [2014.07.24 15:19:44 | 002,288,179 | ---- | C] () -- C:\Users\ZP\Desktop\TLD_3.3_wbcompat.1.7z
  372. [2014.07.24 14:31:04 | 000,058,097 | ---- | C] () -- C:\Users\ZP\Desktop\Senate.zip
  373. [2014.07.24 12:23:41 | 000,000,957 | ---- | C] () -- C:\Users\ZP\Documents\Vijećnici Velike Ludine usvojili druge izmjene proračuna.rtf
  374. [2014.07.21 19:06:42 | 595,184,821 | ---- | C] () -- C:\Users\ZP\Desktop\TPW_0.5.exe
  375. [2014.07.21 12:22:46 | 000,000,919 | ---- | C] () -- C:\Users\ZP\Documents\Sokolu memorijalni turnir u Donjoj Vlahiničkoj.rtf
  376. [2014.07.21 12:05:29 | 000,000,957 | ---- | C] () -- C:\Users\ZP\Documents\Likovna kolonija pred blagdan sv. Ane.rtf
  377. [2014.07.20 19:59:58 | 006,514,872 | ---- | C] () -- C:\Users\ZP\Desktop\Mount-and-Blade-Warband-1158-crack.rar
  378. [2014.07.20 19:39:09 | 101,128,938 | ---- | C] () -- C:\Users\ZP\Desktop\mb_warband_upgrade_1100_to_1153_2.zip
  379. [2014.07.20 19:36:10 | 279,540,232 | ---- | C] () -- C:\Users\ZP\Desktop\Calradia_Imperial_Age.rar
  380. [2014.07.20 19:00:27 | 040,799,489 | ---- | C] () -- C:\Users\ZP\Desktop\Roman_Invasion_1.3.exe
  381. [2014.07.19 20:48:21 | 000,000,858 | ---- | C] () -- C:\Users\ZP\Desktop\medieval2 - Shortcut.lnk
  382. [2014.07.19 15:51:54 | 000,000,509 | ---- | C] () -- C:\Users\ZP\Desktop\Children of the Nile.lnk
  383. [2014.07.19 15:36:45 | 064,964,754 | ---- | C] () -- C:\Users\ZP\Desktop\CotN_v1.3.0.1_US.exe
  384. [2014.07.19 11:19:19 | 001,383,562 | ---- | C] () -- C:\Users\ZP\Desktop\farming-simulator-2011-crack-v1.0-en_2.zip
  385. [2014.07.18 16:03:02 | 000,001,028 | ---- | C] () -- C:\Users\ZP\Desktop\SimJP - Shortcut.lnk
  386. [2014.07.18 15:37:10 | 095,008,085 | ---- | C] () -- C:\Users\ZP\Desktop\Jurassic park - Operation Genesis [DownloadGamess.Net].rar
  387. [2014.07.18 12:16:37 | 000,001,479 | ---- | C] () -- C:\Users\ZP\Documents\Pripreme za rebalans proračuna Grada Popovača.rtf
  388. [2014.07.17 13:37:42 | 000,042,740 | ---- | C] () -- C:\Users\ZP\Documents\cc_20140717_133739.reg
  389. [2014.07.14 13:32:41 | 000,002,469 | ---- | C] () -- C:\Users\ZP\Documents\likovna kolonija.rtf
  390. [2014.07.12 15:26:34 | 000,000,596 | ---- | C] () -- C:\Users\ZP\Desktop\Alexander.lnk
  391. [2014.07.11 16:40:30 | 000,000,572 | ---- | C] () -- C:\Users\ZP\Desktop\Fraps.lnk
  392. [2014.07.11 16:38:59 | 002,650,932 | ---- | C] () -- C:\Users\ZP\Desktop\Fraps_3.5.9 by-Takis Pan.rar
  393. [2014.07.09 18:10:28 | 006,746,467 | ---- | C] () -- C:\Users\ZP\Desktop\the-sims-3-crack-only.rar
  394. [2014.07.09 13:39:28 | 002,581,523 | ---- | C] () -- C:\Users\ZP\Desktop\Atum-1.7.2-0.6.7.jar
  395. [2014.07.09 11:36:21 | 000,000,969 | ---- | C] () -- C:\Users\ZP\Documents\Subvencije za pčelarstvo i povrtlarstvo.rtf
  396. [2014.07.08 12:50:06 | 000,164,867 | ---- | C] () -- C:\Users\ZP\Desktop\Izbor-udzbenika-osnovne-škole-popovača1.pdf
  397. [2014.07.08 12:29:35 | 000,000,800 | ---- | C] () -- C:\Users\ZP\Documents\U vrtić upisano 36 nove djece.rtf
  398. [2014.07.08 12:20:41 | 000,001,307 | ---- | C] () -- C:\Users\ZP\Documents\Gradsko vijeće Popovače podijelilo komunalne poslove.rtf
  399. [2014.07.06 19:34:33 | 001,120,524 | ---- | C] () -- C:\Users\ZP\Desktop\farming-simulator-2011-crack-v2.1-en.zip
  400. [2014.07.06 19:29:12 | 001,383,562 | ---- | C] () -- C:\Users\ZP\Desktop\farming-simulator-2011-crack-v1.0-en.zip
  401. [2014.07.06 17:40:01 | 000,000,400 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job
  402. [2014.07.06 17:13:21 | 000,008,316 | ---- | C] () -- C:\Windows\System32\drivers\hid8103.cat
  403. [2014.07.06 17:13:21 | 000,008,316 | ---- | C] () -- C:\Windows\System32\drivers\hid8101.cat
  404. [2014.07.06 17:13:21 | 000,008,316 | ---- | C] () -- C:\Windows\System32\drivers\hid7906.cat
  405. [2014.07.06 17:12:13 | 003,588,448 | ---- | C] () -- C:\Users\ZP\Desktop\Usb_Driver_setup.rar
  406. [2014.07.06 10:38:44 | 000,002,098 | ---- | C] () -- C:\Users\ZP\Documents\Na stočnom sajmu u Popovači najprodavanija telad i janjci.rtf
  407. [2014.07.05 14:15:48 | 1363,148,800 | ---- | C] () -- C:\Users\ZP\Desktop\Medieval.2.Total.War-RELOADED.7z.001
  408. [2014.07.01 15:51:46 | 000,001,276 | ---- | C] () -- C:\Users\ZP\Documents\Održan Vatrogasni kup.rtf
  409. [2014.06.30 15:07:52 | 102,516,655 | ---- | C] () -- C:\Users\ZP\Desktop\mb_warband_upgrade_1100_to_1153.exe
  410. [2014.06.30 15:04:08 | 101,128,938 | ---- | C] () -- C:\Users\ZP\Desktop\mb_warband_upgrade_1100_to_1153.zip
  411. [2014.05.12 20:44:55 | 000,000,632 | RHS- | C] () -- C:\Users\ZP\ntuser.pol
  412. [2014.04.10 13:02:58 | 000,002,706 | ---- | C] () -- C:\Users\ZP\AppData\Local\recently-used.xbel
  413. [2014.02.13 17:14:58 | 000,002,186 | RHS- | C] () -- C:\ProgramData\ntuser.pol
  414. [2013.12.15 17:37:15 | 000,005,170 | ---- | C] () -- C:\Windows\Scan.ini
  415. [2013.12.04 23:43:55 | 000,007,168 | ---- | C] () -- C:\Users\ZP\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  416. [2013.11.30 21:40:34 | 000,000,017 | ---- | C] () -- C:\Users\ZP\AppData\Local\resmon.resmoncfg
  417. [2013.11.16 23:34:17 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
  418. [2013.11.14 00:50:35 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
  419. [2013.11.14 00:47:22 | 000,982,220 | ---- | C] () -- C:\Windows\System32\igkrng500.bin
  420. [2013.11.14 00:47:22 | 000,092,216 | ---- | C] () -- C:\Windows\System32\igfcg500m.bin
  421. [2013.11.14 00:47:21 | 000,439,300 | ---- | C] () -- C:\Windows\System32\igcompkrng500.bin
  422. [2013.11.14 00:47:07 | 000,134,592 | ---- | C] () -- C:\Windows\System32\igfcg500.bin
  423. [2003.04.09 05:28:44 | 000,233,472 | R--- | C] () -- C:\Users\ZP\AppData\Roaming\MafiaSetup.exe
  424.  
  425. [color=#E56717]========== ZeroAccess Check ==========[/color]
  426.  
  427. [2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  428.  
  429. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  430.  
  431. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  432.  
  433. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  434. "" = %SystemRoot%\system32\shell32.dll -- [2010.11.20 23:29:11 | 012,872,192 | ---- | M] (Microsoft Corporation)
  435. "ThreadingModel" = Apartment
  436.  
  437. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  438. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 23:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
  439. "ThreadingModel" = Free
  440.  
  441. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  442. "" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
  443. "ThreadingModel" = Both
  444.  
  445. [color=#E56717]========== LOP Check ==========[/color]
  446.  
  447. [2014.07.17 14:15:51 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\.minecraft
  448. [2014.03.04 11:44:34 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\.mono
  449. [2013.11.14 00:43:13 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Agnitum
  450. [2013.11.16 00:06:25 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\BinarySense
  451. [2014.01.24 18:16:29 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
  452. [2014.07.28 22:02:28 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\DMCache
  453. [2014.07.06 17:40:02 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Easeware
  454. [2014.07.27 18:50:01 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\IDM
  455. [2013.11.13 21:55:08 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\ImgBurn
  456. [2013.12.15 19:57:14 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Kalypso Media
  457. [2014.07.05 17:46:00 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Mirillis
  458. [2014.04.18 16:04:46 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Mount&Blade
  459. [2014.07.13 14:31:20 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Mount&Blade Warband
  460. [2014.02.23 12:38:00 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Mount&Blade With Fire and Sword
  461. [2013.11.18 10:58:19 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Nokia
  462. [2013.11.15 13:33:23 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\OpenOffice.org
  463. [2013.11.13 21:37:12 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Opera
  464. [2014.01.06 22:08:51 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Oracle
  465. [2014.01.07 01:05:59 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Origin
  466. [2013.11.18 10:57:49 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\PC Suite
  467. [2014.03.03 16:04:57 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\SolidDocuments
  468. [2013.11.14 12:11:49 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\SumatraPDF
  469. [2014.06.17 19:22:46 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\The Creative Assembly
  470. [2014.07.27 18:50:01 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\TS3Client
  471. [2014.03.02 13:05:05 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Ubisoft
  472. [2014.03.04 11:50:41 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Unity
  473. [2014.07.28 18:23:02 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\uTorrent
  474. [2014.05.31 12:46:37 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\ValuSoft
  475. [2014.02.03 20:26:32 | 000,000,000 | ---D | M] -- C:\Users\ZP\AppData\Roaming\Wargaming.net
  476.  
  477. [color=#E56717]========== Purity Check ==========[/color]
  478.  
  479.  
  480.  
  481. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!