API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 3rd, 2012
94
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.79 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 3.3.2012. 21:11:40 - Run 1
  2. OTL by OldTimer - Version 3.2.35.0 Folder = C:\Users\Grga\Desktop
  3. 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 4,25 Gb Total Physical Memory | 2,95 Gb Available Physical Memory | 69,59% Memory free
  8. 8,49 Gb Paging File | 6,57 Gb Available in Paging File | 77,38% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 244,04 Gb Total Space | 203,70 Gb Free Space | 83,47% Space Free | Partition Type: NTFS
  13. Drive D: | 352,03 Gb Total Space | 164,25 Gb Free Space | 46,66% Space Free | Partition Type: NTFS
  14. Drive G: | 100,00 Mb Total Space | 70,16 Mb Free Space | 70,17% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: GRGA-PC | User Name: Grga | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2012.03.03 21:08:59 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\Grga\Desktop\OTL.exe
  23. PRC - [2012.02.18 17:22:06 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  24. PRC - [2011.12.08 01:36:42 | 000,421,736 | ---- | M] (Apple Inc.) -- D:\iPhone\iTunesHelper.exe
  25. PRC - [2011.11.28 19:01:24 | 003,744,552 | ---- | M] (AVAST Software) -- D:\Programi\AvastUI.exe
  26. PRC - [2011.11.15 04:50:22 | 000,312,376 | ---- | M] (Power Software Ltd) -- C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
  27. PRC - [2011.10.09 11:54:58 | 000,055,144 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
  28. PRC - [2011.03.31 13:38:36 | 000,334,416 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
  29. PRC - [2011.03.31 13:38:34 | 001,092,688 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
  30. PRC - [2009.07.14 02:14:47 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
  31.  
  32.  
  33. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  34.  
  35. MOD - [2012.02.18 17:22:06 | 001,911,768 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
  36. MOD - [2011.11.01 23:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
  37. MOD - [2011.11.01 23:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
  38.  
  39.  
  40. [color=#E56717]========== Win32 Services (SafeList) ==========[/color]
  41.  
  42. SRV:[b]64bit:[/b] - [2011.04.25 06:31:58 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  43. SRV:[b]64bit:[/b] - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  44. SRV:[b]64bit:[/b] - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  45. SRV - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  46. SRV - [2011.11.28 19:01:23 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- D:\Programi\AvastSvc.exe -- (avast! Antivirus)
  47. SRV - [2011.03.31 13:38:36 | 000,352,848 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
  48. SRV - [2011.03.13 09:58:30 | 000,074,912 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
  49. SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  50. SRV - [2009.09.23 12:38:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
  51. SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  52.  
  53.  
  54. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  55.  
  56. DRV:[b]64bit:[/b] - [2011.11.28 18:54:06 | 000,591,192 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  57. DRV:[b]64bit:[/b] - [2011.11.28 18:53:58 | 000,304,472 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  58. DRV:[b]64bit:[/b] - [2011.11.28 18:52:22 | 000,042,328 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
  59. DRV:[b]64bit:[/b] - [2011.11.28 18:52:20 | 000,058,712 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
  60. DRV:[b]64bit:[/b] - [2011.11.28 18:52:11 | 000,066,904 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  61. DRV:[b]64bit:[/b] - [2011.11.28 18:51:53 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
  62. DRV:[b]64bit:[/b] - [2011.11.15 04:50:14 | 000,125,376 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
  63. DRV:[b]64bit:[/b] - [2011.08.11 16:15:45 | 004,726,336 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
  64. DRV:[b]64bit:[/b] - [2011.05.10 07:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  65. DRV:[b]64bit:[/b] - [2011.04.25 07:03:28 | 009,257,472 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  66. DRV:[b]64bit:[/b] - [2011.04.25 05:55:38 | 000,300,544 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  67. DRV:[b]64bit:[/b] - [2011.03.13 09:58:42 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
  68. DRV:[b]64bit:[/b] - [2011.01.25 04:48:04 | 000,077,424 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  69. DRV:[b]64bit:[/b] - [2010.12.15 16:06:46 | 000,047,232 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
  70. DRV:[b]64bit:[/b] - [2010.12.01 09:12:06 | 000,250,984 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
  71. DRV:[b]64bit:[/b] - [2010.11.17 01:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  72. DRV:[b]64bit:[/b] - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  73. DRV:[b]64bit:[/b] - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  74. DRV:[b]64bit:[/b] - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  75. DRV:[b]64bit:[/b] - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  76. DRV:[b]64bit:[/b] - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  77. DRV:[b]64bit:[/b] - [2009.07.14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  78. DRV:[b]64bit:[/b] - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  79. DRV:[b]64bit:[/b] - [2009.06.10 21:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)
  80. DRV:[b]64bit:[/b] - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  81. DRV:[b]64bit:[/b] - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  82. DRV:[b]64bit:[/b] - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  83. DRV:[b]64bit:[/b] - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  84. DRV:[b]64bit:[/b] - [2009.05.18 12:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  85. DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  86.  
  87.  
  88. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  89.  
  90.  
  91. [color=#E56717]========== Internet Explorer ==========[/color]
  92.  
  93. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  94. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  95. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  96. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  97. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  98.  
  99. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
  100. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
  101. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = hr
  102. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 33 AC 75 D7 44 58 CC 01 [binary data]
  103. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  104. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://findgala.com/?&uid=8050&q={searchTerms}
  105. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  106. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  107.  
  108. [color=#E56717]========== FireFox ==========[/color]
  109.  
  110.  
  111. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
  112. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
  113. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  114. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  115. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\iPhone\Mozilla Plugins\npitunes.dll ()
  116. FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
  117. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  118. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
  119. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
  120. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
  121. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
  122. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  123. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Grga\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  124.  
  125. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: D:\Programi\WebRep\FF [2012.02.15 02:15:34 | 000,000,000 | ---D | M]
  126. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.02.18 17:22:06 | 000,000,000 | ---D | M]
  127. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.02.15 20:59:25 | 000,000,000 | ---D | M]
  128. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
  129.  
  130. [2011.11.02 20:30:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Grga\AppData\Roaming\Mozilla\Extensions
  131. [2012.02.24 02:12:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Grga\AppData\Roaming\Mozilla\Firefox\Profiles\83etrm8b.default\extensions
  132. [2012.02.14 15:17:28 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Grga\AppData\Roaming\Mozilla\Firefox\Profiles\83etrm8b.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
  133. [2012.02.18 14:17:42 | 000,000,000 | ---D | M] (New Tab King) -- C:\Users\Grga\AppData\Roaming\Mozilla\Firefox\Profiles\83etrm8b.default\extensions\{FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}
  134. [2012.01.04 00:26:03 | 000,000,000 | ---D | M] (EHTip) -- C:\Users\Grga\AppData\Roaming\Mozilla\Firefox\Profiles\83etrm8b.default\extensions\ehtip@robertkatic
  135. [2012.01.04 00:14:16 | 000,000,000 | ---D | M] (SpeedFox) -- C:\Users\Grga\AppData\Roaming\Mozilla\Firefox\Profiles\83etrm8b.default\extensions\jid1-uabu5A9hduqzCw@jetpack
  136. [2012.02.18 17:22:08 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
  137. () (No name found) -- C:\USERS\GRGA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\83ETRM8B.DEFAULT\EXTENSIONS\{C0C9A2C7-2E5C-4447-BC53-97718BC91E1B}.XPI
  138. () (No name found) -- C:\USERS\GRGA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\83ETRM8B.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
  139. () (No name found) -- C:\USERS\GRGA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\83ETRM8B.DEFAULT\EXTENSIONS\ICH@MALTEGOETZ.DE.XPI
  140. () (No name found) -- C:\USERS\GRGA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\83ETRM8B.DEFAULT\EXTENSIONS\SKIPSCREEN@SKIPSCREEN.XPI
  141. [2012.02.15 02:15:34 | 000,000,000 | ---D | M] (avast! WebRep) -- D:\PROGRAMI\WEBREP\FF
  142. [2012.02.18 17:22:06 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
  143. [2011.08.11 17:38:48 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
  144. [2012.02.13 13:44:43 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
  145. [2012.02.13 13:44:43 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
  146.  
  147. [color=#E56717]========== Chrome ==========[/color]
  148.  
  149. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\gcswf32.dll
  150. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
  151. CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
  152. CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
  153. CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
  154. CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
  155. CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
  156. CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
  157. CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
  158. CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
  159. CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
  160. CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
  161. CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
  162. CHR - plugin: Chrome NaCl (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
  163. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\14.0.835.202\pdf.dll
  164. CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
  165. CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
  166. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
  167. CHR - plugin: Default Plug-in (Enabled) = default_plugin
  168.  
  169. O1 HOSTS File: ([2012.02.15 02:11:13 | 000,001,398 | RHS- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  170. O1 - Hosts: 127.0.0.1 localhost
  171. O1 - Hosts: ::1 localhost
  172. O1 - Hosts: 108.163.215.51 www.google-analytics.com.
  173. O1 - Hosts: 108.163.215.51 ad-emea.doubleclick.net.
  174. O1 - Hosts: 108.163.215.51 www.statcounter.com.
  175. O1 - Hosts: 67.215.245.19 www.google-analytics.com.
  176. O1 - Hosts: 67.215.245.19 ad-emea.doubleclick.net.
  177. O1 - Hosts: 67.215.245.19 www.statcounter.com.
  178. O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programi\aswWebRepIE64.dll (AVAST Software)
  179. O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
  180. O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programi\aswWebRepIE.dll (AVAST Software)
  181. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - D:\Programi\aswWebRepIE64.dll (AVAST Software)
  182. O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programi\aswWebRepIE.dll (AVAST Software)
  183. O4:[b]64bit:[/b] - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
  184. O4:[b]64bit:[/b] - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations)
  185. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
  186. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  187. O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
  188. O4 - HKLM..\Run: [avast] D:\Programi\avastUI.exe (AVAST Software)
  189. O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Dolby PCEE4\pcee4.exe (Dolby Laboratories Inc.)
  190. O4 - HKLM..\Run: [iTunesHelper] D:\iPhone\iTunesHelper.exe (Apple Inc.)
  191. O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
  192. O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (Power Software Ltd)
  193. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  194. O4 - HKCU..\Run: [Facebook Update] C:\Users\Grga\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
  195. O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_Plugin.exe (Adobe Systems, Inc.)
  196. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  197. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  198. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  199. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  200. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
  201. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
  202. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
  203. O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
  204. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  205. O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  206. O13[b]64bit:[/b] - gopher Prefix: missing
  207. O13 - gopher Prefix: missing
  208. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  209. O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
  210. O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  211. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
  212. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  213. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CC8D6C8F-0155-41AA-A316-9A6E633A3E01}: DhcpNameServer = 192.168.1.1
  214. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  215. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  216. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  217. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  218. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  219. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  220. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  221. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  222. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  223. O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
  224. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  225. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  226. O32 - HKLM CDRom: AutoRun - 1
  227. O34 - HKLM BootExecute: (autocheck autochk *)
  228. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  229. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  230. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  231. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  232. O37 - HKLM\...com [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found
  233. O37 - HKLM\...exe [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found
  234.  
  235. NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  236.  
  237. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  238. Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
  239. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  240. Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
  241. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  242. Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
  243. Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
  244. Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
  245.  
  246. CREATERESTOREPOINT
  247. Error creating restore point.
  248.  
  249. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  250.  
  251. [2012.03.03 21:08:35 | 000,585,216 | ---- | C] (OldTimer Tools) -- C:\Users\Grga\Desktop\OTL.exe
  252. [2012.02.19 23:21:14 | 000,000,000 | ---D | C] -- C:\Windows\pss
  253. [2012.02.15 21:01:03 | 000,000,000 | ---D | C] -- C:\Users\Grga\AppData\Roaming\OpenOffice.org
  254. [2012.02.15 21:00:29 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
  255. [2012.02.15 20:59:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3
  256. [2012.02.15 19:27:10 | 000,000,000 | ---D | C] -- C:\ProgramData\ParetoLogic
  257. [2012.02.15 19:25:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Cached Installations
  258. [2012.02.15 19:24:57 | 007,072,560 | ---- | C] (ParetoLogic ) -- C:\Users\Grga\Pareto_DR_Setup_RW.exe
  259. [2012.02.15 02:16:24 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
  260. [2012.02.15 02:16:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
  261. [2012.02.15 02:16:23 | 000,304,472 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  262. [2012.02.15 02:16:20 | 000,042,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
  263. [2012.02.15 02:16:19 | 000,058,712 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
  264. [2012.02.15 02:16:18 | 000,591,192 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  265. [2012.02.15 02:16:16 | 000,066,904 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  266. [2012.02.15 02:16:15 | 000,256,960 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  267. [2012.02.15 02:15:31 | 000,199,816 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
  268. [2012.02.15 02:15:31 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  269. [2012.02.15 02:09:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\AVTISE
  270. [2012.02.15 02:09:59 | 000,000,000 | -HSD | C] -- C:\Users\Grga\AppData\Roaming\AV Security Essentials
  271. [2012.02.15 02:09:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\669078
  272.  
  273. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  274.  
  275. [2012.03.03 21:34:01 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  276. [2012.03.03 21:29:29 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3745964535-3471122318-3036582404-1000UA.job
  277. [2012.03.03 21:29:12 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3745964535-3471122318-3036582404-1000Core.job
  278. [2012.03.03 21:08:59 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\Grga\Desktop\OTL.exe
  279. [2012.03.03 18:00:00 | 000,000,464 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration.job
  280. [2012.03.03 11:50:51 | 001,318,698 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  281. [2012.03.03 11:50:51 | 000,720,800 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  282. [2012.03.03 11:50:51 | 000,006,568 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  283. [2012.03.03 11:48:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  284. [2012.03.02 22:34:01 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  285. [2012.02.29 18:13:55 | 000,016,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  286. [2012.02.29 18:13:55 | 000,016,944 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  287. [2012.02.29 18:05:37 | 3418,542,080 | -HS- | M] () -- C:\hiberfil.sys
  288. [2012.02.22 11:42:30 | 000,372,376 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  289. [2012.02.21 20:18:22 | 000,031,111 | ---- | M] () -- C:\Users\Grga\Desktop\Untitled.png
  290. [2012.02.15 21:00:29 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
  291. [2012.02.15 20:55:52 | 158,067,944 | ---- | M] () -- C:\Users\Grga\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
  292. [2012.02.15 20:06:23 | 000,000,224 | ---- | M] () -- C:\Windows\SysWow64\9B13A86D.plf
  293. [2012.02.15 19:24:58 | 007,072,560 | ---- | M] (ParetoLogic ) -- C:\Users\Grga\Pareto_DR_Setup_RW.exe
  294. [2012.02.15 02:16:24 | 000,000,591 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
  295. [2012.02.15 02:16:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
  296. [2012.02.15 02:11:13 | 000,001,398 | RHS- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
  297. [2012.02.15 02:10:01 | 000,002,549 | ---- | M] () -- C:\Users\Grga\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
  298. [2012.02.15 02:10:01 | 000,001,649 | ---- | M] () -- C:\Users\Grga\Application Data\Microsoft\Internet Explorer\Quick Launch\AV Security Essentials.lnk
  299. [2012.02.14 00:45:32 | 000,004,096 | -H-- | M] () -- C:\Users\Grga\AppData\Local\keyfile3.drm
  300. [2012.02.07 19:11:32 | 000,001,021 | ---- | M] () -- C:\Users\Grga\Desktop\µTorrent.lnk
  301.  
  302. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  303.  
  304. [2012.02.21 20:16:09 | 000,031,111 | ---- | C] () -- C:\Users\Grga\Desktop\Untitled.png
  305. [2012.02.15 21:00:29 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
  306. [2012.02.15 20:50:34 | 158,067,944 | ---- | C] () -- C:\Users\Grga\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
  307. [2012.02.15 20:06:23 | 000,000,224 | ---- | C] () -- C:\Windows\SysWow64\9B13A86D.plf
  308. [2012.02.15 19:27:22 | 000,000,464 | ---- | C] () -- C:\Windows\tasks\ParetoLogic Registration.job
  309. [2012.02.15 02:16:24 | 000,000,591 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
  310. [2012.02.15 02:16:15 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
  311. [2012.02.15 02:10:01 | 000,001,655 | ---- | C] () -- C:\Users\Grga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AV Security Essentials.lnk
  312. [2012.02.15 02:10:01 | 000,001,649 | ---- | C] () -- C:\Users\Grga\Application Data\Microsoft\Internet Explorer\Quick Launch\AV Security Essentials.lnk
  313. [2012.02.14 00:45:32 | 000,004,096 | -H-- | C] () -- C:\Users\Grga\AppData\Local\keyfile3.drm
  314. [2011.11.27 11:54:08 | 000,764,126 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  315. [2011.08.11 15:55:06 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  316. [2011.08.11 15:52:37 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  317. [2011.08.11 14:00:48 | 000,004,608 | ---- | C] () -- C:\Users\Grga\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  318. [2011.08.11 13:10:54 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
  319. [2011.08.11 13:10:53 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
  320. [2011.08.11 13:10:49 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
  321. [2011.08.11 13:10:49 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
  322. [2011.08.11 13:10:49 | 000,074,752 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
  323. [2011.03.21 18:56:22 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
  324.  
  325. [color=#E56717]========== Custom Scans ==========[/color]
  326.  
  327.  
  328. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  329. [2011.11.27 12:39:54 | 000,000,043 | ---- | M] () -- C:\END
  330. [2012.02.15 19:27:17 | 000,000,000 | ---- | M] () -- C:\FileRecovery.log
  331. [2012.02.29 18:05:37 | 3418,542,080 | -HS- | M] () -- C:\hiberfil.sys
  332. [2012.02.29 18:05:41 | 263,090,175 | -HS- | M] () -- C:\pagefile.sys
  333.  
  334. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  335. [2009.07.14 06:32:31 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
  336. [2009.07.14 06:32:31 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
  337. [2009.07.14 06:32:31 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
  338. [2009.07.14 06:32:31 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
  339.  
  340. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  341.  
  342. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  343. [2009.06.10 21:49:50 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
  344.  
  345. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  346.  
  347. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  348.  
  349. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  350.  
  351. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  352.  
  353. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  354.  
  355. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  356.  
  357. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  358.  
  359. [color=#A23BEC]< %systemroot%\*.png >[/color]
  360.  
  361. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  362. [2011.11.28 19:01:25 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  363.  
  364. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  365.  
  366. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  367.  
  368. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  369.  
  370. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  371.  
  372. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  373. [2009.07.14 05:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  374.  
  375. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  376.  
  377. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  378.  
  379. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  380.  
  381. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  382.  
  383. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  384.  
  385. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  386.  
  387. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  388.  
  389. [color=#A23BEC]< %systemroot%\*.config >[/color]
  390.  
  391. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  392.  
  393. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  394. [2011.08.11 17:36:32 | 000,000,221 | -HS- | M] () -- C:\Users\Grga\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  395.  
  396. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  397. [2012.03.03 21:08:59 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\Grga\Desktop\OTL.exe
  398.  
  399. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  400.  
  401. [color=#A23BEC]< %systemroot%\*.src >[/color]
  402.  
  403. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  404.  
  405. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  406.  
  407. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  408.  
  409. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  410.  
  411. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  412.  
  413. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  414.  
  415. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  416.  
  417. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  418.  
  419. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  420.  
  421. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  422.  
  423. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  424.  
  425. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  426.  
  427. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  428.  
  429. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  430.  
  431. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  432. [2012.02.15 20:55:52 | 158,067,944 | ---- | M] () -- C:\Users\Grga\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
  433. [2012.02.15 19:24:58 | 007,072,560 | ---- | M] (ParetoLogic ) -- C:\Users\Grga\Pareto_DR_Setup_RW.exe
  434.  
  435. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  436. [2009.06.10 22:20:04 | 000,000,802 | ---- | M] () -- C:\Windows\ADDINS\FXSEXT.ecf
  437.  
  438. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  439.  
  440. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  441.  
  442. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  443.  
  444. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  445.  
  446. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  447.  
  448. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  449.  
  450. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  451.  
  452. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  453.  
  454. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  455.  
  456. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  457.  
  458. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  459. [2011.08.11 15:38:30 | 000,000,402 | -HS- | M] () -- C:\Users\Grga\Favorites\desktop.ini
  460.  
  461. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  462. [2009.07.14 02:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\mofcomp.exe
  463. [2009.07.14 02:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WinMgmt.exe
  464. [2009.07.14 02:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIADAP.exe
  465. [2009.07.14 02:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIC.exe
  466. [2009.07.14 02:14:47 | 000,254,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiPrvSE.exe
  467.  
  468. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  469.  
  470. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  471.  
  472. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!