OTL logfile created on: 2013-03-24 21:22:57 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Republic Of Gammers\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 5,93 Gb Total Physical Memory | 4,12 Gb Available Physical Memory | 69,56% Memory free 11,85 Gb Paging File | 9,73 Gb Available in Paging File | 82,08% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 75,04 Gb Total Space | 31,89 Gb Free Space | 42,49% Space Free | Partition Type: NTFS Drive D: | 58,59 Gb Total Space | 45,46 Gb Free Space | 77,58% Space Free | Partition Type: NTFS Drive Q: | 332,02 Gb Total Space | 267,27 Gb Free Space | 80,50% Space Free | Partition Type: NTFS Computer Name: REPUBLICOFGAMME | User Name: Republic Of Gammers | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-03-24 21:21:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Republic Of Gammers\Downloads\OTL.com PRC - [2013-03-24 01:30:46 | 003,494,992 | ---- | M] (Electronic Arts) -- C:\Program Files (x86)\Origin\Origin.exe PRC - [2013-02-28 21:13:08 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe PRC - [2013-02-21 06:23:46 | 001,274,320 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2013-02-17 11:12:08 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012-12-19 15:49:30 | 000,642,808 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe PRC - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012-04-06 03:16:24 | 000,069,448 | ---- | M] (ZTE) -- D:\programy\T-Mobile\InternetManager_Z\Bin\mcserver.exe PRC - [2012-04-06 03:16:22 | 000,221,512 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe PRC - [2012-04-06 03:16:20 | 000,037,192 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\db_daemon.exe PRC - [2010-12-21 13:57:50 | 000,294,912 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe PRC - [2010-11-21 04:24:03 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cmd.exe PRC - [2010-02-18 18:27:40 | 000,241,789 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\SB X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe PRC - [2009-10-26 20:29:32 | 006,998,656 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2009-10-26 10:10:42 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2009-08-19 20:31:48 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2009-06-19 10:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe PRC - [2009-06-19 10:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe PRC - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe PRC - [2008-12-22 17:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe PRC - [2008-08-13 21:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-03-24 01:30:46 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Origin\tufao.dll MOD - [2013-02-21 06:23:44 | 000,459,728 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll MOD - [2013-02-21 06:23:43 | 012,637,136 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll MOD - [2013-02-21 06:23:42 | 004,050,896 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\pdf.dll MOD - [2013-02-21 06:22:51 | 000,596,944 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\libglesv2.dll MOD - [2013-02-21 06:22:50 | 000,124,368 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\libegl.dll MOD - [2013-02-21 06:22:48 | 001,552,848 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\ffmpegsumo.dll MOD - [2012-08-17 21:40:16 | 000,068,024 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\QtWebKit\qmlwebkitplugin4.dll MOD - [2012-08-17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll MOD - [2012-04-06 03:16:22 | 000,221,512 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\dbus-daemon.exe MOD - [2012-04-06 03:16:20 | 000,037,192 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\db_daemon.exe MOD - [2012-04-06 03:15:26 | 000,021,504 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\libctlsvr.dll MOD - [2012-04-06 03:14:28 | 000,099,840 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\itapi.dll MOD - [2012-04-06 03:14:24 | 000,043,520 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\audio.dll MOD - [2012-04-06 03:14:20 | 000,058,880 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\coder.dll MOD - [2012-04-06 03:14:18 | 000,036,352 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\libConfig.dll MOD - [2012-04-06 03:14:18 | 000,027,648 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\log.dll MOD - [2011-12-26 08:41:00 | 000,090,624 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\CaptureCrash.dll MOD - [2011-05-06 04:03:32 | 000,594,944 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\dbus-1.dll MOD - [2011-05-06 04:02:40 | 000,341,504 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\sqlite3.dll MOD - [2010-11-23 14:26:22 | 000,186,368 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL MOD - [2010-10-14 10:37:52 | 000,971,776 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\libxml2.dll MOD - [2010-10-14 10:37:52 | 000,080,688 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\zlib1.dll MOD - [2009-12-29 16:52:38 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL MOD - [2007-09-09 16:07:00 | 000,151,552 | ---- | M] () -- D:\programy\T-Mobile\InternetManager_Z\Bin\libexpat.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-12-19 20:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-02 12:48:18 | 000,126,352 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2013-02-28 21:13:08 | 000,356,376 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe -- (AVP) SRV - [2013-02-23 22:34:13 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-02-23 12:15:41 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2013-02-23 12:15:06 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2013-02-17 11:12:08 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-03-01 18:29:58 | 000,130,976 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service) SRV - [2010-12-21 13:57:50 | 000,294,912 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-11-09 19:20:36 | 000,096,896 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2013-02-28 21:13:06 | 000,613,720 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2013-02-28 21:13:06 | 000,054,104 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kltdi.sys -- (kltdi) DRV:[b]64bit:[/b] - [2013-02-28 21:13:06 | 000,029,528 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:[b]64bit:[/b] - [2013-02-28 21:13:06 | 000,029,016 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klkbdflt.sys -- (klkbdflt) DRV:[b]64bit:[/b] - [2013-02-17 11:35:42 | 000,030,112 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\HWiNFO64A.SYS -- (HWiNFO32) DRV:[b]64bit:[/b] - [2012-12-19 21:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2012-12-19 20:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2012-11-06 12:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2012-08-13 16:49:40 | 000,178,008 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kneps.sys -- (kneps) DRV:[b]64bit:[/b] - [2012-08-02 15:09:34 | 000,028,504 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:[b]64bit:[/b] - [2012-06-19 17:28:12 | 000,458,584 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1) DRV:[b]64bit:[/b] - [2011-08-10 11:56:46 | 000,079,872 | ---- | M] (ZTE) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\zte_cdc_acm.sys -- (zte_cdc_acm) DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:[b]64bit:[/b] - [2010-11-21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-12-15 03:46:38 | 000,039,552 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tcpipBM.sys -- (tcpipBM) DRV:[b]64bit:[/b] - [2009-12-15 03:46:30 | 000,016,512 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BMLoad.sys -- (BMLoad) DRV:[b]64bit:[/b] - [2009-11-02 12:48:02 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2009-08-28 09:33:48 | 000,292,400 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009-08-07 05:24:14 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009-07-20 17:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-20 03:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-13 09:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2008-04-28 12:03:46 | 000,047,160 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmdTools64.sys -- (AmdTools64) DRV - [2013-02-07 20:25:16 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | On_Demand | Stopped] -- D:\programy\OC\ThrottleStop_500\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2012-11-23 14:49:16 | 000,038,392 | ---- | M] (IObit Information Technology) [File_System | Auto | Running] -- D:\programy\Protected Folder\pffilter.sys -- (PfFilter) DRV - [2011-07-29 13:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2011-07-29 13:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-12-15 03:46:38 | 000,039,552 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\tcpipBM.sys -- (tcpipBM) DRV - [2009-12-15 03:46:30 | 000,016,512 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\drivers\BMLoad.sys -- (BMLoad) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: D:\programy\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: D:\programy\T-Mobile\InternetManager_Z\Bin\addon [2010-04-01 13:29:34 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2013-03-24 21:14:41 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2013-03-24 21:14:42 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2013-03-24 21:14:27 | 000,000,000 | ---D | M] [2013-02-21 06:45:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR - homepage: CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.97\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 7 U15 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Java Deployment Toolkit 7.0.150.3 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll CHR - plugin: VLC Web Plugin (Enabled) = D:\programy\VLC\npvlc.dll CHR - Extension: Kaspersky URL Advisor = C:\Users\Republic Of Gammers\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0\ CHR - Extension: Better Battlelog (BBLog) = C:\Users\Republic Of Gammers\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbnkmpcicaafjhmnhiblopefjfacnmem\3.4.0_0\ CHR - Extension: Blokada zawarto\u015Bci = C:\Users\Republic Of Gammers\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0\ CHR - Extension: Klawiatura wirtualna = C:\Users\Republic Of Gammers\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4190_0\ O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) O2:[b]64bit:[/b] - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) O2:[b]64bit:[/b] - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RunDLLEntry] C:\Windows\SysNative\AmbRunE.DLL (Creative Technology Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [THXCfg64] C:\Windows\SysNative\THXCfg64.DLL (Creative Technology Ltd.) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [THX Audio Control Panel] C:\Program Files (x86)\Creative\SB X-Fi MB 2\THXAudioCP\THXAudio.exe (Creative Technology Ltd) O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.) O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe (Creative Technology Ltd) O4 - HKCU..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe (Electronic Arts) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9:[b]64bit:[/b] - Extra Button: &Klawiatura wirtualna - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) O9:[b]64bit:[/b] - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Klawiatura wirtualna - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2FA8CDFE-3E8F-4A9F-8A0E-5D7BB209100F}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-03-24 21:18:29 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2013-03-24 21:15:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2013 [2013-03-24 21:15:01 | 000,064,856 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\klfphc.dll [2013-03-24 21:14:29 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP [2013-03-24 21:14:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2013-03-24 21:14:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab [2013-03-24 21:14:24 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2013-03-24 21:14:18 | 000,613,720 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2013-03-24 21:14:18 | 000,089,432 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klflt.sys [2013-03-24 20:48:47 | 000,000,000 | ---D | C] -- C:\Windows\temp [2013-03-24 19:30:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard [2013-03-24 01:28:28 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2013-03-24 01:26:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT [2013-03-24 01:26:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2013-03-24 01:26:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies [2013-03-24 01:26:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies [2013-03-24 01:26:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2013-03-24 01:24:57 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2013-03-23 23:11:09 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2013-03-23 23:11:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2013-03-19 23:31:00 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx [2013-03-17 22:17:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack [2013-03-15 15:05:27 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Local\Origin [2013-03-15 15:01:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin [2013-03-10 23:25:25 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Local\http___www.julien-manici [2013-03-10 23:23:35 | 002,872,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.backup.exe [2013-03-10 11:26:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Julien MANICI [2013-03-10 10:52:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Iminent [2013-03-10 10:51:39 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Local\Smartbar [2013-03-10 10:51:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SingAlong [2013-03-10 10:51:26 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\Documents\Downloads [2013-03-10 10:51:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Media converter [2013-03-09 10:43:08 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Local\SKIDROW [2013-03-09 10:38:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX [2013-03-05 19:00:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D [2013-03-05 18:44:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2013-03-04 19:07:20 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2013-03-04 19:04:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID [2013-03-04 17:37:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Futuremark [2013-03-04 17:36:30 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\Documents\iq [2013-03-04 17:13:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Futuremark [2013-03-04 17:13:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2013-03-04 17:13:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2013-03-03 09:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2013-03-03 09:22:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2013-03-03 09:22:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2013-03-03 09:22:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2013-03-03 09:19:11 | 000,000,000 | R--D | C] -- C:\MSOCache [2013-03-02 16:14:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast [2013-03-02 16:14:24 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast [2013-02-28 21:13:06 | 000,054,104 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\kltdi.sys [2013-02-28 21:13:06 | 000,029,528 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klmouflt.sys [2013-02-28 21:13:06 | 000,029,016 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klkbdflt.sys [2013-02-26 19:50:41 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2013-02-26 19:50:37 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2013-02-26 19:50:37 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2013-02-26 19:50:37 | 000,095,648 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2013-02-26 19:50:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2013-02-25 21:13:26 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\HandBrake [2013-02-25 21:13:20 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake [2013-02-25 21:13:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake [2013-02-25 06:05:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2013-02-25 06:05:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2013-02-24 19:26:20 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2013-02-24 19:26:20 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2013-02-24 19:26:20 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2013-02-24 19:26:15 | 000,000,000 | ---D | C] -- C:\Qoobox [2013-02-24 19:26:04 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2013-02-24 13:56:33 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\InternetManager_Z [2013-02-24 13:37:59 | 000,724,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bmutil.dll [2013-02-24 13:37:59 | 000,724,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bmutil.dll [2013-02-24 13:37:59 | 000,480,384 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysWow64\bmnet.dll [2013-02-24 13:37:59 | 000,480,384 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysNative\bmnet.dll [2013-02-24 13:37:59 | 000,308,352 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysWow64\bminstall.dll [2013-02-24 13:37:59 | 000,308,352 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysNative\bminstall.dll [2013-02-24 13:37:59 | 000,271,488 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysWow64\bmapi.dll [2013-02-24 13:37:59 | 000,271,488 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysNative\bmapi.dll [2013-02-24 13:37:59 | 000,132,224 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysWow64\bmdumpd.bin [2013-02-24 13:37:59 | 000,132,224 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysNative\bmdumpd.bin [2013-02-24 13:37:59 | 000,039,552 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysWow64\drivers\tcpipBM.sys [2013-02-24 13:37:59 | 000,039,552 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysNative\drivers\tcpipBM.sys [2013-02-24 13:37:59 | 000,016,512 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysWow64\drivers\BMLoad.sys [2013-02-24 13:37:59 | 000,016,512 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\SysNative\drivers\BMLoad.sys [2013-02-24 13:37:59 | 000,013,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sporder.dll [2013-02-24 13:37:59 | 000,013,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sporder.dll [2013-02-24 13:37:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Manager [2013-02-24 13:37:53 | 000,079,872 | ---- | C] (ZTE) -- C:\Windows\SysNative\drivers\zte_cdc_acm.sys [2013-02-23 22:34:12 | 000,691,568 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013-02-23 22:34:12 | 000,071,024 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013-02-23 22:34:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed [2013-02-23 12:19:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative [2013-02-23 12:15:54 | 000,090,112 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\Updreg.EXE [2013-02-23 12:15:53 | 000,192,512 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AMBSpiE.exe [2013-02-23 12:15:53 | 000,132,096 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\cfgChain.exe [2013-02-23 12:15:53 | 000,121,856 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\CTtele64.dll [2013-02-23 12:15:53 | 000,110,592 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\CTtele32.dll [2013-02-23 12:15:53 | 000,083,456 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\ctpxst32.exe [2013-02-23 12:15:53 | 000,014,848 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AmbRunE.dll [2013-02-23 12:15:53 | 000,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\ResDefE.exe [2013-02-23 12:15:50 | 000,011,264 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\ResDefA.exe [2013-02-23 12:15:46 | 002,906,591 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll [2013-02-23 12:15:46 | 000,466,520 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2013-02-23 12:15:46 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2013-02-23 12:15:46 | 000,123,480 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2013-02-23 12:15:46 | 000,109,144 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2013-02-23 12:15:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared [2013-02-23 12:14:57 | 000,000,000 | ---D | C] -- C:\Program Files\Creative [2013-02-23 12:11:22 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2013-02-23 12:10:50 | 003,114,088 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2013-02-23 12:10:50 | 002,405,992 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2013-02-23 12:10:50 | 001,805,928 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2013-02-23 12:10:50 | 001,560,680 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2013-02-23 12:10:50 | 001,245,288 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2013-02-23 12:10:50 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2013-02-23 12:10:50 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2013-02-23 12:10:50 | 000,092,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2013-02-23 12:10:49 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2013-02-23 12:10:49 | 000,876,120 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBAPO64.dll [2013-02-23 12:10:49 | 000,738,392 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\MBAPO32.dll [2013-02-23 12:10:49 | 000,625,752 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBTHX64.dll [2013-02-23 12:10:49 | 000,561,240 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\MBTHX32.dll [2013-02-23 12:10:49 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2013-02-23 12:10:49 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2013-02-23 12:10:49 | 000,080,984 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBWrp64.dll [2013-02-23 12:10:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2013-02-23 12:10:47 | 001,284,712 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013-02-23 11:44:41 | 000,260,608 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\AMBSpiE.exe [2013-02-23 11:44:41 | 000,141,312 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\cfgChain.exe [2013-02-23 11:44:41 | 000,093,696 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\ctpxst64.exe [2013-02-23 11:44:41 | 000,017,920 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\AmbRunE.dll [2013-02-23 11:44:41 | 000,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\ResDefE.exe [2013-02-23 11:44:37 | 000,141,312 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\THXCfg64.exe [2013-02-23 11:44:37 | 000,141,312 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\EptMon64.exe [2013-02-23 11:44:37 | 000,021,504 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\EptMon64.dll [2013-02-23 11:44:37 | 000,018,432 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\THXCfg64.dll [2013-02-23 11:44:32 | 001,942,528 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll [2013-02-23 11:44:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative [2013-02-23 11:43:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative [2013-02-23 11:41:16 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2013-02-23 10:56:27 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\vlc [2013-02-23 10:56:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2013-02-23 10:47:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free MKV Player [2013-02-23 10:27:24 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Matroska Pack [2013-02-23 10:23:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack [2013-02-23 10:21:29 | 000,000,000 | ---D | C] -- C:\Users\Republic Of Gammers\AppData\Roaming\BESTplayer [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-03-24 21:18:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-03-24 21:18:05 | 477,532,159 | -HS- | M] () -- C:\hiberfil.sys [2013-03-24 21:15:01 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk [2013-03-24 20:21:07 | 570,074,933 | ---- | M] () -- C:\Windows\MEMORY.DMP [2013-03-24 01:43:21 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2013-03-24 01:43:21 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2013-03-24 01:43:01 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2013-03-23 23:11:13 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll [2013-03-23 23:11:13 | 000,419,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll [2013-03-23 23:11:13 | 000,016,640 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-03-23 23:11:13 | 000,016,640 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-03-23 23:11:13 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll [2013-03-23 23:11:13 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll [2013-03-23 17:26:52 | 000,000,132 | ---- | M] () -- C:\Users\Republic Of Gammers\AppData\Roaming\Adobe PNG Format CS6 Prefs [2013-03-15 15:01:16 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk [2013-03-11 23:32:26 | 005,036,008 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013-03-10 23:23:48 | 000,925,184 | ---- | M] () -- C:\Windows\expstart.exe [2013-03-05 18:00:26 | 001,661,232 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013-03-05 18:00:26 | 000,737,480 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2013-03-05 18:00:26 | 000,651,648 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013-03-05 18:00:26 | 000,154,136 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2013-03-05 18:00:26 | 000,120,580 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013-03-05 03:20:40 | 000,005,120 | ---- | M] () -- C:\Users\Republic Of Gammers\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-03-04 19:04:54 | 000,000,622 | ---- | M] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk [2013-03-04 17:35:59 | 000,052,728 | ---- | M] () -- C:\Users\Republic Of Gammers\Documents\1.3dr [2013-03-04 17:13:49 | 000,001,219 | ---- | M] () -- C:\Users\Public\Desktop\3DMark Vantage.lnk [2013-03-03 14:19:31 | 000,032,378 | ---- | M] () -- C:\Users\Republic Of Gammers\Documents\cc_20130303_141927.reg [2013-03-02 16:14:25 | 000,000,645 | ---- | M] () -- C:\Users\Republic Of Gammers\Desktop\SopCast.lnk [2013-02-28 21:13:06 | 000,613,720 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2013-02-28 21:13:06 | 000,064,856 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\klfphc.dll [2013-02-28 21:13:06 | 000,054,104 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\kltdi.sys [2013-02-28 21:13:06 | 000,029,528 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klmouflt.sys [2013-02-28 21:13:06 | 000,029,016 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klkbdflt.sys [2013-02-28 17:48:57 | 000,000,228 | ---- | M] () -- C:\Users\Republic Of Gammers\Documents\pin tmobile.rtf [2013-02-26 19:50:34 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2013-02-26 19:50:34 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2013-02-26 19:50:34 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2013-02-26 19:50:34 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2013-02-26 19:50:34 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2013-02-26 19:50:34 | 000,095,648 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2013-02-26 16:07:16 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-02-26 15:19:43 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2013-02-26 15:19:43 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-02-26 15:19:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-02-25 21:13:20 | 000,000,665 | ---- | M] () -- C:\Users\Republic Of Gammers\Desktop\Handbrake.lnk [2013-02-24 14:04:32 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2013-02-24 13:38:55 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_zte_cdc_acm_01009.Wdf [2013-02-24 13:37:59 | 000,000,899 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk [2013-02-24 13:37:59 | 000,000,508 | ---- | M] () -- C:\Windows\SysWow64\bocinstall.ini [2013-02-24 13:37:59 | 000,000,508 | ---- | M] () -- C:\Windows\SysNative\bocinstall.ini [2013-02-24 13:37:58 | 000,001,044 | ---- | M] () -- C:\Users\Public\Desktop\Internet Manager.lnk [2013-02-24 13:37:43 | 000,000,107 | ---- | M] () -- C:\Windows\SysWow64\SupportApp.bat [2013-02-23 22:34:12 | 000,691,568 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013-02-23 22:34:12 | 000,071,024 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013-02-23 18:09:53 | 000,057,986 | ---- | M] () -- C:\Users\Republic Of Gammers\Documents\DSC00675.jpg [2013-02-23 18:08:11 | 002,254,467 | ---- | M] () -- C:\Users\Republic Of Gammers\Documents\DSC00675.png [2013-02-23 18:04:39 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2013-02-23 12:15:48 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc [2013-02-23 12:15:46 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2013-02-23 12:15:46 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2013-02-23 12:15:46 | 000,123,480 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2013-02-23 12:15:46 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2013-02-23 12:10:43 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2013-02-23 10:56:25 | 000,000,605 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-03-24 21:15:13 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Kaspersky Anti-Virus 2013.lnk [2013-03-23 17:14:38 | 000,000,132 | ---- | C] () -- C:\Users\Republic Of Gammers\AppData\Roaming\Adobe PNG Format CS6 Prefs [2013-03-19 14:53:01 | 570,074,933 | ---- | C] () -- C:\Windows\MEMORY.DMP [2013-03-17 22:17:03 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2013-03-15 15:01:16 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk [2013-03-10 23:23:48 | 000,925,184 | ---- | C] () -- C:\Windows\expstart.exe [2013-03-04 19:04:54 | 000,000,622 | ---- | C] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk [2013-03-04 17:35:56 | 000,052,728 | ---- | C] () -- C:\Users\Republic Of Gammers\Documents\1.3dr [2013-03-04 17:13:49 | 000,001,219 | ---- | C] () -- C:\Users\Public\Desktop\3DMark Vantage.lnk [2013-03-03 14:19:29 | 000,032,378 | ---- | C] () -- C:\Users\Republic Of Gammers\Documents\cc_20130303_141927.reg [2013-03-02 16:14:25 | 000,000,645 | ---- | C] () -- C:\Users\Republic Of Gammers\Desktop\SopCast.lnk [2013-02-28 17:48:57 | 000,000,228 | ---- | C] () -- C:\Users\Republic Of Gammers\Documents\pin tmobile.rtf [2013-02-25 21:13:20 | 000,000,665 | ---- | C] () -- C:\Users\Republic Of Gammers\Desktop\Handbrake.lnk [2013-02-24 19:26:20 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2013-02-24 19:26:20 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2013-02-24 19:26:20 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2013-02-24 19:26:20 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2013-02-24 19:26:20 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2013-02-24 14:04:32 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2013-02-24 14:04:32 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2013-02-24 13:38:55 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_zte_cdc_acm_01009.Wdf [2013-02-24 13:37:59 | 000,193,664 | ---- | C] () -- C:\Windows\SysWow64\bmsdk.exe [2013-02-24 13:37:59 | 000,193,664 | ---- | C] () -- C:\Windows\SysNative\bmsdk.exe [2013-02-24 13:37:59 | 000,002,960 | ---- | C] () -- C:\Windows\SysWow64\boc.ini [2013-02-24 13:37:59 | 000,002,960 | ---- | C] () -- C:\Windows\SysNative\boc.ini [2013-02-24 13:37:59 | 000,000,899 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\mcserver.lnk [2013-02-24 13:37:59 | 000,000,508 | ---- | C] () -- C:\Windows\SysWow64\bocinstall.ini [2013-02-24 13:37:59 | 000,000,508 | ---- | C] () -- C:\Windows\SysNative\bocinstall.ini [2013-02-24 13:37:58 | 000,001,044 | ---- | C] () -- C:\Users\Public\Desktop\Internet Manager.lnk [2013-02-24 13:37:43 | 000,000,107 | ---- | C] () -- C:\Windows\SysWow64\SupportApp.bat [2013-02-23 22:34:13 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-02-23 18:09:53 | 000,057,986 | ---- | C] () -- C:\Users\Republic Of Gammers\Documents\DSC00675.jpg [2013-02-23 18:08:11 | 002,254,467 | ---- | C] () -- C:\Users\Republic Of Gammers\Documents\DSC00675.png [2013-02-23 18:04:39 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2013-02-23 12:15:53 | 000,007,594 | ---- | C] () -- C:\Windows\SysWow64\xFiMB2CfgUninstall32.ini [2013-02-23 12:15:53 | 000,005,135 | ---- | C] () -- C:\Windows\SysWow64\cfgfx.ini [2013-02-23 12:15:53 | 000,002,775 | ---- | C] () -- C:\Windows\FF08_Render_Spk.ini [2013-02-23 12:15:53 | 000,002,411 | ---- | C] () -- C:\Windows\FF08_Render_Hp.ini [2013-02-23 12:15:53 | 000,002,267 | ---- | C] () -- C:\Windows\FF08_Capture.ini [2013-02-23 12:15:53 | 000,001,542 | ---- | C] () -- C:\Windows\FF08_Render.ini [2013-02-23 12:15:49 | 000,001,313 | ---- | C] () -- C:\Windows\THXCfg_SP_APOIM.ini [2013-02-23 12:15:49 | 000,001,212 | ---- | C] () -- C:\Windows\THXCfg_HP_APOIM.ini [2013-02-23 12:15:49 | 000,001,212 | ---- | C] () -- C:\Windows\THXCfg_APOIM.ini [2013-02-23 12:10:43 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2013-02-23 11:44:41 | 000,007,594 | ---- | C] () -- C:\Windows\SysNative\xFiMB2CfgUninstall64.ini [2013-02-23 11:44:41 | 000,005,135 | ---- | C] () -- C:\Windows\SysNative\cfgfx.ini [2013-02-23 11:44:37 | 000,006,985 | ---- | C] () -- C:\Windows\SysNative\THXCfgUninstall64.ini [2013-02-23 11:44:37 | 000,006,772 | ---- | C] () -- C:\Windows\SysNative\THXCfg64.ini [2013-02-23 11:44:37 | 000,005,262 | ---- | C] () -- C:\Windows\SysNative\MCEptMon.ini [2013-02-23 11:44:37 | 000,005,262 | ---- | C] () -- C:\Windows\SysNative\MBEptMon.ini [2013-02-23 11:44:36 | 000,241,664 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL [2013-02-23 11:44:36 | 000,186,368 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2013-02-23 11:44:36 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL [2013-02-23 11:44:36 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2013-02-23 11:44:36 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc [2013-02-23 10:56:25 | 000,000,605 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2013-02-19 13:41:04 | 000,005,120 | ---- | C] () -- C:\Users\Republic Of Gammers\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-02-17 02:30:04 | 000,291,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2013-02-17 02:30:03 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2013-02-17 01:12:29 | 001,637,498 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013-02-17 00:32:14 | 002,469,760 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe [2013-02-17 00:32:14 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe [2013-02-17 00:32:14 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll [2013-02-17 00:32:14 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys [2013-02-17 00:32:14 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys [2013-02-16 23:48:46 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2012-12-19 20:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012-12-19 20:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012-05-02 13:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2012-03-12 18:27:32 | 000,072,192 | R--- | C] () -- C:\Windows\SysWow64\changeAcl.exe [2011-09-12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2010-11-21 04:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010-11-21 04:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-02-21 06:45:33 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\Babylon [2013-03-17 22:15:28 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\BESTplayer [2013-02-23 10:35:05 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\BSplayer [2013-02-18 15:30:46 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\BSplayer Pro [2013-03-12 19:53:46 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\DAEMON Tools Lite [2013-02-23 10:35:27 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\Delta [2013-02-25 21:13:30 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\HandBrake [2013-02-24 13:56:33 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\InternetManager_Z [2013-02-17 01:41:25 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\Origin [2013-02-17 09:36:54 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\PDAppFlex [2013-03-25 05:20:03 | 000,000,000 | ---D | M] -- C:\Users\Republic Of Gammers\AppData\Roaming\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >