API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Aug 2nd, 2015
280
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 57.52 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 2015-08-02 16:28:41 - Run 3
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\D\Downloads
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17914)
  5. Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
  6.  
  7. 3,97 Gb Total Physical Memory | 2,04 Gb Available Physical Memory | 51,40% Memory free
  8. 7,93 Gb Paging File | 5,88 Gb Available in Paging File | 74,10% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 230,60 Gb Total Space | 98,58 Gb Free Space | 42,75% Space Free | Partition Type: NTFS
  13. Drive D: | 222,56 Gb Total Space | 138,18 Gb Free Space | 62,09% Space Free | Partition Type: NTFS
  14. Drive E: | 12,41 Gb Total Space | 2,04 Gb Free Space | 16,46% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: D-KOMPUTER | User Name: D | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - File not found --
  23. PRC - [2015-08-02 16:27:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\D\Downloads\OTL.exe
  24. PRC - [2015-07-16 09:55:57 | 000,245,576 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.28.1\GoogleCrashHandler.exe
  25. PRC - [2015-07-07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
  26. PRC - [2015-06-18 08:39:50 | 001,133,880 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
  27. PRC - [2015-06-18 08:39:46 | 001,871,160 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
  28. PRC - [2015-06-18 08:39:34 | 006,554,424 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
  29. PRC - [2015-05-01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
  30. PRC - [2015-05-01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
  31. PRC - [2013-12-17 12:38:34 | 004,671,328 | ---- | M] (TeamViewer GmbH) -- c:\program files (x86)\teamviewer\version9\TeamViewer_Desktop.exe
  32. PRC - [2013-12-17 12:38:33 | 005,341,536 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
  33. PRC - [2013-12-17 12:38:32 | 013,543,264 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
  34. PRC - [2013-12-17 12:22:10 | 000,199,520 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
  35. PRC - [2013-04-23 14:39:16 | 000,041,304 | ---- | M] (Tablet Driver) -- C:\Windows\SysWOW64\WTClient.exe
  36. PRC - [2012-12-25 15:28:38 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
  37.  
  38.  
  39. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  40.  
  41. MOD - [2013-04-23 14:39:16 | 000,249,688 | ---- | M] () -- C:\Windows\SysWOW64\WinTab32.dll
  42. MOD - [2013-04-23 14:39:16 | 000,241,496 | ---- | M] () -- C:\Windows\SysWOW64\MyDrawLineWindowDll.dll
  43.  
  44.  
  45. [color=#E56717]========== Services (SafeList) ==========[/color]
  46.  
  47. SRV:[b]64bit:[/b] - [2015-06-20 21:34:46 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  48. SRV:[b]64bit:[/b] - [2015-05-25 20:19:13 | 001,255,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  49. SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
  50. SRV:[b]64bit:[/b] - [2013-04-23 14:39:16 | 000,082,264 | ---- | M] (Tablet Driver) [Auto | Running] -- C:\Windows\SysNative\drivers\WTSrv.exe -- (WinTabService)
  51. SRV:[b]64bit:[/b] - [2009-08-13 22:09:38 | 000,240,640 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\stacsv64.exe -- (STacSV)
  52. SRV:[b]64bit:[/b] - [2009-03-02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.exe -- (AESTFilters)
  53. SRV:[b]64bit:[/b] - [2008-04-16 11:02:04 | 000,788,872 | ---- | M] (Cenega Poland Sp. z o.o.) [Auto | Stopped] -- C:\Windows\SysNative\pr2arjjb.exe -- (pr2arjjb)
  54. SRV - [2015-07-28 11:07:48 | 003,719,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe -- (AVGIDSAgent)
  55. SRV - [2015-07-28 11:04:44 | 001,630,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2015\avgfws.exe -- (avgfws)
  56. SRV - [2015-07-28 11:01:36 | 000,356,888 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe -- (avgwd)
  57. SRV - [2015-07-14 21:22:25 | 000,268,976 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  58. SRV - [2015-07-07 20:12:28 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
  59. SRV - [2015-06-29 10:24:00 | 002,970,424 | ---- | M] (AVG Technologies) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
  60. SRV - [2015-06-18 08:39:50 | 001,133,880 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
  61. SRV - [2015-06-18 08:39:46 | 001,871,160 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  62. SRV - [2015-06-03 16:42:38 | 000,327,296 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
  63. SRV - [2015-05-15 03:57:58 | 000,837,824 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  64. SRV - [2015-05-01 11:17:04 | 001,772,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
  65. SRV - [2015-05-01 11:16:10 | 001,394,816 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
  66. SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  67. SRV - [2013-12-17 12:38:33 | 005,341,536 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
  68. SRV - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  69. SRV - [2012-12-25 15:28:38 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
  70. SRV - [2009-08-13 22:09:38 | 000,240,640 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\STacSV64.exe -- (STacSV)
  71. SRV - [2009-03-02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.exe -- (AESTFilters)
  72.  
  73.  
  74. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  75.  
  76. DRV:[b]64bit:[/b] - [2015-08-02 13:45:32 | 000,113,880 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
  77. DRV:[b]64bit:[/b] - [2015-07-28 11:02:14 | 000,312,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
  78. DRV:[b]64bit:[/b] - [2015-07-28 11:01:38 | 000,245,680 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
  79. DRV:[b]64bit:[/b] - [2015-07-09 07:11:56 | 000,077,760 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgfwd6a.sys -- (Avgfwfd)
  80. DRV:[b]64bit:[/b] - [2015-06-18 08:41:56 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)
  81. DRV:[b]64bit:[/b] - [2015-06-18 08:41:40 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  82. DRV:[b]64bit:[/b] - [2015-06-16 15:55:04 | 000,259,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
  83. DRV:[b]64bit:[/b] - [2015-05-12 14:39:14 | 000,281,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
  84. DRV:[b]64bit:[/b] - [2015-05-12 14:36:54 | 000,253,408 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
  85. DRV:[b]64bit:[/b] - [2015-05-07 13:50:22 | 000,378,336 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
  86. DRV:[b]64bit:[/b] - [2015-03-20 12:18:18 | 000,040,928 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
  87. DRV:[b]64bit:[/b] - [2015-03-11 12:16:06 | 000,162,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
  88. DRV:[b]64bit:[/b] - [2013-08-29 03:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
  89. DRV:[b]64bit:[/b] - [2013-04-23 14:39:16 | 000,032,600 | ---- | M] (Tablet Driver) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TClass2k.sys -- (TClass2k)
  90. DRV:[b]64bit:[/b] - [2013-04-23 14:39:16 | 000,032,600 | ---- | M] (PenTablet Driver) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PTSimBus.sys -- (PTSimBus)
  91. DRV:[b]64bit:[/b] - [2013-04-23 14:39:16 | 000,027,992 | ---- | M] (Tablet Driver) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UCTblHid.sys -- (UCTblHid)
  92. DRV:[b]64bit:[/b] - [2013-04-23 14:39:16 | 000,022,360 | ---- | M] (PenTablet Driver) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PTSimHid.sys -- (PTSimHid)
  93. DRV:[b]64bit:[/b] - [2012-07-19 21:03:54 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
  94. DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  95. DRV:[b]64bit:[/b] - [2011-08-17 09:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
  96. DRV:[b]64bit:[/b] - [2011-08-17 09:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
  97. DRV:[b]64bit:[/b] - [2011-08-17 09:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
  98. DRV:[b]64bit:[/b] - [2011-08-17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
  99. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  100. DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  101. DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  102. DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  103. DRV:[b]64bit:[/b] - [2010-11-20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  104. DRV:[b]64bit:[/b] - [2010-07-01 15:21:50 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc)
  105. DRV:[b]64bit:[/b] - [2010-01-13 17:37:18 | 007,675,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64)
  106. DRV:[b]64bit:[/b] - [2009-08-13 22:09:38 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
  107. DRV:[b]64bit:[/b] - [2009-07-21 01:33:42 | 007,058,432 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETw1v64.sys -- (NETw1v64)
  108. DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  109. DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  110. DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  111. DRV:[b]64bit:[/b] - [2009-06-27 16:55:10 | 000,083,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
  112. DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
  113. DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
  114. DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
  115. DRV:[b]64bit:[/b] - [2009-06-10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  116. DRV:[b]64bit:[/b] - [2009-06-10 22:35:36 | 000,867,328 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux)
  117. DRV:[b]64bit:[/b] - [2009-06-10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
  118. DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)
  119. DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  120. DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  121. DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  122. DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  123. DRV:[b]64bit:[/b] - [2009-04-29 17:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
  124. DRV:[b]64bit:[/b] - [2009-04-29 09:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
  125. DRV:[b]64bit:[/b] - [2009-03-18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
  126. DRV:[b]64bit:[/b] - [2009-03-01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  127. DRV:[b]64bit:[/b] - [2008-09-04 07:36:16 | 000,027,136 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64diag.sys -- (UsbDiag)
  128. DRV:[b]64bit:[/b] - [2008-09-04 07:35:40 | 000,033,792 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64modem.sys -- (USBModem)
  129. DRV:[b]64bit:[/b] - [2008-09-04 07:35:06 | 000,017,920 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64bus.sys -- (usbbus)
  130. DRV:[b]64bit:[/b] - [2008-04-16 11:00:59 | 000,103,576 | ---- | M] (Cenega Poland Sp. z o.o.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ps7arjjb.sys -- (ps7arjjb)
  131. DRV - [2015-06-25 12:31:48 | 000,031,144 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
  132. DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  133.  
  134.  
  135. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  136.  
  137.  
  138. [color=#E56717]========== Internet Explorer ==========[/color]
  139.  
  140. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  141. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
  142. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  143. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150326
  144. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  145. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  146. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  147. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
  148. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  149. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  150. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150326
  151. IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  152. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  153.  
  154. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
  155. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
  156. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
  157. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = www.google.com
  158. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page Before = http://www.google.com
  159. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [binary data]
  160. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220150326
  161. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Before = http://www.google.com
  162. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pl.msn.com/?pc=UP97&ocid=UP97DHP
  163. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pl-pl
  164. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
  165. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
  166. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  167. IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  168. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  169.  
  170. [color=#E56717]========== FireFox ==========[/color]
  171.  
  172. FF - prefs.js..browser.search.countryCode: "PL"
  173. FF - prefs.js..browser.search.highlightCount: 1
  174. FF - prefs.js..browser.search.isUS: false
  175. FF - prefs.js..browser.search.region: "PL"
  176. FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:39.0
  177. FF - user.js - File not found
  178.  
  179. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll File not found
  180. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  181. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
  182. FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll ()
  183. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.51.2: C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
  184. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.51.2: C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll (Oracle Corporation)
  185. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  186. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll ( Microsoft Corporation)
  187. FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
  188. FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
  189. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  190. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  191. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  192. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  193. FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
  194. FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  195. FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\D\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
  196.  
  197. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\hotfix@mozilla.org: C:\Users\D\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix [2014-01-26 17:52:54 | 000,000,000 | ---D | M]
  198. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\hotfix@mozilla.org: C:\Users\D\AppData\Roaming\Mozilla\Firefox\Extensions\MozillaHotfix [2014-01-26 17:52:54 | 000,000,000 | ---D | M]
  199.  
  200. [2012-06-02 17:27:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\D\AppData\Roaming\mozilla\Extensions
  201. [2014-01-26 17:52:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\D\AppData\Roaming\mozilla\Firefox\Extensions
  202. [2014-01-26 17:52:54 | 000,000,000 | ---D | M] (Mozilla hotfix) -- C:\Users\D\AppData\Roaming\mozilla\Firefox\Extensions\MozillaHotfix
  203. [2015-08-02 16:28:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\D\AppData\Roaming\mozilla\Firefox\Profiles\cxf3f1qf.default-1423828309146\extension-data
  204. [2015-07-08 10:06:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\D\AppData\Roaming\mozilla\Firefox\Profiles\cxf3f1qf.default-1423828309146\extensions
  205. [2015-07-08 10:06:59 | 000,000,000 | ---D | M] (FoxyDeal) -- C:\Users\D\AppData\Roaming\mozilla\Firefox\Profiles\cxf3f1qf.default-1423828309146\extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}
  206. [2015-05-28 21:29:23 | 003,732,766 | ---- | M] () (No name found) -- C:\Users\D\AppData\Roaming\mozilla\firefox\profiles\cxf3f1qf.default-1423828309146\extensions\{2b10c1c8-a11f-4bad-fe9c-1c11e82cac42}.xpi
  207. [2015-05-26 05:18:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
  208. [2015-07-06 21:20:22 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  209.  
  210. [color=#E56717]========== Chrome ==========[/color]
  211.  
  212. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
  213. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0\
  214. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
  215. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnfidnkofgcomdfkpekmheenchlhdhdh\1_0\
  216. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\0.9.9.3_0\
  217. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
  218. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe\1.3.1_0\
  219. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\
  220. CHR - Extension: No name found = C:\Users\D\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  221.  
  222. O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  223. O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  224. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll (Oracle Corporation)
  225. O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  226. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll (Oracle Corporation)
  227. O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)
  228. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
  229. O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
  230. O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
  231. O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.)
  232. O4 - HKLM..\Run: [WTClient] C:\Windows\SysWow64\WTClient.exe (Tablet Driver)
  233. O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
  234. O4 - Startup: C:\Users\D\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()
  235. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  236. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  237. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
  238. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 0
  239. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  240. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  241. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
  242. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 0
  243. O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: TaskbarNoNotification = 0
  244. O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  245. O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
  246. O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  247. O13[b]64bit:[/b] - gopher Prefix: missing
  248. O13 - gopher Prefix: missing
  249. O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
  250. O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
  251. O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
  252. O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
  253. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Java Plug-in 11.51.2)
  254. O16 - DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Java Plug-in 1.7.0_45)
  255. O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab (Java Plug-in 11.51.2)
  256. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
  257. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1BB0A7E1-8557-4148-AB2E-7359C2815AB4}: DhcpNameServer = 192.168.1.1 192.168.1.1
  258. O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
  259. O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
  260. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  261. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  262. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  263. O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
  264. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  265. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  266. O32 - HKLM CDRom: AutoRun - 1
  267. O33 - MountPoints2\F\Shell - "" = AutoRun
  268. O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\Autorun.exe
  269. O33 - MountPoints2\G\Shell - "" = AutoRun
  270. O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\Autorun.exe
  271. O34 - HKLM BootExecute: (autocheck autochk *)
  272. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  273. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  274. O35 - HKLM\..comfile [open] -- "%1" %*
  275. O35 - HKLM\..exefile [open] -- "%1" %*
  276. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  277. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  278. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  279. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  280. O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found
  281. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  282. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  283. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  284.  
  285. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  286.  
  287. [2015-07-28 12:44:21 | 001,145,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  288. [2015-07-28 12:44:21 | 001,085,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
  289. [2015-07-28 12:44:21 | 000,765,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
  290. [2015-07-28 12:44:21 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  291. [2015-07-28 12:44:21 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
  292. [2015-07-28 12:44:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
  293. [2015-07-28 12:44:20 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  294. [2015-07-28 12:44:20 | 000,017,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
  295. [2015-07-28 11:02:14 | 000,312,752 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys
  296. [2015-07-28 11:01:38 | 000,245,680 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
  297. [2015-07-21 09:23:29 | 000,372,224 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
  298. [2015-07-21 09:23:29 | 000,299,008 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
  299. [2015-07-21 09:23:29 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
  300. [2015-07-21 09:23:29 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
  301. [2015-07-21 09:23:29 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
  302. [2015-07-21 09:23:29 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
  303. [2015-07-21 09:23:29 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
  304. [2015-07-21 09:23:29 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
  305. [2015-07-19 12:45:06 | 000,000,000 | ---D | C] -- C:\Users\D\Desktop\logs
  306. [2015-07-15 15:06:51 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cewmdm.dll
  307. [2015-07-15 15:06:50 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cewmdm.dll
  308. [2015-07-15 15:06:49 | 005,923,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  309. [2015-07-15 15:06:49 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
  310. [2015-07-15 15:06:48 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
  311. [2015-07-15 15:06:44 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
  312. [2015-07-15 15:06:44 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
  313. [2015-07-15 15:06:44 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
  314. [2015-07-15 15:06:44 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
  315. [2015-07-15 15:06:43 | 003,154,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  316. [2015-07-15 15:06:43 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  317. [2015-07-15 15:06:43 | 000,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
  318. [2015-07-15 15:06:43 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  319. [2015-07-15 15:06:43 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
  320. [2015-07-15 15:06:43 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  321. [2015-07-15 15:06:42 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  322. [2015-07-15 15:06:42 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  323. [2015-07-15 15:06:42 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  324. [2015-07-15 15:06:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  325. [2015-07-15 15:06:42 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
  326. [2015-07-15 15:06:37 | 000,404,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
  327. [2015-07-15 15:06:30 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  328. [2015-07-15 15:06:29 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  329. [2015-07-15 15:06:17 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
  330. [2015-07-15 15:06:17 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  331. [2015-07-15 15:06:17 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
  332. [2015-07-15 15:06:17 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll
  333. [2015-07-15 15:06:17 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  334. [2015-07-15 15:06:16 | 000,720,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  335. [2015-07-15 15:06:16 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll
  336. [2015-07-15 15:06:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  337. [2015-07-15 15:06:14 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
  338. [2015-07-15 15:06:14 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
  339. [2015-07-15 15:06:12 | 002,052,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  340. [2015-07-15 15:06:12 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  341. [2015-07-15 15:06:12 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  342. [2015-07-15 15:06:12 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  343. [2015-07-15 15:06:12 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
  344. [2015-07-15 15:06:11 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  345. [2015-07-15 15:06:11 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  346. [2015-07-15 15:06:11 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  347. [2015-07-15 15:06:10 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  348. [2015-07-15 15:06:09 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  349. [2015-07-15 15:06:09 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  350. [2015-07-15 15:06:08 | 002,125,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  351. [2015-07-15 15:06:07 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  352. [2015-07-15 15:06:07 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  353. [2015-07-15 15:06:06 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  354. [2015-07-15 15:06:06 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  355. [2015-07-15 15:06:06 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  356. [2015-07-15 15:06:06 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  357. [2015-07-15 15:06:04 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  358. [2015-07-15 15:06:04 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  359. [2015-07-15 15:06:04 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  360. [2015-07-15 15:06:03 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  361. [2015-07-15 15:06:02 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  362. [2015-07-15 15:06:02 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll
  363. [2015-07-15 15:05:13 | 002,087,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
  364. [2015-07-15 15:05:06 | 003,242,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
  365. [2015-07-15 15:05:06 | 001,941,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
  366. [2015-07-15 15:05:06 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
  367. [2015-07-15 15:05:05 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msihnd.dll
  368. [2015-07-15 15:05:05 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
  369. [2015-07-15 15:05:05 | 000,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
  370. [2015-07-15 15:05:05 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msimsg.dll
  371. [2015-07-15 15:05:05 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msimsg.dll
  372. [2015-07-15 15:04:50 | 001,216,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
  373. [2015-07-15 15:04:49 | 001,461,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
  374. [2015-07-15 15:04:49 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptbase.dll
  375. [2015-07-15 15:04:48 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
  376. [2015-07-15 15:04:48 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
  377. [2015-07-15 15:04:48 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  378. [2015-07-15 15:04:48 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll
  379. [2015-07-15 15:04:48 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msaudite.dll
  380. [2015-07-15 15:04:48 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
  381. [2015-07-15 15:04:48 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\auditpol.exe
  382. [2015-07-15 15:04:48 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll
  383. [2015-07-15 15:04:48 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msobjs.dll
  384. [2015-07-15 15:04:48 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe
  385. [2015-07-15 15:04:48 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
  386. [2015-07-15 15:04:48 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
  387. [2015-07-15 15:04:30 | 001,480,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  388. [2015-07-15 15:04:30 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
  389. [2015-07-15 15:04:30 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  390. [2015-07-10 21:47:09 | 000,041,784 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\TURegOpt.exe
  391. [2015-07-10 21:47:08 | 000,030,520 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\authuitu.dll
  392. [2015-07-10 21:47:07 | 000,025,912 | ---- | C] (AVG Technologies) -- C:\Windows\SysWow64\authuitu.dll
  393. [2015-07-10 21:46:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015
  394. [2015-07-10 21:44:47 | 000,000,000 | ---D | C] -- C:\Users\D\AppData\Local\Avg
  395. [2015-07-07 11:53:19 | 000,000,000 | ---D | C] -- C:\Users\D\AppData\Roaming\AVG2015
  396. [2015-07-07 11:52:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AV
  397. [2015-07-07 11:52:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
  398. [2015-07-07 11:51:44 | 000,000,000 | -H-D | C] -- C:\$AVG
  399. [2015-07-07 11:51:43 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2015
  400. [2015-07-07 11:50:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG
  401. [2015-07-07 11:47:02 | 000,000,000 | ---D | C] -- C:\Users\D\AppData\Local\Avg2015
  402. [2015-07-07 11:36:15 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft
  403.  
  404. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  405.  
  406. [2015-08-02 16:22:01 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  407. [2015-08-02 16:01:01 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  408. [2015-08-02 13:45:32 | 000,113,880 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
  409. [2015-08-02 13:44:17 | 000,027,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  410. [2015-08-02 13:44:13 | 000,027,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  411. [2015-08-02 12:43:38 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  412. [2015-08-02 12:37:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  413. [2015-08-02 12:36:12 | 3195,211,776 | -HS- | M] () -- C:\hiberfil.sys
  414. [2015-08-02 10:24:57 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  415. [2015-08-01 15:26:16 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2015.lnk
  416. [2015-07-30 21:27:41 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  417. [2015-07-29 19:41:17 | 001,670,590 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  418. [2015-07-29 19:41:17 | 000,732,502 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
  419. [2015-07-29 19:41:17 | 000,654,480 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  420. [2015-07-29 19:41:17 | 000,156,080 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
  421. [2015-07-29 19:41:17 | 000,122,352 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  422. [2015-07-28 11:02:14 | 000,312,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys
  423. [2015-07-28 11:01:38 | 000,245,680 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys
  424. [2015-07-25 20:07:17 | 000,017,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\CompatTelRunner.exe
  425. [2015-07-25 20:04:16 | 000,726,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll
  426. [2015-07-25 20:04:05 | 000,765,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\invagent.dll
  427. [2015-07-25 20:03:59 | 000,433,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
  428. [2015-07-25 20:03:58 | 001,085,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appraiser.dll
  429. [2015-07-25 20:03:57 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
  430. [2015-07-25 20:03:57 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\acmigration.dll
  431. [2015-07-25 19:55:04 | 001,145,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
  432. [2015-07-24 20:54:23 | 002,102,183 | ---- | M] () -- C:\Users\D\Desktop\Lean-On-dzwonek.mp3.mp3
  433. [2015-07-22 09:03:36 | 002,247,880 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  434. [2015-07-19 13:01:20 | 000,097,888 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
  435. [2015-07-15 05:19:54 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
  436. [2015-07-15 05:19:50 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
  437. [2015-07-15 05:19:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
  438. [2015-07-15 05:19:45 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
  439. [2015-07-15 04:55:37 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
  440. [2015-07-15 04:55:32 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
  441. [2015-07-15 03:59:42 | 000,372,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
  442. [2015-07-15 03:52:35 | 000,299,008 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
  443. [2015-07-14 21:22:25 | 000,778,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  444. [2015-07-14 21:22:25 | 000,142,512 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  445. [2015-07-10 21:46:58 | 000,002,209 | ---- | M] () -- C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
  446. [2015-07-09 19:58:56 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  447. [2015-07-09 19:58:56 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  448. [2015-07-09 19:58:56 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  449. [2015-07-09 19:58:55 | 003,154,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  450. [2015-07-09 19:58:55 | 000,696,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  451. [2015-07-09 19:58:55 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  452. [2015-07-09 19:58:34 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll
  453. [2015-07-09 19:58:25 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wu.upgrade.ps.dll
  454. [2015-07-09 19:58:20 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  455. [2015-07-09 19:58:20 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  456. [2015-07-09 19:43:25 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
  457. [2015-07-09 19:43:25 | 000,093,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
  458. [2015-07-09 19:43:25 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
  459. [2015-07-09 19:43:24 | 000,566,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
  460. [2015-07-09 19:42:47 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
  461. [2015-07-09 07:11:56 | 000,077,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgfwd6a.sys
  462. [2015-07-04 20:07:11 | 002,087,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
  463.  
  464. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  465.  
  466. [2015-07-24 20:54:17 | 002,102,183 | ---- | C] () -- C:\Users\D\Desktop\Lean-On-dzwonek.mp3.mp3
  467. [2015-07-10 21:46:58 | 000,002,209 | ---- | C] () -- C:\Users\Public\Desktop\AVG PC TuneUp 2015.lnk
  468. [2015-07-10 21:46:57 | 000,002,221 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
  469. [2015-07-07 11:55:52 | 002,247,880 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
  470. [2015-07-07 11:52:30 | 000,000,995 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2015.lnk
  471. [2015-07-06 14:41:39 | 000,002,189 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  472. [2015-06-22 19:04:13 | 000,003,606 | ---- | C] () -- C:\Users\D\AppData\Local\recently-used.xbel
  473. [2015-03-13 21:53:03 | 000,000,695 | ---- | C] () -- C:\Windows\Tablet4170x2340M.ini
  474. [2015-02-13 14:48:39 | 000,011,761 | ---- | C] () -- C:\Users\D\AppData\Local\unins000.msg
  475. [2015-02-13 14:48:38 | 000,707,744 | ---- | C] () -- C:\Users\D\AppData\Local\unins000.exe
  476. [2015-02-13 14:48:38 | 000,003,177 | ---- | C] () -- C:\Users\D\AppData\Local\unins000.dat
  477. [2014-04-24 17:08:22 | 000,007,597 | ---- | C] () -- C:\Users\D\AppData\Local\Resmon.ResmonCfg
  478. [2014-04-13 17:50:44 | 001,634,860 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  479. [2014-03-31 05:43:36 | 000,249,688 | ---- | C] () -- C:\Windows\SysWow64\WinTab32.dll
  480. [2014-03-31 05:43:35 | 000,241,496 | ---- | C] () -- C:\Windows\SysWow64\MyDrawLineWindowDll.dll
  481. [2014-03-31 05:43:13 | 000,045,400 | ---- | C] () -- C:\Windows\SysWow64\lhtool.exe
  482. [2014-03-31 05:43:12 | 000,344,472 | ---- | C] () -- C:\Windows\SetupX32.EXE
  483. [2014-03-15 17:50:21 | 000,206,153 | ---- | C] () -- C:\Users\D\fsdsfdsfdsfds.jpg
  484. [2013-12-19 16:26:08 | 000,000,110 | ---- | C] () -- C:\Users\D\AppData\Roaming\WB.CFG
  485. [2013-07-06 09:53:07 | 000,000,005 | ---- | C] () -- C:\Users\D\AppData\Roaming\WBPU-Q3-TTL.DAT
  486. [2013-07-04 19:53:04 | 000,000,005 | ---- | C] () -- C:\Users\D\AppData\Roaming\WBPU-TTL.DAT
  487. [2013-06-29 21:23:09 | 000,065,081 | ---- | C] () -- C:\Users\D\AppData\Roaming\ExpressZip.dmp
  488. [2012-05-01 20:49:03 | 000,064,049 | ---- | C] () -- C:\Users\D\AppData\Roaming\ExpressBurn.dmp
  489. [2012-03-25 15:46:32 | 000,019,456 | ---- | C] () -- C:\Users\D\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
  490. [2012-01-16 20:27:31 | 000,017,408 | ---- | C] () -- C:\Users\D\AppData\Local\WebpageIcons.db
  491. [2012-01-15 16:24:49 | 000,000,465 | ---- | C] () -- C:\Users\D\Desktop.lnk
  492.  
  493. [color=#E56717]========== ZeroAccess Check ==========[/color]
  494.  
  495. [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  496.  
  497. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  498.  
  499. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  500.  
  501. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  502.  
  503. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  504.  
  505. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  506. "" = C:\Windows\SysNative\shell32.dll -- [2015-02-13 07:22:33 | 014,177,280 | ---- | M] (Microsoft Corporation)
  507. "ThreadingModel" = Apartment
  508.  
  509. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  510. "" = %SystemRoot%\system32\shell32.dll -- [2015-02-13 07:26:18 | 012,875,264 | ---- | M] (Microsoft Corporation)
  511. "ThreadingModel" = Apartment
  512.  
  513. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  514. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  515. "ThreadingModel" = Free
  516.  
  517. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  518. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
  519. "ThreadingModel" = Free
  520.  
  521. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  522. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  523. "ThreadingModel" = Both
  524.  
  525. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  526.  
  527. [color=#E56717]========== Files - Unicode (All) ==========[/color]
  528. [2015-07-29 21:13:16 | 000,018,944 | ---- | M] ()(C:\Users\D\Desktop\Wykaz-podr?cznikowTCH2015-16.doc) -- C:\Users\D\Desktop\Wykaz-podręcznikówTCH2015-16.doc
  529. [2015-07-29 21:05:45 | 000,018,944 | ---- | C] ()(C:\Users\D\Desktop\Wykaz-podr?cznikowTCH2015-16.doc) -- C:\Users\D\Desktop\Wykaz-podręcznikówTCH2015-16.doc
  530. [2015-07-10 21:46:58 | 000,002,251 | ---- | M] ()(C:\Users\Public\Desktop\AVG Konserwacja 1 klikni?ciem.lnk) -- C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk
  531. [2015-07-10 21:46:58 | 000,002,251 | ---- | C] ()(C:\Users\Public\Desktop\AVG Konserwacja 1 klikni?ciem.lnk) -- C:\Users\Public\Desktop\AVG Konserwacja 1 kliknięciem.lnk
  532. [2015-07-09 15:03:52 | 000,102,597 | ---- | M] ()(C:\Users\D\Desktop\Bez?tytu?u.png) -- C:\Users\D\Desktop\Bez tytułu.png
  533. [2015-07-09 15:03:51 | 000,102,597 | ---- | C] ()(C:\Users\D\Desktop\Bez?tytu?u.png) -- C:\Users\D\Desktop\Bez tytułu.png
  534. [2015-06-22 18:43:18 | 006,390,780 | R--- | M] ()(C:\Users\D\Desktop\10.Enej Kamie? z Napisem Love.mp3) -- C:\Users\D\Desktop\10.Enej Kamień z Napisem Love.mp3
  535. [2015-06-22 18:43:10 | 006,390,780 | R--- | C] ()(C:\Users\D\Desktop\10.Enej Kamie? z Napisem Love.mp3) -- C:\Users\D\Desktop\10.Enej Kamień z Napisem Love.mp3
  536. [2013-07-05 14:28:18 | 000,000,000 | ---D | M](C:\Program Files (x86)\Moj wymarzony ch?opak) -- C:\Program Files (x86)\Mój wymarzony chłopak
  537. [2013-07-05 14:28:18 | 000,000,000 | ---D | M](C:\Program Files (x86)\Moj wymarzony ch?opak) -- C:\Program Files (x86)\Mój wymarzony chłopak
  538. [2012-05-19 14:59:48 | 000,000,000 | ---- | M] ()(C:\Windows\SysWow64\?wi?ty Stra?nik - Proroctwo.doc) -- C:\Windows\SysWow64\Święty Strażnik - Proroctwo.doc
  539. [2012-05-19 14:59:48 | 000,000,000 | ---- | C] ()(C:\Windows\SysWow64\?wi?ty Stra?nik - Proroctwo.doc) -- C:\Windows\SysWow64\Święty Strażnik - Proroctwo.doc
  540. [2012-05-17 17:07:52 | 000,000,000 | ---- | M] ()(C:\Windows\SysWow64\Moje zdj?cie 14.png) -- C:\Windows\SysWow64\Moje zdjęcie 14.png
  541. [2012-05-17 17:07:52 | 000,000,000 | ---- | C] ()(C:\Windows\SysWow64\Moje zdj?cie 14.png) -- C:\Windows\SysWow64\Moje zdjęcie 14.png
  542. (C:\Program Files (x86)\Moj wymarzony ch?opak) -- C:\Program Files (x86)\Mój wymarzony chłopak
  543.  
  544. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!