OTL logfile created on: 2014-09-09 12:01:16 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\ikaaa\Documents\Sports Interactive\Football Manager 2014\tactics
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17041)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 0,94 Gb Available Physical Memory | 23,41% Memory free
8,00 Gb Paging File | 4,98 Gb Available in Paging File | 62,23% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 146,48 Gb Total Space | 9,56 Gb Free Space | 6,53% Space Free | Partition Type: NTFS
Drive D: | 151,60 Gb Total Space | 15,36 Gb Free Space | 10,13% Space Free | Partition Type: NTFS
 
Computer Name: IKAAA-KOMPUTER | User Name: ikaaa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-09-09 10:29:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\ikaaa\Moje dokumenty\Sports Interactive\Football Manager 2014\tactics\OTL.exe
PRC - [2014-08-12 04:23:00 | 000,389,968 | ---- | M] () -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher\XenoSuite.exe
PRC - [2014-07-25 10:51:56 | 002,327,248 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
PRC - [2014-02-10 11:40:26 | 045,198,176 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\19.0.1326.63\opera.exe
PRC - [2014-01-20 23:54:07 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-08-12 04:23:00 | 000,804,352 | ---- | M] () -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher\QtNetwork4.dll
MOD - [2014-08-12 04:23:00 | 000,389,968 | ---- | M] () -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher\XenoSuite.exe
MOD - [2014-08-12 04:23:00 | 000,167,424 | ---- | M] () -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher\lua5.1.dll
MOD - [2014-08-12 04:22:58 | 007,779,328 | ---- | M] () -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher\QtGui4.dll
MOD - [2014-08-12 04:22:58 | 002,198,016 | ---- | M] () -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher\QtCore4.dll
MOD - [2014-02-10 11:40:28 | 000,907,616 | ---- | M] () -- C:\Program Files (x86)\Opera\19.0.1326.63\libglesv2.dll
MOD - [2014-02-10 11:40:28 | 000,108,896 | ---- | M] () -- C:\Program Files (x86)\Opera\19.0.1326.63\libegl.dll
MOD - [2014-02-10 11:40:27 | 000,890,208 | ---- | M] () -- C:\Program Files (x86)\Opera\19.0.1326.63\ffmpegsumo.dll
MOD - [2013-09-05 01:14:10 | 004,300,456 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2014-05-01 10:44:19 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2014-04-16 22:12:46 | 006,817,544 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (CmdAgent)
SRV:[b]64bit:[/b] - [2014-03-25 20:22:20 | 002,264,280 | ---- | M] (COMODO) [On_Demand | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth)
SRV:[b]64bit:[/b] - [2014-03-17 02:49:03 | 000,203,776 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2013-12-06 17:06:06 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2014-07-25 12:07:50 | 000,070,864 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher)
SRV - [2014-07-25 10:51:56 | 002,327,248 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP)
SRV - [2014-07-19 23:22:14 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-05-21 12:22:08 | 002,135,232 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater)
SRV - [2014-02-18 19:49:22 | 000,766,736 | ---- | M] (BlueStack Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe -- (BstHdUpdaterSvc)
SRV - [2014-02-18 19:47:48 | 000,385,808 | ---- | M] (BlueStack Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
SRV - [2014-02-18 19:47:24 | 000,402,192 | ---- | M] (BlueStack Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc)
SRV - [2014-01-20 23:54:07 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013-10-22 22:30:50 | 005,220,040 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2014-06-26 07:33:56 | 000,014,888 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\hmd.sys -- (HMD)
DRV:[b]64bit:[/b] - [2014-06-26 07:33:42 | 000,037,976 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | System | Running] -- C:\Windows\SysNative\drivers\CFRMD.sys -- (CFRMD)
DRV:[b]64bit:[/b] - [2014-04-16 22:12:56 | 000,023,168 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\cmderd.sys -- (cmderd)
DRV:[b]64bit:[/b] - [2014-03-17 03:14:35 | 000,011,904 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdide64.sys -- (amdide64)
DRV:[b]64bit:[/b] - [2014-03-17 02:49:05 | 009,319,424 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2014-03-17 02:49:05 | 009,319,424 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2014-03-17 02:49:05 | 000,303,616 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2013-12-24 10:40:32 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV:[b]64bit:[/b] - [2013-07-23 09:49:53 | 002,157,672 | ---- | M] (TamoSoft) [CommView] Atheros AR5008 Wireless Network Adapter Service 7.7 [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ts_athwx.sys -- (TS_AR5416)
DRV:[b]64bit:[/b] - [2013-02-12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2012-03-07 21:39:21 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:[b]64bit:[/b] - [2012-03-07 21:39:21 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-06-27 02:37:00 | 002,753,536 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2011-05-13 03:21:04 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:[b]64bit:[/b] - [2011-05-13 03:21:04 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd)
DRV:[b]64bit:[/b] - [2011-05-13 03:21:02 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus)
DRV:[b]64bit:[/b] - [2011-05-13 03:21:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:[b]64bit:[/b] - [2011-05-13 03:21:02 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011-02-18 16:36:58 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2010-07-28 10:13:28 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:[b]64bit:[/b] - [2010-07-28 10:13:27 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:[b]64bit:[/b] - [2010-04-04 15:23:21 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2009-10-28 07:09:33 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-06-06 03:15:56 | 001,806,400 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC)
DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2009-03-01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2008-07-29 05:47:00 | 001,075,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrxusb.sys -- (athrusb)
DRV:[b]64bit:[/b] - [2007-08-09 02:21:00 | 000,013,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV - [2014-02-18 19:47:38 | 000,122,128 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.dosearches.com/web/?utm_source=b&utm_medium=cor&utm_campaign=rg&utm_content=ds&from=cor&uid=ST9320325AS_5VE5FSJ7XXXX5VE5FSJ7&ts=1383964836&type=default&q={searchTerms}
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://bestsearchonweb.com
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms}
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2588407172-804001942-3011641386-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.0: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\ikaaa\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\ikaaa\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-06 01:16:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\searchpredict@speedbit.com: 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fiddlerhook@fiddler2.com: C:\Program Files (x86)\Fiddler2\FiddlerHook [2014-09-04 20:25:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\ext@mozilla.com: C:\Users\ikaaa\AppData\Roaming\ext@mozilla.com [2012-02-20 01:18:04 | 000,000,000 | ---D | M]
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  (Enabled)
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\ikaaa\AppData\Local\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\ikaaa\AppData\Local\Google\Chrome\Application\37.0.2062.103\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\ikaaa\AppData\Local\Google\Chrome\Application\37.0.2062.103\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.4_0\BabylonChromePI.dll
CHR - plugin: Chrome SVD extension (Enabled) = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\djcpfkccckpeeghiklnhienllljccglb\2.0.2_0\lib/npdownloaderchrome.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Media Go Detector (Enabled) = C:\Program Files (x86)\Sony\Media Go\npmediago.dll
CHR - plugin: PlayStation(R)Network Downloader Check Plug-in (Enabled) = C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\ikaaa\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - default_search_provider: 1DF0D5FEA75A9273C45C1AA5523FD2EA4B15F5E5F0611E493A554FD6CBE72B8D (Enabled)
CHR - default_search_provider: search_url = 529E35788CE9C44FBB7B4826FB43831FCF2F6E1F137EB7B11298E99FC8BCF34D
CHR - default_search_provider: suggest_url = 
CHR - homepage: 518A73FDE8A9E9EAA29C8DB50FACE0B4510D63021A9A68F60903540B3CA23283
CHR - Extension: Facebook = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\celnaknmndcdcjcagffhbhciignkeokb\2011.11.27.47012_0\
CHR - Extension: Adblock Plus = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.5_0\
CHR - Extension: PrivDog = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja\1.8.0.18_0\
CHR - Extension: Video Downloader professional = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil\1.97.43_0\
CHR - Extension: Eliminator SlajdĂłw = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff\3.1.24_0\
CHR - Extension: AT_DolceGabbana = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpfbmpaebheclpaopjodkelcihldloih\2\
CHR - Extension: Google Wallet = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo> = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: Chrome Manager = C:\Users\ikaaa\AppData\Local\Google\Chrome\User Data\Default\Extensions\opfkgldmlgoldjlhaecddmhjgnanodfl\1.1_0\
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (no name) - {11111111-1111-1111-1111-110411821192} - No CLSID value found.
O2:[b]64bit:[/b] - BHO: (Shopper Pro) - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro64.dll (Goobzo Ltd.)
O2:[b]64bit:[/b] - BHO: (PrivDog Extension) - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll (AdTrustMedia)
O2 - BHO: (no name) - {11111111-1111-1111-1111-110411821192} - No CLSID value found.
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Shopper Pro) - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll (Goobzo Ltd.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (IE MANAGER) - {DE274C2C-2133-4B4B-93B3-8F21486DABC0} - C:\Users\ikaaa\AppData\Roaming\IE_fb\bho.dll ()
O2 - BHO: (Adblock Pro) - {F385C231-605B-4d8f-ACA9-DBFF765BBE17} - C:\Program Files (x86)\Adblock Pro\AdblockPro.dll (Adblock Pro Team)
O2 - BHO: (PrivDog Extension) - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll (AdTrustMedia)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-2588407172-804001942-3011641386-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (COMODO)
O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [tvncontrol] C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (Comodo Security Solutions, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2588407172-804001942-3011641386-1000..\Run: [ChomikBox] C:\Program Files (x86)\ChomikBox\chomikbox.exe ( )
O4 - HKU\S-1-5-21-2588407172-804001942-3011641386-1000..\Run: [MSTime] "C:\Users\ikaaa\AppData\Roaming\svchost.exe" File not found
O4 - HKU\S-1-5-21-2588407172-804001942-3011641386-1000..\Run: [Spotify Web Helper] C:\Users\ikaaa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKU\S-1-5-21-2588407172-804001942-3011641386-1000..\Run: [uTorrent] C:\Users\ikaaa\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
O4:[b]64bit:[/b] - HKLM..\RunOnce: [*CA]  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2588407172-804001942-3011641386-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:[b]64bit:[/b] - Extra context menu item: &Block This Image (ABP) - C:\Program Files (x86)\Adblock Pro\blockimg.html ()
O8:[b]64bit:[/b] - Extra context menu item: &Blokuj ten obraz (ABP) - C:\Program Files (x86)\Adblock Pro\blockimg.html ()
O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found
O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: &Block This Image (ABP) - C:\Program Files (x86)\Adblock Pro\blockimg.html ()
O8 - Extra context menu item: &Blokuj ten obraz (ABP) - C:\Program Files (x86)\Adblock Pro\blockimg.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found
O9:[b]64bit:[/b] - Extra Button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll (AdTrustMedia)
O9:[b]64bit:[/b] - Extra Button: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Telerik)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Telerik)
O9 - Extra Button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll (AdTrustMedia)
O9 - Extra Button: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Telerik)
O9 - Extra 'Tools' menuitem : Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Telerik)
O9 - Extra Button: Adblock Pro Preferences - {E7FD3540-AB30-40f1-91E7-101F733C1FD5} - C:\Program Files (x86)\Adblock Pro\AdblockPro.dll (Adblock Pro Team)
O9 - Extra 'Tools' menuitem : Adblock Pro Preferences - {E7FD3540-AB30-40f1-91E7-101F733C1FD5} - C:\Program Files (x86)\Adblock Pro\AdblockPro.dll (Adblock Pro Team)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a3fab2e6-6ad2-45ba-9b61-c169027b52b1}: DhcpNameServer = 194.204.152.34 194.204.159.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-02-04 23:02:45 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{8c49c981-928a-11df-b4ff-90e6ba8f1350}\Shell - "" = AutoRun
O33 - MountPoints2\{8c49c981-928a-11df-b4ff-90e6ba8f1350}\Shell\AutoRun\command - "" = G:\AutoRunCardDetector.exe
O33 - MountPoints2\{c55f0ec0-edbb-11df-9e35-90e6ba8f1350}\Shell - "" = AutoRun
O33 - MountPoints2\{c55f0ec0-edbb-11df-9e35-90e6ba8f1350}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{d0b0e7fd-72b1-11e2-9b6d-90e6ba8f1350}\Shell - "" = AutoRun
O33 - MountPoints2\{d0b0e7fd-72b1-11e2-9b6d-90e6ba8f1350}\Shell\AutoRun\command - "" = H:\suppress_explorer.exe
O33 - MountPoints2\{debb2af9-3048-11e1-bf62-90e6ba8f1350}\Shell - "" = AutoRun
O33 - MountPoints2\{debb2af9-3048-11e1-bf62-90e6ba8f1350}\Shell\AutoRun\command - "" = G:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (SmartDefragBootTime.exe)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]
 
[2014-09-09 11:54:57 | 000,000,000 | ---D | C] -- C:\FRST
[2014-09-09 10:18:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware
[2014-09-09 10:18:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014-09-09 09:26:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2014-09-09 09:26:36 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2014-09-09 09:26:15 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2014-09-09 09:26:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014-09-09 09:26:14 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2014-09-09 09:26:14 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2014-09-07 22:45:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibianic
[2014-09-07 22:45:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tibianic
[2014-09-05 16:38:21 | 000,000,000 | ---D | C] -- C:\Users\ikaaa\Desktop\Tibia C Maps
[2014-09-05 00:31:03 | 000,000,000 | ---D | C] -- C:\Users\ikaaa\Documents\XenoBot
[2014-09-05 00:21:49 | 000,000,000 | ---D | C] -- C:\Users\ikaaa\Documents\Pliki programu Outlook
[2014-09-05 00:20:59 | 000,000,000 | ---D | C] -- C:\Users\ikaaa\Desktop\Xenobot 10.53 + Patcher
[2014-09-04 20:27:40 | 000,000,000 | ---D | C] -- C:\Users\ikaaa\Documents\Fiddler2
[2014-09-04 20:25:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Fiddler2
[2014-09-04 20:18:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedBot Pro
[2014-09-04 20:18:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RedBot Pro
[2014-09-02 23:42:40 | 000,000,000 | ---D | C] -- C:\Users\ikaaa\AppData\Roaming\skyz
[2014-09-02 23:38:30 | 000,000,000 | ---D | C] -- C:\Minecraft_Backup
[2014-07-19 23:47:44 | 017,292,760 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\ikaaa\mbam-setup-2.0.2.1012.exe
[5 C:\Users\ikaaa\Desktop\*.tmp files -> C:\Users\ikaaa\Desktop\*.tmp -> ]
[2 C:\Users\ikaaa\AppData\Local\*.tmp files -> C:\Users\ikaaa\AppData\Local\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]
 
[2014-09-09 12:06:54 | 001,474,832 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat
[2014-09-09 11:02:28 | 000,006,140 | ---- | M] () -- C:\Users\ikaaa\Desktop\Bez tytułu1.png
[2014-09-09 10:50:24 | 000,038,938 | ---- | M] () -- C:\Users\ikaaa\Desktop\Bez tytułu.png
[2014-09-09 08:19:29 | 000,099,714 | ---- | M] () -- C:\Users\ikaaa\Desktop\asdasd.png
[2014-09-08 13:17:04 | 000,023,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-09-08 13:17:04 | 000,023,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-09-08 13:07:19 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2014-09-08 13:07:11 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-09-08 13:07:01 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys
[2014-09-08 13:01:10 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-09-08 12:58:09 | 000,001,634 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-6.job
[2014-09-08 12:58:09 | 000,001,570 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-7.job
[2014-09-08 12:58:08 | 000,003,438 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-3.job
[2014-09-08 12:58:08 | 000,002,332 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-4.job
[2014-09-08 12:58:08 | 000,001,722 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-5.job
[2014-09-08 12:58:08 | 000,001,626 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-1.job
[2014-09-08 12:58:08 | 000,001,608 | ---- | M] () -- C:\Windows\tasks\f3c825f8-dc21-4793-9f24-12a483c004ae-2.job
[2014-09-08 12:19:03 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2588407172-804001942-3011641386-1000UA.job
[2014-09-07 22:45:36 | 000,001,007 | ---- | M] () -- C:\Users\Public\Desktop\Tibianic.lnk
[2014-09-07 15:14:52 | 000,171,382 | ---- | M] () -- C:\Users\ikaaa\Desktop\20.png
[2014-09-07 14:19:05 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2588407172-804001942-3011641386-1000Core.job
[2014-09-07 14:18:50 | 000,003,494 | ---- | M] () -- C:\Users\ikaaa\Desktop\nicksteez_avatar.jpg
[2014-09-06 21:51:27 | 000,053,269 | ---- | M] () -- C:\Users\ikaaa\Desktop\bulbaszek44.png
[2014-09-06 21:06:09 | 000,026,380 | ---- | M] () -- C:\Users\ikaaa\Desktop\eq.png
[2014-09-06 21:05:27 | 000,185,120 | ---- | M] () -- C:\Users\ikaaa\Desktop\bulbaszek.png
[2014-09-06 16:21:30 | 000,034,185 | ---- | M] () -- C:\Users\ikaaa\Desktop\IB - [N] RookAFK 1.7.2.xbst
[2014-09-06 11:25:40 | 000,064,716 | ---- | M] () -- C:\Users\ikaaa\Desktop\stan.jpg
[2014-09-06 00:35:38 | 000,286,641 | ---- | M] () -- C:\Users\ikaaa\Desktop\gs.png
[2014-09-05 22:06:06 | 016,113,042 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014-09-05 22:06:06 | 000,750,428 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2014-09-05 22:06:06 | 000,747,842 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2014-09-05 22:06:06 | 000,747,570 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
[2014-09-05 22:06:06 | 000,745,874 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2014-09-05 22:06:06 | 000,742,544 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat
[2014-09-05 22:06:06 | 000,730,590 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat
[2014-09-05 22:06:06 | 000,726,038 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat
[2014-09-05 22:06:06 | 000,715,648 | ---- | M] () -- C:\Windows\SysNative\prfh0416.dat
[2014-09-05 22:06:06 | 000,699,950 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2014-09-05 22:06:06 | 000,686,342 | ---- | M] () -- C:\Windows\SysNative\perfh00E.dat
[2014-09-05 22:06:06 | 000,669,808 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2014-09-05 22:06:06 | 000,664,420 | ---- | M] () -- C:\Windows\SysNative\perfh01D.dat
[2014-09-05 22:06:06 | 000,663,378 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014-09-05 22:06:06 | 000,657,404 | ---- | M] () -- C:\Windows\SysNative\perfh01F.dat
[2014-09-05 22:06:06 | 000,610,570 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat
[2014-09-05 22:06:06 | 000,495,080 | ---- | M] () -- C:\Windows\SysNative\perfh014.dat
[2014-09-05 22:06:06 | 000,482,666 | ---- | M] () -- C:\Windows\SysNative\perfh00B.dat
[2014-09-05 22:06:06 | 000,479,800 | ---- | M] () -- C:\Windows\SysNative\perfh001.dat
[2014-09-05 22:06:06 | 000,425,254 | ---- | M] () -- C:\Windows\SysNative\perfh012.dat
[2014-09-05 22:06:06 | 000,391,988 | ---- | M] () -- C:\Windows\SysNative\perfh00D.dat
[2014-09-05 22:06:06 | 000,379,556 | ---- | M] () -- C:\Windows\SysNative\prfh0804.dat
[2014-09-05 22:06:06 | 000,177,670 | ---- | M] () -- C:\Windows\SysNative\perfc00E.dat
[2014-09-05 22:06:06 | 000,164,386 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
[2014-09-05 22:06:06 | 000,161,874 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2014-09-05 22:06:06 | 000,158,360 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2014-09-05 22:06:06 | 000,158,074 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat
[2014-09-05 22:06:06 | 000,155,960 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat
[2014-09-05 22:06:06 | 000,154,780 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2014-09-05 22:06:06 | 000,154,218 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2014-09-05 22:06:06 | 000,153,034 | ---- | M] () -- C:\Windows\SysNative\prfc0416.dat
[2014-09-05 22:06:06 | 000,152,232 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat
[2014-09-05 22:06:06 | 000,147,336 | ---- | M] () -- C:\Windows\SysNative\perfc01D.dat
[2014-09-05 22:06:06 | 000,146,716 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2014-09-05 22:06:06 | 000,145,314 | ---- | M] () -- C:\Windows\SysNative\perfc01F.dat
[2014-09-05 22:06:06 | 000,126,508 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014-09-05 22:06:06 | 000,124,748 | ---- | M] () -- C:\Windows\SysNative\perfc012.dat
[2014-09-05 22:06:06 | 000,123,956 | ---- | M] () -- C:\Windows\SysNative\prfc0804.dat
[2014-09-05 22:06:06 | 000,117,182 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat
[2014-09-05 22:06:06 | 000,106,966 | ---- | M] () -- C:\Windows\SysNative\perfc00B.dat
[2014-09-05 22:06:06 | 000,100,062 | ---- | M] () -- C:\Windows\SysNative\perfc014.dat
[2014-09-05 22:06:06 | 000,099,136 | ---- | M] () -- C:\Windows\SysNative\perfc001.dat
[2014-09-05 22:06:06 | 000,089,122 | ---- | M] () -- C:\Windows\SysNative\perfc00D.dat
[2014-09-05 14:46:25 | 000,005,919 | ---- | M] () -- C:\Users\ikaaa\Desktop\K-Thais-Undeads.rar
[2014-09-05 06:42:43 | 000,028,479 | ---- | M] () -- C:\Users\ikaaa\Desktop\mlvl.png
[2014-09-05 00:28:18 | 000,000,896 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics
[2014-09-04 22:22:05 | 000,102,419 | ---- | M] () -- C:\Users\ikaaa\Desktop\22.png
[2014-09-04 21:11:02 | 000,001,014 | ---- | M] () -- C:\Users\Public\Desktop\RedBot Pro.lnk
[2014-09-04 19:44:30 | 000,274,703 | ---- | M] () -- C:\Users\ikaaa\Desktop\awans.png
[2014-09-03 22:48:54 | 000,126,976 | ---- | M] () -- C:\Users\ikaaa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[5 C:\Users\ikaaa\Desktop\*.tmp files -> C:\Users\ikaaa\Desktop\*.tmp -> ]
[2 C:\Users\ikaaa\AppData\Local\*.tmp files -> C:\Users\ikaaa\AppData\Local\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-09-09 11:02:28 | 000,006,140 | ---- | C] () -- C:\Users\ikaaa\Desktop\Bez tytułu1.png
[2014-09-09 08:19:29 | 000,099,714 | ---- | C] () -- C:\Users\ikaaa\Desktop\asdasd.png
[2014-09-07 22:45:36 | 000,001,007 | ---- | C] () -- C:\Users\Public\Desktop\Tibianic.lnk
[2014-09-07 15:14:52 | 000,171,382 | ---- | C] () -- C:\Users\ikaaa\Desktop\20.png
[2014-09-07 14:18:42 | 000,003,494 | ---- | C] () -- C:\Users\ikaaa\Desktop\nicksteez_avatar.jpg
[2014-09-06 21:51:26 | 000,053,269 | ---- | C] () -- C:\Users\ikaaa\Desktop\bulbaszek44.png
[2014-09-06 21:06:09 | 000,026,380 | ---- | C] () -- C:\Users\ikaaa\Desktop\eq.png
[2014-09-06 21:05:27 | 000,185,120 | ---- | C] () -- C:\Users\ikaaa\Desktop\bulbaszek.png
[2014-09-06 16:21:28 | 000,034,185 | ---- | C] () -- C:\Users\ikaaa\Desktop\IB - [N] RookAFK 1.7.2.xbst
[2014-09-06 16:12:58 | 000,038,938 | ---- | C] () -- C:\Users\ikaaa\Desktop\Bez tytułu.png
[2014-09-06 11:25:40 | 000,064,716 | ---- | C] () -- C:\Users\ikaaa\Desktop\stan.jpg
[2014-09-06 00:35:38 | 000,286,641 | ---- | C] () -- C:\Users\ikaaa\Desktop\gs.png
[2014-09-05 14:46:23 | 000,005,919 | ---- | C] () -- C:\Users\ikaaa\Desktop\K-Thais-Undeads.rar
[2014-09-05 06:42:43 | 000,028,479 | ---- | C] () -- C:\Users\ikaaa\Desktop\mlvl.png
[2014-09-04 22:22:04 | 000,102,419 | ---- | C] () -- C:\Users\ikaaa\Desktop\22.png
[2014-09-04 20:25:36 | 000,001,888 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fiddler2.lnk
[2014-09-04 20:18:59 | 000,001,014 | ---- | C] () -- C:\Users\Public\Desktop\RedBot Pro.lnk
[2014-09-04 19:44:30 | 000,274,703 | ---- | C] () -- C:\Users\ikaaa\Desktop\awans.png
[2014-08-26 23:30:09 | 000,000,093 | ---- | C] () -- C:\Users\ikaaa\AppData\Local\fusioncache.dat
[2014-07-05 16:28:46 | 000,974,848 | R--- | C] () -- C:\Windows\SysWow64\vorbis.dll
[2014-07-05 16:28:46 | 000,028,672 | R--- | C] () -- C:\Windows\SysWow64\vorbisfile.dll
[2014-07-05 16:28:45 | 000,049,152 | R--- | C] () -- C:\Windows\SysWow64\ogg.dll
[2014-05-22 12:52:36 | 000,001,452 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014-05-10 15:39:43 | 000,000,314 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\aps.uninstall.scan.results
[2014-05-01 10:44:51 | 000,194,048 | ---- | C] () -- C:\Windows\SysWow64\elshyph.dll
[2014-03-17 02:49:10 | 000,003,949 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2014-03-10 13:23:48 | 001,426,411 | ---- | C] () -- C:\Users\ikaaa\AppData\Local\Tempmusic.ogg
[2014-01-20 23:54:08 | 000,111,928 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014-01-20 23:54:07 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2014-01-20 23:07:14 | 002,580,552 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2014-01-20 10:24:20 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll
[2013-04-30 04:37:40 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2013-04-30 04:37:40 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012-05-24 08:21:03 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\cb80ce36
[2012-05-24 08:21:03 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\cad2241d
[2012-05-24 08:20:55 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\e210ae43
[2012-05-24 08:20:55 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\e197d182
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f5e7263c
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f57dfadc
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ed1366c3
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ecacf556
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ec46b257
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ebde9e8e
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\eb5193b2
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\eae70d7b
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\78aebc0
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\7192f36
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\61dc5cf
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\59bb72e
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\52ee0b3
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\2ee8210
[2012-05-24 08:20:51 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\2792ad6
[2012-05-24 08:11:08 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\a997bdcc
[2012-05-24 08:11:08 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\a8b30c1e
[2012-05-24 08:10:50 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1d48a81b
[2012-05-24 08:10:50 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1cdff984
[2012-05-24 08:09:33 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\561db15a
[2012-05-24 08:09:33 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\55ac2e13
[2012-05-24 08:09:19 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\aedabb6a
[2012-05-24 08:09:19 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ae706d23
[2012-05-24 08:08:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\28061428
[2012-05-24 08:08:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\277f9b5f
[2012-05-24 08:08:53 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ff9ebb1e
[2012-05-24 08:08:53 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ff361d93
[2012-05-24 08:08:43 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f36b26ce
[2012-05-24 08:08:43 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ed4d9f9e
[2012-05-24 08:08:34 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\8693c70a
[2012-05-24 08:08:34 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\862d5333
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f5b1d39f
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f52a9424
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f446a8a0
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f3c811f8
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f361b34d
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\eea270a5
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ee3b7a10
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\eb0558e0
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ea8fc8e3
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\d16b4af6
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\d107fef5
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\d09bb3cb
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\d0362d84
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\cf8b17f9
[2012-05-24 08:06:42 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\cf22effb
[2012-05-24 06:54:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\fcac824b
[2012-05-24 06:54:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\f4765a43
[2012-05-24 06:54:28 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\6a652310
[2012-05-24 06:54:28 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\69db63ad
[2012-05-24 06:52:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4fc29787
[2012-05-24 06:52:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4f2a5d4e
[2012-05-24 06:52:29 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\8372c289
[2012-05-24 06:52:29 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\82e8edf0
[2012-05-24 06:49:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\6cd622b4
[2012-05-24 06:49:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\6c46dfef
[2012-05-24 06:49:25 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\c397ce4e
[2012-05-24 06:49:25 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\c3249e43
[2012-05-24 06:46:47 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\c5647d41
[2012-05-24 06:46:47 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\bd015da5
[2012-05-24 06:46:40 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\78110f65
[2012-05-24 06:46:40 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\7799188b
[2012-05-24 06:41:07 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ebd4a171
[2012-05-24 06:41:07 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\eac2a37d
[2012-05-24 06:41:04 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\37ee9c76
[2012-05-24 06:41:04 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\3771aa87
[2012-05-24 06:38:29 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\22a603b
[2012-05-24 06:38:29 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1805833
[2012-05-24 06:38:27 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\67ac6e6
[2012-05-24 06:38:27 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\6047394
[2012-05-24 06:36:38 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\bcca553d
[2012-05-24 06:36:38 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\b4a1f0ca
[2012-05-24 06:36:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\558b43df
[2012-05-24 06:36:35 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\551ea073
[2012-05-24 06:30:44 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1c97d18b
[2012-05-24 06:30:44 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1ac1c285
[2012-05-24 06:30:40 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\2aacd315
[2012-05-24 06:30:40 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\2a34f5b7
[2012-05-24 06:10:55 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\7aef1502
[2012-05-24 06:10:55 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4b8278a7
[2012-05-24 06:10:55 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4b05b6a1
[2012-05-24 06:10:41 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\b0a04d7b
[2012-05-24 06:10:41 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\b02eb9bd
[2012-05-24 06:01:15 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\7c37dbb6
[2012-05-24 06:01:15 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\7b6773f2
[2012-05-24 06:01:07 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\7150b461
[2012-05-24 06:01:07 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\6e7f61b1
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4ee37949
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4e60442f
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4d4e55e7
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4cd98fd8
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\4c4d6126
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\49b1599c
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\423d4e26
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\3e325d86
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\3db363d7
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\34eb9e32
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\3285322d
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\321c2449
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\31b39790
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\3143cfc8
[2012-05-24 06:00:56 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\30d049c3
[2012-05-24 06:00:41 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\b3cbc19
[2012-05-24 06:00:41 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ac2170e
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ffa29988
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ff2904b6
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\feb8561d
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\fe466852
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\fdb4cd32
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\fd450125
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ec505eb
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\e3a1485
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\ba517f2
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\89c5a46
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\13ceac5e
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1313ec31
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\11fac9a9
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\1183d0b4
[2012-05-24 05:59:58 | 000,004,638 | ---- | C] () -- C:\Users\ikaaa\AppData\Roaming\110a9b50
[2010-11-17 14:31:30 | 000,126,976 | ---- | C] () -- C:\Users\ikaaa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-04-21 23:10:20 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014-09-03 00:58:52 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\.minecraft
[2014-01-29 18:26:23 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\2K Sports
[2013-09-14 23:52:24 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\AIMP3
[2010-06-04 22:53:46 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Atari
[2011-05-15 14:21:32 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Babylon
[2014-01-21 05:28:44 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Beat Hazard
[2014-03-03 14:06:44 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Bioshock
[2012-05-24 05:59:52 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Boilsoft
[2012-02-20 01:18:04 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Chrome_manager
[2010-05-06 13:03:03 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\DAEMON Tools Lite
[2014-06-04 00:34:26 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\EurekaLog
[2012-09-01 13:07:47 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\ExpressFiles
[2012-02-20 01:18:04 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\ext@mozilla.com
[2014-05-16 20:42:48 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Fighters
[2010-03-22 00:11:51 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Gadu-Gadu
[2010-07-29 20:36:14 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Games
[2014-01-22 02:46:13 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Hive Cluster
[2010-11-01 01:23:30 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Hotdog Hotshot
[2012-02-20 01:18:05 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\IE_fb
[2014-05-31 22:33:47 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\IObit
[2012-02-20 16:47:11 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\KIR
[2012-05-23 14:32:29 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\MAGIX
[2014-03-17 22:00:06 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Milestone
[2014-03-10 12:32:09 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\MKKE
[2014-03-10 12:22:39 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Mortal Kombat
[2013-12-08 13:32:15 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\NapiProjekt
[2010-04-05 17:38:41 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Opera
[2013-10-27 18:15:22 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Opera Software
[2014-01-19 07:36:47 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Origin
[2014-04-03 16:36:38 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Remere's Map Editor
[2014-09-02 23:45:10 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\skyz
[2011-12-29 01:13:19 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Sony
[2013-12-30 22:14:33 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\SPORE
[2014-08-25 18:27:36 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Spotify
[2014-07-27 11:11:34 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Spotydl
[2011-02-25 13:32:04 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2014-09-05 16:40:02 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Tibia
[2014-01-05 02:07:45 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Trine2
[2013-12-08 21:13:51 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Ubisoft
[2014-09-08 19:02:49 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\uTorrent
[2014-07-24 09:13:29 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\Valiant Hearts The Great War
[2014-03-01 16:10:55 | 000,000,000 | ---D | M] -- C:\Users\ikaaa\AppData\Roaming\VOS
[2013-11-26 06:15:41 | 000,000,000 | -HSD | M] -- C:\Users\ikaaa\AppData\Roaming\wyUpdate AU
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:04BB186B
@Alternate Data Stream - 12 bytes -> C:\Windows:{4B9A1497-0817-47C4-9612-D6A1C53ACF57}

< End of report >