API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 15th, 2016
256
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 73.09 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 15.04.2016 19:02:27 - Run 3
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sanda\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.18230)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 3,86 Gb Total Physical Memory | 2,90 Gb Available Physical Memory | 75,10% Memory free
  8. 7,72 Gb Paging File | 6,80 Gb Available in Paging File | 88,09% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 288,34 Gb Total Space | 192,76 Gb Free Space | 66,85% Space Free | Partition Type: NTFS
  13.  
  14. Computer Name: TOSHIBA | User Name: Sanda | Logged in as Administrator.
  15. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
  16. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  17.  
  18. [color=#E56717]========== Processes (SafeList) ==========[/color]
  19.  
  20. PRC - [2016.04.15 19:00:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  21. PRC - [2016.03.20 19:45:25 | 000,392,136 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  22.  
  23.  
  24. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  25.  
  26.  
  27. [color=#E56717]========== Services (SafeList) ==========[/color]
  28.  
  29. SRV:[b]64bit:[/b] - [2016.02.13 14:25:39 | 000,237,096 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  30. SRV:[b]64bit:[/b] - [2016.02.08 20:14:05 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  31. SRV:[b]64bit:[/b] - [2015.07.23 02:02:54 | 001,390,592 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  32. SRV:[b]64bit:[/b] - [2013.08.12 14:11:04 | 000,366,600 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
  33. SRV:[b]64bit:[/b] - [2013.08.12 14:11:04 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
  34. SRV:[b]64bit:[/b] - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  35. SRV:[b]64bit:[/b] - [2009.11.10 14:54:54 | 000,824,688 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TPHM\TPCHSrv.exe -- (TPCHSrv)
  36. SRV:[b]64bit:[/b] - [2009.11.05 23:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
  37. SRV:[b]64bit:[/b] - [2009.11.05 10:19:12 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
  38. SRV:[b]64bit:[/b] - [2009.10.21 10:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
  39. SRV:[b]64bit:[/b] - [2009.09.28 15:46:02 | 000,251,760 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files\Toshiba\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
  40. SRV - [2016.04.08 16:03:17 | 000,269,504 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  41. SRV - [2016.03.20 19:45:24 | 000,146,888 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  42. SRV - [2016.01.14 11:59:02 | 002,945,312 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
  43. SRV - [2016.01.05 12:14:12 | 000,446,240 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe -- (AdvancedSystemCareService9)
  44. SRV - [2015.12.14 00:48:02 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  45. SRV - [2015.12.14 00:18:19 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  46. SRV - [2015.12.14 00:18:19 | 000,143,144 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  47. SRV - [2015.11.04 15:40:54 | 000,882,464 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice)
  48. SRV - [2015.07.09 13:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  49. SRV - [2014.04.12 00:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  50. SRV - [2014.03.21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  51. SRV - [2011.02.11 14:45:52 | 000,054,136 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
  52. SRV - [2010.10.12 19:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
  53. SRV - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
  54. SRV - [2009.10.27 21:12:14 | 000,252,784 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
  55. SRV - [2009.10.21 11:40:44 | 000,193,904 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
  56. SRV - [2009.10.15 17:49:56 | 000,116,104 | ---- | M] (Toshiba Europe GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
  57. SRV - [2009.10.02 14:26:12 | 000,013,336 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  58. SRV - [2009.09.30 20:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  59. SRV - [2009.09.30 20:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  60. SRV - [2009.03.10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
  61. SRV - [2007.01.04 20:48:50 | 000,112,152 | ---- | M] (InterVideo) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)
  62.  
  63.  
  64. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  65.  
  66. DRV:[b]64bit:[/b] - [2016.03.31 16:24:50 | 000,192,216 | ---- | M] (Malwarebytes) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
  67. DRV:[b]64bit:[/b] - [2016.03.09 21:02:24 | 001,070,904 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx)
  68. DRV:[b]64bit:[/b] - [2016.03.09 21:02:14 | 000,107,792 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswmonflt.sys -- (aswMonFlt)
  69. DRV:[b]64bit:[/b] - [2016.02.28 22:07:35 | 000,463,744 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
  70. DRV:[b]64bit:[/b] - [2016.02.13 14:26:39 | 000,287,016 | ---- | M] (AVAST Software) [Kernel | Boot | Stopped] -- C:\windows\SysNative\drivers\aswvmm.sys -- (aswVmm)
  71. DRV:[b]64bit:[/b] - [2016.02.13 14:25:50 | 000,165,344 | ---- | M] (AVAST Software) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
  72. DRV:[b]64bit:[/b] - [2016.02.13 14:25:50 | 000,103,064 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  73. DRV:[b]64bit:[/b] - [2016.02.13 14:25:50 | 000,074,544 | ---- | M] (AVAST Software) [Kernel | Boot | Stopped] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  74. DRV:[b]64bit:[/b] - [2016.02.13 14:25:50 | 000,037,656 | ---- | M] (AVAST Software) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  75. DRV:[b]64bit:[/b] - [2016.01.04 15:08:10 | 001,026,304 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  76. DRV:[b]64bit:[/b] - [2015.09.29 16:01:36 | 000,103,448 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  77. DRV:[b]64bit:[/b] - [2015.09.13 20:50:24 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  78. DRV:[b]64bit:[/b] - [2015.09.13 20:49:58 | 001,226,344 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se)
  79. DRV:[b]64bit:[/b] - [2015.09.13 20:45:49 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  80. DRV:[b]64bit:[/b] - [2015.09.13 20:45:36 | 000,053,624 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
  81. DRV:[b]64bit:[/b] - [2015.04.29 14:04:07 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
  82. DRV:[b]64bit:[/b] - [2014.06.04 15:17:30 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
  83. DRV:[b]64bit:[/b] - [2014.06.03 03:05:44 | 000,017,600 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver)
  84. DRV:[b]64bit:[/b] - [2013.01.18 21:27:11 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
  85. DRV:[b]64bit:[/b] - [2013.01.18 21:27:11 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
  86. DRV:[b]64bit:[/b] - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  87. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  88. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  89. DRV:[b]64bit:[/b] - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  90. DRV:[b]64bit:[/b] - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  91. DRV:[b]64bit:[/b] - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  92. DRV:[b]64bit:[/b] - [2009.10.15 21:11:26 | 000,307,760 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  93. DRV:[b]64bit:[/b] - [2009.10.02 13:58:58 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  94. DRV:[b]64bit:[/b] - [2009.09.24 18:55:00 | 000,212,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd)
  95. DRV:[b]64bit:[/b] - [2009.09.17 13:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)
  96. DRV:[b]64bit:[/b] - [2009.09.14 15:30:26 | 000,058,744 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb)
  97. DRV:[b]64bit:[/b] - [2009.08.05 13:56:04 | 000,063,856 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd)
  98. DRV:[b]64bit:[/b] - [2009.07.30 20:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
  99. DRV:[b]64bit:[/b] - [2009.07.28 21:02:10 | 000,081,768 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom)
  100. DRV:[b]64bit:[/b] - [2009.07.28 19:24:12 | 000,081,408 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdpe64.sys -- (risdpcie)
  101. DRV:[b]64bit:[/b] - [2009.07.24 16:57:08 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
  102. DRV:[b]64bit:[/b] - [2009.07.24 12:33:14 | 000,026,472 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds)
  103. DRV:[b]64bit:[/b] - [2009.07.14 14:25:14 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ.SYS -- (TVALZ)
  104. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  105. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  106. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  107. DRV:[b]64bit:[/b] - [2009.07.14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
  108. DRV:[b]64bit:[/b] - [2009.07.04 20:27:02 | 000,055,808 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpe64.sys -- (rixdpcie)
  109. DRV:[b]64bit:[/b] - [2009.07.02 09:54:52 | 000,060,416 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspe64.sys -- (rimspci)
  110. DRV:[b]64bit:[/b] - [2009.06.29 17:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
  111. DRV:[b]64bit:[/b] - [2009.06.29 11:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
  112. DRV:[b]64bit:[/b] - [2009.06.22 18:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
  113. DRV:[b]64bit:[/b] - [2009.06.20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  114. DRV:[b]64bit:[/b] - [2009.06.19 20:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
  115. DRV:[b]64bit:[/b] - [2009.06.19 11:00:26 | 000,094,336 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid)
  116. DRV:[b]64bit:[/b] - [2009.06.19 10:59:32 | 000,050,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp)
  117. DRV:[b]64bit:[/b] - [2009.06.17 13:01:04 | 000,054,664 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte)
  118. DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  119. DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  120. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  121. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  122. DRV:[b]64bit:[/b] - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
  123. DRV:[b]64bit:[/b] - [2007.04.16 21:51:50 | 000,014,112 | R--- | M] (InterVideo) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
  124. DRV - [2015.09.13 20:19:15 | 000,026,528 | ---- | M] (REALiX(tm)) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
  125. DRV - [2015.03.25 20:07:34 | 000,034,848 | ---- | M] (IObit.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys -- (RegFilter)
  126. DRV - [2015.03.25 20:07:34 | 000,023,048 | ---- | M] (IObit) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys -- (FileMonitor)
  127. DRV - [2015.03.25 20:07:34 | 000,023,016 | ---- | M] (IObit.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys -- (UrlFilter)
  128. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  129.  
  130.  
  131. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  132.  
  133.  
  134. [color=#E56717]========== Internet Explorer ==========[/color]
  135.  
  136. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  137. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  138. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  139. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  140. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  141. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  142. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  143.  
  144. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
  145. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com
  146. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  147. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  148. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  149. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  150. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  151. IE - HKCU\..\SearchScopes\{1324C2C7-9262-4FB9-88A4-32E0A3C82477}: "URL" = http://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
  152. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TSEH_deDE379
  153. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  154.  
  155. [color=#E56717]========== FireFox ==========[/color]
  156.  
  157. FF - prefs.js..browser.search.countryCode: "DE"
  158. FF - prefs.js..browser.search.defaultenginename: "Google"
  159. FF - prefs.js..browser.search.region: "DE"
  160. FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
  161. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:45.0.2
  162. FF - user.js - File not found
  163.  
  164. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll File not found
  165. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.77.2: C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  166. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.77.2: C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll (Oracle Corporation)
  167. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  168. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
  169. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  170. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  171. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  172. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll ()
  173. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\SysWOW64\Adobe\Director\np32dsw_1223183.dll (Adobe Systems, Inc.)
  174. FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
  175. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  176. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
  177. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  178. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  179. FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
  180. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
  181. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
  182. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  183. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  184. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  185. FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
  186. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  187. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  188.  
  189. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2016.02.13 15:30:59 | 000,000,000 | ---D | M]
  190. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 43.0.3\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS
  191. 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 43.0.3\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS
  192. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
  193. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2016.02.13 15:30:59 | 000,000,000 | ---D | M]
  194. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\sp@avast.com: C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016.02.13 15:30:58 | 000,000,000 | ---D | M]
  195. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 45.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  196. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 45.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2016.01.29 15:47:42 | 000,000,000 | ---D | M]
  197. FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
  198.  
  199. [2014.12.15 18:28:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Extensions
  200. [2016.04.03 22:40:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\6hd718xx.default-1457032613197\extensions
  201. [2015.12.22 15:43:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\9ziksdf0.default-1426620065104\extensions
  202. [2015.12.22 15:43:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\c95at9to.default-1436631492133\extensions
  203. [2015.12.22 15:43:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\joiezd87.default-1447185966325\extensions
  204. [2015.12.22 15:43:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\va2prr7l.default-1426176740598\extensions
  205. [2016.03.31 17:11:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\y27wschm.default-1459436378659\extensions
  206. [2015.12.22 15:43:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\y2wlyl5j.default-1444651764293\extensions
  207. [2016.04.03 22:40:09 | 001,013,992 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\6hd718xx.default-1457032613197\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  208. [2016.04.03 21:19:06 | 001,656,045 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\6hd718xx.default-1457032613197\features\{a78708e7-c637-4a78-9203-6ff3f4ac7f74}\loop@mozilla.org.xpi
  209. [2015.07.29 14:47:59 | 000,963,213 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\c95at9to.default-1436631492133\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  210. [2016.03.31 17:04:13 | 001,013,992 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\y27wschm.default-1459436378659\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  211. [2016.04.02 21:50:47 | 001,656,045 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\y27wschm.default-1459436378659\features\{4bd3a203-ab06-4377-95e3-c2c00c77e216}\loop@mozilla.org.xpi
  212. [2016.04.12 13:34:59 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  213.  
  214. [color=#E56717]========== Chrome ==========[/color]
  215.  
  216. CHR - default_search_provider: (Enabled)
  217. CHR - default_search_provider: search_url =
  218. CHR - default_search_provider: suggest_url =
  219. CHR - plugin: Error reading preferences file
  220. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.53_0\
  221. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\11.1.0.210_0\
  222. CHR - Extension: No name found = C:\Users\Sanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  223.  
  224. O1 HOSTS File: ([2012.05.26 13:39:58 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  225. O1 - Hosts: 127.0.0.1 localhost
  226. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll (Oracle Corporation)
  227. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  228. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  229. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll (Oracle Corporation)
  230. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  231. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  232. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  233. O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
  234. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  235. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
  236. O4 - HKCU..\Run: [Advanced SystemCare 9] C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe (IObit)
  237. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
  238. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  239. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  240. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  241. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  242. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  243. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
  244. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
  245. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
  246. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NolowDiskSpaceChecks = 1
  247. O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200 File not found
  248. O8:[b]64bit:[/b] - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  249. O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\SysWow64\GPhotos.scr (Google Inc.)
  250. O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  251. O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  252. O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
  253. O15 - HKCU\..Trusted Domains: localhost ([]* in Trusted sites)
  254. O15 - HKCU\..Trusted Domains: webcompanion.com ([]http in Trusted sites)
  255. O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (Reg Error: Key error.)
  256. O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
  257. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  258. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85777D5C-4977-47C0-8469-B7633442FEA4}: DhcpNameServer = 192.168.0.1
  259. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  260. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  261. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  262. O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
  263. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  264. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
  265. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream - No CLSID value found
  266. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus - No CLSID value found
  267. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload - No CLSID value found
  268. O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
  269. O18 - Protocol\Filter\application/octet-stream - No CLSID value found
  270. O18 - Protocol\Filter\application/x-complus - No CLSID value found
  271. O18 - Protocol\Filter\application/x-msdownload - No CLSID value found
  272. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
  273. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  274. O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
  275. O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  276. O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  277. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
  278. O32 - HKLM CDRom: AutoRun - 1
  279. O34 - HKLM BootExecute: (autocheck autochk *)
  280. O34 - HKLM BootExecute: (BootDefrag.exe)
  281. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  282. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  283. O35 - HKLM\..comfile [open] -- "%1" %*
  284. O35 - HKLM\..exefile [open] -- "%1" %*
  285. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  286. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  287. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  288. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  289. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  290. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  291. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  292.  
  293.  
  294. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  295. Drivers32: msacm.dvacm - C:\Program Files (x86)\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
  296. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  297. Drivers32: msacm.mpegacm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
  298. Drivers32: msacm.ulmp3acm - C:\Program Files (x86)\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
  299. Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
  300.  
  301. CREATERESTOREPOINT
  302. Unable to start System Restore Service. Error code 1084
  303.  
  304. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  305.  
  306. [2016.04.15 19:01:28 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  307. [2016.04.03 21:22:20 | 003,299,832 | ---- | C] (Yamaha Corporation) -- C:\windows\SysNative\YamahaAE2.dll
  308. [2016.04.03 21:22:20 | 002,190,992 | ---- | C] (Yamaha Corporation) -- C:\windows\SysNative\YamahaAE.dll
  309. [2016.04.03 21:22:19 | 002,110,600 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\WavesGUILib64.dll
  310. [2016.04.03 21:22:19 | 001,382,240 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tosade.dll
  311. [2016.04.03 21:22:19 | 000,888,472 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tossaeapo64.dll
  312. [2016.04.03 21:22:19 | 000,596,120 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tosasfapo64.dll
  313. [2016.04.03 21:22:19 | 000,224,264 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tossaemaxapo64.dll
  314. [2016.04.03 21:22:19 | 000,172,584 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\toseaeapo64.dll
  315. [2016.04.03 21:22:18 | 001,928,632 | ---- | C] (DTS, Inc.) -- C:\windows\SysNative\sltech64.dll
  316. [2016.04.03 21:22:18 | 001,435,144 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SRRPTR64.dll
  317. [2016.04.03 21:22:18 | 000,873,472 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo264.dll
  318. [2016.04.03 21:22:18 | 000,532,384 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSTSX64.dll
  319. [2016.04.03 21:22:18 | 000,467,168 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SRAPO64.dll
  320. [2016.04.03 21:22:18 | 000,381,416 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SRCOM64.dll
  321. [2016.04.03 21:22:18 | 000,341,160 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysWow64\SRCOM.dll
  322. [2016.04.03 21:22:18 | 000,341,160 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SRCOM.dll
  323. [2016.04.03 21:22:18 | 000,258,504 | ---- | C] (TODO: <Company name>) -- C:\windows\SysNative\slprp64.dll
  324. [2016.04.03 21:22:18 | 000,221,976 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSTSH64.dll
  325. [2016.04.03 21:22:18 | 000,209,544 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSHP64.dll
  326. [2016.04.03 21:22:18 | 000,166,208 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSWOW64.dll
  327. [2016.04.03 21:22:18 | 000,158,704 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo.dll
  328. [2016.04.03 21:22:18 | 000,075,544 | ---- | C] (TOSHIBA CORPORATION.) -- C:\windows\SysNative\tepeqapo64.dll
  329. [2016.04.03 21:22:17 | 001,286,152 | ---- | C] (DTS, Inc.) -- C:\windows\SysNative\slcnt64.dll
  330. [2016.04.03 21:22:16 | 001,008,360 | ---- | C] (DTS, Inc.) -- C:\windows\SysNative\sl3apo64.dll
  331. [2016.04.03 21:22:16 | 000,965,032 | ---- | C] (Sony Corporation) -- C:\windows\SysNative\SFSS_APO.dll
  332. [2016.04.03 21:22:16 | 000,933,640 | ---- | C] (Sound Research, Corp.) -- C:\windows\SysNative\SEHDRA64.dll
  333. [2016.04.03 21:22:16 | 000,716,112 | ---- | C] (Sound Research, Corp.) -- C:\windows\SysNative\SECOMN64.dll
  334. [2016.04.03 21:22:16 | 000,589,072 | ---- | C] (Sound Research, Corp.) -- C:\windows\SysWow64\SECOMN32.DLL
  335. [2016.04.03 21:22:16 | 000,448,592 | ---- | C] (Sound Research, Corp.) -- C:\windows\SysNative\SEAPO64.dll
  336. [2016.04.03 21:22:16 | 000,231,920 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SFNHK64.dll
  337. [2016.04.03 21:22:16 | 000,090,920 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SFCOM64.dll
  338. [2016.04.03 21:22:16 | 000,088,328 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SFAPO64.dll
  339. [2016.04.03 21:22:16 | 000,083,632 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\windows\SysWow64\SFCOM.dll
  340. [2016.04.03 21:22:15 | 003,195,648 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtPgEx64.dll
  341. [2016.04.03 21:22:15 | 002,893,568 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTSnMg64.cpl
  342. [2016.04.03 21:22:14 | 000,343,712 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtlCPAPI64.dll
  343. [2016.04.03 21:22:12 | 003,271,912 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkApi64.dll
  344. [2016.04.03 21:22:12 | 000,689,888 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtDataProc64.dll
  345. [2016.04.03 21:22:12 | 000,387,320 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEP64A.dll
  346. [2016.04.03 21:22:12 | 000,214,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEED64A.dll
  347. [2016.04.03 21:22:12 | 000,192,992 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCfg64.dll
  348. [2016.04.03 21:22:12 | 000,110,992 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEL64A.dll
  349. [2016.04.03 21:22:12 | 000,088,352 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEG64A.dll
  350. [2016.04.03 21:22:12 | 000,023,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCoLDR64.dll
  351. [2016.04.03 21:22:11 | 072,203,792 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoRes64.dat
  352. [2016.04.03 21:22:11 | 003,052,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RltkAPO64.dll
  353. [2016.04.03 21:22:11 | 002,692,848 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysWow64\RltkAPO.dll
  354. [2016.04.03 21:22:11 | 002,030,208 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoInstII64.dll
  355. [2016.04.03 21:22:11 | 001,356,512 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTCOM64.dll
  356. [2016.04.03 21:22:11 | 000,321,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RP3DHT64.dll
  357. [2016.04.03 21:22:11 | 000,321,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RP3DAA64.dll
  358. [2016.04.03 21:22:10 | 007,172,920 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEP64A.dll
  359. [2016.04.03 21:22:10 | 005,776,688 | ---- | C] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICV2apo.dll
  360. [2016.04.03 21:22:10 | 000,447,728 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EED64A.dll
  361. [2016.04.03 21:22:10 | 000,151,792 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEL64A.dll
  362. [2016.04.03 21:22:10 | 000,134,208 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEA64A.dll
  363. [2016.04.03 21:22:10 | 000,084,616 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEG64A.dll
  364. [2016.04.03 21:22:09 | 001,003,864 | ---- | C] (Nahimic Inc) -- C:\windows\SysNative\NahimicAPONSControl.dll
  365. [2016.04.03 21:22:08 | 005,289,952 | ---- | C] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICAPOlfx.dll
  366. [2016.04.03 21:22:08 | 000,923,752 | ---- | C] (Sony Corporation) -- C:\windows\SysNative\MISS_APO.dll
  367. [2016.04.03 21:22:01 | 000,677,680 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVolumeSDAPO.dll
  368. [2016.04.03 21:22:00 | 013,120,760 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO3064.dll
  369. [2016.04.03 21:22:00 | 012,986,520 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO4064.dll
  370. [2016.04.03 21:22:00 | 001,334,384 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxSpeechAPO64.dll
  371. [2016.04.03 21:22:00 | 000,998,032 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO2064.dll
  372. [2016.04.03 21:21:59 | 014,057,256 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioRealtek64.dll
  373. [2016.04.03 21:21:59 | 002,050,184 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioEQ64.dll
  374. [2016.04.03 21:21:58 | 000,931,624 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPOShell64.dll
  375. [2016.04.03 21:21:57 | 002,823,280 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO7064.dll
  376. [2016.04.03 21:21:57 | 001,421,104 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO6064.dll
  377. [2016.04.03 21:21:57 | 001,211,840 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO5064.dll
  378. [2016.04.03 21:21:57 | 001,164,336 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO4064.dll
  379. [2016.04.03 21:21:57 | 000,678,192 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO30.dll
  380. [2016.04.03 21:21:57 | 000,330,568 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO20.dll
  381. [2016.04.03 21:21:55 | 010,521,552 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\IntelSSTAPO.dll
  382. [2016.04.03 21:21:55 | 001,186,168 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\IntelSstCApoPropPage.dll
  383. [2016.04.03 21:21:55 | 000,618,192 | ---- | C] (Knowles Acoustics ) -- C:\windows\SysNative\KAAPORT64.dll
  384. [2016.04.03 21:21:55 | 000,369,304 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\HiFiDAX2API.dll
  385. [2016.04.03 21:21:55 | 000,340,648 | ---- | C] (ICEpower a/s) -- C:\windows\SysNative\ICEsoundAPO64.dll
  386. [2016.04.03 21:21:50 | 003,282,032 | ---- | C] (Fortemedia Corporation) -- C:\windows\SysNative\FMAPO64.dll
  387. [2016.04.03 21:21:50 | 000,708,320 | ---- | C] (DTS) -- C:\windows\SysNative\DTSVoiceClarityDLL64.dll
  388. [2016.04.03 21:21:50 | 000,514,528 | ---- | C] (DTS) -- C:\windows\SysNative\DTSU2PLFX64.dll
  389. [2016.04.03 21:21:50 | 000,500,560 | ---- | C] (DTS) -- C:\windows\SysNative\DTSU2PGFX64.dll
  390. [2016.04.03 21:21:50 | 000,428,232 | ---- | C] (DTS) -- C:\windows\SysNative\DTSU2PREC64.dll
  391. [2016.04.03 21:21:49 | 005,338,936 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DolbyDAX2APOv211.dll
  392. [2016.04.03 21:21:49 | 002,437,144 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DolbyDAX2APOv201.dll
  393. [2016.04.03 21:21:49 | 001,780,624 | ---- | C] (DTS) -- C:\windows\SysNative\DTSS2SpeakerDLL64.dll
  394. [2016.04.03 21:21:49 | 001,591,064 | ---- | C] (DTS) -- C:\windows\SysNative\DTSS2HeadphoneDLL64.dll
  395. [2016.04.03 21:21:49 | 001,508,936 | ---- | C] (DTS) -- C:\windows\SysNative\DTSBoostDLL64.dll
  396. [2016.04.03 21:21:49 | 000,952,984 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DolbyDAX2APOProp.dll
  397. [2016.04.03 21:21:49 | 000,743,968 | ---- | C] (DTS) -- C:\windows\SysNative\DTSBassEnhancementDLL64.dll
  398. [2016.04.03 21:21:49 | 000,727,440 | ---- | C] (DTS) -- C:\windows\SysNative\DTSSymmetryDLL64.dll
  399. [2016.04.03 21:21:49 | 000,504,312 | ---- | C] (DTS) -- C:\windows\SysNative\DTSNeoPCDLL64.dll
  400. [2016.04.03 21:21:49 | 000,445,408 | ---- | C] (DTS) -- C:\windows\SysNative\DTSLimiterDLL64.dll
  401. [2016.04.03 21:21:49 | 000,441,272 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGainCompensatorDLL64.dll
  402. [2016.04.03 21:21:49 | 000,253,904 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGFXAPO64.dll
  403. [2016.04.03 21:21:49 | 000,253,872 | ---- | C] (DTS) -- C:\windows\SysNative\DTSLFXAPO64.dll
  404. [2016.04.03 21:21:49 | 000,252,880 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGFXAPONS64.dll
  405. [2016.04.03 21:21:48 | 007,096,192 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPP64A.dll
  406. [2016.04.03 21:21:48 | 006,264,640 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPP64AF3.dll
  407. [2016.04.03 21:21:48 | 001,965,816 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPD64A.dll
  408. [2016.04.03 21:21:48 | 001,959,608 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPD64AF3.dll
  409. [2016.04.03 21:21:48 | 001,601,952 | ---- | C] (Conexant Systems Inc.) -- C:\windows\SysNative\CX64APO.dll
  410. [2016.04.03 21:21:48 | 000,362,056 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPO64AF3.dll
  411. [2016.04.03 21:21:48 | 000,327,464 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPO64A.dll
  412. [2016.04.03 21:21:48 | 000,310,424 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPA64F3.dll
  413. [2016.04.03 21:21:48 | 000,272,720 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPA64.dll
  414. [2016.04.03 21:21:48 | 000,122,328 | ---- | C] (Real Sound Lab SIA) -- C:\windows\SysNative\CONEQMSAPOGUILibrary.dll
  415. [2016.04.03 21:21:47 | 000,574,760 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAC64.dll
  416. [2016.04.03 21:21:47 | 000,118,600 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAR64.dll
  417. [2016.03.28 18:46:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  418. [2016.03.17 21:53:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  419.  
  420. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  421.  
  422. [2016.04.15 19:00:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  423. [2016.04.15 18:56:22 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
  424. [2016.04.15 18:56:04 | 198,711,942 | ---- | M] () -- C:\windows\MEMORY.DMP
  425. [2016.04.15 18:56:02 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  426. [2016.04.12 13:21:03 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
  427. [2016.04.12 13:18:43 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  428. [2016.04.12 13:18:43 | 000,019,248 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  429. [2016.04.12 13:11:37 | 000,001,110 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA1cf117321a204f7.job
  430. [2016.04.12 13:09:36 | 000,000,884 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
  431. [2016.04.12 13:09:24 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore1cf1173209a7c2b.job
  432. [2016.04.12 13:09:01 | 000,001,106 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
  433. [2016.04.10 20:38:11 | 000,002,231 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 9.lnk
  434. [2016.04.08 18:58:53 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA(189).DAT
  435. [2016.04.08 16:03:17 | 000,797,376 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
  436. [2016.04.08 16:03:17 | 000,142,528 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
  437. [2016.04.08 15:52:21 | 000,001,055 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
  438. [2016.04.08 15:36:27 | 000,002,146 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  439. [2016.04.03 21:29:08 | 000,002,139 | ---- | M] () -- C:\Users\Public\Desktop\Driver Booster 3.lnk
  440. [2016.04.03 21:22:20 | 003,299,832 | ---- | M] (Yamaha Corporation) -- C:\windows\SysNative\YamahaAE2.dll
  441. [2016.04.03 21:22:20 | 002,190,992 | ---- | M] (Yamaha Corporation) -- C:\windows\SysNative\YamahaAE.dll
  442. [2016.04.03 21:22:19 | 002,110,600 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\WavesGUILib64.dll
  443. [2016.04.03 21:22:19 | 001,382,240 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tosade.dll
  444. [2016.04.03 21:22:19 | 000,888,472 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tossaeapo64.dll
  445. [2016.04.03 21:22:19 | 000,596,120 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tosasfapo64.dll
  446. [2016.04.03 21:22:19 | 000,224,264 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tossaemaxapo64.dll
  447. [2016.04.03 21:22:19 | 000,172,584 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\toseaeapo64.dll
  448. [2016.04.03 21:22:18 | 001,928,632 | ---- | M] (DTS, Inc.) -- C:\windows\SysNative\sltech64.dll
  449. [2016.04.03 21:22:18 | 001,435,144 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SRRPTR64.dll
  450. [2016.04.03 21:22:18 | 000,873,472 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo264.dll
  451. [2016.04.03 21:22:18 | 000,532,384 | ---- | M] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSTSX64.dll
  452. [2016.04.03 21:22:18 | 000,467,168 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SRAPO64.dll
  453. [2016.04.03 21:22:18 | 000,381,416 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SRCOM64.dll
  454. [2016.04.03 21:22:18 | 000,341,160 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysWow64\SRCOM.dll
  455. [2016.04.03 21:22:18 | 000,341,160 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SRCOM.dll
  456. [2016.04.03 21:22:18 | 000,258,504 | ---- | M] (TODO: <Company name>) -- C:\windows\SysNative\slprp64.dll
  457. [2016.04.03 21:22:18 | 000,221,976 | ---- | M] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSTSH64.dll
  458. [2016.04.03 21:22:18 | 000,209,544 | ---- | M] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSHP64.dll
  459. [2016.04.03 21:22:18 | 000,166,208 | ---- | M] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSWOW64.dll
  460. [2016.04.03 21:22:18 | 000,158,704 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo.dll
  461. [2016.04.03 21:22:18 | 000,075,544 | ---- | M] (TOSHIBA CORPORATION.) -- C:\windows\SysNative\tepeqapo64.dll
  462. [2016.04.03 21:22:17 | 001,286,152 | ---- | M] (DTS, Inc.) -- C:\windows\SysNative\slcnt64.dll
  463. [2016.04.03 21:22:16 | 001,008,360 | ---- | M] (DTS, Inc.) -- C:\windows\SysNative\sl3apo64.dll
  464. [2016.04.03 21:22:16 | 000,965,032 | ---- | M] (Sony Corporation) -- C:\windows\SysNative\SFSS_APO.dll
  465. [2016.04.03 21:22:16 | 000,933,640 | ---- | M] (Sound Research, Corp.) -- C:\windows\SysNative\SEHDRA64.dll
  466. [2016.04.03 21:22:16 | 000,716,112 | ---- | M] (Sound Research, Corp.) -- C:\windows\SysNative\SECOMN64.dll
  467. [2016.04.03 21:22:16 | 000,589,072 | ---- | M] (Sound Research, Corp.) -- C:\windows\SysWow64\SECOMN32.DLL
  468. [2016.04.03 21:22:16 | 000,448,592 | ---- | M] (Sound Research, Corp.) -- C:\windows\SysNative\SEAPO64.dll
  469. [2016.04.03 21:22:16 | 000,231,920 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SFNHK64.dll
  470. [2016.04.03 21:22:16 | 000,090,920 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SFCOM64.dll
  471. [2016.04.03 21:22:16 | 000,088,328 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SFAPO64.dll
  472. [2016.04.03 21:22:16 | 000,083,632 | ---- | M] (Virage Logic Corporation / Sonic Focus) -- C:\windows\SysWow64\SFCOM.dll
  473. [2016.04.03 21:22:15 | 003,195,648 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtPgEx64.dll
  474. [2016.04.03 21:22:15 | 002,893,568 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTSnMg64.cpl
  475. [2016.04.03 21:22:15 | 000,343,712 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtlCPAPI64.dll
  476. [2016.04.03 21:22:12 | 003,271,912 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkApi64.dll
  477. [2016.04.03 21:22:12 | 003,152,591 | ---- | M] () -- C:\windows\SysNative\drivers\rtkSSTsetting.dat
  478. [2016.04.03 21:22:12 | 000,689,888 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtDataProc64.dll
  479. [2016.04.03 21:22:12 | 000,387,320 | ---- | M] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEP64A.dll
  480. [2016.04.03 21:22:12 | 000,214,840 | ---- | M] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEED64A.dll
  481. [2016.04.03 21:22:12 | 000,192,992 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCfg64.dll
  482. [2016.04.03 21:22:12 | 000,110,992 | ---- | M] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEL64A.dll
  483. [2016.04.03 21:22:12 | 000,088,352 | ---- | M] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEG64A.dll
  484. [2016.04.03 21:22:12 | 000,023,696 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCoLDR64.dll
  485. [2016.04.03 21:22:11 | 072,203,792 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoRes64.dat
  486. [2016.04.03 21:22:11 | 004,486,133 | ---- | M] () -- C:\windows\SysNative\drivers\RTAIODAT.DAT
  487. [2016.04.03 21:22:11 | 003,052,880 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RltkAPO64.dll
  488. [2016.04.03 21:22:11 | 002,692,848 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysWow64\RltkAPO.dll
  489. [2016.04.03 21:22:11 | 002,030,208 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoInstII64.dll
  490. [2016.04.03 21:22:11 | 001,356,512 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTCOM64.dll
  491. [2016.04.03 21:22:11 | 000,321,720 | ---- | M] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RP3DHT64.dll
  492. [2016.04.03 21:22:11 | 000,321,720 | ---- | M] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RP3DAA64.dll
  493. [2016.04.03 21:22:10 | 007,172,920 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEP64A.dll
  494. [2016.04.03 21:22:10 | 005,776,688 | ---- | M] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICV2apo.dll
  495. [2016.04.03 21:22:10 | 001,003,864 | ---- | M] (Nahimic Inc) -- C:\windows\SysNative\NahimicAPONSControl.dll
  496. [2016.04.03 21:22:10 | 000,447,728 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EED64A.dll
  497. [2016.04.03 21:22:10 | 000,151,792 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEL64A.dll
  498. [2016.04.03 21:22:10 | 000,134,208 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEA64A.dll
  499. [2016.04.03 21:22:10 | 000,084,616 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEG64A.dll
  500. [2016.04.03 21:22:08 | 005,289,952 | ---- | M] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICAPOlfx.dll
  501. [2016.04.03 21:22:08 | 000,923,752 | ---- | M] (Sony Corporation) -- C:\windows\SysNative\MISS_APO.dll
  502. [2016.04.03 21:22:01 | 012,986,520 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO4064.dll
  503. [2016.04.03 21:22:01 | 000,677,680 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVolumeSDAPO.dll
  504. [2016.04.03 21:22:00 | 013,120,760 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO3064.dll
  505. [2016.04.03 21:22:00 | 001,334,384 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxSpeechAPO64.dll
  506. [2016.04.03 21:22:00 | 000,998,032 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO2064.dll
  507. [2016.04.03 21:21:59 | 014,057,256 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioRealtek64.dll
  508. [2016.04.03 21:21:59 | 002,050,184 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioEQ64.dll
  509. [2016.04.03 21:21:59 | 000,931,624 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPOShell64.dll
  510. [2016.04.03 21:21:57 | 002,823,280 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO7064.dll
  511. [2016.04.03 21:21:57 | 001,421,104 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO6064.dll
  512. [2016.04.03 21:21:57 | 001,211,840 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO5064.dll
  513. [2016.04.03 21:21:57 | 001,164,336 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO4064.dll
  514. [2016.04.03 21:21:57 | 000,678,192 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO30.dll
  515. [2016.04.03 21:21:57 | 000,330,568 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO20.dll
  516. [2016.04.03 21:21:56 | 000,618,192 | ---- | M] (Knowles Acoustics ) -- C:\windows\SysNative\KAAPORT64.dll
  517. [2016.04.03 21:21:55 | 010,521,552 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\IntelSSTAPO.dll
  518. [2016.04.03 21:21:55 | 001,186,168 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\IntelSstCApoPropPage.dll
  519. [2016.04.03 21:21:55 | 000,369,304 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\HiFiDAX2API.dll
  520. [2016.04.03 21:21:55 | 000,340,648 | ---- | M] (ICEpower a/s) -- C:\windows\SysNative\ICEsoundAPO64.dll
  521. [2016.04.03 21:21:50 | 003,282,032 | ---- | M] (Fortemedia Corporation) -- C:\windows\SysNative\FMAPO64.dll
  522. [2016.04.03 21:21:50 | 000,727,440 | ---- | M] (DTS) -- C:\windows\SysNative\DTSSymmetryDLL64.dll
  523. [2016.04.03 21:21:50 | 000,708,320 | ---- | M] (DTS) -- C:\windows\SysNative\DTSVoiceClarityDLL64.dll
  524. [2016.04.03 21:21:50 | 000,514,528 | ---- | M] (DTS) -- C:\windows\SysNative\DTSU2PLFX64.dll
  525. [2016.04.03 21:21:50 | 000,500,560 | ---- | M] (DTS) -- C:\windows\SysNative\DTSU2PGFX64.dll
  526. [2016.04.03 21:21:50 | 000,428,232 | ---- | M] (DTS) -- C:\windows\SysNative\DTSU2PREC64.dll
  527. [2016.04.03 21:21:49 | 006,264,640 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPP64AF3.dll
  528. [2016.04.03 21:21:49 | 005,338,936 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DolbyDAX2APOv211.dll
  529. [2016.04.03 21:21:49 | 002,437,144 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DolbyDAX2APOv201.dll
  530. [2016.04.03 21:21:49 | 001,780,624 | ---- | M] (DTS) -- C:\windows\SysNative\DTSS2SpeakerDLL64.dll
  531. [2016.04.03 21:21:49 | 001,591,064 | ---- | M] (DTS) -- C:\windows\SysNative\DTSS2HeadphoneDLL64.dll
  532. [2016.04.03 21:21:49 | 001,508,936 | ---- | M] (DTS) -- C:\windows\SysNative\DTSBoostDLL64.dll
  533. [2016.04.03 21:21:49 | 000,952,984 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DolbyDAX2APOProp.dll
  534. [2016.04.03 21:21:49 | 000,743,968 | ---- | M] (DTS) -- C:\windows\SysNative\DTSBassEnhancementDLL64.dll
  535. [2016.04.03 21:21:49 | 000,504,312 | ---- | M] (DTS) -- C:\windows\SysNative\DTSNeoPCDLL64.dll
  536. [2016.04.03 21:21:49 | 000,445,408 | ---- | M] (DTS) -- C:\windows\SysNative\DTSLimiterDLL64.dll
  537. [2016.04.03 21:21:49 | 000,441,272 | ---- | M] (DTS) -- C:\windows\SysNative\DTSGainCompensatorDLL64.dll
  538. [2016.04.03 21:21:49 | 000,253,904 | ---- | M] (DTS) -- C:\windows\SysNative\DTSGFXAPO64.dll
  539. [2016.04.03 21:21:49 | 000,253,872 | ---- | M] (DTS) -- C:\windows\SysNative\DTSLFXAPO64.dll
  540. [2016.04.03 21:21:49 | 000,252,880 | ---- | M] (DTS) -- C:\windows\SysNative\DTSGFXAPONS64.dll
  541. [2016.04.03 21:21:48 | 007,096,192 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPP64A.dll
  542. [2016.04.03 21:21:48 | 001,965,816 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPD64A.dll
  543. [2016.04.03 21:21:48 | 001,959,608 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPD64AF3.dll
  544. [2016.04.03 21:21:48 | 001,601,952 | ---- | M] (Conexant Systems Inc.) -- C:\windows\SysNative\CX64APO.dll
  545. [2016.04.03 21:21:48 | 000,362,056 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPO64AF3.dll
  546. [2016.04.03 21:21:48 | 000,327,464 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPO64A.dll
  547. [2016.04.03 21:21:48 | 000,310,424 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPA64F3.dll
  548. [2016.04.03 21:21:48 | 000,272,720 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPA64.dll
  549. [2016.04.03 21:21:48 | 000,122,328 | ---- | M] (Real Sound Lab SIA) -- C:\windows\SysNative\CONEQMSAPOGUILibrary.dll
  550. [2016.04.03 21:21:47 | 000,574,760 | ---- | M] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAC64.dll
  551. [2016.04.03 21:21:47 | 000,118,600 | ---- | M] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAR64.dll
  552. [2016.04.03 21:21:47 | 000,118,592 | ---- | M] () -- C:\windows\SysNative\AcpiServiceVnA64.dll
  553. [2016.04.03 21:21:47 | 000,105,312 | ---- | M] () -- C:\windows\SysNative\audioLibVc.dll
  554. [2016.03.31 16:26:42 | 000,001,145 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 4.lnk
  555. [2016.03.31 16:24:50 | 000,192,216 | ---- | M] (Malwarebytes) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys
  556. [2016.03.28 18:41:31 | 000,110,144 | ---- | M] (Oracle Corporation) -- C:\windows\SysNative\WindowsAccessBridge-64.dll
  557. [2016.03.28 18:38:09 | 000,001,077 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  558. [2016.03.28 18:32:54 | 000,000,992 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  559. [2016.03.28 17:45:28 | 001,706,428 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
  560. [2016.03.28 17:45:28 | 000,739,050 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
  561. [2016.03.28 17:45:28 | 000,671,796 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
  562. [2016.03.28 17:45:28 | 000,164,442 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
  563. [2016.03.28 17:45:28 | 000,134,888 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
  564. [2016.03.17 22:29:08 | 000,001,212 | ---- | M] () -- C:\windows\tasks\DropboxUpdateTaskMachineUA.job
  565. [2016.03.17 22:29:07 | 000,001,208 | ---- | M] () -- C:\windows\tasks\DropboxUpdateTaskMachineCore.job
  566.  
  567. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  568.  
  569. [2016.04.15 18:56:04 | 198,711,942 | ---- | C] () -- C:\windows\MEMORY.DMP
  570. [2016.04.03 21:22:12 | 003,152,591 | ---- | C] () -- C:\windows\SysNative\drivers\rtkSSTsetting.dat
  571. [2016.04.03 21:22:11 | 004,486,133 | ---- | C] () -- C:\windows\SysNative\drivers\RTAIODAT.DAT
  572. [2016.04.03 21:21:47 | 000,118,592 | ---- | C] () -- C:\windows\SysNative\AcpiServiceVnA64.dll
  573. [2016.04.03 21:21:47 | 000,105,312 | ---- | C] () -- C:\windows\SysNative\audioLibVc.dll
  574. [2016.03.09 22:10:42 | 000,003,205 | ---- | C] () -- C:\Users\Sanda\AppData\Local\recently-used.xbel
  575. [2015.09.13 20:33:50 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
  576. [2015.08.17 00:12:32 | 000,000,000 | ---- | C] () -- C:\Users\Sanda\AppData\Local\{064FF86C-FD55-4CD4-9C89-62C2ADFBED66}
  577. [2010.11.14 19:36:57 | 000,000,033 | ---- | C] () -- C:\ProgramData\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
  578. [2010.11.13 14:13:02 | 000,001,302 | ---- | C] () -- C:\ProgramData\ss.ini
  579. [2010.10.10 13:52:46 | 000,009,728 | ---- | C] () -- C:\Users\Sanda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  580. [2010.09.07 10:10:51 | 000,023,024 | ---- | C] () -- C:\Users\Sanda\AppData\Roaming\UserTile.png
  581. [2010.05.15 21:19:41 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  582.  
  583. [color=#E56717]========== ZeroAccess Check ==========[/color]
  584.  
  585. [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
  586.  
  587. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  588.  
  589. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  590.  
  591. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  592.  
  593. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  594.  
  595. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  596. "" = C:\Windows\SysNative\shell32.dll -- [2016.01.22 08:19:58 | 014,179,840 | ---- | M] (Microsoft Corporation)
  597. "ThreadingModel" = Apartment
  598.  
  599. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  600. "" = %SystemRoot%\system32\shell32.dll -- [2016.01.22 08:05:58 | 012,877,824 | ---- | M] (Microsoft Corporation)
  601. "ThreadingModel" = Apartment
  602.  
  603. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  604. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  605. "ThreadingModel" = Free
  606.  
  607. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  608. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  609. "ThreadingModel" = Free
  610.  
  611. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  612. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  613. "ThreadingModel" = Both
  614.  
  615. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  616.  
  617. [color=#E56717]========== Custom Scans ==========[/color]
  618.  
  619. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  620. [2011.03.13 17:16:05 | 000,005,530 | ---- | M] () -- C:\aaw7boot.log
  621. [2010.09.16 09:49:39 | 000,000,234 | ---- | M] () -- C:\BackupLoader.ini
  622. [2009.07.14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr
  623. [2009.12.05 10:36:43 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
  624. [2015.07.19 20:21:29 | 000,006,576 | ---- | M] () -- C:\bootsqm.dat
  625. [2014.01.13 22:21:57 | 000,000,075 | ---- | M] () -- C:\DiskDefrag.log
  626. [2014.01.13 17:56:34 | 000,022,258 | ---- | M] () -- C:\FixitRegBackup.reg
  627. [2016.04.15 18:56:02 | 3108,311,040 | -HS- | M] () -- C:\hiberfil.sys
  628. [2016.04.15 18:56:06 | 4144,418,816 | -HS- | M] () -- C:\pagefile.sys
  629.  
  630. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  631. [2009.07.14 07:32:31 | 000,026,040 | ---- | M] () -- C:\windows\Fonts\GlobalMonospace.CompositeFont
  632. [2009.07.14 07:32:31 | 000,026,489 | ---- | M] () -- C:\windows\Fonts\GlobalSansSerif.CompositeFont
  633. [2009.07.14 07:32:31 | 000,029,779 | ---- | M] () -- C:\windows\Fonts\GlobalSerif.CompositeFont
  634. [2009.07.14 07:32:31 | 000,043,318 | ---- | M] () -- C:\windows\Fonts\GlobalUserInterface.CompositeFont
  635.  
  636. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  637.  
  638. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  639. [2009.06.10 22:49:50 | 000,000,065 | ---- | M] () -- C:\windows\Fonts\desktop.ini
  640.  
  641. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  642.  
  643. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  644.  
  645. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  646.  
  647. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  648.  
  649. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  650.  
  651. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  652.  
  653. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  654.  
  655. [color=#A23BEC]< %systemroot%\*.png >[/color]
  656.  
  657. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  658. [2016.02.13 14:25:44 | 000,052,184 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr
  659. [2009.07.10 14:10:44 | 000,307,568 | ---- | M] (Microsoft Corporation) -- C:\windows\WLXPGSS.SCR
  660.  
  661. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  662.  
  663. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  664.  
  665. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  666.  
  667. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  668.  
  669. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  670. [2009.07.14 06:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  671.  
  672. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  673.  
  674. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  675.  
  676. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  677.  
  678. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  679.  
  680. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  681.  
  682. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  683.  
  684. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  685.  
  686. [color=#A23BEC]< %systemroot%\*.config >[/color]
  687.  
  688. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  689.  
  690. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  691. [2011.05.10 16:38:57 | 000,000,314 | -HS- | M] () -- C:\Users\Sanda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  692.  
  693. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  694. [2016.04.15 19:00:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  695.  
  696. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  697.  
  698. [color=#A23BEC]< %systemroot%\*.src >[/color]
  699.  
  700. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  701.  
  702. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  703.  
  704. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  705.  
  706. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  707.  
  708. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  709.  
  710. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  711.  
  712. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  713.  
  714. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  715.  
  716. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  717.  
  718. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  719.  
  720. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  721.  
  722. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  723.  
  724. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  725.  
  726. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  727.  
  728. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  729.  
  730. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  731. [2009.06.10 23:20:04 | 000,000,802 | ---- | M] () -- C:\windows\ADDINS\FXSEXT.ecf
  732.  
  733. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  734.  
  735. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  736.  
  737. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  738.  
  739. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  740. [2016.04.03 21:27:47 | 000,008,192 | ---- | M] () -- C:\windows\SECURITY\Database\edb.chk
  741. [2016.04.03 21:27:47 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edb.log
  742. [2011.06.27 12:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edbres00001.jrs
  743. [2011.06.27 12:10:18 | 001,048,576 | ---- | M] () -- C:\windows\SECURITY\Database\edbres00002.jrs
  744. [2016.04.03 21:27:47 | 001,056,768 | ---- | M] () -- C:\windows\SECURITY\Database\tmp.edb
  745.  
  746. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  747.  
  748. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  749.  
  750. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  751.  
  752. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  753.  
  754. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  755.  
  756. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  757.  
  758. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  759. [2016.02.12 23:38:30 | 000,000,402 | -HS- | M] () -- C:\Users\Sanda\Favorites\desktop.ini
  760.  
  761. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  762. [2009.07.14 03:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\mofcomp.exe
  763. [2009.07.14 03:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WinMgmt.exe
  764. [2009.07.14 03:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WMIADAP.exe
  765. [2009.07.14 03:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WMIC.exe
  766. [2010.11.20 14:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\Wbem\WmiPrvSE.exe
  767.  
  768. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  769.  
  770. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  771.  
  772. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!