API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jun 8th, 2017
639
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 36.97 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2017-06-08 18:18:59 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\ACER\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.18204)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,86 Gb Total Physical Memory | 2,35 Gb Available Physical Memory | 60,87% Memory free
  8. 7,71 Gb Paging File | 6,08 Gb Available in Paging File | 78,84% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 237,58 Gb Total Space | 108,39 Gb Free Space | 45,62% Space Free | Partition Type: NTFS
  13. Drive D: | 200,32 Gb Total Space | 188,01 Gb Free Space | 93,86% Space Free | Partition Type: NTFS
  14. Drive E: | 9,76 Gb Total Space | 6,27 Gb Free Space | 64,23% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: ACER-KOMPUTER | User Name: ACER | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2017-06-08 18:18:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ACER\Downloads\OTL.exe
  23. PRC - [2017-06-01 21:50:24 | 002,419,488 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  24. PRC - [2017-06-01 21:50:22 | 003,042,592 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
  25. PRC - [2017-05-17 11:06:31 | 006,247,376 | ---- | M] (QIHU 360 SOFTWARE CO. LIMITED) -- C:\Program Files (x86)\360\Total Security\QHSafeMain.exe
  26. PRC - [2017-05-17 11:06:31 | 001,944,528 | ---- | M] (QIHU 360 SOFTWARE CO. LIMITED) -- C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
  27. PRC - [2017-05-17 11:06:31 | 001,459,808 | ---- | M] () -- C:\Program Files (x86)\360\Total Security\PromoUtil.exe
  28. PRC - [2017-05-17 11:06:31 | 000,928,208 | ---- | M] (QIHU 360 SOFTWARE CO. LIMITED) -- C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
  29. PRC - [2017-05-17 11:06:31 | 000,124,536 | ---- | M] (QIHU 360 SOFTWARE CO. LIMITED) -- C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
  30. PRC - [2017-04-14 17:23:12 | 002,353,616 | ---- | M] (SecureMix LLC) -- C:\Program Files (x86)\GlassWire\GWIdlMon.exe
  31. PRC - [2017-04-14 17:23:08 | 004,427,728 | ---- | M] (SecureMix LLC) -- C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
  32. PRC - [2015-10-28 19:49:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  33. PRC - [2011-04-30 09:32:54 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  34.  
  35.  
  36. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  37.  
  38. MOD - [2017-06-01 21:50:30 | 002,485,536 | ---- | M] () -- C:\Program Files (x86)\Steam\video.dll
  39. MOD - [2017-06-01 21:50:26 | 000,877,856 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll
  40. MOD - [2017-06-01 21:50:22 | 000,385,312 | ---- | M] () -- C:\Program Files (x86)\Steam\Steam.dll
  41. MOD - [2017-05-17 11:06:31 | 001,459,808 | ---- | M] () -- C:\Program Files (x86)\360\Total Security\PromoUtil.exe
  42. MOD - [2017-05-17 11:06:31 | 000,497,576 | ---- | M] () -- C:\Program Files (x86)\360\Total Security\safemon\wdui2.dll
  43. MOD - [2017-05-17 03:54:06 | 000,678,176 | ---- | M] () -- C:\Program Files (x86)\Steam\SDL2.dll
  44. MOD - [2017-05-08 21:45:38 | 069,516,064 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
  45. MOD - [2017-04-14 17:22:56 | 000,178,128 | ---- | M] () -- C:\Program Files (x86)\GlassWire\EasyHook32.dll
  46. MOD - [2016-10-22 09:20:53 | 000,018,880 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
  47. MOD - [2016-09-01 03:02:12 | 004,969,248 | ---- | M] () -- C:\Program Files (x86)\Steam\v8.dll
  48. MOD - [2016-09-01 03:02:06 | 001,563,936 | ---- | M] () -- C:\Program Files (x86)\Steam\icui18n.dll
  49. MOD - [2016-09-01 03:02:06 | 001,195,296 | ---- | M] () -- C:\Program Files (x86)\Steam\icuuc.dll
  50. MOD - [2016-07-05 00:17:58 | 000,266,560 | ---- | M] () -- C:\Program Files (x86)\Steam\openvr_api.dll
  51. MOD - [2016-01-27 09:49:46 | 002,549,760 | ---- | M] () -- C:\Program Files (x86)\Steam\libavcodec-56.dll
  52. MOD - [2016-01-27 09:49:46 | 000,491,008 | ---- | M] () -- C:\Program Files (x86)\Steam\libavformat-56.dll
  53. MOD - [2016-01-27 09:49:46 | 000,485,888 | ---- | M] () -- C:\Program Files (x86)\Steam\libswscale-3.dll
  54. MOD - [2016-01-27 09:49:46 | 000,442,880 | ---- | M] () -- C:\Program Files (x86)\Steam\libavutil-54.dll
  55. MOD - [2016-01-27 09:49:46 | 000,332,800 | ---- | M] () -- C:\Program Files (x86)\Steam\libavresample-2.dll
  56. MOD - [2015-09-25 01:52:04 | 000,119,208 | ---- | M] () -- C:\Program Files (x86)\Steam\winh264.dll
  57.  
  58.  
  59. [color=#E56717]========== Services (SafeList) ==========[/color]
  60.  
  61. SRV:[b]64bit:[/b] - [2016-10-22 07:33:35 | 000,458,176 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem)
  62. SRV:[b]64bit:[/b] - [2016-06-08 18:12:42 | 000,416,408 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe -- (USER_ESRV_SVC_WILLAMETTE)
  63. SRV:[b]64bit:[/b] - [2016-06-08 18:12:42 | 000,416,408 | ---- | M] () [On_Demand | Running] -- C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe -- (ESRV_SVC_WILLAMETTE)
  64. SRV:[b]64bit:[/b] - [2016-01-22 08:27:40 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  65. SRV:[b]64bit:[/b] - [2015-07-23 02:02:54 | 001,390,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  66. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  67. SRV:[b]64bit:[/b] - [2011-05-10 14:01:08 | 000,872,552 | ---- | M] (Acer Incorporated) [Disabled | Stopped] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
  68. SRV - [2017-05-17 11:06:31 | 000,928,208 | ---- | M] (QIHU 360 SOFTWARE CO. LIMITED) [Auto | Running] -- C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe -- (QHActiveDefense)
  69. SRV - [2017-05-12 13:42:07 | 000,271,864 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  70. SRV - [2017-04-14 17:23:08 | 004,427,728 | ---- | M] (SecureMix LLC) [Auto | Running] -- C:\Program Files (x86)\GlassWire\GWCtlSrv.exe -- (GlassWire)
  71. SRV - [2016-06-08 18:04:48 | 000,117,400 | ---- | M] () [On_Demand | Running] -- C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe -- (SystemUsageReportSvc_WILLAMETTE)
  72. SRV - [2016-02-12 10:58:58 | 000,243,984 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Windows\SysWOW64\EasyAntiCheat.exe -- (EasyAntiCheat)
  73. SRV - [2016-01-20 01:26:22 | 000,146,888 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
  74. SRV - [2015-10-28 19:49:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  75. SRV - [2014-05-02 14:58:46 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
  76. SRV - [2014-04-12 00:08:08 | 000,103,608 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  77. SRV - [2014-04-03 01:45:31 | 003,209,160 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
  78. SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  79. SRV - [2011-07-01 04:51:12 | 000,353,360 | ---- | M] (Dritek System Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
  80. SRV - [2011-04-30 09:32:54 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  81.  
  82.  
  83. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  84.  
  85. DRV:[b]64bit:[/b] - [2017-05-17 11:06:31 | 000,330,472 | ---- | M] (360.cn) [File_System | System | Running] -- C:\Windows\SysNative\drivers\360Box64.sys -- (360Box64)
  86. DRV:[b]64bit:[/b] - [2017-05-17 11:06:31 | 000,175,040 | ---- | M] (360.cn) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\360AntiHacker64.sys -- (360AntiHacker)
  87. DRV:[b]64bit:[/b] - [2017-05-17 11:06:31 | 000,049,088 | ---- | M] (360.cn) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\360Camera64.sys -- (360Camera)
  88. DRV:[b]64bit:[/b] - [2017-05-17 11:06:30 | 000,423,360 | ---- | M] (360.cn) [File_System | System | Running] -- C:\Windows\SysNative\drivers\360fsflt.sys -- (360FsFlt)
  89. DRV:[b]64bit:[/b] - [2017-05-17 11:06:30 | 000,190,400 | ---- | M] (360.cn) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BAPIDRV64.SYS -- (BAPIDRV)
  90. DRV:[b]64bit:[/b] - [2017-05-17 11:06:30 | 000,086,248 | ---- | M] (360.cn) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\360AvFlt.sys -- (360AvFlt)
  91. DRV:[b]64bit:[/b] - [2016-11-11 14:47:28 | 000,034,720 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  92. DRV:[b]64bit:[/b] - [2016-10-22 09:20:53 | 000,038,336 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  93. DRV:[b]64bit:[/b] - [2016-06-23 19:49:44 | 000,047,672 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dtliteusbbus.sys -- (dtliteusbbus)
  94. DRV:[b]64bit:[/b] - [2016-06-23 19:49:05 | 000,030,264 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dtlitescsibus.sys -- (dtlitescsibus)
  95. DRV:[b]64bit:[/b] - [2016-01-17 11:55:09 | 000,072,280 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd)
  96. DRV:[b]64bit:[/b] - [2016-01-17 11:55:09 | 000,021,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp)
  97. DRV:[b]64bit:[/b] - [2016-01-17 11:54:44 | 000,059,088 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa)
  98. DRV:[b]64bit:[/b] - [2016-01-17 11:52:26 | 000,103,448 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  99. DRV:[b]64bit:[/b] - [2016-01-17 11:51:06 | 000,458,960 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
  100. DRV:[b]64bit:[/b] - [2015-06-04 13:33:50 | 000,021,984 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\semav6msr64.sys -- (semav6msr64)
  101. DRV:[b]64bit:[/b] - [2015-06-01 23:13:32 | 000,043,616 | ---- | M] (SteelSeries ApS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sshid.sys -- (sshid)
  102. DRV:[b]64bit:[/b] - [2015-06-01 23:13:32 | 000,032,792 | ---- | M] (SteelSeries ApS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ssdevfactory.sys -- (ssdevfactory)
  103. DRV:[b]64bit:[/b] - [2015-06-01 23:13:32 | 000,008,704 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidkmdf.sys -- (hidkmdf)
  104. DRV:[b]64bit:[/b] - [2015-05-29 06:15:28 | 000,033,248 | ---- | M] (SecureMix LLC) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gwdrv.sys -- (gwdrv)
  105. DRV:[b]64bit:[/b] - [2014-11-05 01:32:04 | 000,066,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
  106. DRV:[b]64bit:[/b] - [2012-05-12 13:31:00 | 000,121,416 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MijXfilt.sys -- (MotioninJoyXFilter)
  107. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  108. DRV:[b]64bit:[/b] - [2011-12-07 20:42:28 | 000,074,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
  109. DRV:[b]64bit:[/b] - [2011-07-14 07:35:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  110. DRV:[b]64bit:[/b] - [2011-07-14 07:35:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  111. DRV:[b]64bit:[/b] - [2011-06-10 20:16:10 | 012,230,912 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  112. DRV:[b]64bit:[/b] - [2011-04-26 20:07:36 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  113. DRV:[b]64bit:[/b] - [2011-04-05 13:26:26 | 000,142,632 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
  114. DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  115. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  116. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  117. DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  118. DRV:[b]64bit:[/b] - [2010-11-09 12:26:46 | 002,377,216 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  119. DRV:[b]64bit:[/b] - [2010-10-20 02:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  120. DRV:[b]64bit:[/b] - [2010-10-15 10:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  121. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  122. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  123. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  124. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  125. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  126. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  127. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  128. DRV - [2017-05-17 11:06:30 | 000,086,248 | ---- | M] (360.cn) [File_System | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\360AvFlt.sys -- (360AvFlt)
  129. DRV - [2016-01-10 07:19:47 | 000,026,528 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
  130. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  131.  
  132.  
  133. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  134.  
  135.  
  136. [color=#E56717]========== Internet Explorer ==========[/color]
  137.  
  138. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  139. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
  140. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  141. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  142. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
  143.  
  144. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
  145. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.com
  146. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  147. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
  148. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
  149. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  150. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  151. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
  152.  
  153. [color=#E56717]========== FireFox ==========[/color]
  154.  
  155. FF - prefs.js..browser.search.countryCode: "PL"
  156. FF - prefs.js..browser.search.region: "PL"
  157. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:43.0.4
  158. FF - user.js - File not found
  159.  
  160. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll File not found
  161. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  162. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
  163. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll ()
  164. FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.4.0: C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
  165. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  166. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
  167. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  168. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
  169. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  170. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  171. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
  172. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
  173. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  174. FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
  175.  
  176. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 43.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
  177. FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 43.0.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
  178.  
  179. [2015-09-18 21:05:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Extensions
  180. [2017-01-19 14:17:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\Firefox\Profiles\3ascvvw5.default\extensions
  181. [2017-01-19 14:17:31 | 000,023,373 | ---- | M] () (No name found) -- C:\Users\ACER\AppData\Roaming\mozilla\firefox\profiles\3ascvvw5.default\extensions\firefox-hotfix@mozilla.org.xpi
  182. [2015-10-16 00:53:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
  183. [2016-01-20 01:26:24 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  184.  
  185. [color=#E56717]========== Chrome ==========[/color]
  186.  
  187. CHR - Extension: No name found = C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjdhcabjnhhifipbnopnfpfidkafanjf\4.1.0_0\
  188. CHR - Extension: No name found = C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\3.10.0_0\
  189. CHR - Extension: No name found = C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Extensions\glcimepnljoholdmjchkloafkggfoijh\2.1.9_0\
  190. CHR - Extension: No name found = C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\
  191. CHR - Extension: No name found = C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.5_0\
  192.  
  193. O1 HOSTS File: ([2016-07-20 02:10:07 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  194. O2:[b]64bit:[/b] - BHO: (SafeMon Class) - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll (Qihu 360 Software Co., Ltd.)
  195. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
  196. O2 - BHO: (SafeMon Class) - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - C:\Program Files (x86)\360\Total Security\safemon\safemon.dll (Qihu 360 Software Co., Ltd.)
  197. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
  198. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  199. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  200. O4 - HKLM..\Run: [QHSafeTray] C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe (QIHU 360 SOFTWARE CO. LIMITED)
  201. O4 - HKCU..\Run: [GlassWire] C:\Program Files (x86)\GlassWire\glasswire.exe (SecureMix LLC)
  202. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
  203. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  204. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  205. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  206. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  207. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
  208. O13[b]64bit:[/b] - gopher Prefix: missing
  209. O13 - gopher Prefix: missing
  210. O15 - HKCU\..Trusted Domains: aeriagames.com ([]http in Trusted sites)
  211. O15 - HKCU\..Trusted Domains: aeriagames.com ([]https in Trusted sites)
  212. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
  213. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5F07AC4C-D49C-4D5F-BAFB-923DF7E68C16}: DhcpNameServer = 192.168.1.254
  214. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  215. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  216. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  217. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  218. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  219. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  220. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  221. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  222. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  223. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  224. O32 - HKLM CDRom: AutoRun - 1
  225. O33 - MountPoints2\{0b548c0d-73c2-11e5-94f3-b870f4e6253e}\Shell - "" = AutoRun
  226. O33 - MountPoints2\{0b548c0d-73c2-11e5-94f3-b870f4e6253e}\Shell\AutoRun\command - "" = G:\HTC_Sync_Manager_PC.exe
  227. O33 - MountPoints2\{122dd361-3976-11e6-a398-b870f4e6253e}\Shell - "" = AutoRun
  228. O33 - MountPoints2\{122dd361-3976-11e6-a398-b870f4e6253e}\Shell\AutoRun\command - "" = K:\Autorun.exe
  229. O33 - MountPoints2\{176055fe-6a74-11e5-9aa9-b870f4e6253e}\Shell - "" = AutoRun
  230. O33 - MountPoints2\{176055fe-6a74-11e5-9aa9-b870f4e6253e}\Shell\AutoRun\command - "" = G:\startme.exe
  231. O33 - MountPoints2\{3726766f-aa33-11e6-b30d-b870f4e6253e}\Shell - "" = AutoRun
  232. O33 - MountPoints2\{3726766f-aa33-11e6-b30d-b870f4e6253e}\Shell\AutoRun\command - "" = H:\setup.EXE /AUTORUN
  233. O33 - MountPoints2\{3726766f-aa33-11e6-b30d-b870f4e6253e}\Shell\configure\command - "" = H:\setup.EXE
  234. O33 - MountPoints2\{3726766f-aa33-11e6-b30d-b870f4e6253e}\Shell\install\command - "" = H:\setup.EXE
  235. O34 - HKLM BootExecute: (autocheck autochk *)
  236. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  237. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  238. O35 - HKLM\..comfile [open] -- "%1" %*
  239. O35 - HKLM\..exefile [open] -- "%1" %*
  240. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  241. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  242. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  243. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  244. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  245. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  246. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  247.  
  248. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  249.  
  250. [2017-06-08 18:12:53 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\GlassWire
  251. [2017-06-08 18:12:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GlassWire
  252. [2017-06-08 18:12:39 | 000,033,248 | ---- | C] (SecureMix LLC) -- C:\Windows\SysNative\drivers\gwdrv.sys
  253. [2017-06-08 18:12:34 | 000,000,000 | ---D | C] -- C:\ProgramData\GlassWire
  254. [2017-06-08 18:12:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GlassWire
  255. [2017-06-08 18:10:41 | 000,000,000 | ---D | C] -- C:\Windows\tasks\360Disabled
  256. [2017-06-08 17:33:56 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Roaming\360TotalSecurity
  257. [2017-06-08 17:33:54 | 000,000,000 | ---D | C] -- C:\ProgramData\360TotalSecurity
  258. [2017-06-08 17:33:52 | 000,000,000 | ---D | C] -- C:\ProgramData\360safe
  259. [2017-06-08 17:33:51 | 000,423,360 | ---- | C] (360.cn) -- C:\Windows\SysNative\drivers\360fsflt.sys
  260. [2017-06-08 17:33:42 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Roaming\360safe
  261. [2017-06-08 17:33:39 | 000,330,472 | ---- | C] (360.cn) -- C:\Windows\SysNative\drivers\360Box64.sys
  262. [2017-06-08 17:33:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center
  263. [2017-06-08 17:33:34 | 000,190,400 | ---- | C] (360.cn) -- C:\Windows\SysNative\drivers\BAPIDRV64.SYS
  264. [2017-06-08 17:33:31 | 000,175,040 | ---- | C] (360.cn) -- C:\Windows\SysNative\drivers\360AntiHacker64.sys
  265. [2017-06-08 17:33:31 | 000,086,248 | ---- | C] (360.cn) -- C:\Windows\SysNative\drivers\360AvFlt.sys
  266. [2017-06-08 17:33:31 | 000,049,088 | ---- | C] (360.cn) -- C:\Windows\SysNative\drivers\360Camera64.sys
  267. [2017-06-08 17:16:04 | 000,000,000 | -HSD | C] -- C:\$360Section
  268. [2017-06-08 14:58:58 | 000,000,000 | ---D | C] -- C:\ProgramData\360Quarant
  269. [2017-06-08 14:50:05 | 000,086,248 | ---- | C] (360.cn) -- C:\Windows\SysWow64\drivers\360AvFlt.sys
  270. [2017-06-08 14:49:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\360
  271. [2017-06-07 22:46:24 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\OrionGame
  272. [2017-06-06 16:33:04 | 000,000,000 | ---D | C] -- C:\Program Files\Epic Games
  273. [2017-06-06 16:30:18 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\UnrealEngineLauncher
  274. [2017-06-06 16:30:11 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\UnrealEngine
  275. [2017-06-06 16:30:11 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Local\EpicGamesLauncher
  276. [2017-06-06 16:29:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Epic Games
  277. [2017-06-06 16:29:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Epic
  278. [2017-05-27 15:18:27 | 000,000,000 | ---D | C] -- C:\Program Files\FACEIT Client
  279. [2017-05-16 21:27:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
  280. [2017-05-12 18:54:42 | 000,000,000 | ---D | C] -- C:\Users\ACER\AppData\Roaming\.minecraftzyczu
  281. [2017-05-12 14:13:20 | 000,000,000 | ---D | C] -- C:\Users\ACER\.TeamSpeak 3
  282. [2017-05-12 12:26:38 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
  283. [2015-06-21 14:41:21 | 005,075,968 | ---- | C] (WebZen) -- C:\Users\ACER\main.exe
  284.  
  285. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  286.  
  287. [2017-06-08 17:33:39 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\360 Total Security.lnk
  288. [2017-06-08 17:25:46 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  289. [2017-06-08 17:25:46 | 000,024,608 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  290. [2017-06-08 17:24:07 | 001,669,190 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  291. [2017-06-08 17:24:07 | 000,740,348 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  292. [2017-06-08 17:24:07 | 000,654,140 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  293. [2017-06-08 17:24:07 | 000,155,890 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  294. [2017-06-08 17:24:07 | 000,122,012 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  295. [2017-06-08 17:17:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  296. [2017-06-08 16:27:35 | 000,000,164 | ---- | M] () -- C:\Users\ACER\Documents\ClownfishForTeamspeak.ini
  297. [2017-06-01 14:28:13 | 000,007,607 | ---- | M] () -- C:\Users\ACER\AppData\Local\Resmon.ResmonCfg
  298. [2017-05-17 11:06:31 | 000,330,472 | ---- | M] (360.cn) -- C:\Windows\SysNative\drivers\360Box64.sys
  299. [2017-05-17 11:06:31 | 000,175,040 | ---- | M] (360.cn) -- C:\Windows\SysNative\drivers\360AntiHacker64.sys
  300. [2017-05-17 11:06:31 | 000,049,088 | ---- | M] (360.cn) -- C:\Windows\SysNative\drivers\360Camera64.sys
  301. [2017-05-17 11:06:30 | 000,423,360 | ---- | M] (360.cn) -- C:\Windows\SysNative\drivers\360fsflt.sys
  302. [2017-05-17 11:06:30 | 000,190,400 | ---- | M] (360.cn) -- C:\Windows\SysNative\drivers\BAPIDRV64.SYS
  303. [2017-05-17 11:06:30 | 000,086,248 | ---- | M] (360.cn) -- C:\Windows\SysWow64\drivers\360AvFlt.sys
  304. [2017-05-17 11:06:30 | 000,086,248 | ---- | M] (360.cn) -- C:\Windows\SysNative\drivers\360AvFlt.sys
  305. [2017-05-12 18:54:35 | 003,399,374 | ---- | M] () -- C:\Users\ACER\Desktop\zyczu-mc.jar
  306. [2017-05-12 18:20:03 | 001,123,192 | ---- | M] () -- C:\Users\ACER\Desktop\pgl 3.pdf
  307. [2017-05-12 18:19:48 | 001,124,105 | ---- | M] () -- C:\Users\ACER\Desktop\pgl 2.pdf
  308. [2017-05-12 18:19:25 | 001,123,704 | ---- | M] () -- C:\Users\ACER\Desktop\pgl 1.pdf
  309. [2017-05-12 13:42:05 | 000,803,320 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  310. [2017-05-12 13:42:05 | 000,144,888 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  311.  
  312. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  313.  
  314. [2017-06-08 18:12:39 | 000,008,657 | ---- | C] () -- C:\Windows\SysNative\drivers\gwdrv.cat
  315. [2017-06-08 18:12:39 | 000,003,102 | ---- | C] () -- C:\Windows\SysNative\drivers\gwdrv.inf
  316. [2017-06-08 17:33:39 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\360 Total Security.lnk
  317. [2017-06-06 16:29:16 | 000,002,507 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
  318. [2017-05-12 18:54:30 | 003,399,374 | ---- | C] () -- C:\Users\ACER\Desktop\zyczu-mc.jar
  319. [2017-05-12 18:20:03 | 001,123,192 | ---- | C] () -- C:\Users\ACER\Desktop\pgl 3.pdf
  320. [2017-05-12 18:19:47 | 001,124,105 | ---- | C] () -- C:\Users\ACER\Desktop\pgl 2.pdf
  321. [2017-05-12 18:19:24 | 001,123,704 | ---- | C] () -- C:\Users\ACER\Desktop\pgl 1.pdf
  322. [2017-05-12 12:26:43 | 000,000,933 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
  323. [2016-10-25 14:08:56 | 000,269,600 | ---- | C] () -- C:\Windows\SysWow64\vulkan-1.dll
  324. [2016-10-25 14:08:56 | 000,110,880 | ---- | C] () -- C:\Windows\SysWow64\vulkaninfo.exe
  325. [2016-10-25 13:52:58 | 035,224,120 | ---- | C] () -- C:\Windows\SysWow64\nvcompiler.dll
  326. [2016-10-24 07:28:05 | 000,000,000 | ---- | C] () -- C:\Users\ACER\AppData\Local\{A3FC1EAE-5168-4BF3-A13C-BF9A0CACAABA}
  327. [2016-09-09 20:25:58 | 000,269,600 | ---- | C] () -- C:\Windows\SysWow64\vulkan-1-1-0-26-0.dll
  328. [2016-09-09 20:25:28 | 000,110,880 | ---- | C] () -- C:\Windows\SysWow64\vulkaninfo-1-1-0-26-0.exe
  329. [2016-06-23 20:46:03 | 000,000,046 | ---- | C] () -- C:\Users\ACER\AppData\Roaming\WB.CFG
  330. [2015-07-14 23:11:06 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
  331. [2015-06-21 14:41:21 | 000,000,045 | ---- | C] () -- C:\Users\ACER\config.ini
  332. [2015-06-21 14:41:16 | 000,001,659 | ---- | C] () -- C:\Users\ACER\version.wvd
  333. [2015-06-21 14:41:16 | 000,000,222 | ---- | C] () -- C:\Users\ACER\list.inf
  334. [2015-01-07 15:44:33 | 000,000,132 | ---- | C] () -- C:\Users\ACER\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
  335. [2014-05-15 18:29:33 | 000,000,067 | ---- | C] () -- C:\Users\ACER\AppData\Roaming\burnaware.ini
  336. [2014-05-02 20:18:32 | 000,007,607 | ---- | C] () -- C:\Users\ACER\AppData\Local\Resmon.ResmonCfg
  337.  
  338. [color=#E56717]========== ZeroAccess Check ==========[/color]
  339.  
  340. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  341.  
  342. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  343.  
  344. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  345.  
  346. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  347.  
  348. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  349.  
  350. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  351. "" = C:\Windows\SysNative\shell32.dll -- [2015-08-06 20:04:07 | 014,176,768 | ---- | M] (Microsoft Corporation)
  352. "ThreadingModel" = Apartment
  353.  
  354. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  355. "" = %SystemRoot%\system32\shell32.dll -- [2015-08-06 19:44:51 | 012,875,776 | ---- | M] (Microsoft Corporation)
  356. "ThreadingModel" = Apartment
  357.  
  358. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  359. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  360. "ThreadingModel" = Free
  361.  
  362. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  363. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  364. "ThreadingModel" = Free
  365.  
  366. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  367. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  368. "ThreadingModel" = Both
  369.  
  370. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  371.  
  372. [color=#E56717]========== Files - Unicode (All) ==========[/color]
  373. [2011-07-22 06:36:33 | 000,000,020 | ---- | M] ()(C:\Windows\?öA) -- C:\Windows\ðöÆ
  374. [2011-07-22 06:36:32 | 000,000,020 | ---- | C] ()(C:\Windows\?öA) -- C:\Windows\ðöÆ
  375.  
  376. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!