OTL logfile created on: 2014-01-04 17:36:34 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = E:\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
11,75 Gb Total Physical Memory | 8,48 Gb Available Physical Memory | 72,17% Memory free
23,49 Gb Paging File | 19,77 Gb Available in Paging File | 84,15% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 150,16 Gb Total Space | 37,24 Gb Free Space | 24,80% Space Free | Partition Type: NTFS
Drive D: | 292,97 Gb Total Space | 161,15 Gb Free Space | 55,01% Space Free | Partition Type: NTFS
Drive E: | 390,62 Gb Total Space | 22,31 Gb Free Space | 5,71% Space Free | Partition Type: NTFS
Drive I: | 97,66 Gb Total Space | 87,02 Gb Free Space | 89,11% Space Free | Partition Type: NTFS
 
Computer Name: THEKASARR-KOMPU | User Name: admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - File not found -- 
PRC - [2014-01-04 17:35:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- E:\Downloads\OTL.exe
PRC - [2013-12-17 15:49:26 | 005,210,464 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe
PRC - [2013-12-04 15:19:32 | 005,316,448 | ---- | M] (TeamViewer GmbH) -- D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
PRC - [2013-11-17 20:06:00 | 000,442,712 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
PRC - [2013-11-04 23:54:05 | 003,568,312 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013-11-04 23:54:05 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013-10-26 22:32:03 | 009,547,240 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
PRC - [2013-09-06 16:46:18 | 000,074,752 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe
PRC - [2013-09-05 21:35:53 | 001,294,336 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
PRC - [2012-04-03 19:45:36 | 002,121,216 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
PRC - [2010-06-24 00:40:36 | 000,077,824 | ---- | M] (Avid Technology, Inc..) -- C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe
PRC - [2010-03-23 15:17:43 | 000,417,280 | ---- | M] (Stardock Corporation) -- C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe
PRC - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- D:\Program Files (x86)\RocketDock\RocketDock.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-12-17 15:49:27 | 000,126,816 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\RiotLauncher.dll
MOD - [2013-12-17 15:49:26 | 005,210,464 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.196\deploy\LoLLauncher.exe
MOD - [2013-11-04 23:54:06 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013-10-26 22:32:03 | 000,555,496 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
MOD - [2013-10-26 22:32:03 | 000,431,080 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
MOD - [2013-10-26 22:32:03 | 000,237,032 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
MOD - [2013-10-26 22:32:03 | 000,230,376 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
MOD - [2013-09-17 04:21:27 | 000,410,576 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll
MOD - [2013-09-17 04:21:25 | 004,053,456 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\pdf.dll
MOD - [2013-09-17 04:20:34 | 000,709,584 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\libglesv2.dll
MOD - [2013-09-17 04:20:33 | 000,099,792 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\libegl.dll
MOD - [2013-09-17 04:20:31 | 001,604,560 | ---- | M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\ffmpegsumo.dll
MOD - [2013-09-06 16:46:18 | 000,074,752 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.64\deploy\LolClient.exe
MOD - [2013-09-05 21:35:53 | 001,294,336 | ---- | M] () -- E:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
MOD - [2013-08-07 20:25:24 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2013-05-16 08:18:21 | 001,021,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\019ed4a55ecc7d1f5b933c27970dce9b\System.Runtime.DurableInstancing.ni.dll
MOD - [2013-05-16 08:18:20 | 002,647,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\2609614ca03927f7a99418c74844059b\System.Runtime.Serialization.ni.dll
MOD - [2013-05-16 08:18:19 | 000,393,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8732d692f02402dbd81280b0d3c4f6a9\System.Xml.Linq.ni.dll
MOD - [2013-05-15 17:44:38 | 018,002,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a9594959e951127f16eb49644ba92f79\PresentationFramework.ni.dll
MOD - [2013-05-15 17:44:29 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\7cfbbd029ef945fbcdaedd24b2b67a24\PresentationCore.ni.dll
MOD - [2013-05-15 17:44:26 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\153143f74d840484b510d8cf5187796b\System.Windows.Forms.ni.dll
MOD - [2013-05-15 17:44:25 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2f9e0112e10f9e70d3430d0be9863976\System.Core.ni.dll
MOD - [2013-05-15 17:44:22 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\af18b8a8f56494da44cc448f3b9704a5\WindowsBase.ni.dll
MOD - [2013-05-15 17:44:21 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\233661f3a2b632e9553915c8639637d0\System.Configuration.ni.dll
MOD - [2013-01-14 14:18:46 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\ac9e3eca6c148504588e7c6d09fe83e3\System.Management.ni.dll
MOD - [2013-01-14 14:17:28 | 000,143,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\ef7642a4f2724135d445e2ea36582e78\SMDiagnostics.ni.dll
MOD - [2013-01-14 14:17:05 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\866894ebe5258bf9f45d6b063229e990\System.Xaml.ni.dll
MOD - [2013-01-09 15:48:17 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll
MOD - [2013-01-09 15:48:15 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll
MOD - [2013-01-09 15:48:15 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\dfeff31ab1e7cd3480c8942290c92f5d\PresentationFramework.Aero.ni.dll
MOD - [2013-01-09 15:48:14 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll
MOD - [2013-01-09 15:48:10 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll
MOD - [2012-04-03 19:45:36 | 002,121,216 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
MOD - [2012-02-02 18:26:52 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\screenSHU\libgcc_s_dw2-1.dll
MOD - [2012-02-02 18:26:52 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\screenSHU\mingwm10.dll
MOD - [2011-03-16 23:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2010-03-23 15:17:43 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Stardock\CursorFX\zlib1.dll
MOD - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- D:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007-09-02 13:57:36 | 000,069,632 | ---- | M] () -- D:\Program Files (x86)\RocketDock\RocketDock.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2013-11-04 23:54:05 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2013-04-20 10:50:50 | 000,359,568 | ---- | M] (ArtistScope Pty Ltd) [Auto | Running] -- C:\Program Files\Common Files\ArtistScope\CSHelper64.exe -- (CSHelper)
SRV:[b]64bit:[/b] - [2012-03-26 17:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:[b]64bit:[/b] - [2012-03-26 17:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:[b]64bit:[/b] - [2011-10-26 03:00:58 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2011-10-25 21:14:28 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:[b]64bit:[/b] - [2009-12-16 16:44:44 | 003,750,400 | ---- | M] (SafeNet Inc.) [Auto | Running] -- C:\Windows\SysNative\hasplms.exe -- (hasplms)
SRV:[b]64bit:[/b] - [2009-07-20 11:36:14 | 000,160,784 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013-12-27 20:43:08 | 000,569,768 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-12-11 01:24:37 | 000,032,960 | ---- | M] (Razer, Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe -- (RzOvlMon)
SRV - [2013-12-04 15:19:32 | 005,316,448 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- D:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9)
SRV - [2013-11-21 10:58:30 | 004,263,936 | ---- | M] (A-Volute) [Auto | Running] -- C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe -- (RzMaelstromVADStreamingService)
SRV - [2013-10-25 13:33:56 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Stopped] -- D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService)
SRV - [2013-09-05 09:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-08-22 17:09:36 | 000,076,888 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-04-04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013-04-04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012-10-24 09:16:51 | 004,702,568 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2012-09-25 15:23:44 | 000,743,320 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2012-09-20 08:56:06 | 000,136,896 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2012-06-07 09:17:28 | 000,072,640 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\HDD Health\HDDHealthService.exe -- (HDDHealth)
SRV - [2012-01-18 13:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [Disabled | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2012-01-18 05:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2010-06-24 00:40:36 | 000,077,824 | ---- | M] (Avid Technology, Inc..) [Auto | Running] -- C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe -- (DigiRefresh)
SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-12-15 22:49:12 | 000,212,256 | ---- | M] (Ralink Technology, Corp.) [Auto | Stopped] -- C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe -- (RalinkRegistryWriter64)
SRV - [2009-12-15 22:49:00 | 000,185,632 | ---- | M] (Ralink Technology, Corp.) [Auto | Stopped] -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe -- (RalinkRegistryWriter)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV:[b]64bit:[/b] - [2014-01-04 17:17:01 | 000,079,672 | ---- | M] (AVAST Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm)
DRV:[b]64bit:[/b] - [2014-01-04 17:16:44 | 001,034,464 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2014-01-04 17:16:44 | 000,422,216 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2014-01-04 17:16:44 | 000,207,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:[b]64bit:[/b] - [2014-01-04 17:16:44 | 000,078,648 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2013-11-21 10:59:28 | 000,040,696 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzMaelstromVAD.sys -- (RZMAELSTROMVADService)
DRV:[b]64bit:[/b] - [2013-11-15 07:37:14 | 000,149,160 | ---- | M] (Razer Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rzudd.sys -- (rzudd)
DRV:[b]64bit:[/b] - [2013-11-04 23:54:09 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:[b]64bit:[/b] - [2013-11-04 23:54:08 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:[b]64bit:[/b] - [2013-10-25 07:57:01 | 000,129,472 | ---- | M] (Razer, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RzDxgk.sys -- (RzDxgk)
DRV:[b]64bit:[/b] - [2013-10-25 07:57:01 | 000,074,432 | ---- | M] (Razer, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\RzFilter.sys -- (RzFilter)
DRV:[b]64bit:[/b] - [2013-07-10 07:29:52 | 000,039,096 | ---- | M] (Razer Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rzp1endpt.sys -- (rzp1endpt)
DRV:[b]64bit:[/b] - [2013-07-10 07:29:42 | 000,030,904 | ---- | M] (Razer Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rzvmouse.sys -- (rzvmouse)
DRV:[b]64bit:[/b] - [2013-04-20 10:50:50 | 000,058,776 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\Common Files\ArtistScope\CSDriver64.sys -- (CSDriver)
DRV:[b]64bit:[/b] - [2013-04-04 13:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2012-12-25 11:14:56 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:[b]64bit:[/b] - [2012-12-25 11:14:56 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2012-07-13 06:02:53 | 000,130,088 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\PSINProt.sys -- (PSINProt)
DRV:[b]64bit:[/b] - [2012-07-13 06:02:10 | 000,205,352 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\PSINKNC.sys -- (PSINKNC)
DRV:[b]64bit:[/b] - [2012-07-13 06:02:10 | 000,123,944 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\PSINProc.sys -- (PSINProc)
DRV:[b]64bit:[/b] - [2012-07-13 06:02:09 | 000,167,464 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\PSINAflt.sys -- (PSINAflt)
DRV:[b]64bit:[/b] - [2012-07-13 06:02:09 | 000,119,336 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\PSINFile.sys -- (PSINFile)
DRV:[b]64bit:[/b] - [2012-07-12 10:18:56 | 000,219,688 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSStrm.sys -- (NNSSTRM)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:24 | 000,105,000 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNStlsc.sys -- (NNSTLSC)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:23 | 000,112,680 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSSmtp.sys -- (NNSSMTP)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:23 | 000,109,096 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSPrv.sys -- (NNSPRV)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:22 | 000,304,680 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSProt.sys -- (NNSPROT)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:22 | 000,116,776 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSPop3.sys -- (NNSPOP3)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:22 | 000,068,648 | ---- | M] (Panda Security, S.L.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\NNSPihsw.sys -- (NNSPIHSW)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:21 | 000,093,224 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSpicc.sys -- (NNSPICC)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:21 | 000,033,320 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSNAHSL.sys -- (NNSNAHSL)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:20 | 000,113,192 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSIds.sys -- (NNSIDS)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:19 | 000,116,776 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSHttp.sys -- (NNSHTTP)
DRV:[b]64bit:[/b] - [2012-06-27 14:51:19 | 000,089,128 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSAlpc.sys -- (NNSALPC)
DRV:[b]64bit:[/b] - [2012-04-12 17:12:56 | 000,147,248 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2012-03-20 19:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012-01-18 05:44:36 | 004,865,568 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64)
DRV:[b]64bit:[/b] - [2012-01-18 05:44:28 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:[b]64bit:[/b] - [2011-11-23 14:45:33 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:[b]64bit:[/b] - [2011-11-03 03:01:00 | 000,056,208 | ---- | M] (Rovi Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2011-10-26 04:05:10 | 010,496,512 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2011-10-26 02:21:58 | 000,326,656 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2011-10-11 17:36:12 | 000,166,400 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RzSynapse.sys -- (RzSynapse)
DRV:[b]64bit:[/b] - [2011-07-07 14:32:04 | 000,057,688 | ---- | M] (Focusrite Audio Engineering Limited.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ffusb2audio.sys -- (ffusb2audio)
DRV:[b]64bit:[/b] - [2011-06-24 05:31:02 | 000,055,424 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV:[b]64bit:[/b] - [2011-06-10 06:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011-06-06 23:07:00 | 000,231,440 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,146,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rmcast.sys -- (RMCAST)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010-11-09 14:35:24 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:[b]64bit:[/b] - [2010-10-01 20:41:00 | 001,349,232 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:[b]64bit:[/b] - [2010-10-01 00:16:34 | 000,013,312 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VKbms.sys -- (VKbms)
DRV:[b]64bit:[/b] - [2010-07-01 18:11:24 | 000,012,352 | ---- | M] () [Kernel | "Start" not found. | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV:[b]64bit:[/b] - [2010-04-27 08:30:52 | 000,184,968 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:[b]64bit:[/b] - [2010-04-27 08:29:54 | 000,083,080 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:[b]64bit:[/b] - [2010-02-18 08:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:[b]64bit:[/b] - [2010-02-05 19:15:44 | 000,920,864 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2010-01-05 19:23:18 | 001,847,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
DRV:[b]64bit:[/b] - [2009-12-23 11:36:04 | 000,105,592 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Tpkd.sys -- (Tpkd)
DRV:[b]64bit:[/b] - [2009-10-30 10:53:50 | 000,010,880 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Abyssus.sys -- (Abyssus)
DRV:[b]64bit:[/b] - [2009-09-21 08:07:26 | 000,071,040 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aksdf.sys -- (aksdf)
DRV:[b]64bit:[/b] - [2009-09-16 08:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t)
DRV:[b]64bit:[/b] - [2009-09-02 13:19:52 | 000,187,912 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MAudioProducer.sys -- (MAUSBPRODUCER)
DRV:[b]64bit:[/b] - [2009-08-23 23:55:32 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie)
DRV:[b]64bit:[/b] - [2009-08-20 07:02:06 | 000,130,816 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\aksfridge.sys -- (aksfridge)
DRV:[b]64bit:[/b] - [2009-07-16 04:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-17 17:54:46 | 000,040,976 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV:[b]64bit:[/b] - [2009-06-17 17:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)
DRV:[b]64bit:[/b] - [2009-06-17 17:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2009-03-13 10:55:38 | 000,318,464 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hardlock.sys -- (hardlock)
DRV:[b]64bit:[/b] - [2008-05-30 06:13:32 | 000,034,360 | ---- | M] (Canopus Co,. Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cdrblock.sys -- (cdrblock)
DRV:[b]64bit:[/b] - [2007-05-10 23:12:48 | 000,031,744 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\libusb0.sys -- (libusb0)
DRV:[b]64bit:[/b] - [2005-09-23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV - [2012-11-13 21:53:00 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2003-08-20 10:51:10 | 000,635,012 | ---- | M] (Sony Corporation) [File_System | System | Stopped] -- C:\Windows\SysWow64\drivers\sonypvf2.sys -- (sonypvf2)
DRV - [2003-08-20 10:44:26 | 000,431,236 | ---- | M] (Sony Corporation) [File_System | System | Stopped] -- C:\Windows\SysWow64\drivers\sonypvt2.sys -- (sonypvt2)
DRV - [2003-07-25 15:02:40 | 000,019,478 | ---- | M] (Sony Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysWow64\drivers\sonypvl2.sys -- (sonypvl2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3986106514-635370200-118129050-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3986106514-635370200-118129050-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-3986106514-635370200-118129050-1000\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = http://search.yahoo.com/search?fr=chr-panda&q={searchTerms}&ei=UTF-8&type=PCAFSI1219
IE - HKU\S-1-5-21-3986106514-635370200-118129050-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.21
FF - prefs.js..extensions.enabledAddons: testpilot@labs.mozilla.com:1.2.3
 
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_268.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@artistscope.com/ArtistScope Plugin: C:\Program Files (x86)\Common Files\ArtistScope\npArtistScope.dll (ArtistScope Pty Ltd)
FF - HKLM\Software\MozillaPlugins\@artistscope.com/ArtistScope Plugin 5: C:\Program Files (x86)\Common Files\ArtistScope\npArtistScope5.dll (ArtistScope Pty Ltd)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.7: C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\admin\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@artistscope.com/ArtistScope Plugin: C:\Program Files (x86)\Common Files\ArtistScope\npArtistScope.dll (ArtistScope Pty Ltd)
FF - HKCU\Software\MozillaPlugins\@artistscope.com/ArtistScope Plugin 5: C:\Program Files (x86)\Common Files\ArtistScope\npArtistScope5.dll (ArtistScope Pty Ltd)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\admin\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\admin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\admin\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Aurora 9.0a2\extensions\\Components: C:\Program Files (x86)\Aurora\components [2012-10-21 11:20:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-04 17:16:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011-10-16 08:59:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-04-20 10:50:47 | 000,000,000 | ---D | M]
 
[2011-10-16 08:47:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Extensions
[2013-12-31 20:06:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\y2uu2708.default\extensions
[2013-09-13 14:55:59 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\y2uu2708.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013-12-31 20:06:15 | 000,619,291 | ---- | M] () (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\firefox\profiles\y2uu2708.default\extensions\testpilot@labs.mozilla.com.xpi
[2013-05-11 14:44:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013-05-11 14:44:49 | 000,000,000 | ---D | M] (ArcaBit Ext.) -- C:\Program Files (x86)\mozilla firefox\extensions\arcabit@www.arcabit.pl
[2012-07-28 14:35:27 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files (x86)\mozilla firefox\extensions\quickstores@quickstores.de
[2011-09-29 08:30:14 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011-12-09 18:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2011-09-29 01:52:42 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2011-09-29 01:52:42 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2011-09-29 01:52:42 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2011-09-29 01:52:42 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2011-09-29 01:52:42 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-09-29 01:52:42 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: 
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\29.0.1547.76\pdf.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll
CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
CHR - plugin: ArtistScope Plugin (Enabled) = C:\Program Files (x86)\Common Files\ArtistScope\npArtistScope.dll
CHR - plugin: ArtistScope Plugin 5 (Enabled) = C:\Program Files (x86)\Common Files\ArtistScope\npArtistScope5.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\admin\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\admin\AppData\Roaming\Mozilla\plugins\npo1d.dll
CHR - plugin: Raidcall plugin (Enabled) = C:\Users\admin\AppData\Roaming\raidcall\plugins\nprcplugin.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - Extension: BetterTTV = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped\6.6_0\
CHR - Extension: Dokumenty Google = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_1\
CHR - Extension: Dysk Google = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\
CHR - Extension: YouTube = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: Szukaj w Google = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
CHR - Extension: AdBlock = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0\
CHR - Extension: avast! Online Security = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0\
CHR - Extension: Google Wallet = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
 
O1 HOSTS File: ([2013-08-28 12:50:38 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (no name) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - No CLSID value found.
O3 - HKU\S-1-5-21-3986106514-635370200-118129050-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DigidesignMMERefresh] C:\Program Files (x86)\Digidesign\Drivers\MMERefresh.exe (Avid Technology, Inc..)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [Razer Synapse] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe (Razer Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3986106514-635370200-118129050-1000..\Run: [CursorFX] C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe (Stardock Corporation)
O4 - HKU\S-1-5-21-3986106514-635370200-118129050-1000..\Run: [RocketDock] D:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-21-3986106514-635370200-118129050-1000..\Run: [screenSHU] C:\Program Files (x86)\screenSHU\screenSHU.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [panda2_0dn] reg.exe delete "HKCU\Software\AppDataLow\Software\panda2_0dn" /f File not found
O4 - HKU\.DEFAULT..\RunOnce: [panda2_0dn_XP] reg.exe delete "HKCU\Software\panda2_0dn" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [panda2_0dn] reg.exe delete "HKCU\Software\AppDataLow\Software\panda2_0dn" /f File not found
O4 - HKU\S-1-5-18..\RunOnce: [panda2_0dn_XP] reg.exe delete "HKCU\Software\panda2_0dn" /f File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found
O9:[b]64bit:[/b] - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - Reg Error: Key error. File not found
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - Reg Error: Key error. File not found
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{50BDBC51-6DBA-4B95-A65B-1D95CC326EC6}: DhcpNameServer = 7.254.254.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A191FCE2-A48A-4BFE-B5BE-0B4B6BD855E8}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BEBE8D49-4D96-493B-8F63-9E74DF1FA144}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:[b]64bit:[/b] - SharedTaskScheduler: {1984D045-52CF-49cd-DB77-08F378FEA4DB} - ObjectDockShellExt - D:\Program Files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll (Stardock)
O27:[b]64bit:[/b] - HKLM IFEO\ccleaner64.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\pccompanion.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\protoolsse.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\real desktop.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\setpoint.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\setup.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\unins000.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\uninst.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\uninstall pro tools.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27:[b]64bit:[/b] - HKLM IFEO\wwp.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\ccleaner64.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\pccompanion.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\protoolsse.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\real desktop.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\setpoint.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\setup.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\unins000.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\uninst.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\uninstall pro tools.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O27 - HKLM IFEO\wwp.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{68b6e743-15c8-11e1-ad5b-14dae9b58d88}\Shell - "" = AutoRun
O33 - MountPoints2\{68b6e743-15c8-11e1-ad5b-14dae9b58d88}\Shell\AutoRun\command - "" = G:\Setup.exe
O33 - MountPoints2\{f69d0b6e-4e7a-11e2-9b13-a35126a83cbd}\Shell - "" = AutoRun
O33 - MountPoints2\{f69d0b6e-4e7a-11e2-9b13-a35126a83cbd}\Shell\AutoRun\command - "" = I:\Startme.exe
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-01-04 17:16:46 | 000,082,744 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys.1388852221
[2014-01-04 17:16:46 | 000,079,672 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys
[2014-01-01 15:17:23 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\MK-LOL
[2014-01-01 14:30:54 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MKJogo
[2014-01-01 14:30:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MKJogo
[2014-01-01 01:27:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games
[2013-12-31 19:59:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team17 Software Ltd
[2013-12-31 02:38:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
[2013-12-31 02:38:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cheat Engine 6.3
[2013-12-30 21:43:40 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\League Of Legends Monopoly
[2013-12-21 00:33:04 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield
[2013-12-21 00:28:50 | 000,073,728 | ---- | C] (Macrovision Corporation) -- C:\Windows\SysWow64\ISUSPM.cpl
[2013-12-20 08:06:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
[2013-12-20 08:03:33 | 000,000,000 | ---D | C] -- C:\ProgramData\RzMaelstromVAD_1.1.49.1641
[2013-12-19 20:33:12 | 004,702,568 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\GameMon.des
[2013-12-19 20:32:58 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\npptNT2.sys
[2013-12-19 20:32:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2013-12-19 18:36:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
[2013-12-19 18:36:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest
[2013-12-19 18:36:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NCWest
[2013-12-12 19:23:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013-12-11 19:03:41 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\TeamViewer
[2013-12-10 16:14:37 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Koszulki
[2 C:\Users\admin\Documents\*.tmp files -> C:\Users\admin\Documents\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\admin\Desktop\*.tmp files -> C:\Users\admin\Desktop\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-01-04 17:20:00 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-01-04 17:19:00 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3986106514-635370200-118129050-1000UA.job
[2014-01-04 17:19:00 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3986106514-635370200-118129050-1000Core.job
[2014-01-04 17:18:14 | 000,022,080 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-01-04 17:18:14 | 000,022,080 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-01-04 17:17:01 | 000,079,672 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys
[2014-01-04 17:17:01 | 000,001,972 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014-01-04 17:16:44 | 001,034,464 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2014-01-04 17:16:44 | 000,422,216 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswsp.sys
[2014-01-04 17:16:44 | 000,334,136 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2014-01-04 17:16:44 | 000,207,904 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2014-01-04 17:16:44 | 000,082,744 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswstm.sys.1388852221
[2014-01-04 17:16:44 | 000,078,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2014-01-04 17:16:44 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014-01-04 17:10:36 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-01-04 17:09:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-01-03 14:09:06 | 005,812,349 | ---- | M] () -- C:\Users\admin\Desktop\znaesh li ty 2 podkład podwyższony.mp3
[2014-01-03 14:02:47 | 005,737,116 | ---- | M] () -- C:\Users\admin\Desktop\znaesh li ty 1 podkład podwyższony.mp3
[2014-01-03 13:56:21 | 005,727,676 | ---- | M] () -- C:\Users\admin\Desktop\maksim_-_znaesh'_li_ty instrumental 1.mp3
[2014-01-02 13:26:20 | 000,792,500 | ---- | M] () -- C:\Users\admin\Documents\cc_20140102_132534.reg
[2014-01-01 16:41:11 | 005,108,308 | ---- | M] () -- C:\Users\admin\Desktop\ProoStoo.rar
[2014-01-01 15:12:07 | 000,000,054 | ---- | M] () -- C:\Windows\JQHApp.dat
[2014-01-01 14:30:53 | 000,001,017 | ---- | M] () -- C:\Users\admin\Desktop\MK LOL.lnk
[2014-01-01 01:27:29 | 000,001,043 | ---- | M] () -- C:\Users\Public\Desktop\Scribblenauts Unlimited.lnk
[2014-01-01 00:47:38 | 000,001,462 | ---- | M] () -- C:\Users\Public\Desktop\Lineage II.lnk
[2014-01-01 00:44:33 | 000,000,600 | ---- | M] () -- C:\Users\admin\AppData\Local\PUTTY.RND
[2013-12-31 20:02:48 | 000,000,993 | ---- | M] () -- C:\Users\Public\Desktop\Worms Forts - Oblężenie.lnk
[2013-12-31 13:51:13 | 041,634,453 | ---- | M] () -- C:\Users\admin\Desktop\League Of Legends Monopoly.rar
[2013-12-31 12:59:13 | 000,000,132 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
[2013-12-31 02:38:57 | 000,001,091 | ---- | M] () -- C:\Users\admin\Desktop\Cheat Engine.lnk
[2013-12-31 02:28:42 | 016,844,658 | ---- | M] () -- C:\Users\admin\Desktop\pa.psd
[2013-12-30 23:53:48 | 003,179,218 | ---- | M] () -- C:\Users\admin\Desktop\pa.png
[2013-12-30 23:24:08 | 002,444,904 | ---- | M] () -- C:\Users\admin\Desktop\league.png
[2013-12-30 15:12:40 | 000,135,717 | ---- | M] () -- C:\Users\admin\Desktop\pa.jpg
[2013-12-29 16:09:11 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\ipla.lnk
[2013-12-27 19:31:05 | 000,123,062 | ---- | M] () -- C:\Users\admin\Desktop\ipko.jpg
[2013-12-20 08:05:31 | 001,395,080 | ---- | M] () -- C:\Users\admin\Desktop\wallpapers-adidas-tapeta-panoramiczna-jpg-panoramiczne-tapety-hd-2560x1024.jpg
[2013-12-20 08:03:40 | 001,302,517 | ---- | M] () -- C:\Users\admin\Desktop\wschod-slonca-nad-zielona-laka.jpg
[2013-12-19 09:07:21 | 000,037,047 | ---- | M] () -- C:\Users\admin\Desktop\1524689_566318210110693_684818453_n.jpg
[2013-12-17 00:18:14 | 000,304,140 | ---- | M] () -- C:\Users\admin\Desktop\AUK 1 06 Sygnalizacja w linii analogowej.pdf
[2013-12-17 00:07:10 | 000,030,323 | ---- | M] () -- C:\Users\admin\Desktop\Tytoń.odt
[2013-12-15 16:38:48 | 003,786,743 | ---- | M] () -- C:\Users\admin\Desktop\3.mp3
[2013-12-15 16:37:16 | 003,737,842 | ---- | M] () -- C:\Users\admin\Desktop\1.mp3
[2013-12-15 16:19:32 | 006,231,102 | ---- | M] () -- C:\Users\admin\Desktop\2.mp3
[2013-12-15 16:08:25 | 009,709,320 | ---- | M] () -- C:\Users\admin\Desktop\4.mp3
[2013-12-15 11:51:13 | 000,007,157 | ---- | M] () -- C:\Users\admin\Desktop\av.png
[2013-12-14 14:18:32 | 000,112,121 | ---- | M] () -- C:\Users\admin\Desktop\n4e3.png
[2013-12-12 14:03:29 | 006,361,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013-12-11 19:01:55 | 000,000,849 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2013-12-10 18:18:51 | 000,110,249 | ---- | M] () -- C:\Users\admin\Desktop\n4e2.png
[2013-12-09 16:20:36 | 002,071,579 | ---- | M] () -- C:\Users\admin\Desktop\GG .png
[2013-12-07 11:46:09 | 000,177,575 | ---- | M] () -- C:\Users\admin\Desktop\meru stream.png
[2013-12-07 11:41:18 | 000,096,653 | ---- | M] () -- C:\Users\admin\Desktop\layout meru.png
[2013-12-07 11:26:36 | 001,091,559 | ---- | M] () -- C:\Users\admin\Desktop\Screen02.png
[2013-12-06 21:52:09 | 000,000,453 | ---- | M] () -- C:\Users\admin\Desktop\efk.png
[2013-12-06 16:28:29 | 000,034,625 | ---- | M] () -- C:\Users\admin\Desktop\hud nr 1.png
[2013-12-06 16:21:26 | 000,205,370 | ---- | M] () -- C:\Users\admin\Desktop\hud nr 1.psd
[2013-12-06 16:07:21 | 000,241,419 | ---- | M] () -- C:\Users\admin\Desktop\blue.png
[2013-12-06 16:00:46 | 001,305,284 | ---- | M] () -- C:\Users\admin\Desktop\S7Reflex.wal
[2013-12-06 15:57:50 | 001,248,342 | ---- | M] () -- C:\Users\admin\Desktop\Airtel__Song_Catcher.wal
[2013-12-06 15:53:58 | 000,007,112 | ---- | M] () -- C:\Users\admin\Desktop\nowplaying.png
[2 C:\Users\admin\Documents\*.tmp files -> C:\Users\admin\Documents\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\admin\Desktop\*.tmp files -> C:\Users\admin\Desktop\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-01-04 17:17:01 | 000,001,972 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2014-01-03 14:05:03 | 005,812,349 | ---- | C] () -- C:\Users\admin\Desktop\znaesh li ty 2 podkład podwyższony.mp3
[2014-01-03 13:58:45 | 005,737,116 | ---- | C] () -- C:\Users\admin\Desktop\znaesh li ty 1 podkład podwyższony.mp3
[2014-01-03 13:55:25 | 005,727,676 | ---- | C] () -- C:\Users\admin\Desktop\maksim_-_znaesh'_li_ty instrumental 1.mp3
[2014-01-02 13:25:39 | 000,792,500 | ---- | C] () -- C:\Users\admin\Documents\cc_20140102_132534.reg
[2014-01-01 16:41:16 | 005,108,308 | ---- | C] () -- C:\Users\admin\Desktop\ProoStoo.rar
[2014-01-01 15:12:07 | 000,000,054 | ---- | C] () -- C:\Windows\JQHApp.dat
[2014-01-01 14:30:53 | 000,001,017 | ---- | C] () -- C:\Users\admin\Desktop\MK LOL.lnk
[2014-01-01 01:27:29 | 000,001,043 | ---- | C] () -- C:\Users\Public\Desktop\Scribblenauts Unlimited.lnk
[2013-12-31 20:02:48 | 000,000,993 | ---- | C] () -- C:\Users\Public\Desktop\Worms Forts - Oblężenie.lnk
[2013-12-31 13:51:04 | 041,634,453 | ---- | C] () -- C:\Users\admin\Desktop\League Of Legends Monopoly.rar
[2013-12-31 02:38:57 | 000,001,091 | ---- | C] () -- C:\Users\admin\Desktop\Cheat Engine.lnk
[2013-12-31 02:28:37 | 016,844,658 | ---- | C] () -- C:\Users\admin\Desktop\pa.psd
[2013-12-30 23:24:05 | 002,444,904 | ---- | C] () -- C:\Users\admin\Desktop\league.png
[2013-12-30 21:50:08 | 003,179,218 | ---- | C] () -- C:\Users\admin\Desktop\pa.png
[2013-12-30 14:37:27 | 000,135,717 | ---- | C] () -- C:\Users\admin\Desktop\pa.jpg
[2013-12-29 16:09:11 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\ipla.lnk
[2013-12-27 19:30:06 | 000,123,062 | ---- | C] () -- C:\Users\admin\Desktop\ipko.jpg
[2013-12-20 08:05:27 | 001,395,080 | ---- | C] () -- C:\Users\admin\Desktop\wallpapers-adidas-tapeta-panoramiczna-jpg-panoramiczne-tapety-hd-2560x1024.jpg
[2013-12-20 08:03:40 | 001,302,517 | ---- | C] () -- C:\Users\admin\Desktop\wschod-slonca-nad-zielona-laka.jpg
[2013-12-19 20:32:57 | 000,005,174 | ---- | C] () -- C:\Windows\SysWow64\nppt9x.vxd
[2013-12-19 18:36:50 | 000,001,462 | ---- | C] () -- C:\Users\Public\Desktop\Lineage II.lnk
[2013-12-19 09:07:20 | 000,037,047 | ---- | C] () -- C:\Users\admin\Desktop\1524689_566318210110693_684818453_n.jpg
[2013-12-17 00:18:13 | 000,304,140 | ---- | C] () -- C:\Users\admin\Desktop\AUK 1 06 Sygnalizacja w linii analogowej.pdf
[2013-12-17 00:07:09 | 000,030,323 | ---- | C] () -- C:\Users\admin\Desktop\Tytoń.odt
[2013-12-15 16:38:43 | 003,786,743 | ---- | C] () -- C:\Users\admin\Desktop\3.mp3
[2013-12-15 16:37:10 | 003,737,842 | ---- | C] () -- C:\Users\admin\Desktop\1.mp3
[2013-12-15 16:19:59 | 006,231,102 | ---- | C] () -- C:\Users\admin\Desktop\2.mp3
[2013-12-15 16:08:39 | 009,709,320 | ---- | C] () -- C:\Users\admin\Desktop\4.mp3
[2013-12-15 11:51:12 | 000,007,157 | ---- | C] () -- C:\Users\admin\Desktop\av.png
[2013-12-11 19:01:55 | 000,000,849 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk
[2013-12-11 19:01:55 | 000,000,849 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
[2013-12-10 18:28:00 | 000,112,121 | ---- | C] () -- C:\Users\admin\Desktop\n4e3.png
[2013-12-10 18:16:57 | 000,110,249 | ---- | C] () -- C:\Users\admin\Desktop\n4e2.png
[2013-12-09 16:20:31 | 002,071,579 | ---- | C] () -- C:\Users\admin\Desktop\GG .png
[2013-12-07 11:43:49 | 000,177,575 | ---- | C] () -- C:\Users\admin\Desktop\meru stream.png
[2013-12-07 11:41:16 | 000,096,653 | ---- | C] () -- C:\Users\admin\Desktop\layout meru.png
[2013-12-07 11:26:35 | 001,091,559 | ---- | C] () -- C:\Users\admin\Desktop\Screen02.png
[2013-12-06 21:52:08 | 000,000,453 | ---- | C] () -- C:\Users\admin\Desktop\efk.png
[2013-12-06 16:20:20 | 000,034,625 | ---- | C] () -- C:\Users\admin\Desktop\hud nr 1.png
[2013-12-06 16:19:26 | 000,205,370 | ---- | C] () -- C:\Users\admin\Desktop\hud nr 1.psd
[2013-12-06 16:00:53 | 001,305,284 | ---- | C] () -- C:\Users\admin\Desktop\S7Reflex.wal
[2013-12-06 15:59:07 | 001,248,342 | ---- | C] () -- C:\Users\admin\Desktop\Airtel__Song_Catcher.wal
[2013-12-06 15:53:58 | 000,007,112 | ---- | C] () -- C:\Users\admin\Desktop\nowplaying.png
[2013-12-06 15:47:28 | 000,241,419 | ---- | C] () -- C:\Users\admin\Desktop\blue.png
[2013-11-08 16:42:11 | 000,000,132 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Preferencje Adobe CS5 dla formatu Targa
[2013-11-04 23:20:47 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013-10-02 16:49:34 | 000,000,600 | ---- | C] () -- C:\Users\admin\AppData\Local\PUTTY.RND
[2013-04-22 20:08:41 | 000,045,056 | ---- | C] () -- C:\Users\admin\AppData\Roaming\RZR_0010fd864b41aa0546cd4f63bc89.db
[2013-04-09 14:16:01 | 000,276,480 | ---- | C] () -- C:\Users\admin\AppData\Roaming\chrtmp
[2013-01-09 21:52:14 | 078,021,208 | ---- | C] () -- C:\Users\admin\AppData\Roaming\.minecrazft.rar
[2013-01-08 08:49:22 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\qtmlClient.dll
[2012-12-23 15:07:37 | 000,081,938 | ---- | C] () -- C:\Users\admin\AppData\Roaming\.mineshaftersquaredminecraft.jar
[2012-12-23 15:07:37 | 000,076,964 | ---- | C] () -- C:\Users\admin\AppData\Roaming\.mineshaftersquaredminecraft_modified.jar
[2012-12-18 16:15:14 | 004,822,156 | ---- | C] () -- C:\Users\admin\AppData\Roaming\minecraft.jar
[2012-11-20 19:22:02 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2012-09-16 14:16:45 | 000,000,083 | ---- | C] () -- C:\Windows\wwp.INI
[2012-09-15 12:44:36 | 073,865,022 | ---- | C] () -- C:\Users\admin\AppData\Roaming\.minecraft.zip
[2012-08-09 08:40:32 | 000,065,576 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll
[2012-08-09 08:40:28 | 000,022,560 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll
[2012-07-24 13:37:29 | 072,843,032 | ---- | C] () -- C:\Users\admin\AppData\Roaming\.minecraft.rar
[2012-07-22 10:32:59 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
[2012-06-01 16:46:28 | 000,040,960 | R--- | C] () -- C:\Windows\SysWow64\psfind.dll
[2012-05-04 19:42:33 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2012-05-04 15:03:05 | 000,006,400 | ---- | C] () -- C:\ProgramData\NanoRepository.bin.bak
[2012-05-04 15:03:05 | 000,006,400 | ---- | C] () -- C:\ProgramData\NanoRepository.bin
[2012-05-01 13:42:17 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012-03-19 11:50:29 | 000,001,496 | ---- | C] () -- C:\Users\admin\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
[2012-01-18 05:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012-01-18 05:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012-01-18 05:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2011-10-20 14:59:30 | 000,011,776 | ---- | C] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-10-20 13:25:09 | 000,000,132 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
[2011-10-19 05:55:22 | 000,000,000 | ---- | C] () -- C:\ProgramData\0x0304A000.sfl
[2011-10-08 10:22:42 | 000,007,600 | ---- | C] () -- C:\Users\admin\AppData\Local\Resmon.ResmonCfg
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 06:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 05:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-03-31 21:08:47 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.minecraft
[2013-01-05 12:00:55 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.minecraft_backups
[2012-12-23 15:07:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.mineshaftersquared
[2013-06-07 16:45:39 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.mono
[2012-10-30 20:37:34 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.wtw
[2012-12-27 15:29:45 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Ashampoo
[2013-09-04 17:16:47 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Audacity
[2013-11-04 23:55:48 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\AVAST Software
[2013-05-12 18:22:02 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\AVG2013
[2013-11-25 21:42:57 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Awesomium
[2012-12-26 21:01:22 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BANDISOFT
[2014-01-02 13:38:53 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BitTorrent
[2012-02-05 19:19:47 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Canopus
[2013-05-13 07:02:50 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011-10-19 12:06:50 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2014-01-02 13:38:59 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
[2013-01-09 22:37:53 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Digidesign
[2013-06-11 17:43:13 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Downloaded Installations
[2014-01-02 13:38:53 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\FileZilla
[2012-10-30 20:37:34 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\GameRanger
[2011-12-16 21:39:31 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Hive Cluster
[2013-11-15 15:43:28 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ImgBurn
[2013-12-29 16:09:29 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ipla
[2012-04-04 22:22:21 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Leadertech
[2011-10-11 12:59:27 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\LolClient
[2012-05-25 09:47:14 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\LolClient2
[2011-12-04 13:12:49 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\MAXON
[2013-05-19 18:42:53 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Minecraft Skin Viewer
[2012-05-01 17:34:30 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Mount&Blade Warband
[2012-01-16 21:42:55 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\NationRed
[2012-06-22 15:26:57 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Need for Speed World
[2013-09-08 12:46:29 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\OBS
[2013-12-01 17:07:30 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\openvr
[2013-08-28 13:09:23 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Origin
[2013-01-09 22:33:09 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\PACE Anti-Piracy
[2012-10-30 20:37:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Panda Security
[2012-04-08 14:45:13 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\PhotoScape
[2011-10-27 16:04:07 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Publish Providers
[2012-07-28 14:35:28 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\QuickStoresToolbar
[2013-03-10 15:37:41 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\raidcall
[2012-09-30 13:01:09 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\RotMG.Production
[2012-10-30 20:37:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Sony
[2011-10-30 11:14:25 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Sony Creative Software Inc
[2012-10-06 09:34:34 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\SplitMediaLabs
[2012-09-06 21:20:26 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Spore
[2012-10-30 20:37:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Sports Interactive
[2011-12-04 09:06:38 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012-10-30 20:37:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Stardock
[2012-12-25 17:20:37 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Steinberg
[2014-01-03 20:05:19 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TeamViewer
[2013-07-11 10:34:33 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TechSmith
[2012-10-30 20:37:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Three Rings Design
[2013-04-06 13:42:00 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Tibia
[2012-07-06 22:25:52 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ToD
[2014-01-04 17:19:37 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TS3Client
[2012-03-30 17:50:40 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ts3overlay
[2012-10-30 20:37:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TuneUp Software
[2012-11-21 18:41:56 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Tunngle
[2012-04-08 19:21:05 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Unity
[2014-01-02 13:38:58 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\uTorrent
[2012-12-25 17:20:37 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\VST3 Presets
[2012-12-03 21:09:49 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Wargaming.net
[2013-07-11 15:33:51 | 000,000,000 | -HSD | M] -- C:\Users\admin\AppData\Roaming\wyUpdate AU
[2012-11-12 21:20:46 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2012-11-12 21:20:46 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2014-01-03 14:09:51 | 003,845,256 | ---- | C] ()(C:\Users\admin\Desktop\???S?? - ?????? ?? ??.mp3) -- C:\Users\admin\Desktop\МакSим - Знаешь ли ты.mp3
[2014-01-03 14:04:23 | 003,902,225 | ---- | C] ()(C:\Users\admin\Desktop\Maksim-?????? ?? ??-???????.mp3) -- C:\Users\admin\Desktop\Maksim-Знаешь ли ты-Караоке.mp3
[2014-01-03 13:56:13 | 003,902,225 | ---- | M] ()(C:\Users\admin\Desktop\Maksim-?????? ?? ??-???????.mp3) -- C:\Users\admin\Desktop\Maksim-Знаешь ли ты-Караоке.mp3
[2014-01-03 13:14:32 | 003,845,256 | ---- | M] ()(C:\Users\admin\Desktop\???S?? - ?????? ?? ??.mp3) -- C:\Users\admin\Desktop\МакSим - Знаешь ли ты.mp3
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 1302 bytes -> C:\ProgramData\Microsoft:PngkyvdTAXXb9MswQ
@Alternate Data Stream - 1237 bytes -> C:\ProgramData\Microsoft:gTRfibUZRUrevgaOj
@Alternate Data Stream - 1128 bytes -> C:\ProgramData\Microsoft:DKwSjTXPHJLY3DqcfUflk62
@Alternate Data Stream - 1113 bytes -> C:\Program Files (x86)\Common Files\System:vzoQw6axARgCTHKfNAUviNjINH
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86
@Alternate Data Stream - 1090 bytes -> C:\Users\admin\AppData\Local\Temp:YMgrbO9tBOjNi0PxyBFMUnVmFYRxr
@Alternate Data Stream - 1044 bytes -> C:\Users\admin\AppData\Local\Temp:6nkmWqbKF4TISWbGKSm

< End of report >