OTL logfile created on: 2013-06-29 20:57:45 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = J:\Users\Zacny\Downloads Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 47,78% Memory free 4,43 Gb Paging File | 2,67 Gb Available in Paging File | 60,16% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = J: | %SystemRoot% = J:\Windows | %ProgramFiles% = J:\Program Files Drive C: | 78,13 Gb Total Space | 77,63 Gb Free Space | 99,37% Space Free | Partition Type: NTFS Drive G: | 115,69 Gb Total Space | 112,56 Gb Free Space | 97,29% Space Free | Partition Type: NTFS Drive J: | 39,06 Gb Total Space | 21,01 Gb Free Space | 53,79% Space Free | Partition Type: NTFS Computer Name: ZACNY-KOMPUTER | User Name: Zacny | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-06-29 20:57:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- J:\Users\Zacny\Downloads\OTL.exe PRC - [2013-06-27 14:26:47 | 002,686,976 | ---- | M] () -- G:\Gry\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.171\deploy\LoLLauncher.exe PRC - [2013-06-27 14:26:28 | 001,294,336 | ---- | M] () -- G:\Gry\League of Legends\RADS\system\rads_user_kernel.exe PRC - [2013-06-15 03:28:44 | 000,825,808 | ---- | M] (Google Inc.) -- J:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2013-06-05 00:02:48 | 000,492,032 | ---- | M] (AMD) -- J:\Windows\System32\atieclxx.exe PRC - [2013-06-05 00:02:10 | 000,219,136 | ---- | M] (AMD) -- J:\Windows\System32\atiesrxx.exe PRC - [2013-05-23 11:09:59 | 002,827,728 | ---- | M] () -- J:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe PRC - [2012-11-30 04:55:25 | 000,271,360 | ---- | M] (Microsoft Corporation) -- J:\Windows\System32\conhost.exe PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- J:\Windows\explorer.exe PRC - [2010-11-20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- J:\Windows\System32\taskhost.exe PRC - [2010-11-20 14:17:36 | 000,179,712 | ---- | M] (Microsoft Corporation) -- J:\Windows\System32\schtasks.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-06-27 19:25:44 | 000,253,952 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ba39e27ea796912fce296963622dfbae\WindowsFormsIntegration.ni.dll MOD - [2013-06-27 19:23:52 | 000,096,768 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\a1b65a602c75409c0c1ce7fa1f2a0983\UIAutomationProvider.ni.dll MOD - [2013-06-27 19:23:51 | 000,221,696 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\766ccafdc4a09b964aa9286a15bca48a\System.ServiceProcess.ni.dll MOD - [2013-06-27 19:23:48 | 012,079,616 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\ce70182f0348fc21a07409afd4a922f5\System.Web.ni.dll MOD - [2013-06-27 19:23:43 | 000,771,584 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\5ea93652e4752c75bc6fbb195b4eb864\System.Runtime.Remoting.ni.dll MOD - [2013-06-27 19:23:19 | 001,801,728 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\866894ebe5258bf9f45d6b063229e990\System.Xaml.ni.dll MOD - [2013-06-27 18:50:37 | 018,002,944 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\14f511c47523f19ca591eb207e9e2084\PresentationFramework.ni.dll MOD - [2013-06-27 18:50:27 | 011,451,904 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e10fd15441d278c04a03302880a3e231\PresentationCore.ni.dll MOD - [2013-06-27 18:50:19 | 003,858,944 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\7a9ff5ce3a909d075179a2ac70d8f388\WindowsBase.ni.dll MOD - [2013-06-27 18:50:17 | 000,309,760 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\82f376255a9523982c52cf58b13268d3\PresentationFramework.Classic.ni.dll MOD - [2013-06-27 18:46:50 | 013,199,360 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\39f4c7717661667c68f9af8c4f6402b9\System.Windows.Forms.ni.dll MOD - [2013-06-27 18:46:33 | 007,069,696 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\27dcf04ed7a3506045597c02a5a1fc31\System.Core.ni.dll MOD - [2013-06-27 18:46:32 | 005,617,664 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll MOD - [2013-06-27 18:46:29 | 001,667,584 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll MOD - [2013-06-27 18:46:29 | 000,982,528 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5de5d8c1c02e33789e3cf7e3f54c0ec9\System.Configuration.ni.dll MOD - [2013-06-27 18:46:27 | 009,094,656 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll MOD - [2013-06-27 18:46:22 | 014,412,800 | ---- | M] () -- J:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll MOD - [2013-06-27 14:26:47 | 002,686,976 | ---- | M] () -- G:\Gry\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.171\deploy\LoLLauncher.exe MOD - [2013-06-27 14:26:28 | 001,294,336 | ---- | M] () -- G:\Gry\League of Legends\RADS\system\rads_user_kernel.exe MOD - [2013-06-15 03:28:42 | 000,393,168 | ---- | M] () -- J:\Program Files\Google\Chrome\Application\27.0.1453.116\ppgooglenaclpluginchrome.dll MOD - [2013-06-15 03:28:41 | 013,140,432 | ---- | M] () -- J:\Program Files\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll MOD - [2013-06-15 03:28:40 | 004,051,408 | ---- | M] () -- J:\Program Files\Google\Chrome\Application\27.0.1453.116\pdf.dll MOD - [2013-06-15 03:27:51 | 000,599,504 | ---- | M] () -- J:\Program Files\Google\Chrome\Application\27.0.1453.116\libglesv2.dll MOD - [2013-06-15 03:27:50 | 000,124,368 | ---- | M] () -- J:\Program Files\Google\Chrome\Application\27.0.1453.116\libegl.dll MOD - [2013-06-15 03:27:48 | 001,597,392 | ---- | M] () -- J:\Program Files\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll MOD - [2013-05-23 11:09:59 | 002,827,728 | ---- | M] () -- J:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe MOD - [2013-05-23 11:09:01 | 002,521,040 | ---- | M] () -- j:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013-06-28 10:52:58 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- J:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2013-06-05 00:02:10 | 000,219,136 | ---- | M] (AMD) [Auto | Running] -- J:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2013-06-03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- J:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-05-23 11:09:59 | 002,827,728 | ---- | M] () [Auto | Running] -- J:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe -- (BrowserDefendert) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- J:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- J:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- J:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub) DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc) DRV - [2013-06-29 20:58:28 | 000,103,680 | ---- | M] (GMER) [Kernel | On_Demand | Unknown] -- J:\Users\Zacny\AppData\Local\Temp\awddikod.sys -- (awddikod) DRV - [2013-06-05 01:08:38 | 010,289,664 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- J:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag) DRV - [2013-06-04 23:34:08 | 000,485,888 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- J:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap) DRV - [2010-11-20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- J:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010-11-20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- J:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2010-11-20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- J:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- J:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010-11-20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- J:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2010-11-20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- J:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010-11-20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- J:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-07-14 00:02:52 | 000,043,008 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- J:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?babsrc=HP_ss&mntrId=420E001D7DCAC59E&affID=119357&tt=250613_gr2&tsp=4926 IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?babsrc=HP_ss&mntrId=420E001D7DCAC59E&affID=119357&tt=250613_gr2&tsp=4926 IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=420E001D7DCAC59E&affID=119357&tt=250613_gr2&tsp=4926 IE - HKU\S-1-5-21-311429496-2377400333-3385012961-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: J:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: J:\Program Files\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.) [2013-06-27 13:57:37 | 000,000,000 | ---D | M] (No name found) -- J:\Program Files\Mozilla Firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: () CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - homepage: http://www.delta-search.com/?babsrc=HP_ss&mntrId=420E001D7DCAC59E&affID=119357&tt=250613_gr2&tsp=4926 CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.1.12_0\ CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0\ CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: No name found = J:\Users\Zacny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - J:\Windows\System32\drivers\etc\hosts O4 - HKLM..\Run: [StartCCC] J:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\.DEFAULT..\RunOnce: [SPReview] J:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation) O4 - HKU\S-1-5-18..\RunOnce: [SPReview] J:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] J:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] J:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FF116DA7-679D-45F5-B7F6-C4731ACA2CBE}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - J:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - AppInit_DLLs: (j:\progra~2\browse~1\261339~1.144\{c16c1~1\browse~1.dll) - j:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll () O20 - HKLM Winlogon: Shell - (explorer.exe) - J:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (J:\Windows\system32\userinit.exe) - J:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - J:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - J:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-06-29 10:18:00 | 000,000,000 | ---D | C] -- J:\Windows\System32\SPReview [2013-06-29 10:16:52 | 000,000,000 | ---D | C] -- J:\Windows\System32\EventProviders [2013-06-28 15:33:38 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- J:\Windows\System32\fms.dll [2013-06-28 10:53:48 | 000,000,000 | ---D | C] -- J:\Windows\System32\Wat [2013-06-27 18:35:44 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Last.fm [2013-06-27 18:35:41 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\Last.fm [2013-06-27 18:02:30 | 000,000,000 | -HSD | C] -- J:\Config.Msi [2013-06-27 17:37:06 | 000,000,000 | ---D | C] -- J:\Windows\pss [2013-06-27 17:27:28 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\ATI [2013-06-27 17:27:28 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\ATI [2013-06-27 17:27:28 | 000,000,000 | ---D | C] -- J:\ProgramData\ATI [2013-06-27 16:09:14 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\LolClient [2013-06-27 16:09:12 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Macromedia [2013-06-27 16:09:09 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Adobe [2013-06-27 14:33:31 | 000,000,000 | ---D | C] -- J:\Windows\Panther [2013-06-27 14:25:02 | 000,000,000 | -HSD | C] -- J:\Windows\System32\AI_RecycleBin [2013-06-27 14:24:02 | 000,000,000 | ---D | C] -- J:\Program Files\Pando Networks [2013-06-27 14:23:12 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Riot Games [2013-06-27 14:20:56 | 000,000,000 | ---D | C] -- J:\Program Files\Microsoft.NET [2013-06-27 14:12:25 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center [2013-06-27 14:11:19 | 000,000,000 | ---D | C] -- J:\Program Files\Common Files\ATI Technologies [2013-06-27 14:11:04 | 000,000,000 | ---D | C] -- J:\ProgramData\Package Cache [2013-06-27 14:10:53 | 000,000,000 | ---D | C] -- J:\Program Files\ATI [2013-06-27 14:10:11 | 000,000,000 | ---D | C] -- J:\Program Files\ATI Technologies [2013-06-27 14:05:05 | 000,000,000 | ---D | C] -- J:\Windows\System32\RTCOM [2013-06-27 14:04:55 | 001,783,056 | ---- | C] (Waves Audio Ltd.) -- J:\Windows\System32\WavesLib.dll [2013-06-27 14:04:55 | 000,345,328 | ---- | C] (SRS Labs, Inc.) -- J:\Windows\System32\SRSTSXT.dll [2013-06-27 14:04:55 | 000,185,584 | ---- | C] (SRS Labs, Inc.) -- J:\Windows\System32\SRSTSHD.dll [2013-06-27 14:04:55 | 000,173,296 | ---- | C] (SRS Labs, Inc.) -- J:\Windows\System32\SRSHP360.dll [2013-06-27 14:04:55 | 000,140,528 | ---- | C] (SRS Labs, Inc.) -- J:\Windows\System32\SRSWOW.dll [2013-06-27 14:04:50 | 001,931,032 | ---- | C] (Waves Audio Ltd.) -- J:\Windows\System32\MaxxAudioEQ.dll [2013-06-27 14:04:50 | 000,776,984 | ---- | C] (Waves Audio Ltd.) -- J:\Windows\System32\MaxxAudioAPOShell.dll [2013-06-27 14:04:50 | 000,359,768 | ---- | C] (Dolby Laboratories, Inc.) -- J:\Windows\System32\RTEEP32A.dll [2013-06-27 14:04:50 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- J:\Windows\System32\RP3DHT32.dll [2013-06-27 14:04:50 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- J:\Windows\System32\RP3DAA32.dll [2013-06-27 14:04:50 | 000,232,792 | ---- | C] (Waves Audio Ltd.) -- J:\Windows\System32\MaxxAudioAPO20.dll [2013-06-27 14:04:50 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- J:\Windows\System32\RTEED32A.dll [2013-06-27 14:04:50 | 000,132,368 | ---- | C] (Waves Audio Ltd.) -- J:\Windows\System32\MaxxAudioAPO.dll [2013-06-27 14:04:50 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- J:\Windows\System32\RTEEL32A.dll [2013-06-27 14:04:50 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- J:\Windows\System32\RTEEG32A.dll [2013-06-27 14:04:49 | 002,386,464 | ---- | C] (Fortemedia Corporation) -- J:\Windows\System32\FMAPO.dll [2013-06-27 14:04:48 | 000,090,624 | ---- | C] (Real Sound Lab SIA) -- J:\Windows\System32\CONEQMSAPOGUILibrary.dll [2013-06-27 14:04:48 | 000,000,000 | -H-D | C] -- J:\Program Files\InstallShield Installation Information [2013-06-27 14:04:48 | 000,000,000 | ---D | C] -- J:\Program Files\Realtek [2013-06-27 14:04:38 | 000,000,000 | -H-D | C] -- J:\Program Files\Temp [2013-06-27 14:04:36 | 000,000,000 | ---D | C] -- J:\Program Files\Common Files\InstallShield [2013-06-27 14:04:16 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\0D1F1S1C1P0P1C1F1N1C1T1H2UtF1E1I [2013-06-27 13:57:53 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Skype [2013-06-27 13:57:51 | 000,000,000 | ---D | C] -- J:\Windows\System32\searchplugins [2013-06-27 13:57:51 | 000,000,000 | ---D | C] -- J:\Windows\System32\Extensions [2013-06-27 13:57:50 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender [2013-06-27 13:57:48 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013-06-27 13:57:48 | 000,000,000 | ---D | C] -- J:\Program Files\Common Files\Skype [2013-06-27 13:57:47 | 000,000,000 | R--D | C] -- J:\Program Files\Skype [2013-06-27 13:57:47 | 000,000,000 | ---D | C] -- J:\ProgramData\BrowserDefender [2013-06-27 13:57:45 | 000,000,000 | ---D | C] -- J:\ProgramData\Skype [2013-06-27 13:57:37 | 000,000,000 | ---D | C] -- J:\Program Files\Mozilla Firefox [2013-06-27 13:57:11 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Babylon [2013-06-27 13:57:11 | 000,000,000 | ---D | C] -- J:\ProgramData\Babylon [2013-06-27 13:56:00 | 000,000,000 | -HSD | C] -- J:\Windows\Installer [2013-06-27 13:52:21 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2013-06-27 13:51:22 | 000,000,000 | ---D | C] -- J:\Program Files\Google [2013-06-27 13:51:21 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\Google [2013-06-27 13:51:15 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\Deployment [2013-06-27 13:51:15 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\Apps [2013-06-27 13:49:10 | 000,000,000 | R--D | C] -- J:\Users\Zacny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2013-06-27 13:49:10 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Searches [2013-06-27 13:49:10 | 000,000,000 | R--D | C] -- J:\Users\Zacny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2013-06-27 13:49:03 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Identities [2013-06-27 13:49:02 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Contacts [2013-06-27 13:48:57 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\VirtualStore [2013-06-27 13:48:56 | 000,000,000 | --SD | C] -- J:\Users\Zacny\AppData\Roaming\Microsoft [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Videos [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Saved Games [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Pictures [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Music [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Links [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Favorites [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Downloads [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Documents [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\Desktop [2013-06-27 13:48:56 | 000,000,000 | R--D | C] -- J:\Users\Zacny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Ustawienia lokalne [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\AppData\Local\Temporary Internet Files [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Szablony [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\SendTo [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Recent [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\PrintHood [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\NetHood [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Documents\Moje wideo [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Documents\Moje obrazy [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Moje dokumenty [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Documents\Moja muzyka [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Menu Start [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\AppData\Local\Historia [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Dane aplikacji [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\AppData\Local\Dane aplikacji [2013-06-27 13:48:56 | 000,000,000 | -HSD | C] -- J:\Users\Zacny\Cookies [2013-06-27 13:48:56 | 000,000,000 | -H-D | C] -- J:\Users\Zacny\AppData [2013-06-27 13:48:56 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\Temp [2013-06-27 13:48:56 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Local\Microsoft [2013-06-27 13:48:56 | 000,000,000 | ---D | C] -- J:\Users\Zacny\AppData\Roaming\Media Center Programs [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\ProgramData\Ulubione [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\ProgramData\Szablony [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\Recovery [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\ProgramData\Pulpit [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\Users\Public\Documents\Moje wideo [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\Users\Public\Documents\Moje obrazy [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\Users\Public\Documents\Moja muzyka [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\ProgramData\Menu Start [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\ProgramData\Dokumenty [2013-06-27 13:48:44 | 000,000,000 | -HSD | C] -- J:\ProgramData\Dane aplikacji [2013-06-27 13:37:12 | 000,000,000 | ---D | C] -- J:\Windows\SoftwareDistribution [2013-06-27 13:34:37 | 000,000,000 | ---D | C] -- J:\Windows\Prefetch [2013-06-05 00:46:26 | 000,057,344 | ---- | C] (Khronos Group) -- J:\Windows\System32\OpenCL.dll [2013-06-05 00:24:56 | 000,106,496 | ---- | C] (AMD) -- J:\Windows\System32\coinst_13.101.dll [2013-06-05 00:03:16 | 000,025,600 | ---- | C] (AMD) -- J:\Windows\System32\atimuixx.dll [2013-06-05 00:02:48 | 000,492,032 | ---- | C] (AMD) -- J:\Windows\System32\atieclxx.exe [2013-06-05 00:02:10 | 000,219,136 | ---- | C] (AMD) -- J:\Windows\System32\atiesrxx.exe [2013-06-05 00:00:46 | 000,163,840 | ---- | C] (AMD) -- J:\Windows\System32\atitmmxx.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-06-29 20:56:02 | 000,001,034 | ---- | M] () -- J:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-06-29 19:38:59 | 000,069,624 | ---- | M] () -- J:\Users\Zacny\Desktop\Magdalena_Wrednaa.jpg [2013-06-29 16:11:05 | 002,042,051 | ---- | M] () -- J:\Users\Zacny\Desktop\QeB2M.gif [2013-06-29 16:09:45 | 000,244,584 | ---- | M] () -- J:\Users\Zacny\Desktop\236.jpg [2013-06-29 14:12:41 | 000,059,098 | ---- | M] () -- J:\Users\Zacny\Desktop\b3dd6e07c462b6ac3451c4f88c8261ed_original.jpg [2013-06-29 13:56:05 | 000,001,030 | ---- | M] () -- J:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-06-29 13:06:31 | 001,447,763 | ---- | M] () -- J:\Users\Zacny\Desktop\ab55K1E_460sa.gif [2013-06-29 13:06:26 | 000,091,216 | ---- | M] () -- J:\Users\Zacny\Desktop\Overly_Attached_girlfriend_Justin_Bieber_Boyfriend_Parody.jpg [2013-06-29 11:23:40 | 000,016,944 | -H-- | M] () -- J:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-06-29 11:23:40 | 000,016,944 | -H-- | M] () -- J:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-06-29 11:23:03 | 000,737,730 | ---- | M] () -- J:\Windows\System32\perfh015.dat [2013-06-29 11:23:03 | 000,651,938 | ---- | M] () -- J:\Windows\System32\perfh009.dat [2013-06-29 11:23:03 | 000,154,418 | ---- | M] () -- J:\Windows\System32\perfc015.dat [2013-06-29 11:23:03 | 000,120,870 | ---- | M] () -- J:\Windows\System32\perfc009.dat [2013-06-29 11:17:29 | 000,267,880 | ---- | M] () -- J:\Windows\System32\FNTCACHE.DAT [2013-06-29 11:17:21 | 000,067,584 | --S- | M] () -- J:\Windows\bootstat.dat [2013-06-29 11:17:07 | 1609,424,896 | -HS- | M] () -- J:\hiberfil.sys [2013-06-29 00:05:39 | 000,029,946 | ---- | M] () -- J:\Users\Zacny\Desktop\PicsArt_1370872768457.jpg [2013-06-28 21:56:49 | 000,157,596 | ---- | M] () -- J:\Users\Zacny\Desktop\PicsArt_1372424514345.jpg [2013-06-27 18:35:44 | 000,000,550 | ---- | M] () -- J:\Users\Public\Desktop\Last.fm Scrobbler.lnk [2013-06-27 18:13:34 | 000,072,822 | ---- | M] () -- J:\Windows\System32\ieuinit.inf [2013-06-27 17:23:54 | 000,399,127 | RHS- | M] () -- J:\GUHCJ [2013-06-27 17:23:54 | 000,000,020 | RHS- | M] () -- J:\win7.ld [2013-06-27 14:33:19 | 000,008,192 | RHS- | M] () -- J:\BOOTSECT.BAK [2013-06-27 14:24:56 | 000,001,467 | ---- | M] () -- J:\Users\Public\Desktop\Play League of Legends.lnk [2013-06-27 14:14:21 | 000,000,000 | ---- | M] () -- J:\Windows\ativpsrm.bin [2013-06-27 13:57:48 | 000,002,505 | ---- | M] () -- J:\Users\Public\Desktop\Skype.lnk [2013-06-27 13:52:21 | 000,002,201 | ---- | M] () -- J:\Users\Public\Desktop\Google Chrome.lnk [2013-06-27 13:39:01 | 000,066,034 | ---- | M] () -- J:\Windows\System32\license.rtf [2013-06-05 00:51:14 | 000,200,704 | ---- | M] () -- J:\Windows\System32\clinfo.exe [2013-06-05 00:51:06 | 000,995,342 | ---- | M] () -- J:\Windows\System32\amdocl_as32.exe [2013-06-05 00:51:06 | 000,798,734 | ---- | M] () -- J:\Windows\System32\amdocl_ld32.exe [2013-06-05 00:46:26 | 000,057,344 | ---- | M] (Khronos Group) -- J:\Windows\System32\OpenCL.dll [2013-06-05 00:29:52 | 000,527,600 | ---- | M] () -- J:\Windows\System32\atiapfxx.blb [2013-06-05 00:24:56 | 000,106,496 | ---- | M] (AMD) -- J:\Windows\System32\coinst_13.101.dll [2013-06-05 00:03:16 | 000,025,600 | ---- | M] (AMD) -- J:\Windows\System32\atimuixx.dll [2013-06-05 00:02:48 | 000,492,032 | ---- | M] (AMD) -- J:\Windows\System32\atieclxx.exe [2013-06-05 00:02:10 | 000,219,136 | ---- | M] (AMD) -- J:\Windows\System32\atiesrxx.exe [2013-06-05 00:00:46 | 000,163,840 | ---- | M] (AMD) -- J:\Windows\System32\atitmmxx.dll [2013-06-04 23:49:02 | 000,157,144 | ---- | M] () -- J:\Windows\System32\ativvsva.dat [2013-06-04 23:49:00 | 003,421,200 | ---- | M] () -- J:\Windows\System32\atiumdva.cap [2013-06-04 23:49:00 | 000,204,952 | ---- | M] () -- J:\Windows\System32\ativvsvl.dat [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-06-29 19:38:55 | 000,069,624 | ---- | C] () -- J:\Users\Zacny\Desktop\Magdalena_Wrednaa.jpg [2013-06-29 16:11:05 | 002,042,051 | ---- | C] () -- J:\Users\Zacny\Desktop\QeB2M.gif [2013-06-29 16:09:44 | 000,244,584 | ---- | C] () -- J:\Users\Zacny\Desktop\236.jpg [2013-06-29 14:12:40 | 000,059,098 | ---- | C] () -- J:\Users\Zacny\Desktop\b3dd6e07c462b6ac3451c4f88c8261ed_original.jpg [2013-06-29 13:06:31 | 001,447,763 | ---- | C] () -- J:\Users\Zacny\Desktop\ab55K1E_460sa.gif [2013-06-29 13:06:02 | 000,091,216 | ---- | C] () -- J:\Users\Zacny\Desktop\Overly_Attached_girlfriend_Justin_Bieber_Boyfriend_Parody.jpg [2013-06-29 00:05:34 | 000,029,946 | ---- | C] () -- J:\Users\Zacny\Desktop\PicsArt_1370872768457.jpg [2013-06-28 21:56:42 | 000,157,596 | ---- | C] () -- J:\Users\Zacny\Desktop\PicsArt_1372424514345.jpg [2013-06-28 15:35:17 | 000,080,896 | ---- | C] () -- J:\Windows\System32\RDVGHelper.exe [2013-06-28 15:35:01 | 000,146,852 | ---- | C] () -- J:\Windows\System32\systemsf.ebd [2013-06-28 15:33:16 | 000,066,048 | ---- | C] () -- J:\Windows\System32\PrintBrmUi.exe [2013-06-28 15:33:12 | 000,010,429 | ---- | C] () -- J:\Windows\System32\ScavengeSpace.xml [2013-06-28 15:33:00 | 000,105,559 | ---- | C] () -- J:\Windows\System32\RacRules.xml [2013-06-27 18:35:44 | 000,000,550 | ---- | C] () -- J:\Users\Public\Desktop\Last.fm Scrobbler.lnk [2013-06-27 18:16:08 | 000,000,003 | ---- | C] () -- J:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf [2013-06-27 18:15:26 | 000,000,003 | ---- | C] () -- J:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf [2013-06-27 18:13:34 | 000,072,822 | ---- | C] () -- J:\Windows\System32\ieuinit.inf [2013-06-27 17:23:54 | 000,399,127 | RHS- | C] () -- J:\GUHCJ [2013-06-27 14:24:56 | 000,001,467 | ---- | C] () -- J:\Users\Public\Desktop\Play League of Legends.lnk [2013-06-27 14:14:21 | 000,000,000 | ---- | C] () -- J:\Windows\ativpsrm.bin [2013-06-27 14:04:50 | 000,449,481 | ---- | C] () -- J:\Windows\System32\drivers\RTAIODAT.DAT [2013-06-27 13:57:48 | 000,002,505 | ---- | C] () -- J:\Users\Public\Desktop\Skype.lnk [2013-06-27 13:52:21 | 000,002,201 | ---- | C] () -- J:\Users\Public\Desktop\Google Chrome.lnk [2013-06-27 13:51:25 | 000,001,034 | ---- | C] () -- J:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-06-27 13:51:24 | 000,001,030 | ---- | C] () -- J:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-06-27 13:49:12 | 000,001,421 | ---- | C] () -- J:\Users\Zacny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2013-06-27 13:38:39 | 000,001,345 | ---- | C] () -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2013-06-27 13:38:31 | 000,001,326 | ---- | C] () -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2013-06-27 13:34:22 | 1609,424,896 | -HS- | C] () -- J:\hiberfil.sys [2013-06-05 00:51:14 | 000,200,704 | ---- | C] () -- J:\Windows\System32\clinfo.exe [2013-06-05 00:51:06 | 000,995,342 | ---- | C] () -- J:\Windows\System32\amdocl_as32.exe [2013-06-05 00:51:06 | 000,798,734 | ---- | C] () -- J:\Windows\System32\amdocl_ld32.exe [2013-06-05 00:29:52 | 000,527,600 | ---- | C] () -- J:\Windows\System32\atiapfxx.blb [2013-06-04 23:49:02 | 000,157,144 | ---- | C] () -- J:\Windows\System32\ativvsva.dat [2013-06-04 23:49:00 | 003,421,200 | ---- | C] () -- J:\Windows\System32\atiumdva.cap [2013-06-04 23:49:00 | 000,204,952 | ---- | C] () -- J:\Windows\System32\ativvsvl.dat [2013-04-05 00:31:46 | 000,078,928 | ---- | C] () -- J:\Windows\System32\ativce02.dat [2013-03-13 21:27:04 | 000,232,372 | ---- | C] () -- J:\Windows\System32\ativvaxy_cik.dat [2013-02-28 00:32:30 | 000,230,192 | ---- | C] () -- J:\Windows\System32\ativvaxy_cik_nd.dat [2012-10-12 21:57:38 | 000,662,785 | ---- | C] () -- J:\Windows\System32\atiicdxx.dat [2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- J:\Windows\System32\atipblag.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- J:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-06-27 14:04:16 | 000,000,000 | ---D | M] -- J:\Users\Zacny\AppData\Roaming\0D1F1S1C1P0P1C1F1N1C1T1H2UtF1E1I [2013-06-27 13:57:11 | 000,000,000 | ---D | M] -- J:\Users\Zacny\AppData\Roaming\Babylon [2013-06-27 16:09:14 | 000,000,000 | ---D | M] -- J:\Users\Zacny\AppData\Roaming\LolClient [2013-06-27 14:26:26 | 000,000,000 | ---D | M] -- J:\Users\Zacny\AppData\Roaming\Riot Games [color=#E56717]========== Purity Check ==========[/color] < End of report >