API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 28th, 2015
357
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 61.06 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 28.7.2015. 20:03:06 - Run 4
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Korisnik\Desktop
  3. 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7601.17514)
  5. Locale: 0000041a | Country: Hrvatska | Language: HRV | Date Format: d.M.yyyy.
  6.  
  7. 3,84 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 51,12% Memory free
  8. 7,68 Gb Paging File | 5,54 Gb Available in Paging File | 72,17% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 239,00 Gb Total Space | 8,92 Gb Free Space | 3,73% Space Free | Partition Type: NTFS
  13. Drive D: | 226,76 Gb Total Space | 222,60 Gb Free Space | 98,16% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: KORISNIK-PC | User Name: Korisnik | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2015.07.25 11:27:04 | 001,874,320 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe
  22. PRC - [2015.07.25 11:27:04 | 001,402,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
  23. PRC - [2015.07.25 11:27:04 | 001,195,920 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
  24. PRC - [2015.07.25 11:27:04 | 000,168,336 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe
  25. PRC - [2015.07.24 00:39:58 | 000,813,896 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  26. PRC - [2015.07.23 02:10:26 | 001,695,080 | ---- | M] (BitTorrent Inc.) -- C:\Users\Korisnik\AppData\Roaming\BitTorrent\BitTorrent.exe
  27. PRC - [2015.07.20 18:38:09 | 006,109,776 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
  28. PRC - [2015.07.20 18:37:57 | 000,146,600 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
  29. PRC - [2015.07.15 23:45:29 | 003,174,800 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
  30. PRC - [2015.06.18 08:39:46 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
  31. PRC - [2015.05.18 11:49:54 | 003,745,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgui.exe
  32. PRC - [2015.05.18 11:45:46 | 000,311,792 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
  33. PRC - [2015.05.01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  34. PRC - [2015.05.01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  35. PRC - [2015.01.02 14:16:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Korisnik\Desktop\OTL (1).exe
  36. PRC - [2014.08.01 14:43:43 | 000,500,016 | ---- | M] (Octoshape ApS) -- C:\Users\Korisnik\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
  37. PRC - [2013.12.18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  38.  
  39.  
  40. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  41.  
  42. MOD - [2015.07.25 11:27:04 | 000,528,272 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll
  43. MOD - [2015.07.24 00:39:57 | 016,308,040 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.107\PepperFlash\pepflashplayer.dll
  44. MOD - [2015.07.24 00:39:56 | 001,405,768 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.107\libglesv2.dll
  45. MOD - [2015.07.24 00:39:55 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.107\libegl.dll
  46. MOD - [2015.07.20 18:38:28 | 040,540,672 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
  47. MOD - [2015.07.20 18:38:03 | 000,102,864 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\log.dll
  48. MOD - [2015.07.20 18:37:59 | 000,123,976 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
  49. MOD - [2015.07.15 23:45:30 | 040,638,864 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\libcef.dll
  50. MOD - [2015.07.15 23:45:29 | 003,174,800 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
  51. MOD - [2015.05.02 14:40:00 | 001,711,128 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll
  52.  
  53.  
  54. [color=#E56717]========== Services (SafeList) ==========[/color]
  55.  
  56. SRV:[b]64bit:[/b] - [2015.07.22 21:41:10 | 008,100,480 | ---- | M] (Hola Networks Ltd.) [Auto | Running] -- C:\Program Files\Hola\app\hola_svc.exe -- (hola_svc)
  57. SRV:[b]64bit:[/b] - [2015.07.20 18:37:57 | 000,146,600 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
  58. SRV:[b]64bit:[/b] - [2015.06.23 11:39:28 | 008,111,048 | ---- | M] (Hola Networks Ltd.) [Auto | Running] -- C:\Program Files\Hola\app\hola_updater.exe -- (hola_updater)
  59. SRV:[b]64bit:[/b] - [2014.04.09 15:13:48 | 000,289,256 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe -- (McComponentHostService)
  60. SRV:[b]64bit:[/b] - [2013.12.16 18:53:09 | 001,030,600 | ---- | M] (Macrovision Europe Ltd.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
  61. SRV:[b]64bit:[/b] - [2012.02.02 22:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  62. SRV:[b]64bit:[/b] - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  63. SRV:[b]64bit:[/b] - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
  64. SRV - [2015.07.25 11:27:04 | 001,874,320 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe -- (vToolbarUpdater18.8.0)
  65. SRV - [2015.07.25 11:27:04 | 001,195,920 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe -- (WtuSystemSupport)
  66. SRV - [2015.06.18 08:39:50 | 001,133,880 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  67. SRV - [2015.06.18 08:39:46 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  68. SRV - [2015.06.03 16:42:38 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  69. SRV - [2015.05.18 11:54:26 | 003,438,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe -- (AVGIDSAgent)
  70. SRV - [2015.05.18 11:45:46 | 000,311,792 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe -- (avgwd)
  71. SRV - [2015.05.01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  72. SRV - [2015.05.01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  73. SRV - [2015.02.25 09:24:58 | 002,604,856 | ---- | M] (AVG Technologies) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
  74. SRV - [2015.02.05 10:46:22 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  75. SRV - [2014.04.26 15:53:37 | 000,077,944 | ---- | M] (Autodesk) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
  76. SRV - [2013.12.18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  77. SRV - [2012.04.23 06:25:32 | 000,276,248 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  78. SRV - [2012.03.23 11:33:46 | 000,355,920 | ---- | M] (Dritek System Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
  79. SRV - [2012.02.20 12:26:32 | 000,106,144 | ---- | M] (Atheros Commnucations) [Disabled | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
  80. SRV - [2012.02.19 19:41:40 | 000,072,864 | ---- | M] (Atheros) [Disabled | Stopped] -- C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe -- (ZAtheros Wlan Agent)
  81. SRV - [2012.02.08 04:03:36 | 000,363,800 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  82. SRV - [2012.02.08 04:03:34 | 000,277,784 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  83. SRV - [2012.02.08 04:03:16 | 000,161,560 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  84. SRV - [2012.02.01 16:29:58 | 000,013,592 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  85. SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  86. SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  87.  
  88.  
  89. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  90.  
  91. DRV:[b]64bit:[/b] - [2015.07.28 15:46:59 | 000,113,880 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
  92. DRV:[b]64bit:[/b] - [2015.07.20 18:38:34 | 000,150,160 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)
  93. DRV:[b]64bit:[/b] - [2015.07.20 18:38:33 | 000,447,944 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
  94. DRV:[b]64bit:[/b] - [2015.07.20 18:38:33 | 000,274,808 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
  95. DRV:[b]64bit:[/b] - [2015.07.20 18:38:33 | 000,090,968 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
  96. DRV:[b]64bit:[/b] - [2015.07.20 18:38:33 | 000,065,224 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
  97. DRV:[b]64bit:[/b] - [2015.07.20 18:38:33 | 000,028,656 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)
  98. DRV:[b]64bit:[/b] - [2015.07.20 18:38:32 | 000,093,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
  99. DRV:[b]64bit:[/b] - [2015.07.20 18:37:20 | 001,048,856 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
  100. DRV:[b]64bit:[/b] - [2015.06.18 08:41:56 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
  101. DRV:[b]64bit:[/b] - [2015.06.18 08:41:40 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  102. DRV:[b]64bit:[/b] - [2015.05.07 13:50:22 | 000,378,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
  103. DRV:[b]64bit:[/b] - [2015.05.07 13:49:24 | 000,253,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
  104. DRV:[b]64bit:[/b] - [2015.05.07 13:49:22 | 000,220,128 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
  105. DRV:[b]64bit:[/b] - [2015.05.04 14:14:30 | 000,291,296 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
  106. DRV:[b]64bit:[/b] - [2015.04.27 13:19:16 | 000,284,128 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
  107. DRV:[b]64bit:[/b] - [2015.04.15 13:06:02 | 000,256,992 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
  108. DRV:[b]64bit:[/b] - [2015.03.20 12:18:18 | 000,040,928 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
  109. DRV:[b]64bit:[/b] - [2015.03.11 12:16:06 | 000,162,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
  110. DRV:[b]64bit:[/b] - [2014.08.15 22:35:00 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
  111. DRV:[b]64bit:[/b] - [2014.04.24 12:12:18 | 000,031,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\PerformanceTest\DirectIo64.sys -- (DIRECTIO)
  112. DRV:[b]64bit:[/b] - [2013.07.18 07:54:51 | 000,129,224 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
  113. DRV:[b]64bit:[/b] - [2013.07.17 23:43:40 | 000,795,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  114. DRV:[b]64bit:[/b] - [2013.07.17 23:43:40 | 000,358,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  115. DRV:[b]64bit:[/b] - [2013.07.09 14:20:04 | 000,355,544 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
  116. DRV:[b]64bit:[/b] - [2013.06.21 14:06:36 | 000,030,496 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  117. DRV:[b]64bit:[/b] - [2012.10.03 16:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
  118. DRV:[b]64bit:[/b] - [2012.06.01 17:35:58 | 000,083,576 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bScsiSDa.sys -- (bScsiSDa)
  119. DRV:[b]64bit:[/b] - [2012.03.27 04:09:54 | 014,748,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  120. DRV:[b]64bit:[/b] - [2012.03.07 15:48:20 | 000,238,384 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
  121. DRV:[b]64bit:[/b] - [2012.02.20 12:36:02 | 000,550,560 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
  122. DRV:[b]64bit:[/b] - [2012.02.20 12:35:14 | 000,280,992 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
  123. DRV:[b]64bit:[/b] - [2012.02.20 12:35:02 | 000,068,256 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
  124. DRV:[b]64bit:[/b] - [2012.02.20 12:34:32 | 000,167,584 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
  125. DRV:[b]64bit:[/b] - [2012.02.20 12:34:14 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
  126. DRV:[b]64bit:[/b] - [2012.02.20 12:33:56 | 000,030,368 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
  127. DRV:[b]64bit:[/b] - [2012.02.20 12:33:44 | 000,110,752 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
  128. DRV:[b]64bit:[/b] - [2012.02.20 12:33:26 | 000,339,616 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
  129. DRV:[b]64bit:[/b] - [2012.02.15 01:41:34 | 003,538,432 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
  130. DRV:[b]64bit:[/b] - [2012.02.01 16:16:40 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  131. DRV:[b]64bit:[/b] - [2012.01.19 00:30:42 | 000,435,240 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
  132. DRV:[b]64bit:[/b] - [2011.12.06 13:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  133. DRV:[b]64bit:[/b] - [2011.11.10 11:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  134. DRV:[b]64bit:[/b] - [2011.11.04 10:21:38 | 000,019,496 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp)
  135. DRV:[b]64bit:[/b] - [2011.11.04 10:21:36 | 000,068,648 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd)
  136. DRV:[b]64bit:[/b] - [2011.09.02 14:36:58 | 000,051,752 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa)
  137. DRV:[b]64bit:[/b] - [2011.04.01 22:15:19 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  138. DRV:[b]64bit:[/b] - [2011.03.08 07:20:29 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)
  139. DRV:[b]64bit:[/b] - [2011.03.08 07:20:28 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)
  140. DRV:[b]64bit:[/b] - [2011.03.08 07:20:28 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  141. DRV:[b]64bit:[/b] - [2011.03.08 07:20:10 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  142. DRV:[b]64bit:[/b] - [2011.03.08 07:18:50 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
  143. DRV:[b]64bit:[/b] - [2011.03.08 07:18:50 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
  144. DRV:[b]64bit:[/b] - [2011.03.08 07:18:50 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
  145. DRV:[b]64bit:[/b] - [2011.03.08 07:18:50 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
  146. DRV:[b]64bit:[/b] - [2011.03.08 07:18:50 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  147. DRV:[b]64bit:[/b] - [2011.03.08 07:18:49 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  148. DRV:[b]64bit:[/b] - [2011.03.08 07:18:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  149. DRV:[b]64bit:[/b] - [2011.03.08 07:18:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  150. DRV:[b]64bit:[/b] - [2011.03.08 07:18:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  151. DRV:[b]64bit:[/b] - [2011.03.08 07:18:46 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  152. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  153. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  154. DRV:[b]64bit:[/b] - [2009.07.14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  155. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  156. DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  157. DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  158. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  159. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  160. DRV - [2015.01.13 11:26:10 | 000,014,112 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
  161. DRV - [2012.12.29 22:59:38 | 000,028,664 | ---- | M] (Almico Software) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\speedfan.sys -- (speedfan)
  162. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  163.  
  164.  
  165. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  166.  
  167.  
  168. [color=#E56717]========== Internet Explorer ==========[/color]
  169.  
  170. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  171. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  172. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  173. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  174. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  175. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  176. IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  177.  
  178. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
  179. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={901DB737-2DAE-4D5D-A04E-97FD1D4C3BC0}&mid=f7482864f59247d3873869c1a5371a80-0ddeff8cd9bc762d3d5862cdac8542761ff99873&lang=en&ds=AVG&coid=avgtbavg&cmpid=0215pit&pr=fr&d=2015-05-02 14:40:37&v=4.1.4.948&pid=wtu&sg=&sap=hp
  180. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = hr
  181. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 72 CE EC 2C B6 F8 CE 01 [binary data]
  182. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  183. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  184. IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
  185. IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://mysearch.avg.com/search?cid={901DB737-2DAE-4D5D-A04E-97FD1D4C3BC0}&mid=f7482864f59247d3873869c1a5371a80-0ddeff8cd9bc762d3d5862cdac8542761ff99873&lang=en&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-05-02 14:40:37&v=4.1.4.948&pid=wtu&sg=&sap=dsp&q={searchTerms}
  186. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  187.  
  188.  
  189. [color=#E56717]========== FireFox ==========[/color]
  190.  
  191. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll File not found
  192. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  193. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  194. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll File not found
  195. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
  196. FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
  197. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
  198. FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
  199. FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll File not found
  200. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  201. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  202. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  203. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  204. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  205. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  206. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  207. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  208. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  209. FF - HKCU\Software\MozillaPlugins\@hola.org/vlc,version=1.8.369: C:\Users\Korisnik\AppData\Local\Hola\firefox\app\vlc [2015.06.23 11:41:36 | 000,000,000 | ---D | M]
  210. FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,version=1.0: C:\Users\Korisnik\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1401100-0-npoctoshape.dll (Octoshape ApS)
  211.  
  212. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015.07.20 18:38:37 | 000,000,000 | ---D | M]
  213.  
  214. [2015.06.23 11:40:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Korisnik\AppData\Roaming\mozilla\Extensions
  215.  
  216. [color=#E56717]========== Chrome ==========[/color]
  217.  
  218. CHR - Extension: No name found = C:\Users\Korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio\1.8.786_0\
  219. CHR - Extension: No name found = C:\Users\Korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\
  220. CHR - Extension: No name found = C:\Users\Korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.4.0.9058_0\
  221. CHR - Extension: No name found = C:\Users\Korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  222. CHR - Extension: No name found = C:\Users\Korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch\3.1_0\
  223.  
  224. O1 HOSTS File: ([2015.01.03 12:30:13 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
  225. O1 - Hosts: 127.0.0.1 localhost
  226. O1 - Hosts: ::1 localhost
  227. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
  228. O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
  229. O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  230. O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  231. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  232. O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
  233. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  234. O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
  235. O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
  236. O2 - BHO: (AVG Web TuneUp) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll (AVG)
  237. O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  238. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  239. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  240. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
  241. O4:[b]64bit:[/b] - HKLM..\Run: [hola] C:\Program Files\Hola\app\hola.exe (Hola Networks Ltd.)
  242. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
  243. O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.)
  244. O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Web TuneUp\vprot.exe ()
  245. O4 - HKCU..\Run: [BitTorrent] C:\Users\Korisnik\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc.)
  246. O4 - HKCU..\Run: [Octoshape Streaming Services] C:\Users\Korisnik\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Octoshape ApS)
  247. O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  248. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  249. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  250. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  251. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  252. O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  253. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
  254. O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  255. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
  256. O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  257. O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
  258. O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  259. O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
  260. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
  261. O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
  262. O13 - gopher Prefix: missing
  263. O15 - HKCU\..Trusted Domains: hola.org ([]http in Pouzdana mjesta)
  264. O15 - HKCU\..Trusted Domains: youtube.com ([www] https in Pouzdana mjesta)
  265. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 77.78.192.20 77.77.192.20 94.140.66.194
  266. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0BB62482-A348-45E9-8F7E-930ECB8120F7}: DhcpNameServer = 77.78.192.20 77.77.192.20 94.140.66.194
  267. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DB47648F-FF82-4924-8707-13FA4A195E90}: DhcpNameServer = 8.8.8.8 8.8.4.4
  268. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  269. O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
  270. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  271. O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  272. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  273. O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  274. O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
  275. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  276. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  277. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  278. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  279. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  280. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  281. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  282. O32 - HKLM CDRom: AutoRun - 1
  283. O32 - AutoRun File - [2014.04.26 14:02:32 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
  284. O32 - AutoRun File - [2014.01.20 21:39:56 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
  285. O34 - HKLM BootExecute: (autocheck autochk *)
  286. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  287. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  288. O35 - HKLM\..comfile [open] -- "%1" %*
  289. O35 - HKLM\..exefile [open] -- "%1" %*
  290. O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
  291. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  292. O37 - HKLM\...com [@ = ComFile] -- "%1" %*
  293. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  294. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  295. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  296. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  297.  
  298. NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
  299.  
  300. CREATERESTOREPOINT
  301. Restore point Set: OTL Restore Point
  302.  
  303. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  304.  
  305. [2015.07.27 18:57:56 | 000,113,880 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\75811A90.sys
  306. [2015.07.25 15:59:08 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Documents\VideoReDo
  307. [2015.07.25 15:58:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Licenses
  308. [2015.07.25 15:58:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoReDo
  309. [2015.07.25 15:58:16 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\AppData\Roaming\VideoReDo-TVSuite5
  310. [2015.07.25 15:58:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoReDoTVSuite5
  311. [2015.07.25 15:49:49 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Desktop\FixVTSBackup
  312. [2015.07.25 15:41:31 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\AppData\Local\fontconfig
  313. [2015.07.25 15:38:46 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Documents\convertedVideos
  314. [2015.07.25 15:38:44 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\AppData\Local\SkinSoft
  315. [2015.07.25 15:37:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free VOB To AVI Converter
  316. [2015.07.25 15:37:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Convert Audio Free
  317. [2015.07.25 15:36:02 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\AppData\Roaming\Convert Audio Free
  318. [2015.07.25 15:33:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert VOB to AVI
  319. [2015.07.25 15:33:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Convert VOB to AVI
  320. [2015.07.25 15:28:19 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Documents\VOBtoAVI.co
  321. [2015.07.25 15:28:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VOB to AVI
  322. [2015.07.25 15:28:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VOB to AVI
  323. [2015.07.25 11:27:19 | 000,113,880 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\28B92569.sys
  324. [2015.07.21 20:54:07 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Desktop\VJEZBA
  325. [2015.07.20 18:38:38 | 000,378,880 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  326. [2015.07.20 18:38:04 | 000,043,112 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
  327. [2015.07.16 17:24:12 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Desktop\PROGRAMIRANJE 2
  328. [2015.07.06 12:50:06 | 000,000,000 | ---D | C] -- C:\Users\Korisnik\Desktop\Nova mapa
  329. [2015.06.30 20:20:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  330. [2015.06.30 20:20:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
  331. [2015.06.30 20:19:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
  332. [2015.06.30 20:19:35 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
  333. [2015.06.30 20:19:33 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
  334. [2015.06.30 20:19:33 | 000,000,000 | ---D | C] -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
  335. [2015.06.30 19:54:25 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
  336. [2015.06.30 19:54:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
  337. [2015.06.30 19:54:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
  338.  
  339. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  340.  
  341. [2015.07.28 20:07:15 | 000,010,208 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  342. [2015.07.28 20:07:15 | 000,010,208 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  343. [2015.07.28 20:06:55 | 000,843,958 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  344. [2015.07.28 20:06:55 | 000,698,894 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  345. [2015.07.28 20:06:55 | 000,138,760 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  346. [2015.07.28 20:02:56 | 000,002,179 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  347. [2015.07.28 19:59:18 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  348. [2015.07.28 19:58:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  349. [2015.07.28 19:58:47 | 3092,533,248 | -HS- | M] () -- C:\hiberfil.sys
  350. [2015.07.28 17:29:00 | 000,000,948 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  351. [2015.07.28 16:46:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  352. [2015.07.28 15:46:59 | 000,113,880 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  353. [2015.07.28 15:03:58 | 627,965,694 | ---- | M] () -- C:\Windows\MEMORY.DMP
  354. [2015.07.27 22:51:26 | 000,113,880 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\75811A90.sys
  355. [2015.07.25 15:58:38 | 000,001,076 | ---- | M] () -- C:\Users\Public\Desktop\VideoReDo TVSuite V5.lnk
  356. [2015.07.25 15:53:04 | 000,000,120 | ---- | M] () -- C:\Users\Korisnik\AppData\Roaming\FixVTS.ini
  357. [2015.07.25 15:52:40 | 1073,170,432 | ---- | M] () -- C:\Users\Korisnik\Desktop\VTS_01_1.VOB
  358. [2015.07.25 15:38:46 | 000,000,099 | ---- | M] () -- C:\Users\Korisnik\AppData\Roaming\settings.xml
  359. [2015.07.25 11:27:19 | 000,113,880 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\28B92569.sys
  360. [2015.07.21 21:26:25 | 000,000,120 | ---- | M] () -- C:\Users\Korisnik\Desktop\Untitled2.cpp
  361. [2015.07.21 20:56:26 | 000,017,016 | ---- | M] () -- C:\Users\Korisnik\Desktop\zad1.exe
  362. [2015.07.21 20:56:24 | 000,000,979 | ---- | M] () -- C:\Users\Korisnik\Desktop\zad1.cpp
  363. [2015.07.20 18:38:34 | 000,150,160 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswStm.sys
  364. [2015.07.20 18:38:33 | 000,447,944 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
  365. [2015.07.20 18:38:33 | 000,378,880 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
  366. [2015.07.20 18:38:33 | 000,274,808 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswVmm.sys
  367. [2015.07.20 18:38:33 | 000,090,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
  368. [2015.07.20 18:38:33 | 000,065,224 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRvrt.sys
  369. [2015.07.20 18:38:33 | 000,028,656 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswHwid.sys
  370. [2015.07.20 18:38:32 | 000,093,528 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
  371. [2015.07.20 18:38:04 | 000,043,112 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
  372. [2015.07.20 18:37:20 | 001,048,856 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
  373. [2015.07.16 23:23:14 | 000,016,083 | ---- | M] () -- C:\Users\Korisnik\Desktop\ZADACIzaVJEZBU.exe
  374. [2015.07.08 22:50:04 | 000,001,083 | ---- | M] () -- C:\Users\Korisnik\Desktop\PROGRM_ZAD.cpp
  375. [2015.07.02 20:29:58 | 000,291,515 | ---- | M] () -- C:\Users\Korisnik\Desktop\4zad.jpeg
  376. [2015.06.30 20:20:27 | 000,001,713 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
  377. [2015.06.29 18:40:38 | 000,001,098 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  378.  
  379. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  380.  
  381. [2015.07.25 16:56:25 | 1073,170,432 | ---- | C] () -- C:\Users\Korisnik\Desktop\VTS_01_2.VOB
  382. [2015.07.25 15:58:38 | 000,001,076 | ---- | C] () -- C:\Users\Public\Desktop\VideoReDo TVSuite V5.lnk
  383. [2015.07.25 15:53:04 | 000,000,120 | ---- | C] () -- C:\Users\Korisnik\AppData\Roaming\FixVTS.ini
  384. [2015.07.25 15:38:46 | 000,000,099 | ---- | C] () -- C:\Users\Korisnik\AppData\Roaming\settings.xml
  385. [2015.07.25 15:35:13 | 1073,170,432 | ---- | C] () -- C:\Users\Korisnik\Desktop\VTS_01_1.VOB
  386. [2015.07.23 21:04:37 | 000,076,183 | ---- | C] () -- C:\Users\Korisnik\Desktop\Time Lapse 2014 720p BluRay x264-ROVERS.srt
  387. [2015.07.23 20:59:25 | 000,034,969 | ---- | C] () -- C:\Users\Korisnik\Desktop\It Follows 2014 720p BluRay x264 AAC - Ozlem.srt
  388. [2015.07.21 21:26:25 | 000,000,120 | ---- | C] () -- C:\Users\Korisnik\Desktop\Untitled2.cpp
  389. [2015.07.21 20:56:26 | 000,017,016 | ---- | C] () -- C:\Users\Korisnik\Desktop\zad1.exe
  390. [2015.07.21 20:54:23 | 000,000,979 | ---- | C] () -- C:\Users\Korisnik\Desktop\zad1.cpp
  391. [2015.07.02 20:30:10 | 000,291,515 | ---- | C] () -- C:\Users\Korisnik\Desktop\4zad.jpeg
  392. [2015.06.30 20:20:27 | 000,001,713 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
  393. [2014.12.04 21:26:26 | 000,007,168 | ---- | C] () -- C:\Users\Korisnik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  394. [2014.06.04 20:16:11 | 000,788,180 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  395. [2014.01.25 18:40:52 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
  396. [2014.01.25 18:40:52 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
  397. [2014.01.25 18:40:52 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
  398. [2014.01.25 18:40:52 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
  399. [2014.01.25 18:40:52 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
  400.  
  401. [color=#E56717]========== ZeroAccess Check ==========[/color]
  402.  
  403. [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  404.  
  405. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  406.  
  407. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  408.  
  409. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  410.  
  411. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  412.  
  413. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  414. "" = C:\Windows\SysNative\shell32.dll -- [2011.03.08 07:19:00 | 014,174,208 | ---- | M] (Microsoft Corporation)
  415. "ThreadingModel" = Apartment
  416.  
  417. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  418. "" = %SystemRoot%\system32\shell32.dll -- [2011.03.08 07:19:15 | 012,872,192 | ---- | M] (Microsoft Corporation)
  419. "ThreadingModel" = Apartment
  420.  
  421. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  422. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  423. "ThreadingModel" = Free
  424.  
  425. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  426. "" = %systemroot%\system32\wbem\fastprox.dll -- [2011.03.08 07:19:55 | 000,606,208 | ---- | M] (Microsoft Corporation)
  427. "ThreadingModel" = Free
  428.  
  429. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  430. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  431. "ThreadingModel" = Both
  432.  
  433. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  434.  
  435. [color=#E56717]========== LOP Check ==========[/color]
  436.  
  437. [2015.05.15 16:07:45 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Apowersoft
  438. [2014.04.26 15:49:44 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Autodesk
  439. [2013.12.13 13:34:35 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\AVAST Software
  440. [2015.05.02 11:10:50 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\AVG
  441. [2015.05.02 14:17:30 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\AVG2015
  442. [2015.07.28 20:14:42 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\BitTorrent
  443. [2014.04.21 18:40:18 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\BSplayer PRO
  444. [2013.05.23 11:58:44 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Canneverbe Limited
  445. [2015.04.02 16:11:30 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
  446. [2015.07.25 15:36:02 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Convert Audio Free
  447. [2014.08.26 13:56:21 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Dev-Cpp
  448. [2014.08.05 16:57:52 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Dropbox
  449. [2014.08.05 16:57:52 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\DropboxMaster
  450. [2015.06.23 11:40:24 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Hola
  451. [2015.05.02 11:12:51 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Media Converter
  452. [2015.05.24 01:38:28 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Octoshape
  453. [2014.02.14 13:08:29 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Off Road
  454. [2014.01.19 18:40:10 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\OpenOffice
  455. [2014.02.05 20:18:59 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Opera Software
  456. [2014.01.26 13:20:08 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\PhotoScape
  457. [2014.01.20 22:59:52 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\TuneUp Software
  458. [2014.02.14 13:34:44 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Unity
  459. [2015.07.25 17:00:06 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\VideoReDo-TVSuite5
  460. [2015.05.02 14:19:41 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\WinAVI
  461. [2015.05.02 11:20:14 | 000,000,000 | ---D | M] -- C:\Users\Korisnik\AppData\Roaming\Xilisoft
  462.  
  463. [color=#E56717]========== Purity Check ==========[/color]
  464.  
  465.  
  466.  
  467. [color=#E56717]========== Custom Scans ==========[/color]
  468.  
  469. [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
  470.  
  471. [color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
  472. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
  473. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_8d262bb914685338\AGP440.sys
  474. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
  475. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
  476. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.20551_none_16adec2ff16ac3e3\AGP440.sys
  477. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.20881_none_168d821df1830f2b\AGP440.sys
  478. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
  479. [2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.21642_none_18a01f1dee8824aa\AGP440.sys
  480.  
  481. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  482. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\erdnt\cache64\atapi.sys
  483. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
  484. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
  485. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
  486. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.20545_none_39e1f82254380270\atapi.sys
  487. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
  488.  
  489. [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
  490. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\erdnt\cache86\cngaudit.dll
  491. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
  492. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
  493. [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\erdnt\cache64\cngaudit.dll
  494. [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
  495. [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
  496.  
  497. [color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
  498. [2012.02.01 16:16:40 | 000,568,600 | ---- | M] (Intel Corporation) MD5=D1753C06EE17E29352B065EACF3F10D0 -- C:\Windows\SysNative\drivers\iaStor.sys
  499. [2012.02.01 16:16:40 | 000,568,600 | ---- | M] (Intel Corporation) MD5=D1753C06EE17E29352B065EACF3F10D0 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_4b6764daf5ce9174\iaStor.sys
  500.  
  501. [color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
  502. [2011.03.08 07:18:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\drivers\iaStorV.sys
  503. [2011.03.08 07:18:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
  504. [2011.03.08 07:18:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
  505. [2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
  506.  
  507. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  508. [2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
  509. [2011.03.08 07:19:13 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\erdnt\cache64\netlogon.dll
  510. [2011.03.08 07:19:13 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
  511. [2011.03.08 07:19:13 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
  512. [2011.03.08 07:19:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\erdnt\cache86\netlogon.dll
  513. [2011.03.08 07:19:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
  514. [2011.03.08 07:19:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
  515. [2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
  516.  
  517. [color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
  518. [2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
  519. [2011.03.08 07:18:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\drivers\nvstor.sys
  520. [2011.03.08 07:18:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
  521. [2011.03.08 07:18:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
  522.  
  523. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  524. [2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
  525. [2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
  526. [2011.03.08 07:18:59 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\erdnt\cache86\scecli.dll
  527. [2011.03.08 07:18:59 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
  528. [2011.03.08 07:18:59 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
  529. [2011.03.08 07:20:08 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\erdnt\cache64\scecli.dll
  530. [2011.03.08 07:20:08 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
  531. [2011.03.08 07:20:08 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
  532.  
  533. [color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
  534.  
  535. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  536. [2009.07.14 03:15:13 | 000,346,112 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\dxtmsft.dll
  537. [2009.07.14 03:15:13 | 000,215,552 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\dxtrans.dll
  538.  
  539. [color=#E56717]========== Alternate Data Streams ==========[/color]
  540.  
  541. @Alternate Data Stream - 168 bytes -> C:\Users\Korisnik\Desktop\4zad.jpeg:3or4kl4x13tuuug3Byamue2s4b
  542. @Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:93433455
  543. @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:3440EB47
  544. @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:0888F409
  545. @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:66633281
  546.  
  547. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!