API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 26th, 2013
81
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 46.06 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2013-05-26 18:05:31 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Fsst\Downloads
  3. 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 7,96 Gb Total Physical Memory | 5,17 Gb Available Physical Memory | 64,93% Memory free
  8. 15,93 Gb Paging File | 12,47 Gb Available in Paging File | 78,31% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 97,56 Gb Total Space | 49,22 Gb Free Space | 50,45% Space Free | Partition Type: NTFS
  13. Drive D: | 292,97 Gb Total Space | 252,20 Gb Free Space | 86,09% Space Free | Partition Type: NTFS
  14. Drive E: | 540,89 Gb Total Space | 44,48 Gb Free Space | 8,22% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: FSST-PC | User Name: Fsst | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2013-05-26 18:03:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Fsst\Downloads\OTL.exe
  23. PRC - [2013-05-23 15:31:06 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  24. PRC - [2013-05-23 07:44:09 | 000,825,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  25. PRC - [2013-05-04 01:35:30 | 001,635,752 | ---- | M] (Valve Corporation) -- E:\Steam\Steam.exe
  26. PRC - [2013-05-04 01:35:30 | 000,543,656 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  27. PRC - [2013-04-23 09:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
  28. PRC - [2013-04-22 18:25:24 | 000,608,104 | ---- | M] (Razer USA Ltd) -- C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
  29. PRC - [2013-02-26 02:28:44 | 000,357,456 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe
  30. PRC - [2013-02-26 02:28:26 | 000,436,304 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe
  31. PRC - [2013-02-26 01:30:42 | 000,087,120 | ---- | M] (VMware, Inc.) -- D:\VMWare\vmware-authd.exe
  32.  
  33.  
  34. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  35.  
  36. MOD - [2013-05-23 07:44:07 | 000,393,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppgooglenaclpluginchrome.dll
  37. MOD - [2013-05-23 07:43:59 | 004,051,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll
  38. MOD - [2013-05-23 07:43:06 | 000,599,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\libglesv2.dll
  39. MOD - [2013-05-23 07:43:05 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\libegl.dll
  40. MOD - [2013-05-23 07:43:03 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ffmpegsumo.dll
  41. MOD - [2013-05-13 19:37:37 | 016,032,648 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll
  42. MOD - [2013-05-04 01:35:30 | 001,114,536 | ---- | M] () -- E:\Steam\bin\chromehtml.dll
  43. MOD - [2013-04-24 04:30:08 | 000,652,800 | ---- | M] () -- E:\Steam\SDL2.dll
  44. MOD - [2013-04-18 15:26:37 | 001,159,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\848c4005079e434e04096d683fab1ded\System.Management.ni.dll
  45. MOD - [2013-04-18 15:25:28 | 001,011,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\591cc2015a0165ede73d3e6770e0e7c2\System.Runtime.DurableInstancing.ni.dll
  46. MOD - [2013-04-18 15:25:27 | 002,625,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\30ed505f7ea7d6139128d4a6d9981dc0\System.Runtime.Serialization.ni.dll
  47. MOD - [2013-04-18 15:25:27 | 000,142,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\b420437eca1d1aec1a8bf23cc5173661\SMDiagnostics.ni.dll
  48. MOD - [2013-04-18 15:25:26 | 000,391,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\0a5fb7acbda333f46ef269b56b063562\System.Xml.Linq.ni.dll
  49. MOD - [2013-04-18 15:25:11 | 001,776,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d85a3d6ed5bb77f5603e098cccf60bfa\System.Xaml.ni.dll
  50. MOD - [2013-04-17 20:06:21 | 017,629,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\8357ade60159c25ee88db0aab8686e6d\PresentationFramework.ni.dll
  51. MOD - [2013-04-17 20:06:13 | 011,057,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\7a1eeb425f9318f432afead4b2da965a\PresentationCore.ni.dll
  52. MOD - [2013-04-17 20:06:10 | 013,006,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f3cdd09fc0acc85c7febbd2e2ef9c4e5\System.Windows.Forms.ni.dll
  53. MOD - [2013-04-17 20:06:09 | 007,025,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\85693dfd9ba4905b0fd947fdb51446d5\System.Core.ni.dll
  54. MOD - [2013-04-17 20:06:08 | 003,779,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\f1f3a74eb37b27b7d05b8ffa941f8473\WindowsBase.ni.dll
  55. MOD - [2013-04-17 20:06:07 | 005,571,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2d7c29ad77c15abfa6a8fe6d24840a91\System.Xml.ni.dll
  56. MOD - [2013-04-17 20:06:06 | 000,450,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\b4e58d1a3e0ee75b6b107585c92c68e8\PresentationFramework.Aero.ni.dll
  57. MOD - [2013-04-17 20:06:05 | 001,651,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2fe09cc54a8390b20e380239db34228f\System.Drawing.ni.dll
  58. MOD - [2013-04-17 20:06:05 | 000,973,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac2cd19f2159d48684e17cbdecfaa3b7\System.Configuration.ni.dll
  59. MOD - [2013-04-17 20:06:04 | 009,000,960 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\161c6f80ad93b0505054d244f1c6243c\System.ni.dll
  60. MOD - [2013-04-17 20:06:01 | 014,415,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\4ff1f12a08d455f195ba996fe77497c6\mscorlib.ni.dll
  61. MOD - [2013-03-27 02:16:40 | 020,341,672 | ---- | M] () -- E:\Steam\bin\libcef.dll
  62. MOD - [2012-12-11 19:51:10 | 001,100,800 | ---- | M] () -- E:\Steam\bin\avcodec-53.dll
  63. MOD - [2012-12-11 19:51:10 | 000,192,000 | ---- | M] () -- E:\Steam\bin\avformat-53.dll
  64. MOD - [2012-12-11 19:51:10 | 000,124,416 | ---- | M] () -- E:\Steam\bin\avutil-51.dll
  65.  
  66.  
  67. [color=#E56717]========== Services (SafeList) ==========[/color]
  68.  
  69. SRV:[b]64bit:[/b] - [2012-12-19 21:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
  70. SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  71. SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  72. SRV - [2013-05-25 23:29:17 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  73. SRV - [2013-05-23 15:31:06 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  74. SRV - [2013-05-04 01:35:30 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  75. SRV - [2013-04-23 09:48:17 | 003,574,624 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
  76. SRV - [2013-04-20 09:48:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  77. SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  78. SRV - [2013-02-26 02:28:44 | 000,357,456 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
  79. SRV - [2013-02-26 02:28:26 | 000,436,304 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
  80. SRV - [2013-02-26 01:30:42 | 000,087,120 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\VMWare\vmware-authd.exe -- (VMAuthdService)
  81. SRV - [2012-10-11 16:15:30 | 000,918,680 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe -- (VMUSBArbService)
  82. SRV - [2012-05-13 19:39:06 | 000,022,016 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- d:\wamp\bin\apache\apache2.2.22\bin\httpd.exe -- (wampapache)
  83. SRV - [2012-04-19 15:45:02 | 009,693,696 | ---- | M] () [On_Demand | Stopped] -- d:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe -- (wampmysqld)
  84. SRV - [2011-02-24 01:42:54 | 000,025,832 | ---- | M] () [On_Demand | Stopped] -- E:\Program Files (x86)\Origin Games\Dragon Age\\bin_ship\DAUpdaterSvc.Service.exe -- (DAUpdaterSvc)
  85. SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  86. SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  87.  
  88.  
  89. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  90.  
  91. DRV:[b]64bit:[/b] - [2013-04-19 04:00:16 | 000,025,600 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rzdaendpt.sys -- (rzdaendpt)
  92. DRV:[b]64bit:[/b] - [2013-04-19 04:00:14 | 000,023,040 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rzvkeyboard.sys -- (rzvkeyboard)
  93. DRV:[b]64bit:[/b] - [2013-04-19 04:00:06 | 000,119,808 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rzudd.sys -- (rzudd)
  94. DRV:[b]64bit:[/b] - [2013-02-26 02:28:48 | 000,067,664 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
  95. DRV:[b]64bit:[/b] - [2013-02-26 02:28:14 | 000,030,800 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
  96. DRV:[b]64bit:[/b] - [2013-02-26 02:27:48 | 000,045,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
  97. DRV:[b]64bit:[/b] - [2013-02-26 02:27:48 | 000,020,120 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
  98. DRV:[b]64bit:[/b] - [2013-02-26 02:27:44 | 000,033,360 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
  99. DRV:[b]64bit:[/b] - [2012-12-19 22:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
  100. DRV:[b]64bit:[/b] - [2012-12-19 21:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
  101. DRV:[b]64bit:[/b] - [2012-11-06 13:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
  102. DRV:[b]64bit:[/b] - [2012-10-24 14:17:14 | 000,070,296 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vsock.sys -- (vsock)
  103. DRV:[b]64bit:[/b] - [2012-10-24 14:17:10 | 000,085,104 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
  104. DRV:[b]64bit:[/b] - [2012-10-11 16:15:32 | 000,052,376 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
  105. DRV:[b]64bit:[/b] - [2012-10-11 16:15:06 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb)
  106. DRV:[b]64bit:[/b] - [2011-04-20 03:07:48 | 001,930,240 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
  107. DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  108. DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  109. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  110. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  111. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  112. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  113. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  114. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  115. DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  116. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  117. DRV:[b]64bit:[/b] - [2009-07-14 02:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
  118. DRV:[b]64bit:[/b] - [2009-07-14 02:01:09 | 000,679,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xnacc.sys -- (xnacc)
  119. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  120. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  121. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  122. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  123. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  124.  
  125.  
  126. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  127.  
  128.  
  129. [color=#E56717]========== Internet Explorer ==========[/color]
  130.  
  131. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  132. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  133. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  134. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  135. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  136.  
  137. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  138. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  139. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  140. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
  141.  
  142. [color=#E56717]========== FireFox ==========[/color]
  143.  
  144. FF - prefs.js..extensions.enabledAddons: %7Be4a8a97b-f2ed-450b-b12d-ee082ba24781%7D:1.9
  145. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
  146. FF - user.js - File not found
  147.  
  148. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_169.dll File not found
  149. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll File not found
  150. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  151. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  152. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
  153. FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
  154. FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)
  155. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  156. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  157. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  158. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  159. FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Fsst\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
  160. FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Fsst\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
  161. FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Fsst\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
  162. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Fsst\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  163. FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Fsst\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
  164. FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
  165. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
  166.  
  167. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  168. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  169. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  170. FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  171.  
  172. [2013-04-26 06:44:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fsst\AppData\Roaming\Mozilla\Extensions
  173. [2013-05-25 20:32:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Fsst\AppData\Roaming\Mozilla\Firefox\Profiles\tokda56v.default\extensions
  174. [2013-05-03 16:58:17 | 000,275,665 | ---- | M] () (No name found) -- C:\Users\Fsst\AppData\Roaming\Mozilla\Firefox\Profiles\tokda56v.default\extensions\[email protected]
  175. [2013-05-25 20:11:31 | 002,168,615 | ---- | M] () (No name found) -- C:\Users\Fsst\AppData\Roaming\Mozilla\Firefox\Profiles\tokda56v.default\extensions\[email protected]
  176. [2013-05-25 20:32:14 | 000,269,448 | ---- | M] () (No name found) -- C:\Users\Fsst\AppData\Roaming\Mozilla\Firefox\Profiles\tokda56v.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
  177. [2013-05-25 23:29:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  178. [2013-05-25 23:29:17 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  179.  
  180. [color=#E56717]========== Chrome ==========[/color]
  181.  
  182. CHR - default_search_provider: Google (Enabled)
  183. CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
  184. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
  185. CHR - homepage: https://gmail.com/
  186. CHR - plugin: Shockwave Flash (Disabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
  187. CHR - plugin: Chrome Remote Desktop Viewer (Disabled) = internal-remoting-viewer
  188. CHR - plugin: Native Client (Disabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
  189. CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll
  190. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
  191. CHR - plugin: Pando Web Plugin (Disabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
  192. CHR - plugin: Uplay PC (Disabled) = C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
  193. CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll
  194. CHR - Extension: PlayBlink Enchanced = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\akecghennmogonoemjkkehocgpdjlggf\0.1_0\
  195. CHR - Extension: Dokumenty Google = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
  196. CHR - Extension: Dysk Google = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
  197. CHR - Extension: YouTube = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
  198. CHR - Extension: Adblock Plus = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4_0\
  199. CHR - Extension: Szukaj w Google = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
  200. CHR - Extension: Gmail = C:\Users\Fsst\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
  201.  
  202. O1 HOSTS File: ([2013-05-21 21:05:32 | 000,000,851 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  203. O1 - Hosts: 127.0.0.1 localhost
  204. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  205. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  206. O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
  207. O4 - HKLM..\Run: [] File not found
  208. O4 - HKLM..\Run: [Razer Synapse] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Razer USA Ltd)
  209. O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
  210. O4 - HKCU..\Run: [AdobeBridge] File not found
  211. O4 - HKCU..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (AQQ Sp. z o.o.)
  212. O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()
  213. O4 - HKCU..\Run: [Steam] E:\Steam\steam.exe (Valve Corporation)
  214. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  215. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  216. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  217. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  218. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
  219. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)
  220. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
  221. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
  222. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)
  223. O13[b]64bit:[/b] - gopher Prefix: missing
  224. O13 - gopher Prefix: missing
  225. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{207D533C-E256-43D2-9476-EDDC6F543967}: NameServer = 8.8.8.8,8.8.8.4
  226. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C789F151-0955-466C-A651-3D589EA205D0}: DhcpNameServer = 192.168.42.129
  227. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  228. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  229. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  230. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  231. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  232. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  233. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  234. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  235. O32 - HKLM CDRom: AutoRun - 1
  236. O34 - HKLM BootExecute: (autocheck autochk *)
  237. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  238. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  239. O35 - HKLM\..comfile [open] -- "%1" %*
  240. O35 - HKLM\..exefile [open] -- "%1" %*
  241. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  242. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  243. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  244. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  245. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  246. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  247. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  248.  
  249. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  250.  
  251. [2013-05-25 23:29:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  252. [2013-05-23 15:31:05 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\PunkBuster
  253. [2013-05-21 21:05:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WampServer
  254. [2013-05-17 17:38:44 | 000,000,000 | ---D | C] -- C:\Users\Fsst\.android
  255. [2013-05-17 17:38:41 | 000,000,000 | ---D | C] -- C:\Users\Fsst\eclipseworkspace
  256. [2013-05-17 17:37:31 | 000,971,680 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
  257. [2013-05-17 17:37:30 | 001,092,512 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
  258. [2013-05-17 17:37:30 | 000,311,200 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
  259. [2013-05-17 17:37:28 | 000,188,832 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
  260. [2013-05-17 17:37:28 | 000,188,320 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
  261. [2013-05-17 17:37:28 | 000,108,448 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
  262. [2013-05-17 17:37:23 | 000,000,000 | ---D | C] -- C:\Program Files\Java
  263. [2013-05-14 20:51:26 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\TERA
  264. [2013-05-14 20:51:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA
  265. [2013-05-12 19:08:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
  266. [2013-05-12 12:58:50 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\OpenOffice.org
  267. [2013-05-12 12:57:09 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
  268. [2013-05-11 23:10:59 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\Doublefine
  269. [2013-05-11 13:29:00 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\Ubisoft
  270. [2013-05-11 13:28:55 | 000,000,000 | -HSD | C] -- C:\Users\Fsst\wc
  271. [2013-05-11 13:28:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duel of Champions Launcher
  272. [2013-05-11 09:06:26 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\VMware
  273. [2013-05-11 09:06:19 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\VMware
  274. [2013-05-10 19:57:56 | 000,000,000 | ---D | C] -- C:\Users\Fsst\Documents\Battlefield 3
  275. [2013-05-10 19:56:45 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\ESN
  276. [2013-05-10 19:56:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins
  277. [2013-05-10 19:55:46 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
  278. [2013-05-10 19:55:27 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
  279. [2013-05-10 17:15:54 | 000,000,000 | ---D | C] -- C:\Users\Fsst\Documents\SHIFT 2 UNLEASHED
  280. [2013-05-10 16:56:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield
  281. [2013-05-10 16:56:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
  282. [2013-05-09 21:42:04 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\FalloutNV
  283. [2013-05-08 20:20:54 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\Chromium
  284. [2013-05-08 20:17:30 | 000,000,000 | ---D | C] -- C:\Users\Fsst\Documents\Might & Magic Heroes VI
  285. [2013-05-08 20:17:30 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\Might & Magic Heroes VI
  286. [2013-05-06 19:41:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
  287. [2013-05-06 19:40:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\BioWare
  288. [2013-05-05 12:21:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\SecuROM
  289. [2013-05-05 12:21:32 | 000,000,000 | RH-D | C] -- C:\Users\Fsst\AppData\Roaming\SecuROM
  290. [2013-05-05 12:20:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
  291. [2013-05-05 09:32:44 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\TeamViewer
  292. [2013-05-05 09:30:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
  293. [2013-05-04 17:51:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net
  294. [2013-05-04 10:03:29 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\Macromedia
  295. [2013-05-03 18:00:31 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\System
  296. [2013-05-03 18:00:30 | 000,000,000 | ---D | C] -- C:\Users\Fsst\Documents\Universe Sandbox
  297. [2013-05-03 18:00:30 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\Universe Sandbox
  298. [2013-05-03 18:00:29 | 000,000,000 | -HSD | C] -- C:\Users\Fsst\AppData\Roaming\wyUpdate AU
  299. [2013-05-03 16:52:03 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\Audacity
  300. [2013-05-02 11:46:51 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
  301. [2013-05-02 11:46:51 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
  302. [2013-05-02 11:46:50 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
  303. [2013-05-02 09:52:13 | 000,070,296 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\vsock.sys
  304. [2013-05-02 09:52:13 | 000,067,224 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\vsocklib.dll
  305. [2013-05-02 09:52:13 | 000,063,128 | ---- | C] (VMware, Inc.) -- C:\Windows\SysWow64\vsocklib.dll
  306. [2013-05-02 09:52:11 | 000,067,664 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\vmx86.sys
  307. [2013-05-02 09:52:10 | 000,033,360 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\VMkbd.sys
  308. [2013-05-02 09:51:47 | 000,357,456 | ---- | C] (VMware, Inc.) -- C:\Windows\SysWow64\vmnetdhcp.exe
  309. [2013-05-02 09:51:43 | 000,436,304 | ---- | C] (VMware, Inc.) -- C:\Windows\SysWow64\vmnat.exe
  310. [2013-05-02 09:51:43 | 000,030,800 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\vmnetuserif.sys
  311. [2013-05-02 09:51:40 | 000,933,968 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\vnetlib64.dll
  312. [2013-05-02 09:51:38 | 000,052,376 | ---- | C] (VMware, Inc.) -- C:\Windows\SysNative\drivers\hcmon.sys
  313. [2013-05-02 09:51:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
  314. [2013-05-02 09:51:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VMware
  315. [2013-05-02 09:51:24 | 000,000,000 | ---D | C] -- C:\ProgramData\VMware
  316. [2013-05-02 09:51:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\VMware
  317. [2013-05-01 23:51:39 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\Ubisoft Game Launcher
  318. [2013-05-01 23:51:39 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
  319. [2013-05-01 23:51:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft
  320. [2013-05-01 12:29:58 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\thq
  321. [2013-04-28 23:17:17 | 000,000,000 | ---D | C] -- C:\Users\Fsst\Documents\nbgi
  322. [2013-04-28 13:17:38 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\PunkBuster
  323. [2013-04-28 13:17:11 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\CrashRpt
  324. [2013-04-28 13:16:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Chart Controls
  325. [2013-04-27 13:58:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
  326. [2013-04-27 13:58:22 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller
  327. [2013-04-26 21:44:55 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Roaming\Origin
  328. [2013-04-26 21:44:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Origin Games
  329. [2013-04-26 21:44:33 | 000,000,000 | ---D | C] -- C:\Users\Fsst\AppData\Local\Origin
  330. [2013-04-26 21:42:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
  331. [2013-04-26 21:42:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
  332. [2013-04-26 21:42:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
  333.  
  334. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  335.  
  336. [2013-05-26 17:54:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-87381851-116285423-443100784-1000UA.job
  337. [2013-05-26 17:42:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  338. [2013-05-26 17:42:00 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  339. [2013-05-26 17:38:11 | 000,020,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  340. [2013-05-26 17:38:11 | 000,020,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  341. [2013-05-26 16:44:34 | 000,000,017 | ---- | M] () -- C:\Users\Fsst\AppData\Local\resmon.resmoncfg
  342. [2013-05-26 16:24:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  343. [2013-05-26 16:24:21 | 2118,975,487 | -HS- | M] () -- C:\hiberfil.sys
  344. [2013-05-26 00:18:36 | 000,000,600 | ---- | M] () -- C:\Users\Fsst\AppData\Local\PUTTY.RND
  345. [2013-05-25 20:54:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-87381851-116285423-443100784-1000Core.job
  346. [2013-05-24 10:03:18 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  347. [2013-05-23 15:31:07 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
  348. [2013-05-23 15:31:06 | 000,075,136 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
  349. [2013-05-19 08:56:46 | 005,194,904 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  350. [2013-05-18 17:46:14 | 000,006,656 | ---- | M] () -- C:\Users\Fsst\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  351. [2013-05-18 09:33:11 | 000,782,426 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  352. [2013-05-18 09:33:11 | 000,654,356 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  353. [2013-05-18 09:33:11 | 000,121,814 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  354. [2013-05-17 17:37:24 | 001,092,512 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
  355. [2013-05-17 17:37:24 | 000,971,680 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
  356. [2013-05-17 17:37:24 | 000,311,200 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
  357. [2013-05-17 17:37:24 | 000,188,832 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
  358. [2013-05-17 17:37:24 | 000,188,320 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
  359. [2013-05-17 17:37:24 | 000,108,448 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
  360. [2013-05-13 22:11:29 | 000,020,535 | ---- | M] () -- C:\Users\Fsst\Documents\hehehehehehehehehehemia.odt
  361. [2013-05-13 19:37:37 | 000,691,592 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  362. [2013-05-13 19:37:37 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  363. [2013-05-13 14:59:36 | 000,175,348 | ---- | M] () -- C:\Users\Fsst\Documents\2013-05-13_14-59-35.jpg
  364. [2013-05-12 12:57:09 | 000,000,985 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
  365. [2013-05-11 13:28:35 | 000,001,070 | ---- | M] () -- C:\Users\Public\Desktop\Duel of Champions Launcher.lnk
  366. [2013-05-10 20:04:10 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
  367. [2013-05-10 19:59:39 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  368. [2013-05-05 09:30:49 | 000,001,158 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
  369. [2013-05-03 16:51:56 | 000,000,712 | ---- | M] () -- C:\Users\Fsst\Desktop\Audacity.lnk
  370. [2013-05-02 09:52:15 | 000,000,512 | ---- | M] () -- C:\Users\Fsst\Application Data\Microsoft\Internet Explorer\Quick Launch\VMware Player.lnk
  371. [2013-05-02 09:51:27 | 000,786,644 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  372. [2013-05-02 09:51:27 | 000,001,539 | ---- | M] () -- C:\Users\Public\Desktop\VMware Player.lnk
  373. [2013-05-01 23:51:39 | 000,001,197 | ---- | M] () -- C:\Users\Fsst\Desktop\Uplay.lnk
  374. [2013-04-27 13:58:23 | 000,000,849 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
  375. [2013-04-26 21:42:35 | 000,000,692 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
  376.  
  377. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  378.  
  379. [2013-05-26 16:44:34 | 000,000,017 | ---- | C] () -- C:\Users\Fsst\AppData\Local\resmon.resmoncfg
  380. [2013-05-16 20:49:14 | 000,001,054 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-87381851-116285423-443100784-1000UA.job
  381. [2013-05-16 20:49:14 | 000,001,002 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-87381851-116285423-443100784-1000Core.job
  382. [2013-05-13 19:38:56 | 000,175,348 | ---- | C] () -- C:\Users\Fsst\Documents\2013-05-13_14-59-35.jpg
  383. [2013-05-12 12:59:11 | 000,020,535 | ---- | C] () -- C:\Users\Fsst\Documents\hehehehehehehehehehemia.odt
  384. [2013-05-12 12:57:09 | 000,000,985 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
  385. [2013-05-11 13:28:35 | 000,001,070 | ---- | C] () -- C:\Users\Public\Desktop\Duel of Champions Launcher.lnk
  386. [2013-05-05 09:30:49 | 000,001,170 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk
  387. [2013-05-05 09:30:49 | 000,001,158 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 8.lnk
  388. [2013-05-03 16:51:56 | 000,000,712 | ---- | C] () -- C:\Users\Fsst\Desktop\Audacity.lnk
  389. [2013-05-03 16:51:56 | 000,000,712 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
  390. [2013-05-02 09:52:15 | 000,000,512 | ---- | C] () -- C:\Users\Fsst\Application Data\Microsoft\Internet Explorer\Quick Launch\VMware Player.lnk
  391. [2013-05-02 09:51:26 | 000,001,539 | ---- | C] () -- C:\Users\Public\Desktop\VMware Player.lnk
  392. [2013-05-01 23:51:39 | 000,001,197 | ---- | C] () -- C:\Users\Fsst\Desktop\Uplay.lnk
  393. [2013-04-28 13:17:41 | 000,291,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr
  394. [2013-04-27 13:58:23 | 000,000,849 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
  395. [2013-04-27 13:57:54 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0
  396. [2013-04-27 13:57:54 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
  397. [2013-04-27 13:57:53 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
  398. [2013-04-26 21:42:35 | 000,000,692 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
  399. [2013-04-20 10:45:41 | 000,006,656 | ---- | C] () -- C:\Users\Fsst\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  400. [2013-04-17 22:57:14 | 000,000,600 | ---- | C] () -- C:\Users\Fsst\AppData\Local\PUTTY.RND
  401. [2013-04-17 20:06:55 | 000,786,644 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  402. [2013-04-17 19:37:56 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
  403. [2012-12-19 21:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
  404. [2012-12-19 21:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
  405. [2012-05-02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
  406. [2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
  407.  
  408. [color=#E56717]========== ZeroAccess Check ==========[/color]
  409.  
  410. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  411.  
  412. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  413.  
  414. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  415.  
  416. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  417.  
  418. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  419.  
  420. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  421. "" = C:\Windows\SysNative\shell32.dll -- [2010-11-21 05:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation)
  422. "ThreadingModel" = Apartment
  423.  
  424. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  425. "" = %SystemRoot%\system32\shell32.dll -- [2010-11-21 05:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation)
  426. "ThreadingModel" = Apartment
  427.  
  428. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  429. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  430. "ThreadingModel" = Free
  431.  
  432. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  433. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  434. "ThreadingModel" = Free
  435.  
  436. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  437. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  438. "ThreadingModel" = Both
  439.  
  440. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  441.  
  442. [color=#E56717]========== LOP Check ==========[/color]
  443.  
  444. [2013-05-14 18:25:14 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\Audacity
  445. [2013-04-20 13:59:30 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
  446. [2013-05-11 23:10:59 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\Doublefine
  447. [2013-05-26 01:34:59 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\FileZilla
  448. [2013-04-17 23:01:23 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\KeePass
  449. [2013-04-19 15:37:57 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\LolClient
  450. [2013-05-18 07:52:20 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\Might & Magic Heroes VI
  451. [2013-04-17 21:40:00 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\Notepad++
  452. [2013-05-12 12:58:50 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\OpenOffice.org
  453. [2013-04-20 22:13:35 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\Opera
  454. [2013-04-27 09:55:48 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\Origin
  455. [2013-04-20 14:36:33 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\PDAppFlex
  456. [2013-05-23 15:31:05 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\PunkBuster
  457. [2013-04-19 19:38:04 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\SplitMediaLabs
  458. [2013-05-03 18:00:31 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\System
  459. [2013-05-05 10:03:28 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\TeamViewer
  460. [2013-05-14 20:51:26 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\TERA
  461. [2013-05-26 17:55:24 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\TS3Client
  462. [2013-05-26 12:17:07 | 000,000,000 | ---D | M] -- C:\Users\Fsst\AppData\Roaming\uTorrent
  463. [2013-05-11 13:28:54 | 000,000,000 | -HSD | M] -- C:\Users\Fsst\AppData\Roaming\wyUpdate AU
  464.  
  465. [color=#E56717]========== Purity Check ==========[/color]
  466.  
  467.  
  468.  
  469. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!