API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 21st, 2015
293
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.97 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 7/21/2015 6:18:34 PM - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Sanda\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17914)
  5. Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 3.80 Gb Total Physical Memory | 2.08 Gb Available Physical Memory | 54.60% Memory free
  8. 7.60 Gb Paging File | 5.64 Gb Available in Paging File | 74.26% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 112.00 Gb Total Space | 59.54 Gb Free Space | 53.16% Space Free | Partition Type: NTFS
  13. Drive D: | 165.99 Gb Total Space | 165.66 Gb Free Space | 99.80% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: SANDA-PC | User Name: Sanda | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2015/07/21 15:13:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  22. PRC - [2015/07/21 14:05:28 | 006,109,776 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  23. PRC - [2015/07/21 14:05:24 | 000,146,600 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  24. PRC - [2015/07/20 09:07:52 | 000,889,632 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
  25. PRC - [2015/07/19 18:09:44 | 000,377,000 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
  26. PRC - [2015/07/13 23:55:16 | 000,813,896 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  27. PRC - [2015/07/07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  28.  
  29.  
  30. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  31.  
  32. MOD - [2015/07/21 14:05:26 | 000,102,864 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\log.dll
  33. MOD - [2015/07/21 14:05:24 | 000,123,976 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
  34. MOD - [2015/07/20 09:09:50 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
  35. MOD - [2015/07/13 23:55:14 | 001,281,864 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libglesv2.dll
  36. MOD - [2015/07/13 23:55:13 | 000,080,712 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libegl.dll
  37. MOD - [2015/04/02 13:06:04 | 040,540,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  38.  
  39.  
  40. [color=#E56717]========== Services (SafeList) ==========[/color]
  41.  
  42. SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe -- (AvastVBoxSvc)
  43. SRV:[b]64bit:[/b] - [2015/07/21 14:05:24 | 000,146,600 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  44. SRV:[b]64bit:[/b] - [2015/06/20 21:34:46 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  45. SRV:[b]64bit:[/b] - [2015/05/25 20:19:13 | 001,255,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  46. SRV:[b]64bit:[/b] - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  47. SRV:[b]64bit:[/b] - [2010/09/22 11:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  48. SRV - [2015/07/19 18:09:43 | 000,149,160 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  49. SRV - [2015/07/16 17:47:35 | 000,268,976 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  50. SRV - [2015/07/07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  51. SRV - [2015/06/03 18:34:39 | 000,134,512 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  52. SRV - [2015/06/03 18:34:39 | 000,134,512 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  53. SRV - [2015/02/18 20:11:32 | 000,315,488 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  54. SRV - [2014/03/21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  55. SRV - [2013/09/11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  56. SRV - [2010/06/01 08:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)
  57.  
  58.  
  59. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  60.  
  61. DRV:[b]64bit:[/b] - File not found [Kernel | Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys -- (VBoxAswDrv)
  62. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,447,944 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  63. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,274,808 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  64. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,150,160 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
  65. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,093,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  66. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,090,968 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  67. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,065,224 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  68. DRV:[b]64bit:[/b] - [2015/07/21 14:05:30 | 000,028,656 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  69. DRV:[b]64bit:[/b] - [2015/07/21 14:05:17 | 001,048,856 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  70. DRV:[b]64bit:[/b] - [2015/05/05 19:00:27 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup)
  71. DRV:[b]64bit:[/b] - [2014/05/14 09:02:44 | 000,017,600 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver)
  72. DRV:[b]64bit:[/b] - [2012/07/09 14:42:54 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  73. DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  74. DRV:[b]64bit:[/b] - [2011/12/13 03:32:22 | 002,797,056 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  75. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  76. DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  77. DRV:[b]64bit:[/b] - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  78. DRV:[b]64bit:[/b] - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  79. DRV:[b]64bit:[/b] - [2010/04/27 09:57:04 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  80. DRV:[b]64bit:[/b] - [2010/04/01 02:25:14 | 000,136,192 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
  81. DRV:[b]64bit:[/b] - [2010/04/01 01:47:08 | 010,322,848 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  82. DRV:[b]64bit:[/b] - [2010/03/31 02:35:26 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI)
  83. DRV:[b]64bit:[/b] - [2010/02/27 02:32:12 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
  84. DRV:[b]64bit:[/b] - [2010/02/03 16:38:30 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  85. DRV:[b]64bit:[/b] - [2009/09/28 11:22:00 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
  86. DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  87. DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  88. DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  89. DRV:[b]64bit:[/b] - [2009/06/10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  90. DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  91. DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  92. DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  93. DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  94. DRV - [2011/02/07 07:31:17 | 000,015,144 | ---- | M] (Windows (R) 2003 DDK 3790 provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\rtport.sys -- (rtport)
  95. DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  96.  
  97.  
  98. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  99.  
  100.  
  101. [color=#E56717]========== Internet Explorer ==========[/color]
  102.  
  103. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  104. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  105. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  106. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
  107. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  108. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  109. IE - HKLM\..\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}: "URL" = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
  110.  
  111. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
  112. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
  113. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
  114. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  115. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  116. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  117. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  118. IE - HKCU\..\SearchScopes\{2F8E9969-BD2A-4CFD-98BC-CF58A7378D73}: "URL" = http://www.bing.com/search?FORM=SMSTDF&PC=MASM&q={searchTerms}&src=IE-SearchBox
  119. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searcerms}&src=IE-SearchBox&FORM=IE8SRC
  120. IE - HKCU\..\SearchScopes\{B38D33B5-675B-4302-9725-F7498522ED2B}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
  121. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  122.  
  123. [color=#E56717]========== FireFox ==========[/color]
  124.  
  125. FF - prefs.js..browser.search.countryCode: "DE"
  126. FF - prefs.js..browser.search.region: "DE"
  127. FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
  128. FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:10.2.0.187
  129. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:40.0
  130. FF - user.js - File not found
  131.  
  132. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll File not found
  133. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.79.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  134. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.79.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  135. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
  136. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  137. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
  138. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll ()
  139. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.51.2: C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  140. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2: C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll (Oracle Corporation)
  141. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
  142. FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
  143. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  144. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  145. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  146. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  147. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  148. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  149. FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Sanda\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
  150. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  151.  
  152. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010/11/06 07:07:53 | 000,000,000 | ---D | M]
  153. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/07/21 14:05:20 | 000,000,000 | ---D | M]
  154. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  155. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  156.  
  157. [2011/06/01 16:37:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Extensions
  158. [2015/07/16 17:10:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\Firefox\Profiles\mx5bwj12.default-1437059342695\extensions
  159. [2015/07/16 17:10:44 | 000,946,636 | ---- | M] () (No name found) -- C:\Users\Sanda\AppData\Roaming\mozilla\firefox\profiles\mx5bwj12.default-1437059342695\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
  160. [2015/07/19 18:09:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  161. [2015/07/19 18:09:49 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  162. [2015/07/21 14:05:20 | 000,000,000 | ---D | M] ("Avast Online Security") -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
  163.  
  164. O1 HOSTS File: ([2013/06/22 20:40:29 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  165. O1 - Hosts: 127.0.0.1 localhost
  166. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  167. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  168. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  169. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll (Oracle Corporation)
  170. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  171. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll (Oracle Corporation)
  172. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
  173. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  174. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
  175. O4 - HKCU..\Run: [GoogleChromeAutoLaunch_2F8059F9DC7B04BBE9DCCDCE3A5BA3D3] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
  176. O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd)
  177. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  178. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  179. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  180. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  181. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
  182. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  183. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
  184. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
  185. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
  186. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  187. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  188. O13 - gopher Prefix: missing
  189. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  190. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{81C433C9-3A3F-49D8-9694-C293F8B7BA99}: DhcpNameServer = 192.168.0.1
  191. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2C91259-F1E2-474C-8B86-E8B86C28CD54}: DhcpNameServer = 192.168.0.1
  192. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  193. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
  194. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
  195. O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
  196. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  197. O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
  198. O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
  199. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  200. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  201. O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  202. O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
  203. O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
  204. O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
  205. O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
  206. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  207. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  208. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  209. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  210. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  211. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  212. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  213. O32 - HKLM CDRom: AutoRun - 1
  214. O34 - HKLM BootExecute: (autocheck autochk *)
  215. O34 - HKLM BootExecute: (BootDefrag.exe)
  216. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  217. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  218. O35 - HKLM\..comfile [open] -- "%1" %*
  219. O35 - HKLM\..exefile [open] -- "%1" %*
  220. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  221. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  222. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  223. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  224. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  225. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  226. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  227.  
  228.  
  229. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  230. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  231. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  232.  
  233. CREATERESTOREPOINT
  234. Restore point Set: OTL Restore Point
  235.  
  236. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  237.  
  238. [2015/07/21 15:13:30 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  239. [2015/07/21 14:05:33 | 000,378,880 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  240. [2015/07/21 14:05:26 | 000,043,112 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  241. [2015/07/19 18:09:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  242. [2015/07/16 17:40:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  243. [2015/07/16 16:59:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  244. [2015/06/23 13:16:40 | 000,000,000 | ---D | C] -- C:\Users\Sanda\AppData\Local\GWX
  245. [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  246. [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  247.  
  248. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  249.  
  250. [2015/07/21 18:06:39 | 000,019,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  251. [2015/07/21 18:06:39 | 000,019,808 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  252. [2015/07/21 18:06:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  253. [2015/07/21 18:02:07 | 000,001,212 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineUA.job
  254. [2015/07/21 18:01:45 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  255. [2015/07/21 18:01:31 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  256. [2015/07/21 18:00:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  257. [2015/07/21 16:21:15 | 000,001,208 | ---- | M] () -- C:\Windows\tasks\DropboxUpdateTaskMachineCore.job
  258. [2015/07/21 16:19:50 | 4081,635,328 | -HS- | M] () -- C:\hiberfil.sys
  259. [2015/07/21 15:13:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  260. [2015/07/21 14:20:44 | 000,001,084 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk
  261. [2015/07/21 14:05:30 | 000,447,944 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  262. [2015/07/21 14:05:30 | 000,378,880 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  263. [2015/07/21 14:05:30 | 000,274,808 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
  264. [2015/07/21 14:05:30 | 000,150,160 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
  265. [2015/07/21 14:05:30 | 000,093,528 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
  266. [2015/07/21 14:05:30 | 000,090,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  267. [2015/07/21 14:05:30 | 000,065,224 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
  268. [2015/07/21 14:05:30 | 000,028,656 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
  269. [2015/07/21 14:05:26 | 000,043,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  270. [2015/07/21 14:05:17 | 001,048,856 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  271. [2015/07/18 13:55:14 | 000,288,824 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  272. [2015/07/16 17:15:33 | 000,002,175 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  273. [2015/06/26 21:38:51 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
  274. [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
  275. [1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
  276.  
  277. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  278.  
  279. [2014/12/21 22:55:42 | 001,594,964 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  280. [2013/06/25 16:27:02 | 000,007,278 | ---- | C] () -- C:\Users\Sanda\AppData\Local\recently-used.xbel
  281. [2013/06/09 15:45:39 | 000,005,120 | ---- | C] () -- C:\Users\Sanda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  282. [2012/07/10 19:25:27 | 000,004,096 | -H-- | C] () -- C:\Users\Sanda\AppData\Local\keyfile3.drm
  283. [2011/06/01 17:16:36 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
  284.  
  285. [color=#E56717]========== ZeroAccess Check ==========[/color]
  286.  
  287. [2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  288.  
  289. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  290.  
  291. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  292.  
  293. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  294.  
  295. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  296.  
  297. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  298. "" = C:\Windows\SysNative\shell32.dll -- [2015/02/13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
  299. "ThreadingModel" = Apartment
  300.  
  301. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  302. "" = %SystemRoot%\system32\shell32.dll -- [2015/02/13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
  303. "ThreadingModel" = Apartment
  304.  
  305. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  306. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  307. "ThreadingModel" = Free
  308.  
  309. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  310. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  311. "ThreadingModel" = Free
  312.  
  313. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  314. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  315. "ThreadingModel" = Both
  316.  
  317. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  318.  
  319. [color=#E56717]========== LOP Check ==========[/color]
  320.  
  321. [2013/02/15 19:48:45 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Ashampoo
  322. [2013/12/03 16:44:28 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\AVAST Software
  323. [2015/01/27 14:50:04 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer
  324. [2011/06/01 18:58:00 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\BSplayer Pro
  325. [2015/07/18 13:54:11 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\DiskDefrag
  326. [2015/07/16 17:00:39 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\Dropbox
  327. [2014/05/18 22:40:03 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\GlarySoft
  328. [2015/06/13 18:55:46 | 000,000,000 | ---D | M] -- C:\Users\Sanda\AppData\Roaming\JAM Software
  329.  
  330. [color=#E56717]========== Purity Check ==========[/color]
  331.  
  332.  
  333.  
  334. [color=#E56717]========== Custom Scans ==========[/color]
  335.  
  336. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  337. [2015/04/02 19:39:10 | 000,001,262 | ---- | M] () -- C:\DelFix.txt
  338. [2015/07/21 16:19:50 | 4081,635,328 | -HS- | M] () -- C:\hiberfil.sys
  339. [2015/07/21 16:19:50 | 4081,635,328 | -HS- | M] () -- C:\pagefile.sys
  340. [2010/11/06 05:46:20 | 000,002,162 | ---- | M] () -- C:\RHDSetup.log
  341. [2010/11/06 05:52:53 | 000,000,191 | ---- | M] () -- C:\Setup.log
  342.  
  343. [color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
  344. [2009/07/14 07:32:31 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
  345. [2009/07/14 07:32:31 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
  346. [2009/07/14 07:32:31 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
  347. [2009/07/14 07:32:31 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
  348.  
  349. [color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
  350.  
  351. [color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
  352. [2009/06/10 22:49:50 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini
  353.  
  354. [color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
  355.  
  356. [color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
  357.  
  358. [color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
  359.  
  360. [color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
  361.  
  362. [color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
  363.  
  364. [color=#A23BEC]< %systemroot%\system32\*.jpg >[/color]
  365.  
  366. [color=#A23BEC]< %systemroot%\*.jpg >[/color]
  367.  
  368. [color=#A23BEC]< %systemroot%\*.png >[/color]
  369. [2006/11/10 00:31:56 | 000,016,018 | ---- | M] () -- C:\Windows\Samsung.png
  370.  
  371. [color=#A23BEC]< %systemroot%\*.scr >[/color]
  372. [2015/07/21 14:05:26 | 000,043,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  373. [2009/11/16 09:27:16 | 019,480,587 | ---- | M] () -- C:\Windows\Crystal Delight.scr
  374. [2010/09/22 17:32:56 | 000,301,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR
  375.  
  376. [color=#A23BEC]< %systemroot%\*._sy >[/color]
  377.  
  378. [color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
  379.  
  380. [color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
  381.  
  382. [color=#A23BEC]< %APPDATA%\Microsoft\*.* >[/color]
  383. [2014/12/07 16:52:05 | 000,001,622 | -HS- | M] () -- C:\Users\Sanda\AppData\Roaming\Microsoft\LastFlashConfig.wfc
  384.  
  385. [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
  386. [2009/07/14 06:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  387.  
  388. [color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
  389.  
  390. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  391.  
  392. [color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
  393.  
  394. [color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
  395.  
  396. [color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
  397.  
  398. [color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >[/color]
  399.  
  400. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
  401.  
  402. [color=#A23BEC]< %systemroot%\*.config >[/color]
  403.  
  404. [color=#A23BEC]< %systemroot%\system32\*.db >[/color]
  405.  
  406. [color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
  407. [2011/06/01 16:25:05 | 000,000,221 | -HS- | M] () -- C:\Users\Sanda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
  408.  
  409. [color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
  410. [2015/07/21 15:13:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sanda\Desktop\OTL.exe
  411.  
  412. [color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
  413.  
  414. [color=#A23BEC]< %systemroot%\*.src >[/color]
  415.  
  416. [color=#A23BEC]< %systemroot%\install\*.* >[/color]
  417.  
  418. [color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
  419.  
  420. [color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
  421.  
  422. [color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
  423.  
  424. [color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
  425.  
  426. [color=#A23BEC]< %systemroot%\Java\*.* >[/color]
  427.  
  428. [color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
  429.  
  430. [color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
  431.  
  432. [color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
  433.  
  434. [color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
  435.  
  436. [color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
  437.  
  438. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
  439.  
  440. [color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
  441.  
  442. [color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
  443.  
  444. [color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
  445.  
  446. [color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
  447. [2009/06/10 23:20:04 | 000,000,802 | ---- | M] () -- C:\Windows\ADDINS\FXSEXT.ecf
  448.  
  449. [color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
  450.  
  451. [color=#A23BEC]< %systemroot%\Config\*.* >[/color]
  452.  
  453. [color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
  454.  
  455. [color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
  456.  
  457. [color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
  458.  
  459. [color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
  460.  
  461. [color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
  462.  
  463. [color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
  464.  
  465. [color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
  466.  
  467. [color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
  468.  
  469. [color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
  470. [2015/03/13 14:04:05 | 000,000,402 | -HS- | M] () -- C:\Users\Sanda\Favorites\desktop.ini
  471.  
  472. [color=#A23BEC]< %systemroot%\System32\Wbem\*.exe >[/color]
  473. [2009/07/14 03:14:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\mofcomp.exe
  474. [2009/07/14 03:14:45 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WinMgmt.exe
  475. [2009/07/14 03:14:46 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIADAP.exe
  476. [2009/07/14 03:14:46 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WMIC.exe
  477. [2010/11/20 14:17:55 | 000,257,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wbem\WmiPrvSE.exe
  478.  
  479. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
  480.  
  481. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
  482.  
  483. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!