OTL logfile created on: 2014-05-19 23:24:23 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Marta\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17041) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,92 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 49,32% Memory free 7,83 Gb Paging File | 5,71 Gb Available in Paging File | 72,90% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 254,14 Gb Total Space | 43,35 Gb Free Space | 17,06% Space Free | Partition Type: NTFS Drive D: | 29,00 Gb Total Space | 26,77 Gb Free Space | 92,31% Space Free | Partition Type: NTFS Computer Name: MARTA-KOMPUTER | User Name: Marta | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-05-19 22:53:12 | 012,589,848 | ---- | M] (Malwarebytes Corp.) -- C:\Users\Marta\Downloads\mbar-1.07.0.1009.exe PRC - [2014-05-15 21:10:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marta\Downloads\OTL.exe PRC - [2014-05-15 21:05:34 | 001,863,856 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe PRC - [2014-05-13 21:39:00 | 003,873,704 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2014-05-13 21:39:00 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2014-05-13 21:15:02 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2014-03-10 18:17:10 | 003,448,608 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe PRC - [2014-02-11 17:08:58 | 002,288,928 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe PRC - [2014-02-11 13:46:16 | 000,781,088 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe PRC - [2014-01-24 16:09:44 | 000,342,336 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe PRC - [2014-01-14 14:50:06 | 000,881,952 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe PRC - [2014-01-08 02:29:35 | 001,180,472 | ---- | M] (Malwarebytes Corporation) -- C:\Users\Marta\Desktop\mbar\mbar.exe PRC - [2013-12-18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-06-26 19:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2013-06-26 19:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe PRC - [2012-03-28 14:49:11 | 000,140,456 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE PRC - [2011-03-31 12:45:18 | 000,375,872 | ---- | M] (Ralink Technology, Corp.) -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe PRC - [2011-01-29 01:29:36 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe PRC - [2010-12-20 12:30:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010-12-20 12:30:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010-11-21 05:24:03 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cmd.exe PRC - [2010-10-22 16:37:24 | 000,327,024 | ---- | M] (Egis Technology Inc. ) -- C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe PRC - [2010-02-03 02:08:56 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-05-15 21:05:34 | 016,361,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll MOD - [2014-05-13 21:15:02 | 003,839,088 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2014-01-24 19:39:51 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2013-01-15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl MOD - [2013-01-15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl MOD - [2013-01-15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl MOD - [2013-01-15 18:47:56 | 000,893,248 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll MOD - [2012-09-05 18:55:36 | 000,892,288 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 3\webres.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-05-13 21:39:00 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2014-03-06 10:29:14 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2011-02-15 14:26:42 | 000,956,192 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2010-09-22 20:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2014-05-15 21:05:34 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-05-15 11:04:29 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2014-05-13 21:15:02 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-02-25 23:57:46 | 000,568,512 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2014-01-24 16:09:44 | 000,342,336 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe -- (IMFservice) SRV - [2014-01-14 14:50:06 | 000,881,952 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe -- (AdvancedSystemCareService7) SRV - [2013-12-18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2013-06-26 19:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2013-06-26 19:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2012-03-28 14:49:11 | 000,140,456 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC) SRV - [2011-03-31 12:45:56 | 000,454,208 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe -- (RalinkRegistryWriter64) SRV - [2011-03-31 12:45:18 | 000,375,872 | ---- | M] (Ralink Technology, Corp.) [Auto | Running] -- C:\Program Files (x86)\Ralink\Common\RaRegistry.exe -- (RalinkRegistryWriter) SRV - [2011-03-04 19:34:06 | 000,621,632 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe -- (RaMediaServer) SRV - [2010-12-20 12:30:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2010-12-20 12:30:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010-10-22 16:37:24 | 000,327,024 | ---- | M] (Egis Technology Inc. ) [Auto | Running] -- C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe -- (EgisTec Service Help) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-05-19 22:53:56 | 000,119,000 | ---- | M] (Malwarebytes Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy) DRV:[b]64bit:[/b] - [2014-05-19 22:53:29 | 000,091,352 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon) DRV:[b]64bit:[/b] - [2014-05-15 14:20:37 | 001,039,096 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2014-05-15 14:20:37 | 000,423,240 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP) DRV:[b]64bit:[/b] - [2014-05-15 14:20:37 | 000,085,328 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm) DRV:[b]64bit:[/b] - [2014-05-15 11:04:26 | 005,363,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2014-05-15 11:03:45 | 000,450,520 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2014-05-15 11:02:52 | 000,034,544 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI) DRV:[b]64bit:[/b] - [2014-05-13 21:39:05 | 000,208,416 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswVmm.sys -- (aswVmm) DRV:[b]64bit:[/b] - [2014-05-13 21:39:04 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2014-05-13 21:39:04 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2014-05-13 21:39:04 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt) DRV:[b]64bit:[/b] - [2014-05-13 21:39:04 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid) DRV:[b]64bit:[/b] - [2014-04-28 22:52:41 | 000,100,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2014-04-28 22:51:54 | 008,873,688 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc) DRV:[b]64bit:[/b] - [2014-04-28 22:49:55 | 000,331,992 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR) DRV:[b]64bit:[/b] - [2014-04-28 22:49:04 | 000,901,848 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2013-12-24 10:40:32 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver) DRV:[b]64bit:[/b] - [2013-12-19 15:11:27 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2013-06-26 19:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2013-06-26 19:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2013-06-26 19:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2013-06-26 19:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2013-06-03 11:07:55 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-02-11 13:33:31 | 000,057,952 | ---- | M] (Lenovo) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fbfmon.sys -- (fbfmon) DRV:[b]64bit:[/b] - [2012-02-11 13:33:31 | 000,013,408 | ---- | M] (Lenovo) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BPntDrv.sys -- (BPntDrv) DRV:[b]64bit:[/b] - [2012-02-11 13:31:20 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr) DRV:[b]64bit:[/b] - [2012-02-11 13:31:18 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC) DRV:[b]64bit:[/b] - [2012-02-11 13:18:44 | 000,055,880 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\EgisTecFF.sys -- (EgisTecFF) DRV:[b]64bit:[/b] - [2011-09-29 05:23:24 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-09-29 05:23:24 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-09-06 01:00:04 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag) DRV:[b]64bit:[/b] - [2011-09-06 01:00:02 | 000,035,840 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem) DRV:[b]64bit:[/b] - [2011-04-28 15:20:30 | 001,617,472 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux) DRV:[b]64bit:[/b] - [2011-02-18 10:11:54 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2011-02-15 08:45:16 | 000,349,736 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (BTWAMPFL) DRV:[b]64bit:[/b] - [2011-02-15 08:45:12 | 000,138,280 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2011-02-15 08:45:12 | 000,107,560 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2011-02-15 08:45:12 | 000,039,464 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2011-02-15 08:45:12 | 000,021,416 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2011-02-14 05:51:32 | 000,138,536 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2011-01-29 01:29:58 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-10-28 12:16:24 | 004,716,608 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2009-07-21 16:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2013-11-19 16:10:36 | 000,034,848 | ---- | M] (IObit.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys -- (RegFilter) DRV - [2013-11-19 16:10:36 | 000,023,016 | ---- | M] (IObit.com) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys -- (UrlFilter) DRV - [2013-03-23 15:48:48 | 000,023,048 | ---- | M] (IObit) [File_System | Disabled | Stopped] -- C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys -- (FileMonitor) DRV - [2010-11-01 07:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\gamebooster3\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = http://www.google.com IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\..\SearchScopes,DefaultScope = {6D5C8BD8-9111-480F-931A-B621E7200BF6} IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7LENN_plPL476 IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\..\SearchScopes\{6D5C8BD8-9111-480F-931A-B621E7200BF6}: "URL" = https://www.google.com/search?q={searchTerms} IE - HKU\S-1-5-21-936473459-483714640-333351999-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "https://www.google.pl/" FF - prefs.js..extensions.enabledAddons: ascsurfingprotection%40iobit.com:1.0 FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:9.0.2018.95 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-13 21:39:06 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\lyrmix@lyrmix.net: C:\Program Files (x86)\Lyrmix\FF\ FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-10-09 21:29:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marta\AppData\Roaming\Mozilla\Extensions [2014-03-17 16:33:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\extensions [2014-04-28 22:43:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions [2012-09-11 14:58:15 | 000,000,000 | ---D | M] (OneClickDownloader) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com [2014-03-17 16:33:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\searchplugins [2014-04-28 22:43:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\1kbes2vt.default\extensions [2014-04-28 22:43:53 | 000,000,000 | ---D | M] (Advanced SystemCare Surfing Protection) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\1kbes2vt.default\extensions\ascsurfingprotection@iobit.com [2014-04-28 22:43:57 | 000,000,000 | ---D | M] (Advanced SystemCare Surfing Protection) -- C:\Users\Marta\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions\ascsurfingprotection@iobit.com [2014-05-13 21:14:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014-05-13 21:15:04 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} File not found (No name found) -- C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF [2014-05-13 21:39:06 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\ CHR - Extension: No name found = C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\ CHR - Extension: No name found = C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: No name found = C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: No name found = C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\npgpgjiajblpbldjkelafjjhfjcddlba\4.4_0\ CHR - Extension: No name found = C:\Users\Marta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL (IObit) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-936473459-483714640-333351999-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\windows\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\windows\SysNative\igfxtray.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Lenovo EE Boot Optimizer] C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe (Lenovo) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\windows\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_LENOVO_MICPKEY] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe (CyberLink Corp.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EBBB56E7-7981-45C2-9607-E9972C49A7F1}: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{4b17948e-cc2c-11e2-92fe-f0def1c6480f}\Shell - "" = AutoRun O33 - MountPoints2\{4b17948e-cc2c-11e2-92fe-f0def1c6480f}\Shell\AutoRun\command - "" = E:\_AUTORUN\AUTORUN.EXE O33 - MountPoints2\{5ebe63e8-d2fd-11e1-b2b1-f0def1c6480f}\Shell - "" = AutoRun O33 - MountPoints2\{5ebe63e8-d2fd-11e1-b2b1-f0def1c6480f}\Shell\AutoRun\command - "" = E:\HPLauncher.exe O33 - MountPoints2\{6e595b95-fb54-11e1-a977-f0def1c6480f}\Shell - "" = AutoRun O33 - MountPoints2\{6e595b95-fb54-11e1-a977-f0def1c6480f}\Shell\AutoRun\command - "" = E:\_AUTORUN\AUTORUN.EXE O33 - MountPoints2\{7ac029b3-7684-11e1-b224-642737cafabd}\Shell - "" = AutoRun O33 - MountPoints2\{7ac029b3-7684-11e1-b224-642737cafabd}\Shell\AutoRun\command - "" = G:\_AUTORUN\AUTORUN.EXE O33 - MountPoints2\{7ac029c4-7684-11e1-b224-642737cafabd}\Shell - "" = AutoRun O33 - MountPoints2\{7ac029c4-7684-11e1-b224-642737cafabd}\Shell\AutoRun\command - "" = H:\_AUTORUN\AUTORUN.EXE O33 - MountPoints2\{a0a68930-7c97-11e1-b133-f0def1c6480f}\Shell - "" = AutoRun O33 - MountPoints2\{a0a68930-7c97-11e1-b133-f0def1c6480f}\Shell\AutoRun\command - "" = E:\autorun.exe O33 - MountPoints2\{d3a980f9-bfbf-11e2-a66b-f0def1c6480f}\Shell - "" = AutoRun O33 - MountPoints2\{d3a980f9-bfbf-11e2-a66b-f0def1c6480f}\Shell\AutoRun\command - "" = G:\LGAutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-05-19 22:53:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable) [2014-05-19 22:53:29 | 000,091,352 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbamchameleon.sys [2014-05-19 22:53:27 | 000,000,000 | ---D | C] -- C:\Users\Marta\Desktop\mbar [2014-05-15 13:01:16 | 000,119,000 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys [2014-05-15 13:00:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2014-05-15 12:20:57 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2014-05-15 12:20:57 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2014-05-15 12:20:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2014-05-15 12:02:06 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\lsasrv.dll [2014-05-15 12:02:05 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe [2014-05-15 12:02:04 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe [2014-05-15 12:02:04 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\winlogon.exe [2014-05-15 12:02:03 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe [2014-05-15 12:02:03 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\objsel.dll [2014-05-15 12:02:01 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\objsel.dll [2014-05-15 12:02:00 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\KernelBase.dll [2014-05-15 12:01:58 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cngprovider.dll [2014-05-15 12:01:58 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\adprovider.dll [2014-05-15 12:01:58 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\capiprovider.dll [2014-05-15 12:01:58 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dpapiprovider.dll [2014-05-15 12:01:58 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\cngprovider.dll [2014-05-15 12:01:58 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\adprovider.dll [2014-05-15 12:01:58 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\capiprovider.dll [2014-05-15 12:01:58 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\dpapiprovider.dll [2014-05-15 12:01:58 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dimsroam.dll [2014-05-15 12:01:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\dimsroam.dll [2014-05-15 12:01:57 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspicli.dll [2014-05-15 12:01:57 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wincredprovider.dll [2014-05-15 12:01:57 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wincredprovider.dll [2014-05-15 12:01:53 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\sspisrv.dll [2014-05-15 12:01:52 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\secur32.dll [2014-05-15 11:04:29 | 000,279,024 | ---- | C] (Intel Corporation) -- C:\windows\SysWow64\IntelCpHeciSvc.exe [2014-05-15 11:04:28 | 000,515,568 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxsrvc.exe [2014-05-15 11:04:28 | 000,439,808 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrfra.lrc [2014-05-15 11:04:28 | 000,439,296 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrrus.lrc [2014-05-15 11:04:28 | 000,439,296 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrrom.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrsky.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrptg.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrplk.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrnld.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrita.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrhrv.lrc [2014-05-15 11:04:28 | 000,438,272 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrhun.lrc [2014-05-15 11:04:28 | 000,438,272 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrfin.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrtrk.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrsve.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrslv.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrptb.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrnor.lrc [2014-05-15 11:04:28 | 000,437,248 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrtha.lrc [2014-05-15 11:04:28 | 000,435,712 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrheb.lrc [2014-05-15 11:04:28 | 000,432,128 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrjpn.lrc [2014-05-15 11:04:28 | 000,431,104 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrkor.lrc [2014-05-15 11:04:28 | 000,410,624 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxTMM.dll [2014-05-15 11:04:28 | 000,172,016 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxtray.exe [2014-05-15 11:04:28 | 000,116,224 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxCoIn_v3517.dll [2014-05-15 11:04:27 | 012,617,728 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igdumd64.dll [2014-05-15 11:04:27 | 000,442,880 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxdev.dll [2014-05-15 11:04:27 | 000,442,352 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxpers.exe [2014-05-15 11:04:27 | 000,440,320 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrell.lrc [2014-05-15 11:04:27 | 000,439,808 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxresn.lrc [2014-05-15 11:04:27 | 000,438,784 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrdeu.lrc [2014-05-15 11:04:27 | 000,438,272 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrcsy.lrc [2014-05-15 11:04:27 | 000,437,248 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrdan.lrc [2014-05-15 11:04:27 | 000,435,712 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrara.lrc [2014-05-15 11:04:27 | 000,429,056 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrcht.lrc [2014-05-15 11:04:27 | 000,428,544 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrchs.lrc [2014-05-15 11:04:27 | 000,384,512 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxpph.dll [2014-05-15 11:04:27 | 000,330,752 | ---- | C] (Intel Corporation) -- C:\windows\SysWow64\igfxdv32.dll [2014-05-15 11:04:27 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxrenu.lrc [2014-05-15 11:04:27 | 000,254,960 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxext.exe [2014-05-15 11:04:27 | 000,142,336 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxdo.dll [2014-05-15 11:04:27 | 000,126,976 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxcpl.cpl [2014-05-15 11:04:27 | 000,028,672 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\igfxexps.dll [2014-05-15 11:04:27 | 000,025,088 | ---- | C] (Intel Corporation) -- C:\windows\SysWow64\igfxexps32.dll [2014-05-15 11:04:26 | 011,049,984 | ---- | C] (Intel Corporation) -- C:\windows\SysWow64\igdumd32.dll [2014-05-15 11:04:26 | 005,363,520 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\drivers\igdkmd64.sys [2014-05-15 11:04:24 | 013,031,424 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\ig4icd64.dll [2014-05-15 11:04:24 | 011,176,448 | ---- | C] (Intel Corporation) -- C:\windows\SysWow64\igd10umd32.dll [2014-05-15 11:04:24 | 010,812,928 | ---- | C] (Intel Corporation) -- C:\windows\SysWow64\ig4icd32.dll [2014-05-15 11:04:24 | 000,399,856 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\hkcmd.exe [2014-05-15 11:04:23 | 005,904,880 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\GfxUI.exe [2014-05-15 11:04:23 | 000,185,840 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\difx64.exe [2014-05-15 11:04:23 | 000,175,104 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\gfxSrvc.dll [2014-05-15 11:03:45 | 000,450,520 | ---- | C] (Intel(R) Corporation) -- C:\windows\SysNative\drivers\IntcDAud.sys [2014-05-15 11:02:51 | 000,034,544 | ---- | C] (Synaptics Incorporated) -- C:\windows\SysNative\drivers\Smb_driver_Intel.sys [2014-05-13 21:39:03 | 000,043,152 | ---- | C] (AVAST Software) -- C:\windows\avastSS.scr [2014-05-13 21:14:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-05-07 15:33:08 | 000,000,000 | -HSD | C] -- C:\Users\Marta\AppData\Local\EmieUserList [2014-05-07 15:33:08 | 000,000,000 | -HSD | C] -- C:\Users\Marta\AppData\Local\EmieSiteList [2014-04-29 00:02:37 | 000,000,000 | ---D | C] -- C:\Users\Marta\AppData\Roaming\Oracle [2014-04-29 00:01:51 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaws.exe [2014-04-29 00:01:44 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaw.exe [2014-04-29 00:01:44 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\java.exe [2014-04-29 00:01:44 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\WindowsAccessBridge-32.dll [2014-04-29 00:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2014-04-28 23:46:52 | 000,000,000 | ---D | C] -- C:\windows\tasks\TaskDisabled [2014-04-28 23:23:15 | 000,027,456 | ---- | C] (IObit) -- C:\windows\SysNative\RegistryDefragBootTime.exe [2014-04-28 23:01:36 | 000,034,080 | ---- | C] (IObit) -- C:\windows\SysNative\SmartDefragBootTime.exe [2014-04-28 23:01:28 | 000,128,288 | ---- | C] (IObit) -- C:\windows\SysNative\IObitSmartDefragExtension.dll20140428230448.dll [2014-04-28 23:01:28 | 000,128,288 | ---- | C] (IObit) -- C:\windows\SysNative\IObitSmartDefragExtension.dll20140428230136.dll [2014-04-28 23:01:28 | 000,128,288 | ---- | C] (IObit) -- C:\windows\SysNative\IObitSmartDefragExtension.dll [2014-04-28 23:01:27 | 000,021,184 | ---- | C] (IObit) -- C:\windows\SysNative\drivers\SmartDefragDriver.sys [2014-04-28 23:01:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3 [2014-04-28 23:00:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter [2014-04-28 22:52:41 | 001,795,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\WdfCoInstaller01011.dll [2014-04-28 22:52:41 | 000,100,312 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\drivers\TeeDriverx64.sys [2014-04-28 22:51:54 | 008,873,688 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\drivers\rtsuvc.sys [2014-04-28 22:51:54 | 002,628,312 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\RtCamU64.exe [2014-04-28 22:51:54 | 000,474,328 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtCamX64.dll [2014-04-28 22:51:54 | 000,421,592 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysWow64\RtCamX.dll [2014-04-28 22:50:24 | 002,157,704 | ---- | C] (Yamaha Corporation) -- C:\windows\SysNative\YamahaAE.dll [2014-04-28 22:50:24 | 002,101,848 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\WavesGUILib64.dll [2014-04-28 22:50:24 | 001,361,336 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tosade.dll [2014-04-28 22:50:24 | 000,871,856 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tossaeapo64.dll [2014-04-28 22:50:24 | 000,582,056 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tosasfapo64.dll [2014-04-28 22:50:24 | 000,162,224 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\toseaeapo64.dll [2014-04-28 22:50:24 | 000,065,944 | ---- | C] (TOSHIBA CORPORATION.) -- C:\windows\SysNative\tepeqapo64.dll [2014-04-28 22:50:23 | 000,836,544 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo264.dll [2014-04-28 22:50:23 | 000,148,416 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo.dll [2014-04-28 22:50:21 | 000,724,728 | ---- | C] (DTS, Inc.) -- C:\windows\SysNative\sltech64.dll [2014-04-28 22:50:21 | 000,245,496 | ---- | C] (TODO: ) -- C:\windows\SysNative\slprp64.dll [2014-04-28 22:50:20 | 001,045,752 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\slcnt64.dll [2014-04-28 22:50:20 | 000,947,760 | ---- | C] (Sony Corporation) -- C:\windows\SysNative\SFSS_APO.dll [2014-04-28 22:50:20 | 000,899,320 | ---- | C] (DTS, Inc.) -- C:\windows\SysNative\sl3apo64.dll [2014-04-28 22:50:20 | 000,221,024 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SFNHK64.dll [2014-04-28 22:50:20 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SFCOM64.dll [2014-04-28 22:50:19 | 002,825,432 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtPgEx64.dll [2014-04-28 22:50:19 | 002,792,152 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkAPO64.dll [2014-04-28 22:50:19 | 001,958,616 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTSnMg64.cpl [2014-04-28 22:50:19 | 001,024,216 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkApi64.dll [2014-04-28 22:50:19 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtlCPAPI64.dll [2014-04-28 22:50:19 | 000,078,688 | ---- | C] (Synopsys, Inc.) -- C:\windows\SysNative\SFAPO64.dll [2014-04-28 22:50:19 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCoLDR64.dll [2014-04-28 22:50:18 | 056,270,848 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoRes64.dat [2014-04-28 22:50:18 | 001,286,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTCOM64.dll [2014-04-28 22:50:18 | 000,946,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoInstII64.dll [2014-04-28 22:50:18 | 000,624,344 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtDataProc64.dll [2014-04-28 22:50:17 | 007,164,176 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEP64A.dll [2014-04-28 22:50:17 | 005,752,072 | ---- | C] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICAPOlfx.dll [2014-04-28 22:50:17 | 000,942,384 | ---- | C] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICAPOSettingsIPC.dll [2014-04-28 22:50:17 | 000,906,800 | ---- | C] (Sony Corporation) -- C:\windows\SysNative\MISS_APO.dll [2014-04-28 22:50:17 | 000,434,960 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EED64A.dll [2014-04-28 22:50:17 | 000,141,584 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEL64A.dll [2014-04-28 22:50:17 | 000,124,176 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEA64A.dll [2014-04-28 22:50:17 | 000,075,024 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\R4EEG64A.dll [2014-04-28 22:50:16 | 028,310,104 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioVnA64.dll [2014-04-28 22:50:16 | 012,793,944 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO3064.dll [2014-04-28 22:50:16 | 003,923,032 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioVnN64.dll [2014-04-28 22:50:16 | 001,313,904 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxSpeechAPO64.dll [2014-04-28 22:50:16 | 000,938,608 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO2064.dll [2014-04-28 22:50:16 | 000,662,784 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVolumeSDAPO.dll [2014-04-28 22:50:15 | 014,737,496 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioRealtek64.dll [2014-04-28 22:50:15 | 002,319,960 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO6064.dll [2014-04-28 22:50:15 | 002,037,336 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioEQ64.dll [2014-04-28 22:50:15 | 001,932,888 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioRealtek264.dll [2014-04-28 22:50:15 | 001,419,376 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO5064.dll [2014-04-28 22:50:15 | 001,419,376 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO4064.dll [2014-04-28 22:50:15 | 001,033,304 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPOShell64.dll [2014-04-28 22:50:15 | 000,790,272 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysWow64\MaxxAudioAPOShell.dll [2014-04-28 22:50:15 | 000,663,296 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO30.dll [2014-04-28 22:50:15 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\windows\SysNative\KAAPORT64.dll [2014-04-28 22:50:14 | 006,217,904 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPP64A.dll [2014-04-28 22:50:14 | 002,770,976 | ---- | C] (Fortemedia Corporation) -- C:\windows\SysNative\FMAPO64.dll [2014-04-28 22:50:14 | 001,938,608 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPD64A.dll [2014-04-28 22:50:14 | 001,756,264 | ---- | C] (DTS) -- C:\windows\SysNative\DTSS2SpeakerDLL64.dll [2014-04-28 22:50:14 | 001,568,360 | ---- | C] (DTS) -- C:\windows\SysNative\DTSS2HeadphoneDLL64.dll [2014-04-28 22:50:14 | 001,486,952 | ---- | C] (DTS) -- C:\windows\SysNative\DTSBoostDLL64.dll [2014-04-28 22:50:14 | 000,728,680 | ---- | C] (DTS) -- C:\windows\SysNative\DTSBassEnhancementDLL64.dll [2014-04-28 22:50:14 | 000,712,296 | ---- | C] (DTS) -- C:\windows\SysNative\DTSSymmetryDLL64.dll [2014-04-28 22:50:14 | 000,693,352 | ---- | C] (DTS) -- C:\windows\SysNative\DTSVoiceClarityDLL64.dll [2014-04-28 22:50:14 | 000,501,184 | ---- | C] (DTS) -- C:\windows\SysNative\DTSU2PLFX64.dll [2014-04-28 22:50:14 | 000,491,112 | ---- | C] (DTS) -- C:\windows\SysNative\DTSNeoPCDLL64.dll [2014-04-28 22:50:14 | 000,487,360 | ---- | C] (DTS) -- C:\windows\SysNative\DTSU2PGFX64.dll [2014-04-28 22:50:14 | 000,432,744 | ---- | C] (DTS) -- C:\windows\SysNative\DTSLimiterDLL64.dll [2014-04-28 22:50:14 | 000,428,648 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGainCompensatorDLL64.dll [2014-04-28 22:50:14 | 000,415,680 | ---- | C] (DTS) -- C:\windows\SysNative\DTSU2PREC64.dll [2014-04-28 22:50:14 | 000,313,520 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPO64A.dll [2014-04-28 22:50:14 | 000,260,272 | ---- | C] (Dolby Laboratories) -- C:\windows\SysNative\DDPA64.dll [2014-04-28 22:50:14 | 000,242,792 | ---- | C] (DTS) -- C:\windows\SysNative\DTSLFXAPO64.dll [2014-04-28 22:50:14 | 000,242,792 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGFXAPO64.dll [2014-04-28 22:50:14 | 000,241,768 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGFXAPONS64.dll [2014-04-28 22:50:14 | 000,113,576 | ---- | C] (Real Sound Lab SIA) -- C:\windows\SysNative\CONEQMSAPOGUILibrary.dll [2014-04-28 22:50:13 | 000,209,096 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAC64.dll [2014-04-28 22:50:13 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAR64.dll [2014-04-28 22:50:05 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics [2014-04-28 22:50:02 | 001,721,576 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\WdfCoInstaller01009.dll [2014-04-28 22:49:55 | 000,331,992 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\drivers\RtsUVStor.sys [2014-04-28 22:49:54 | 009,889,352 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysWow64\RsCRIcon.dll [2014-04-28 22:49:04 | 000,901,848 | ---- | C] (Realtek ) -- C:\windows\SysNative\drivers\Rt64win7.sys [2014-04-28 22:49:04 | 000,073,800 | ---- | C] (Realtek Semiconductor Corporation) -- C:\windows\SysNative\RtNicProp64.dll [2014-04-28 22:43:58 | 000,000,000 | ---D | C] -- C:\Users\Marta\AppData\Roaming\Apple Computer [2014-04-28 22:43:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller [2014-04-28 22:43:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData [2014-04-28 22:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} [2014-04-28 22:43:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7 [2014-04-28 22:41:58 | 000,000,000 | ---D | C] -- C:\Users\Marta\AppData\Roaming\IObit [2014-04-28 22:41:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster [2014-04-28 22:41:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit [2014-04-28 22:27:28 | 000,000,000 | ---D | C] -- C:\Users\Marta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z [2014-04-28 22:27:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GPU-Z [2014-04-28 22:21:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID [2014-04-28 22:21:14 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID [2014-04-28 22:09:36 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2014-04-28 22:09:35 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2014-04-28 22:09:33 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll [2014-04-28 22:09:26 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe [2014-04-28 22:09:26 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll [2014-04-28 22:09:26 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll [2014-04-28 22:09:26 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll [2014-04-28 22:09:24 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll [2014-04-28 22:09:24 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll [2014-04-28 22:09:24 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll [2014-04-28 22:09:24 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll [2014-04-28 22:09:23 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll [2014-04-28 22:09:23 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll [2014-04-28 22:09:21 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe [2014-04-28 22:09:21 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe [2014-04-28 22:09:21 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll [2014-04-28 22:09:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll [2014-04-28 22:09:21 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll [2014-04-28 22:09:21 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll [2014-04-28 22:09:17 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe [2014-04-28 22:09:17 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll [2014-04-28 22:09:17 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll [2014-04-28 22:09:17 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll [2014-04-28 22:09:17 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe [2014-04-28 22:09:17 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll [2014-04-28 22:09:17 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll [2014-04-28 22:09:15 | 001,967,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl [2014-04-28 22:09:14 | 002,043,904 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl [2014-04-28 22:09:09 | 005,784,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll [2014-04-28 22:08:53 | 000,000,000 | --SD | C] -- C:\windows\SysNative\CompatTel [2014-04-28 22:08:18 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\aepdu.dll [2014-04-28 22:08:17 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\aeinv.dll [1 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ] [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-05-19 22:53:56 | 000,119,000 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys [2014-05-19 22:53:29 | 000,091,352 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbamchameleon.sys [2014-05-19 22:39:00 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job [2014-05-19 18:50:57 | 000,021,280 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-05-19 18:50:57 | 000,021,280 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-05-19 18:44:21 | 000,509,467 | ---- | M] () -- C:\windows\SysNative\fastboot.set [2014-05-19 18:43:06 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2014-05-19 18:42:56 | 3153,702,912 | -HS- | M] () -- C:\hiberfil.sys [2014-05-15 21:05:34 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe [2014-05-15 21:05:34 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl [2014-05-15 14:20:37 | 001,039,096 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsnx.sys [2014-05-15 14:20:37 | 000,423,240 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsp.sys [2014-05-15 14:20:37 | 000,085,328 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswstm.sys [2014-05-15 11:04:29 | 000,279,024 | ---- | M] (Intel Corporation) -- C:\windows\SysWow64\IntelCpHeciSvc.exe [2014-05-15 11:04:28 | 009,007,616 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxress.dll [2014-05-15 11:04:28 | 000,515,568 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxsrvc.exe [2014-05-15 11:04:28 | 000,439,808 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrfra.lrc [2014-05-15 11:04:28 | 000,439,296 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrrus.lrc [2014-05-15 11:04:28 | 000,439,296 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrrom.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrsky.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrptg.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrplk.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrnld.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrita.lrc [2014-05-15 11:04:28 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrhrv.lrc [2014-05-15 11:04:28 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrhun.lrc [2014-05-15 11:04:28 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrfin.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrtrk.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrsve.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrslv.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrptb.lrc [2014-05-15 11:04:28 | 000,437,760 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrnor.lrc [2014-05-15 11:04:28 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrtha.lrc [2014-05-15 11:04:28 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrheb.lrc [2014-05-15 11:04:28 | 000,432,128 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrjpn.lrc [2014-05-15 11:04:28 | 000,431,104 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrkor.lrc [2014-05-15 11:04:28 | 000,410,624 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxTMM.dll [2014-05-15 11:04:28 | 000,172,016 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxtray.exe [2014-05-15 11:04:28 | 000,116,224 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxCoIn_v3517.dll [2014-05-15 11:04:28 | 000,064,000 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxsrvc.dll [2014-05-15 11:04:28 | 000,017,074 | ---- | M] () -- C:\windows\SysNative\iglhxs64.vp [2014-05-15 11:04:27 | 012,617,728 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igdumd64.dll [2014-05-15 11:04:27 | 011,049,984 | ---- | M] (Intel Corporation) -- C:\windows\SysWow64\igdumd32.dll [2014-05-15 11:04:27 | 000,442,880 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxdev.dll [2014-05-15 11:04:27 | 000,442,352 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxpers.exe [2014-05-15 11:04:27 | 000,440,320 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrell.lrc [2014-05-15 11:04:27 | 000,439,808 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxresn.lrc [2014-05-15 11:04:27 | 000,438,784 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrdeu.lrc [2014-05-15 11:04:27 | 000,438,272 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrcsy.lrc [2014-05-15 11:04:27 | 000,437,248 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrdan.lrc [2014-05-15 11:04:27 | 000,435,712 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrara.lrc [2014-05-15 11:04:27 | 000,429,056 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrcht.lrc [2014-05-15 11:04:27 | 000,428,544 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrchs.lrc [2014-05-15 11:04:27 | 000,384,512 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxpph.dll [2014-05-15 11:04:27 | 000,330,752 | ---- | M] (Intel Corporation) -- C:\windows\SysWow64\igfxdv32.dll [2014-05-15 11:04:27 | 000,286,208 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxrenu.lrc [2014-05-15 11:04:27 | 000,254,960 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxext.exe [2014-05-15 11:04:27 | 000,142,336 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxdo.dll [2014-05-15 11:04:27 | 000,126,976 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxcpl.cpl [2014-05-15 11:04:27 | 000,028,672 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igfxexps.dll [2014-05-15 11:04:27 | 000,025,088 | ---- | M] (Intel Corporation) -- C:\windows\SysWow64\igfxexps32.dll [2014-05-15 11:04:27 | 000,009,728 | ---- | M] ( ) -- C:\windows\SysNative\IGFXDEVLib.dll [2014-05-15 11:04:26 | 005,363,520 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\drivers\igdkmd64.sys [2014-05-15 11:04:25 | 012,859,392 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\igd10umd64.dll [2014-05-15 11:04:25 | 011,176,448 | ---- | M] (Intel Corporation) -- C:\windows\SysWow64\igd10umd32.dll [2014-05-15 11:04:25 | 000,099,328 | ---- | M] () -- C:\windows\SysNative\igdde64.dll [2014-05-15 11:04:25 | 000,078,848 | ---- | M] () -- C:\windows\SysWow64\igdde32.dll [2014-05-15 11:04:24 | 013,031,424 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\ig4icd64.dll [2014-05-15 11:04:24 | 010,812,928 | ---- | M] (Intel Corporation) -- C:\windows\SysWow64\ig4icd32.dll [2014-05-15 11:04:24 | 005,904,880 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\GfxUI.exe [2014-05-15 11:04:24 | 000,399,856 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\hkcmd.exe [2014-05-15 11:04:24 | 000,110,592 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\hccutils.dll [2014-05-15 11:04:23 | 000,185,840 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\difx64.exe [2014-05-15 11:04:23 | 000,175,104 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\gfxSrvc.dll [2014-05-15 11:03:45 | 000,450,520 | ---- | M] (Intel(R) Corporation) -- C:\windows\SysNative\drivers\IntcDAud.sys [2014-05-15 11:03:36 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf [2014-05-15 11:02:52 | 000,034,544 | ---- | M] (Synaptics Incorporated) -- C:\windows\SysNative\drivers\Smb_driver_Intel.sys [2014-05-13 21:39:05 | 000,208,416 | ---- | M] () -- C:\windows\SysNative\drivers\aswVmm.sys [2014-05-13 21:39:04 | 001,039,096 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsnx.sys.1400156434597 [2014-05-13 21:39:04 | 000,423,240 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswsp.sys.1400156434597 [2014-05-13 21:39:04 | 000,334,648 | ---- | M] (AVAST Software) -- C:\windows\SysNative\aswBoot.exe [2014-05-13 21:39:04 | 000,093,568 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswRdr2.sys [2014-05-13 21:39:04 | 000,079,184 | ---- | M] (AVAST Software) -- C:\windows\SysNative\drivers\aswMonFlt.sys [2014-05-13 21:39:04 | 000,065,776 | ---- | M] () -- C:\windows\SysNative\drivers\aswRvrt.sys [2014-05-13 21:39:04 | 000,029,208 | ---- | M] () -- C:\windows\SysNative\drivers\aswHwid.sys [2014-05-13 21:39:03 | 000,043,152 | ---- | M] (AVAST Software) -- C:\windows\avastSS.scr [2014-05-06 05:00:47 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2014-05-06 04:10:52 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2014-04-28 23:32:59 | 000,000,000 | ---- | M] () -- C:\asc_rdflag [2014-04-28 22:52:43 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf [2014-04-28 22:52:42 | 001,795,952 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\WdfCoInstaller01011.dll [2014-04-28 22:52:41 | 000,100,312 | ---- | M] (Intel Corporation) -- C:\windows\SysNative\drivers\TeeDriverx64.sys [2014-04-28 22:51:54 | 008,873,688 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\drivers\rtsuvc.sys [2014-04-28 22:51:54 | 002,628,312 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\RtCamU64.exe [2014-04-28 22:51:54 | 000,474,328 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtCamX64.dll [2014-04-28 22:51:54 | 000,421,592 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysWow64\RtCamX.dll [2014-04-28 22:51:40 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl [2014-04-28 22:50:24 | 002,157,704 | ---- | M] (Yamaha Corporation) -- C:\windows\SysNative\YamahaAE.dll [2014-04-28 22:50:24 | 002,101,848 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\WavesGUILib64.dll [2014-04-28 22:50:24 | 001,361,336 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tosade.dll [2014-04-28 22:50:24 | 000,871,856 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tossaeapo64.dll [2014-04-28 22:50:24 | 000,836,544 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo264.dll [2014-04-28 22:50:24 | 000,582,056 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tosasfapo64.dll [2014-04-28 22:50:24 | 000,162,224 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\toseaeapo64.dll [2014-04-28 22:50:24 | 000,065,944 | ---- | M] (TOSHIBA CORPORATION.) -- C:\windows\SysNative\tepeqapo64.dll [2014-04-28 22:50:23 | 000,148,416 | ---- | M] (TOSHIBA Corporation) -- C:\windows\SysNative\tadefxapo.dll [2014-04-28 22:50:21 | 001,045,752 | ---- | M] (SRS Labs, Inc.) -- C:\windows\SysNative\slcnt64.dll [2014-04-28 22:50:21 | 000,724,728 | ---- | M] (DTS, Inc.) -- C:\windows\SysNative\sltech64.dll [2014-04-28 22:50:21 | 000,245,496 | ---- | M] (TODO: ) -- C:\windows\SysNative\slprp64.dll [2014-04-28 22:50:20 | 000,947,760 | ---- | M] (Sony Corporation) -- C:\windows\SysNative\SFSS_APO.dll [2014-04-28 22:50:20 | 000,899,320 | ---- | M] (DTS, Inc.) -- C:\windows\SysNative\sl3apo64.dll [2014-04-28 22:50:20 | 000,221,024 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SFNHK64.dll [2014-04-28 22:50:20 | 000,081,248 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SFCOM64.dll [2014-04-28 22:50:20 | 000,078,688 | ---- | M] (Synopsys, Inc.) -- C:\windows\SysNative\SFAPO64.dll [2014-04-28 22:50:19 | 005,804,772 | ---- | M] () -- C:\windows\SysNative\drivers\rtvienna.dat [2014-04-28 22:50:19 | 002,825,432 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtPgEx64.dll [2014-04-28 22:50:19 | 002,792,152 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkAPO64.dll [2014-04-28 22:50:19 | 001,958,616 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTSnMg64.cpl [2014-04-28 22:50:19 | 001,024,216 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkApi64.dll [2014-04-28 22:50:19 | 000,331,880 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtlCPAPI64.dll [2014-04-28 22:50:19 | 000,014,952 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCoLDR64.dll [2014-04-28 22:50:18 | 056,270,848 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoRes64.dat [2014-04-28 22:50:18 | 001,286,872 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTCOM64.dll [2014-04-28 22:50:18 | 000,946,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoInstII64.dll [2014-04-28 22:50:18 | 000,757,301 | ---- | M] () -- C:\windows\SysNative\drivers\RTAIODAT.DAT [2014-04-28 22:50:18 | 000,624,344 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtDataProc64.dll [2014-04-28 22:50:17 | 007,164,176 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEP64A.dll [2014-04-28 22:50:17 | 005,752,072 | ---- | M] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICAPOlfx.dll [2014-04-28 22:50:17 | 000,942,384 | ---- | M] (Nahimic Inc) -- C:\windows\SysNative\NAHIMICAPOSettingsIPC.dll [2014-04-28 22:50:17 | 000,906,800 | ---- | M] (Sony Corporation) -- C:\windows\SysNative\MISS_APO.dll [2014-04-28 22:50:17 | 000,434,960 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EED64A.dll [2014-04-28 22:50:17 | 000,141,584 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEL64A.dll [2014-04-28 22:50:17 | 000,124,176 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEA64A.dll [2014-04-28 22:50:17 | 000,075,024 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\R4EEG64A.dll [2014-04-28 22:50:16 | 028,310,104 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioVnA64.dll [2014-04-28 22:50:16 | 014,737,496 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioRealtek64.dll [2014-04-28 22:50:16 | 012,793,944 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO3064.dll [2014-04-28 22:50:16 | 003,923,032 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioVnN64.dll [2014-04-28 22:50:16 | 001,313,904 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxSpeechAPO64.dll [2014-04-28 22:50:16 | 000,938,608 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVoiceAPO2064.dll [2014-04-28 22:50:16 | 000,662,784 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxVolumeSDAPO.dll [2014-04-28 22:50:15 | 002,319,960 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO6064.dll [2014-04-28 22:50:15 | 002,037,336 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioEQ64.dll [2014-04-28 22:50:15 | 001,932,888 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioRealtek264.dll [2014-04-28 22:50:15 | 001,419,376 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO5064.dll [2014-04-28 22:50:15 | 001,419,376 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO4064.dll [2014-04-28 22:50:15 | 001,033,304 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPOShell64.dll [2014-04-28 22:50:15 | 000,790,272 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysWow64\MaxxAudioAPOShell.dll [2014-04-28 22:50:15 | 000,663,296 | ---- | M] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO30.dll [2014-04-28 22:50:15 | 000,603,984 | ---- | M] (Knowles Acoustics ) -- C:\windows\SysNative\KAAPORT64.dll [2014-04-28 22:50:14 | 006,217,904 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPP64A.dll [2014-04-28 22:50:14 | 002,770,976 | ---- | M] (Fortemedia Corporation) -- C:\windows\SysNative\FMAPO64.dll [2014-04-28 22:50:14 | 001,938,608 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPD64A.dll [2014-04-28 22:50:14 | 001,756,264 | ---- | M] (DTS) -- C:\windows\SysNative\DTSS2SpeakerDLL64.dll [2014-04-28 22:50:14 | 001,568,360 | ---- | M] (DTS) -- C:\windows\SysNative\DTSS2HeadphoneDLL64.dll [2014-04-28 22:50:14 | 001,486,952 | ---- | M] (DTS) -- C:\windows\SysNative\DTSBoostDLL64.dll [2014-04-28 22:50:14 | 000,728,680 | ---- | M] (DTS) -- C:\windows\SysNative\DTSBassEnhancementDLL64.dll [2014-04-28 22:50:14 | 000,712,296 | ---- | M] (DTS) -- C:\windows\SysNative\DTSSymmetryDLL64.dll [2014-04-28 22:50:14 | 000,693,352 | ---- | M] (DTS) -- C:\windows\SysNative\DTSVoiceClarityDLL64.dll [2014-04-28 22:50:14 | 000,501,184 | ---- | M] (DTS) -- C:\windows\SysNative\DTSU2PLFX64.dll [2014-04-28 22:50:14 | 000,491,112 | ---- | M] (DTS) -- C:\windows\SysNative\DTSNeoPCDLL64.dll [2014-04-28 22:50:14 | 000,487,360 | ---- | M] (DTS) -- C:\windows\SysNative\DTSU2PGFX64.dll [2014-04-28 22:50:14 | 000,432,744 | ---- | M] (DTS) -- C:\windows\SysNative\DTSLimiterDLL64.dll [2014-04-28 22:50:14 | 000,428,648 | ---- | M] (DTS) -- C:\windows\SysNative\DTSGainCompensatorDLL64.dll [2014-04-28 22:50:14 | 000,415,680 | ---- | M] (DTS) -- C:\windows\SysNative\DTSU2PREC64.dll [2014-04-28 22:50:14 | 000,313,520 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPO64A.dll [2014-04-28 22:50:14 | 000,260,272 | ---- | M] (Dolby Laboratories) -- C:\windows\SysNative\DDPA64.dll [2014-04-28 22:50:14 | 000,242,792 | ---- | M] (DTS) -- C:\windows\SysNative\DTSLFXAPO64.dll [2014-04-28 22:50:14 | 000,242,792 | ---- | M] (DTS) -- C:\windows\SysNative\DTSGFXAPO64.dll [2014-04-28 22:50:14 | 000,241,768 | ---- | M] (DTS) -- C:\windows\SysNative\DTSGFXAPONS64.dll [2014-04-28 22:50:14 | 000,113,576 | ---- | M] (Real Sound Lab SIA) -- C:\windows\SysNative\CONEQMSAPOGUILibrary.dll [2014-04-28 22:50:13 | 000,605,496 | ---- | M] () -- C:\windows\SysNative\audioLibVc.dll [2014-04-28 22:50:13 | 000,209,096 | ---- | M] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAC64.dll [2014-04-28 22:50:13 | 000,109,848 | ---- | M] () -- C:\windows\SysNative\AcpiServiceVnA64.dll [2014-04-28 22:50:13 | 000,108,640 | ---- | M] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAR64.dll [2014-04-28 22:50:06 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf [2014-04-28 22:50:02 | 001,721,576 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\WdfCoInstaller01009.dll [2014-04-28 22:49:55 | 009,889,352 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysWow64\RsCRIcon.dll [2014-04-28 22:49:55 | 000,331,992 | ---- | M] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\drivers\RtsUVStor.sys [2014-04-28 22:49:04 | 000,901,848 | ---- | M] (Realtek ) -- C:\windows\SysNative\drivers\Rt64win7.sys [2014-04-28 22:49:04 | 000,107,552 | ---- | M] (Realtek Semiconductor Corporation) -- C:\windows\SysNative\RTNUninst64.dll [2014-04-28 22:49:04 | 000,073,800 | ---- | M] (Realtek Semiconductor Corporation) -- C:\windows\SysNative\RtNicProp64.dll [1 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ] [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-05-15 11:04:28 | 000,017,074 | ---- | C] () -- C:\windows\SysNative\iglhxs64.vp [2014-05-15 11:04:27 | 000,009,728 | ---- | C] ( ) -- C:\windows\SysNative\IGFXDEVLib.dll [2014-05-15 11:04:25 | 000,099,328 | ---- | C] () -- C:\windows\SysNative\igdde64.dll [2014-05-15 11:04:25 | 000,078,848 | ---- | C] () -- C:\windows\SysWow64\igdde32.dll [2014-05-15 11:03:36 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf [2014-05-13 21:39:09 | 000,029,208 | ---- | C] () -- C:\windows\SysNative\drivers\aswHwid.sys [2014-04-28 23:32:59 | 000,000,000 | ---- | C] () -- C:\asc_rdflag [2014-04-28 22:52:43 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_TeeDriverx64_01011.Wdf [2014-04-28 22:51:40 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2014-04-28 22:50:19 | 005,804,772 | ---- | C] () -- C:\windows\SysNative\drivers\rtvienna.dat [2014-04-28 22:50:18 | 000,757,301 | ---- | C] () -- C:\windows\SysNative\drivers\RTAIODAT.DAT [2014-04-28 22:50:13 | 000,605,496 | ---- | C] () -- C:\windows\SysNative\audioLibVc.dll [2014-04-28 22:50:13 | 000,109,848 | ---- | C] () -- C:\windows\SysNative\AcpiServiceVnA64.dll [2014-04-28 22:50:06 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf [2014-02-10 06:44:27 | 000,707,504 | ---- | C] () -- C:\Users\Marta\AppData\Local\unins000.exe [2014-02-10 06:44:27 | 000,011,761 | ---- | C] () -- C:\Users\Marta\AppData\Local\unins000.msg [2014-02-10 06:44:27 | 000,003,264 | ---- | C] () -- C:\Users\Marta\AppData\Local\unins000.dat [2014-01-29 23:02:42 | 000,272,928 | ---- | C] () -- C:\windows\SysWow64\igvpkrng600.bin [2014-01-29 23:02:20 | 000,963,452 | ---- | C] () -- C:\windows\SysWow64\igcodeckrng600.bin [2013-07-27 09:16:03 | 000,000,210 | ---- | C] () -- C:\Users\Marta\AppData\Roaming\WB.CFG [2013-07-26 11:26:39 | 000,000,005 | ---- | C] () -- C:\Users\Marta\AppData\Roaming\WBPU-Q5-TTL.DAT [2013-06-17 10:18:06 | 000,000,005 | ---- | C] () -- C:\Users\Marta\AppData\Roaming\WBPU-TTL.DAT [2013-06-04 11:48:19 | 000,000,000 | ---- | C] () -- C:\windows\AlienN_PL.ini [2013-02-28 21:32:54 | 000,005,180 | ---- | C] () -- C:\Users\Marta\.recently-used.xbel [2013-01-30 02:39:39 | 000,000,017 | ---- | C] () -- C:\windows\SysWow64\shortcut_ex.dat [2013-01-08 20:58:17 | 000,014,119 | ---- | C] () -- C:\windows\SysWow64\RaCoInst.dat [2013-01-08 20:58:01 | 000,000,451 | ---- | C] () -- C:\windows\SysWow64\DiagFunc.ini [2013-01-08 20:57:59 | 000,792,416 | ---- | C] () -- C:\windows\SysWow64\DiagFunc.dll [2012-11-16 23:18:05 | 000,007,605 | ---- | C] () -- C:\Users\Marta\AppData\Local\Resmon.ResmonCfg [2012-06-06 19:18:10 | 000,118,272 | ---- | C] () -- C:\windows\SysWow64\FSI_UNZDLL.DLL [2012-05-20 20:19:39 | 001,644,748 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI [2011-01-20 16:02:24 | 002,994,176 | ---- | C] () -- C:\Program Files\openofficeorg33.msi [2011-01-20 16:00:44 | 000,475,016 | ---- | C] () -- C:\Program Files\setup.exe [2011-01-20 15:58:40 | 130,026,163 | ---- | C] () -- C:\Program Files\openofficeorg1.cab [2011-01-20 15:13:20 | 000,000,290 | ---- | C] () -- C:\Program Files\setup.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014-03-25 04:43:12 | 014,175,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014-03-25 04:09:54 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-07-25 16:18:04 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\.minecraft [2013-04-27 23:40:17 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\0C1I1L1R1J0M1P0I1G [2014-01-24 19:43:09 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\AVAST Software [2013-05-14 02:04:37 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\Canon [2013-01-25 14:53:52 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2014-03-17 16:22:46 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\DAEMON Tools Lite [2013-01-15 00:50:50 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\FileZilla [2013-04-23 23:28:15 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\gtk-2.0 [2014-04-28 23:01:23 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\IObit [2012-07-15 17:12:57 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\IrfanView [2012-04-16 17:34:36 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\Lenovo [2014-01-01 15:02:48 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\MAGIX [2012-03-31 01:29:58 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\Might & Magic Heroes VI - Game Official Demo [2012-06-04 22:42:27 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\OpenOffice.org [2014-04-29 00:02:37 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\Oracle [2013-03-07 20:29:07 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\SoftGrid Client [2013-01-15 11:24:25 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\Sublime Text 2 [2014-04-29 01:51:23 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\The Creative Assembly [2012-05-20 20:20:32 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\TP [2012-09-10 17:24:00 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\TuneUp Software [2014-03-17 16:22:45 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\uTorrent [2012-04-11 21:47:22 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\wargaming.net [2012-04-16 19:19:44 | 000,000,000 | ---D | M] -- C:\Users\Marta\AppData\Roaming\WebApp [color=#E56717]========== Purity Check ==========[/color] < End of report >