OTL logfile created on: 2013-12-14 14:32:57 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = D:\Download\Programs
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 50,37% Memory free
11,90 Gb Paging File | 8,73 Gb Available in Paging File | 73,34% Paging File free
Paging file location(s): c:\pagefile.sys 0 0d:\pagefile.sys 4000 8000 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,21 Gb Total Space | 142,31 Gb Free Space | 72,90% Space Free | Partition Type: NTFS
Drive D: | 400,86 Gb Total Space | 57,56 Gb Free Space | 14,36% Space Free | Partition Type: NTFS
Drive E: | 262,20 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: PC-KOMPUTER | User Name: PC | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-12-14 14:29:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Download\Programs\OTL.exe
PRC - [2013-11-28 04:22:49 | 006,677,536 | ---- | M] () -- C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe
PRC - [2013-11-26 19:18:42 | 001,484,624 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Game Booster\main.exe
PRC - [2013-11-22 12:36:18 | 000,105,448 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
PRC - [2013-11-11 22:02:14 | 003,478,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
PRC - [2013-11-07 22:03:50 | 004,956,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe
PRC - [2013-11-07 13:14:01 | 043,493,216 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera Next\18.0.1284.26\opera.exe
PRC - [2013-10-20 17:19:30 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013-09-24 01:33:08 | 000,348,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
PRC - [2013-08-26 03:13:08 | 000,009,216 | ---- | M] (Ellora Assets Corp.) -- C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
PRC - [2013-04-04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- D:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013-04-04 13:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- D:\Programy\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013-04-04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- D:\Programy\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013-01-23 07:12:40 | 000,425,016 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
PRC - [2012-04-03 19:45:36 | 002,121,216 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
PRC - [2007-09-02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
PRC - [2007-06-27 18:04:00 | 001,213,736 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2007-06-27 18:03:40 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-11-28 04:22:55 | 000,052,608 | ---- | M] () -- C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.dll
MOD - [2013-11-12 09:57:10 | 000,098,304 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Game Booster\EasyHook32.dll
MOD - [2013-11-07 13:14:04 | 000,886,624 | ---- | M] () -- C:\Program Files (x86)\Opera Next\18.0.1284.26\libglesv2.dll
MOD - [2013-11-07 13:14:04 | 000,108,896 | ---- | M] () -- C:\Program Files (x86)\Opera Next\18.0.1284.26\libegl.dll
MOD - [2013-11-07 13:14:03 | 000,879,968 | ---- | M] () -- C:\Program Files (x86)\Opera Next\18.0.1284.26\ffmpegsumo.dll
MOD - [2013-10-11 14:22:22 | 003,191,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.28b9ef5a#\3a13993425764c96b2686f8205e34f4e\System.Web.Extensions.ni.dll
MOD - [2013-10-11 14:22:02 | 000,397,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\72843576b9bfad66be46d6eb445b76fa\System.Xml.Linq.ni.dll
MOD - [2013-10-11 00:20:26 | 013,320,192 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\51c959815de499d10456ec684abf02bf\System.Web.ni.dll
MOD - [2013-10-11 00:20:21 | 000,786,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\5b44a8db5b70143f27fb695b5f72930d\System.Runtime.Remoting.ni.dll
MOD - [2013-10-11 00:20:17 | 012,698,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c5db04fde4893300ff28045ce4f7567d\System.Windows.Forms.ni.dll
MOD - [2013-10-11 00:20:16 | 003,910,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\18e76c3868d682a7c065bccd142eeec1\WindowsBase.ni.dll
MOD - [2013-10-11 00:20:15 | 006,998,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\d913e7d0b1d32187e0c234f8a1a581fc\System.Core.ni.dll
MOD - [2013-10-11 00:20:15 | 002,786,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\be5f0f2e208bbb3c647acfbc33434251\System.Runtime.Serialization.ni.dll
MOD - [2013-10-11 00:20:13 | 000,964,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\edb27e2c25837f79902054965d6813cd\System.Configuration.ni.dll
MOD - [2013-10-09 16:45:01 | 016,233,864 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
MOD - [2013-09-25 02:37:29 | 000,189,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\f16e993b7058b005bbf273007fadf95b\UIAutomationTypes.ni.dll
MOD - [2013-09-25 02:37:26 | 000,018,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio49d6fefe#\d187afdee972b70222b76bd6aed1f742\PresentationFramework-SystemXml.ni.dll
MOD - [2013-09-25 02:37:26 | 000,013,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio4b37ff64#\9010845c58c17f145b3e39c2d28c4869\PresentationFramework-SystemXmlLinq.ni.dll
MOD - [2013-09-24 17:38:33 | 001,920,512 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\2e7b344eb30202c336687f3230940cb2\Microsoft.VisualBasic.ni.dll
MOD - [2013-09-24 17:38:33 | 001,631,744 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\cceaf9d7891fc325a90473aa9a661661\System.Drawing.ni.dll
MOD - [2013-09-24 17:38:04 | 018,545,152 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\775d60de39c6f0b49f1640c4e6c8de09\PresentationFramework.ni.dll
MOD - [2013-09-24 17:37:54 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\72227d58a04b80252053352dead3b9a3\System.ServiceModel.Internals.ni.dll
MOD - [2013-09-24 17:37:54 | 000,121,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\176ea254700896ee68956986b947ea9b\SMDiagnostics.ni.dll
MOD - [2013-09-24 17:37:53 | 010,926,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\8e3d6080e8eaaaf28389f3742ff9acdd\PresentationCore.ni.dll
MOD - [2013-09-24 17:37:52 | 007,566,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\82d58d49946f82eb56bae40f3b097784\System.Xml.ni.dll
MOD - [2013-09-24 17:37:47 | 001,880,576 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\f4fff5d6e716c439b944025d3994170d\System.Xaml.ni.dll
MOD - [2013-09-24 17:37:45 | 000,462,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\7dd4cd3e4768d2aa55af60c838790088\PresentationFramework.Aero.ni.dll
MOD - [2013-09-24 17:37:44 | 009,937,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ac79b74f022d9a096de2b884f4249543\System.ni.dll
MOD - [2013-09-24 17:36:32 | 001,156,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\20a513f26ee88412303b36dc8c8f7533\System.Management.ni.dll
MOD - [2013-09-24 17:36:24 | 000,389,632 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\3fd353d6d6c1c4a0a76efe390265f128\System.Dynamic.ni.dll
MOD - [2013-09-24 17:36:23 | 001,614,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\65c71372e0cecdd46e984739a283f98c\Microsoft.CSharp.ni.dll
MOD - [2013-09-24 17:36:13 | 016,547,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\bf2ecabcd96ec8238dc385b0a3ffa084\mscorlib.ni.dll
MOD - [2013-08-07 20:25:24 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2013-01-23 07:12:40 | 000,425,016 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
MOD - [2013-01-16 17:01:08 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
MOD - [2013-01-16 17:01:06 | 000,348,160 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
MOD - [2013-01-16 17:01:00 | 000,229,376 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTCore.dll
MOD - [2013-01-16 17:00:58 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTUI.dll
MOD - [2013-01-16 17:00:56 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTFC.dll
MOD - [2012-11-20 16:13:44 | 000,264,192 | ---- | M] () -- C:\Program Files (x86)\Razer\Razer Game Booster\D3DX8Wrapper.dll
MOD - [2012-11-19 08:33:34 | 000,065,656 | ---- | M] () -- C:\Windows\SysWOW64\bdmpega.acm
MOD - [2012-04-03 19:45:36 | 002,121,216 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
MOD - [2012-02-02 18:26:52 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\screenSHU\libgcc_s_dw2-1.dll
MOD - [2012-02-02 18:26:52 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\screenSHU\mingwm10.dll
MOD - [2011-04-30 20:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTTSH.dll
MOD - [2007-09-02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007-09-02 12:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2013-11-26 10:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2013-08-30 23:57:54 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2013-08-30 18:46:48 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2011-05-31 08:42:06 | 000,210,024 | ---- | M] (DTS) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe -- (DTSAudioService)
SRV - [2013-11-29 16:20:42 | 002,210,640 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013-11-28 04:22:49 | 006,677,536 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe -- (Guard.Mail.ru)
SRV - [2013-11-22 12:36:18 | 000,105,448 | ---- | M] (Razer Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe -- (RzKLService)
SRV - [2013-11-11 22:02:14 | 003,478,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2013-11-07 00:14:25 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-10-30 20:25:56 | 000,566,696 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-10-25 13:33:56 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Paused] -- D:\Games\Smite\HiPatchService.exe -- (HiPatchService)
SRV - [2013-10-20 17:19:30 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-10-11 11:51:18 | 000,377,104 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013-10-09 16:45:01 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-09-24 01:33:08 | 000,348,008 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd)
SRV - [2013-09-05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-08-26 03:13:08 | 000,009,216 | ---- | M] (Ellora Assets Corp.) [Auto | Running] -- C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe -- (FreemakeVideoCapture)
SRV - [2013-07-03 11:36:38 | 000,049,152 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService)
SRV - [2013-04-04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Programy\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013-04-04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Programy\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2012-07-08 23:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2013-11-05 21:55:48 | 000,150,808 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
DRV:[b]64bit:[/b] - [2013-11-04 21:52:42 | 000,240,920 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:[b]64bit:[/b] - [2013-10-31 23:00:18 | 000,212,280 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:[b]64bit:[/b] - [2013-10-31 22:49:46 | 000,294,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
DRV:[b]64bit:[/b] - [2013-10-24 22:25:58 | 000,194,872 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
DRV:[b]64bit:[/b] - [2013-10-03 19:50:42 | 000,164,864 | ---- | M] (ITE                      ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IT9135BDA.sys -- (IT9135BDA)
DRV:[b]64bit:[/b] - [2013-10-01 00:52:08 | 000,123,704 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:[b]64bit:[/b] - [2013-09-17 21:33:40 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)
DRV:[b]64bit:[/b] - [2013-09-10 00:43:02 | 000,031,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:[b]64bit:[/b] - [2013-08-31 01:11:28 | 012,528,640 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2013-08-30 23:32:32 | 000,618,496 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2013-08-29 02:00:24 | 000,294,248 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VMM.sys -- (vmm)
DRV:[b]64bit:[/b] - [2013-08-01 15:07:06 | 000,251,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:[b]64bit:[/b] - [2013-07-05 09:40:38 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2013-07-04 14:57:00 | 000,131,856 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2013-04-28 11:05:48 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:[b]64bit:[/b] - [2013-04-28 11:05:48 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2013-04-04 13:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2013-02-12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2012-11-22 00:43:14 | 000,165,112 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:[b]64bit:[/b] - [2012-11-20 12:55:42 | 000,057,512 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
DRV:[b]64bit:[/b] - [2012-11-20 12:55:42 | 000,057,512 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV:[b]64bit:[/b] - [2012-07-09 08:21:32 | 000,646,248 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-11-25 00:25:52 | 000,015,360 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pneteth.sys -- (pneteth)
DRV:[b]64bit:[/b] - [2011-08-17 09:04:34 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:[b]64bit:[/b] - [2011-08-17 09:04:28 | 000,012,800 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsucx64.sys -- (nmwcdnsucx64)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-02-18 08:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:[b]64bit:[/b] - [2009-11-20 12:16:02 | 000,177,152 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:[b]64bit:[/b] - [2009-11-20 12:15:58 | 000,075,776 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:[b]64bit:[/b] - [2009-09-19 05:30:14 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV:[b]64bit:[/b] - [2009-09-19 05:30:14 | 000,128,000 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bserd.sys -- (ss_bserd)
DRV:[b]64bit:[/b] - [2009-09-19 05:30:14 | 000,127,488 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bbus.sys -- (ss_bbus)
DRV:[b]64bit:[/b] - [2009-09-19 05:30:14 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bmdfl.sys -- (ss_bmdfl)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2008-02-05 00:50:42 | 000,079,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMNetSrv.sys -- (VPCNetS2)
DRV:[b]64bit:[/b] - [2005-03-29 00:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2013-01-23 07:12:38 | 000,013,368 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\MSI Afterburner\RTCore64.sys -- (RTCore64)
DRV - [2010-12-21 09:56:12 | 000,196,416 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\iaabc.sys -- (iaabc)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007-11-07 10:42:28 | 000,104,912 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mail.ru/cnt/9134
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9E DB C2 1F 5E DE CE 01  [binary data]
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\..\URLSearchHook: {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\..\SearchScopes,DefaultScope = {E88E0043-C9D4-4e33-8555-FEE4F5B63060}
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\..\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}: "URL" = http://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
IE - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: "Поиск@Mail.Ru"
FF - prefs.js..browser.startup.homepage: "http://www.mail.ru/cnt/5087"
FF - prefs.js..extensions.enabledAddons: SQLiteManager%40mrinalkant.blogspot.com:0.8.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0
FF - prefs.js..keyword.URL: "http://go.mail.ru/search?fr=fftb&q="
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.3.0: C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\PC\AppData\Roaming\IDM\idmmzcc5 [2013-06-03 15:44:01 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 24.2.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\PC\AppData\Roaming\IDM\idmmzcc5 [2013-06-03 15:44:01 | 000,000,000 | ---D | M]
 
[2013-06-16 00:35:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Extensions
[2013-11-28 02:11:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\kh8fgkhr.default\extensions
[2013-11-28 02:11:29 | 000,000,000 | ---D | M] (Спутник @Mail.Ru) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\kh8fgkhr.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
[2013-07-04 08:41:49 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\kh8fgkhr.default\extensions\battlefieldplay4free@ea.com
[2013-09-11 13:00:10 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\kh8fgkhr.default\extensions\IplextoALL@ALLPlayer.org.xpi
[2013-10-22 18:26:43 | 000,248,650 | ---- | M] () (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\kh8fgkhr.default\extensions\SQLiteManager@mrinalkant.blogspot.com.xpi
[2013-11-07 00:14:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013-11-07 00:14:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013-11-07 00:14:25 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://search.conduit.com/?ctid=CT1561552&octid=CT1561552&SearchSource=61&CUI=UN30563353711977113&UM=2&UP=SPB00B2970-DB86-4FF3-B253-12F2F70304DA
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll
CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll
CHR - Extension: Dokumenty Google = C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Dysk Google = C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Szukaj w Google = C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Wallet = C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\
CHR - Extension: Gmail = C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (MailRuBHO Class) - {8984B388-A5BB-4DF7-B274-77B879E179DB} - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)
O3 - HKLM\..\Toolbar: (Спутник@Mail.Ru) - {09900DE8-1DCA-443F-9243-26FF581438AF} - C:\Program Files (x86)\Mail.Ru\Sputnik\MailRuSputnik.dll (@Mail.Ru)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_DTS] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [RazerGameBooster] C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe (Razer Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000..\Run: [DrvUpdater] C:\Users\PC\AppData\Roaming\DRPSu\DrvUpdater.exe ()
O4 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3
O7 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-2413802235-505312651-3919194102-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{866E98EF-7408-4A9B-9795-71FD3F66A116}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2000-12-20 18:15:52 | 000,448,512 | R--- | M] () - E:\autorun.exe -- [ CDFS ]
O32 - AutoRun File - [2000-11-07 08:37:50 | 000,000,062 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{28cc17ed-1589-11e3-a5f6-20cf30c09249}\Shell - "" = AutoRun
O33 - MountPoints2\{28cc17ed-1589-11e3-a5f6-20cf30c09249}\Shell\AutoRun\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{4c1b5928-c94f-11e2-bd83-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4c1b5928-c94f-11e2-bd83-806e6f6e6963}\Shell\AutoRun\command - "" = E:\SETUP.EXE
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AUTORUN.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-12-12 23:34:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2013-12-11 16:51:27 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2013-12-11 16:51:26 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2013-12-11 16:51:26 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2013-12-11 16:51:25 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2013-12-11 16:50:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2013-12-11 16:50:04 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013-12-11 16:50:04 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013-12-11 16:50:04 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013-12-11 16:50:04 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013-12-11 16:50:04 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2013-12-11 16:50:04 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013-12-11 16:50:04 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2013-12-11 16:50:04 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013-12-11 16:50:03 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013-12-11 16:50:03 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2013-12-11 16:50:03 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013-12-11 16:50:03 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2013-12-11 16:50:02 | 001,995,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013-12-11 16:50:02 | 001,928,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013-12-11 16:50:00 | 005,769,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013-12-11 16:22:30 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2013-12-11 16:22:30 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2013-12-11 16:21:35 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013-12-11 16:21:35 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013-12-11 16:21:06 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2013-12-11 16:20:11 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
[2013-12-11 16:20:11 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys
[2013-12-11 16:19:45 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
[2013-12-11 16:19:45 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
[2013-12-11 16:19:45 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
[2013-12-11 16:19:45 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx
[2013-12-11 16:19:44 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
[2013-12-11 16:19:44 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
[2013-12-10 05:01:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
[2013-12-10 05:01:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BandiMPEG1
[2013-12-06 02:00:14 | 000,000,000 | ---D | C] -- C:\temp
[2013-12-06 01:46:27 | 000,000,000 | ---D | C] -- C:\Users\PC\Documents\Ghost Games
[2013-12-06 00:47:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O22y Inc
[2013-12-06 00:29:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\O22y Inc
[2013-12-05 03:14:00 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Arktos Entertainment
[2013-12-03 22:26:25 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Razer_Inc
[2013-12-03 22:26:23 | 000,000,000 | ---D | C] -- C:\Users\PC\Documents\Razer
[2013-12-03 22:25:06 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Razer
[2013-12-03 22:24:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
[2013-12-03 22:24:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Razer
[2013-12-03 22:24:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Razer
[2013-12-03 20:33:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
[2013-12-03 20:29:49 | 000,000,000 | ---D | C] -- C:\xampp
[2013-12-03 19:09:52 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2013-12-03 19:09:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2013-12-03 19:09:49 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Notepad++
[2013-12-03 19:09:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++
[2013-12-03 18:41:12 | 000,000,000 | ---D | C] -- C:\Users\PC\Desktop\phising
[2013-12-02 23:04:36 | 000,000,000 | ---D | C] -- C:\Users\PC\Desktop\[cheat-project.com] WinJect 1.7 2009-05-02
[2013-12-02 21:11:46 | 000,000,000 | R--D | C] -- C:\Users\PC\Dropbox
[2013-12-02 21:10:39 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2013-12-02 21:09:56 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Dropbox
[2013-12-02 21:05:36 | 035,334,016 | ---- | C] (Dropbox, Inc.) -- C:\Users\PC\Documents\Dropbox 2.4.7.exe
[2013-12-02 19:08:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
[2013-12-02 19:08:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HD Tune
[2013-12-02 19:07:32 | 000,642,632 | ---- | C] (EFD Software                                                ) -- C:\Users\PC\Documents\hdtune_255.exe
[2013-11-28 09:07:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alex Feinman
[2013-11-28 04:22:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Guard.Mail.Ru
[2013-11-28 02:12:02 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\DRPSu
[2013-11-28 02:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2013-11-28 02:11:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mail.Ru
[2013-11-28 02:11:27 | 000,177,152 | ---- | C] (NEC Electronics Corporation) -- C:\Windows\SysNative\drivers\nusb3xhc.sys
[2013-11-28 02:11:27 | 000,075,776 | ---- | C] (NEC Electronics Corporation) -- C:\Windows\SysNative\drivers\nusb3hub.sys
[2013-11-28 01:05:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverPack Solution Lite
[2013-11-28 01:05:10 | 000,000,000 | ---D | C] -- C:\Program Files\DriverPack Solution Lite 13
[2013-11-27 21:48:29 | 000,000,000 | ---D | C] -- C:\Users\PC\Documents\Assassin's Creed IV Black Flag
[2013-11-27 20:04:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RiP by Fenixx
[2013-11-26 15:57:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
[2013-11-23 18:57:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013-11-23 18:57:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
[2013-11-19 03:18:45 | 000,000,000 | ---D | C] -- C:\Users\PC\.android
[2013-11-19 02:58:46 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flashtool
[2013-11-17 16:58:34 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Awesomium
[2013-11-17 16:57:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
[2013-11-17 16:57:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Hi-Rez Studios
[2013-11-17 04:18:27 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\BANDISOFT
[2013-11-17 04:18:22 | 000,000,000 | ---D | C] -- C:\Users\PC\Documents\Bandicam
[2013-11-17 02:21:49 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Mirillis
[2013-11-17 02:21:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis
[2013-11-17 02:21:46 | 000,000,000 | ---D | C] -- C:\Users\PC\Documents\Action!
[2013-11-17 02:21:44 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Mirillis
[2013-11-17 01:27:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
[2013-11-15 20:22:56 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\gedit
[2013-11-15 15:49:24 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\gtk-2.0
[2013-11-15 15:48:19 | 000,000,000 | ---D | C] -- C:\Users\PC\.gconfd
[2013-11-15 15:48:18 | 000,000,000 | ---D | C] -- C:\Users\PC\.gconf
[2013-11-15 15:48:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gedit
[2013-11-15 15:47:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\gedit
[2013-11-14 16:45:30 | 001,474,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013-11-14 16:45:25 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2013-11-14 16:45:25 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2013-11-14 16:45:25 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2013-11-14 16:45:25 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2013-11-14 16:45:25 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2013-11-14 16:45:19 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2013-11-14 16:45:19 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2013-11-14 16:45:19 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2013-11-14 16:45:19 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2013-11-14 16:45:19 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2013-11-14 16:45:17 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll
[2013-11-14 16:45:17 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2013-11-14 16:45:17 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2013-11-14 16:45:17 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL
[2013-11-14 16:45:17 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-12-14 14:25:00 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-12-14 14:24:23 | 000,017,920 | ---- | M] () -- C:\Users\PC\Desktop\Simple ESP_Dec11_[www.unknowncheats.me]_.exe
[2013-12-14 11:17:01 | 000,015,152 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-12-14 11:17:01 | 000,015,152 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-12-14 11:10:25 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-12-14 11:09:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-12-14 11:09:44 | 3219,791,872 | -HS- | M] () -- C:\hiberfil.sys
[2013-12-13 20:42:53 | 001,463,312 | ---- | M] () -- C:\Users\PC\Desktop\Perfect_Keylogger_1.6.8.0 (1).zip
[2013-12-13 20:42:26 | 001,463,312 | ---- | M] () -- C:\Users\PC\Desktop\Perfect_Keylogger_1.6.8.0.zip
[2013-12-13 00:26:04 | 000,291,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2013-12-13 00:26:04 | 000,291,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013-12-12 21:23:51 | 000,123,393 | ---- | M] () -- C:\Users\PC\Desktop\1386810818-1001-11774 (1).pdf
[2013-12-12 02:14:04 | 000,123,393 | ---- | M] () -- C:\Users\PC\Desktop\1386810818-1001-11774.pdf
[2013-12-11 18:45:26 | 000,649,005 | ---- | M] () -- C:\Users\PC\Desktop\jezykpolski.zip
[2013-12-11 18:26:11 | 001,670,518 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013-12-11 18:26:11 | 000,742,124 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2013-12-11 18:26:11 | 000,654,954 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013-12-11 18:26:11 | 000,156,738 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2013-12-11 18:26:11 | 000,122,826 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013-12-11 18:19:19 | 000,346,352 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013-12-11 15:41:37 | 000,025,807 | ---- | M] () -- C:\Users\PC\Desktop\1503518_634596326587041_184259145_n.jpg
[2013-12-10 12:54:14 | 000,578,603 | ---- | M] () -- C:\Users\PC\Documents\jezyk-polski-test.pdf
[2013-12-10 05:01:42 | 000,000,644 | ---- | M] () -- C:\Users\PC\Desktop\Bandicam.lnk
[2013-12-10 02:55:02 | 001,194,520 | ---- | M] () -- C:\Users\PC\Desktop\sandra.JPG
[2013-12-10 02:44:10 | 000,024,910 | ---- | M] () -- C:\Users\PC\Desktop\0df9aa43fe14cb91f2e0a1484d8d1037.jpg
[2013-12-10 02:41:32 | 000,096,438 | ---- | M] () -- C:\Users\PC\Desktop\xd.JPG
[2013-12-08 22:53:44 | 000,001,702 | ---- | M] () -- C:\Users\PC\Desktop\TinyPic.lnk
[2013-12-08 16:27:19 | 000,116,971 | ---- | M] () -- C:\Users\PC\Desktop\kartkowka 6.jpg
[2013-12-08 16:26:41 | 000,133,111 | ---- | M] () -- C:\Users\PC\Desktop\kartkowka 5.jpg
[2013-12-06 09:52:12 | 000,000,136 | ---- | M] () -- C:\Users\PC\Desktop\style.css
[2013-12-06 09:50:54 | 000,000,483 | ---- | M] () -- C:\Users\PC\Desktop\adam demo8.html
[2013-12-06 09:22:19 | 000,062,186 | ---- | M] () -- C:\Users\PC\Desktop\unnamed.jpg
[2013-12-06 07:17:10 | 000,121,944 | -H-- | M] () -- C:\Users\PC\Desktop\piękna ;ooo.jpg
[2013-12-06 07:00:01 | 000,291,128 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2013-12-06 00:48:31 | 000,002,189 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013-12-06 00:47:50 | 000,000,479 | ---- | M] () -- C:\Users\PC\Desktop\Need for Speed Rivals.lnk
[2013-12-05 18:50:13 | 000,155,234 | ---- | M] () -- C:\Users\PC\Desktop\efekty.jpg
[2013-12-05 16:49:56 | 000,001,049 | ---- | M] () -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013-12-03 22:24:50 | 000,002,125 | ---- | M] () -- C:\Users\Public\Desktop\Razer Game Booster.lnk
[2013-12-03 19:09:52 | 000,001,047 | ---- | M] () -- C:\Users\PC\Desktop\Notepad++.lnk
[2013-12-03 19:00:26 | 000,077,592 | ---- | M] () -- C:\Users\PC\Desktop\swieta.jpg
[2013-12-03 18:58:10 | 000,003,154 | ---- | M] () -- C:\Users\PC\.recently-used.xbel
[2013-12-03 16:20:44 | 000,000,926 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2013-12-02 23:00:54 | 000,569,856 | ---- | M] () -- C:\Users\PC\Desktop\zdjecia.dll
[2013-12-02 23:00:25 | 000,094,630 | ---- | M] () -- C:\Users\PC\Desktop\[cheat-project.com] WinJect 1.7 2009-05-02.rar
[2013-12-02 21:55:21 | 000,060,440 | ---- | M] () -- C:\Users\PC\Desktop\wot.jpg
[2013-12-02 21:11:46 | 000,001,039 | ---- | M] () -- C:\Users\PC\Desktop\Dropbox.lnk
[2013-12-02 21:08:07 | 035,334,016 | ---- | M] (Dropbox, Inc.) -- C:\Users\PC\Documents\Dropbox 2.4.7.exe
[2013-12-02 19:07:32 | 000,642,632 | ---- | M] (EFD Software                                                ) -- C:\Users\PC\Documents\hdtune_255.exe
[2013-11-29 19:53:21 | 418,289,124 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013-11-28 02:13:30 | 018,494,783 | ---- | M] () -- C:\Users\PC\Desktop\58242_beta_usb.nec_2.1.28.0_al00.zip
[2013-11-28 01:05:11 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\DriverPack Solution Lite.lnk
[2013-11-27 20:04:16 | 000,000,724 | ---- | M] () -- C:\Users\Public\Desktop\Assassin's Creed 4.Black Flag.Deluxe Edition.v 1.01 + 6 DLC.lnk
[2013-11-26 15:57:12 | 000,000,995 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk
[2013-11-26 11:18:23 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll
[2013-11-26 10:48:07 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013-11-26 10:46:25 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll
[2013-11-26 10:27:54 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013-11-26 10:21:24 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013-11-26 10:18:39 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013-11-26 10:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe
[2013-11-26 10:16:57 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2013-11-26 09:57:44 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013-11-26 09:35:02 | 005,769,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013-11-26 09:32:08 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013-11-26 09:28:16 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2013-11-26 09:02:16 | 001,995,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013-11-26 08:32:06 | 001,928,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013-11-26 07:34:55 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013-11-26 07:34:27 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013-11-23 19:26:20 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013-11-23 19:18:06 | 000,000,640 | RHS- | M] () -- C:\Users\PC\ntuser.pol
[2013-11-23 18:47:34 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013-11-22 19:26:06 | 003,820,448 | ---- | M] () -- C:\Users\PC\Desktop\battlelog-web-plugins_2.3.2_129.exe
[2013-11-22 06:57:07 | 000,051,101 | ---- | M] () -- C:\Users\PC\Desktop\katechizm.pdf
[2013-11-20 13:11:00 | 000,606,793 | ---- | M] () -- C:\Users\PC\20131119_204645.jpg
[2013-11-20 13:10:50 | 000,593,098 | ---- | M] () -- C:\Users\PC\photo_1384894950404.jpg
[2013-11-19 18:49:09 | 000,020,490 | ---- | M] () -- C:\Users\PC\Desktop\miHaU.jpg
[2013-11-19 04:01:43 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggflt_01009.Wdf
[2013-11-19 04:01:42 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggsemc_01009.Wdf
[2013-11-19 02:54:54 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-11-17 19:56:53 | 000,000,509 | ---- | M] () -- C:\Users\Public\Desktop\Nether.lnk
[2013-11-17 16:57:54 | 000,000,746 | ---- | M] () -- C:\Users\Public\Desktop\Smite.lnk
[2013-11-17 16:57:54 | 000,000,737 | ---- | M] () -- C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-12-14 14:24:23 | 000,017,920 | ---- | C] () -- C:\Users\PC\Desktop\Simple ESP_Dec11_[www.unknowncheats.me]_.exe
[2013-12-13 20:42:53 | 001,463,312 | ---- | C] () -- C:\Users\PC\Desktop\Perfect_Keylogger_1.6.8.0 (1).zip
[2013-12-13 20:42:25 | 001,463,312 | ---- | C] () -- C:\Users\PC\Desktop\Perfect_Keylogger_1.6.8.0.zip
[2013-12-12 21:23:51 | 000,123,393 | ---- | C] () -- C:\Users\PC\Desktop\1386810818-1001-11774 (1).pdf
[2013-12-12 02:13:58 | 000,123,393 | ---- | C] () -- C:\Users\PC\Desktop\1386810818-1001-11774.pdf
[2013-12-11 18:46:01 | 000,578,603 | ---- | C] () -- C:\Users\PC\Documents\jezyk-polski-test.pdf
[2013-12-11 18:45:26 | 000,649,005 | ---- | C] () -- C:\Users\PC\Desktop\jezykpolski.zip
[2013-12-11 15:41:37 | 000,025,807 | ---- | C] () -- C:\Users\PC\Desktop\1503518_634596326587041_184259145_n.jpg
[2013-12-10 05:01:42 | 000,000,644 | ---- | C] () -- C:\Users\PC\Desktop\Bandicam.lnk
[2013-12-10 02:55:02 | 001,194,520 | ---- | C] () -- C:\Users\PC\Desktop\sandra.JPG
[2013-12-10 02:44:10 | 000,024,910 | ---- | C] () -- C:\Users\PC\Desktop\0df9aa43fe14cb91f2e0a1484d8d1037.jpg
[2013-12-10 02:41:29 | 000,096,438 | ---- | C] () -- C:\Users\PC\Desktop\xd.JPG
[2013-12-08 16:27:19 | 000,116,971 | ---- | C] () -- C:\Users\PC\Desktop\kartkowka 6.jpg
[2013-12-08 16:26:40 | 000,133,111 | ---- | C] () -- C:\Users\PC\Desktop\kartkowka 5.jpg
[2013-12-06 09:48:38 | 000,000,136 | ---- | C] () -- C:\Users\PC\Desktop\style.css
[2013-12-06 09:48:34 | 000,000,483 | ---- | C] () -- C:\Users\PC\Desktop\adam demo8.html
[2013-12-06 09:22:19 | 000,062,186 | ---- | C] () -- C:\Users\PC\Desktop\unnamed.jpg
[2013-12-06 07:17:07 | 000,121,944 | -H-- | C] () -- C:\Users\PC\Desktop\piękna ;ooo.jpg
[2013-12-06 00:47:50 | 000,000,479 | ---- | C] () -- C:\Users\PC\Desktop\Need for Speed Rivals.lnk
[2013-12-05 18:50:13 | 000,155,234 | ---- | C] () -- C:\Users\PC\Desktop\efekty.jpg
[2013-12-05 16:49:56 | 000,001,049 | ---- | C] () -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013-12-03 22:24:50 | 000,002,125 | ---- | C] () -- C:\Users\Public\Desktop\Razer Game Booster.lnk
[2013-12-03 19:09:52 | 000,001,047 | ---- | C] () -- C:\Users\PC\Desktop\Notepad++.lnk
[2013-12-03 19:00:26 | 000,077,592 | ---- | C] () -- C:\Users\PC\Desktop\swieta.jpg
[2013-12-03 18:58:10 | 000,003,154 | ---- | C] () -- C:\Users\PC\.recently-used.xbel
[2013-12-02 23:05:03 | 000,057,344 | ---- | C] () -- C:\Users\PC\Desktop\skype.dll
[2013-12-02 23:05:03 | 000,057,344 | ---- | C] () -- C:\Users\PC\Desktop\minime.dll
[2013-12-02 23:00:49 | 000,569,856 | ---- | C] () -- C:\Users\PC\Desktop\zdjecia.dll
[2013-12-02 23:00:15 | 000,094,630 | ---- | C] () -- C:\Users\PC\Desktop\[cheat-project.com] WinJect 1.7 2009-05-02.rar
[2013-12-02 21:55:21 | 000,060,440 | ---- | C] () -- C:\Users\PC\Desktop\wot.jpg
[2013-12-02 21:11:46 | 000,001,039 | ---- | C] () -- C:\Users\PC\Desktop\Dropbox.lnk
[2013-11-29 19:53:21 | 418,289,124 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013-11-28 02:12:44 | 018,494,783 | ---- | C] () -- C:\Users\PC\Desktop\58242_beta_usb.nec_2.1.28.0_al00.zip
[2013-11-28 01:05:11 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\DriverPack Solution Lite.lnk
[2013-11-27 20:04:16 | 000,000,724 | ---- | C] () -- C:\Users\Public\Desktop\Assassin's Creed 4.Black Flag.Deluxe Edition.v 1.01 + 6 DLC.lnk
[2013-11-22 19:26:05 | 003,820,448 | ---- | C] () -- C:\Users\PC\Desktop\battlelog-web-plugins_2.3.2_129.exe
[2013-11-22 06:56:43 | 000,051,101 | ---- | C] () -- C:\Users\PC\Desktop\katechizm.pdf
[2013-11-20 13:10:40 | 000,606,793 | ---- | C] () -- C:\Users\PC\20131119_204645.jpg
[2013-11-20 13:10:35 | 000,593,098 | ---- | C] () -- C:\Users\PC\photo_1384894950404.jpg
[2013-11-19 18:49:09 | 000,020,490 | ---- | C] () -- C:\Users\PC\Desktop\miHaU.jpg
[2013-11-19 04:01:43 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggflt_01009.Wdf
[2013-11-19 04:01:42 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ggsemc_01009.Wdf
[2013-11-17 19:56:53 | 000,000,509 | ---- | C] () -- C:\Users\Public\Desktop\Nether.lnk
[2013-11-17 19:56:53 | 000,000,509 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nether.lnk
[2013-11-17 16:57:54 | 000,000,746 | ---- | C] () -- C:\Users\Public\Desktop\Smite.lnk
[2013-11-17 16:57:54 | 000,000,737 | ---- | C] () -- C:\Users\Public\Desktop\Hi-Rez Diagnostics and Support.lnk
[2013-11-17 02:21:46 | 000,649,216 | ---- | C] () -- C:\Windows\SysNative\ficvdec_x64.dll
[2013-11-17 02:21:46 | 000,639,488 | ---- | C] () -- C:\Windows\SysWow64\ficvdec_x86.dll
[2013-10-22 18:09:03 | 000,000,621 | ---- | C] () -- C:\Users\PC\Last session PC.prj
[2013-10-16 21:17:37 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2013-10-03 19:53:47 | 000,000,014 | ---- | C] () -- C:\Windows\SysWow64\SysInfo_6.dll
[2013-09-25 03:14:50 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013-09-24 23:13:46 | 000,000,024 | -HS- | C] () -- C:\Users\PC\AppData\Roaming\System5908ConfigCollection.dat
[2013-09-24 23:13:46 | 000,000,024 | -HS- | C] () -- C:\Users\PC\AppData\Roaming\1D959CA221C7573.sys
[2013-08-31 19:40:36 | 000,291,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013-08-31 19:40:35 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013-08-30 18:53:48 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2013-08-28 22:24:29 | 002,601,752 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_moh.exe
[2013-07-27 13:50:54 | 000,000,640 | RHS- | C] () -- C:\Users\PC\ntuser.pol
[2013-07-22 15:44:51 | 000,122,884 | ---- | C] () -- C:\Windows\UnGins.exe
[2013-07-14 18:45:11 | 000,002,737 | ---- | C] () -- C:\Users\PC\AppData\Local\recently-used.xbel
[2013-06-18 16:14:58 | 000,109,256 | ---- | C] () -- C:\Windows\SysWow64\EasyHook64.dll
[2013-06-18 16:14:58 | 000,090,824 | ---- | C] () -- C:\Windows\SysWow64\EasyHook32.dll
[2013-06-18 15:21:53 | 000,000,046 | ---- | C] () -- C:\Windows\SysWow64\DonationCoder_urlsnooper_InstallInfo.dat
[2013-06-13 12:15:32 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2013-06-13 12:14:14 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2013-06-13 12:14:14 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll
[2013-05-31 22:27:03 | 001,646,136 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-03-29 03:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013-03-29 03:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2012-12-19 20:52:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012-12-19 20:52:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012-11-19 08:33:32 | 000,065,656 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll
[2012-11-19 08:33:30 | 000,022,640 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll
[2012-09-28 20:45:06 | 000,247,296 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 03:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-06-11 12:50:29 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013-06-11 12:50:29 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2013-11-18 11:51:07 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\.minecraft
[2013-11-12 18:57:36 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\AC3Filter
[2013-10-23 11:24:12 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Agile Web Solutions
[2013-10-07 20:25:27 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Audacity
[2013-10-15 10:07:25 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\AVG2014
[2013-11-17 16:58:34 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Awesomium
[2013-11-17 04:18:27 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\BANDISOFT
[2013-10-04 13:20:44 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\BPK
[2013-06-11 00:11:57 | 000,000,000 | -HSD | M] -- C:\Users\PC\AppData\Roaming\Common
[2013-12-14 14:05:14 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DMCache
[2013-06-18 15:21:53 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DonationCoder
[2013-12-14 11:10:34 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Dropbox
[2013-11-28 02:12:02 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DRPSu
[2013-06-20 17:18:54 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Druk Świadectw
[2013-09-23 09:37:19 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Feathercoin
[2013-12-04 00:22:07 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\FileZilla
[2013-06-13 10:23:55 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Foxit Software
[2013-06-02 15:01:44 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\FreeStone Group
[2013-06-04 16:53:38 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Gadu-Gadu 10
[2013-12-03 18:58:10 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\gedit
[2013-12-03 18:57:08 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\gtk-2.0
[2013-09-25 02:50:58 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\IDM
[2013-09-25 17:29:28 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Litecoin
[2013-06-04 19:00:34 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\LolClient
[2013-11-12 18:51:20 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Milestone
[2013-11-17 02:21:49 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Mirillis
[2013-07-04 17:37:12 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\My Battle for Middle-earth Files
[2013-10-01 01:29:59 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Need for Speed Most Wanted
[2013-12-03 19:14:30 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Notepad++
[2013-08-31 14:42:22 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\OBS
[2013-06-18 16:32:06 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\OnLive App
[2013-06-06 13:10:15 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\OpenFM
[2013-05-31 19:38:51 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Opera
[2013-06-22 09:54:30 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Opera Software
[2013-08-24 23:31:41 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Origin
[2013-05-31 23:01:28 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\poclbm
[2013-06-18 18:02:57 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\TechSmith
[2013-06-06 06:50:55 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Thinstall
[2013-10-14 11:31:48 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Thunderbird
[2013-06-07 07:12:44 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\TuneUp Software
[2013-12-10 22:44:25 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\uTorrent
[2013-11-12 20:29:25 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Wargaming.net
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:56E2E879

< End of report >